$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa File: 7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa (raw, json) Hash identifier: 4CecagCQt3OdfoRN6HOLa8I8WYd1LJl1W27o83DA8qE= Subject key identifier: 33:68:9A:6C:17:B0:39:A5:09:BE:43:5F:26:65:C4:67:CC:87:5F:2B Certificate issuer: /CN=A91EC9A5/serialNumber=E83FCF4C6FC8D74F3B6AB425606E2BC7746D6640 Certificate serial: 08CB Authority key identifier: E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa Signing time: Mon 18 Aug 2025 21:31:23 +0000 ROA not before: Mon 18 Aug 2025 21:31:23 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136246 IP address blocks: 14.128.12.0/24 maxlen: 24 14.128.13.0/24 maxlen: 24 14.128.14.0/24 maxlen: 24 14.128.15.0/24 maxlen: 24 103.84.172.0/24 maxlen: 24 103.84.173.0/24 maxlen: 24 103.84.174.0/24 maxlen: 24 103.84.175.0/24 maxlen: 24 2400:a2c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.crl rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2251 (0x8cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9A5, serialNumber=E83FCF4C6FC8D74F3B6AB425606E2BC7746D6640 Validity Not Before: Aug 18 21:31:23 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=68a39bab-d377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:20:44:ee:50:ea:f5:b4:22:89:35:67:32:af: 03:32:45:d5:7a:35:75:3a:59:a1:67:33:f3:5e:f6: d5:6e:73:c3:c7:5e:e2:22:48:bd:c6:08:75:42:ec: 89:f4:37:6d:e5:d9:8a:40:4b:1e:8a:e8:53:41:85: 76:21:e1:19:ff:35:bb:75:ac:78:06:de:e4:a9:0c: 39:b8:e4:b2:19:86:76:ce:5e:66:58:77:8c:1e:6d: 61:0a:10:6c:f7:33:59:26:1e:b7:3f:15:00:7c:64: 28:89:e7:7f:99:f2:2d:29:1d:f2:23:54:49:75:4b: dd:fe:3a:79:71:ad:47:21:d2:71:cd:e1:5a:c2:d6: 13:3b:2a:c5:c2:c2:06:2c:d4:85:ea:df:e4:e6:1d: 4a:7f:a3:3e:fb:d2:c1:bf:34:ba:45:b9:43:42:30: 7c:75:f6:c6:91:92:ae:cc:02:63:7e:ec:4f:97:2d: 42:d9:52:6e:cf:94:03:80:94:d7:09:49:e9:e2:af: 29:56:92:5b:65:d4:e5:73:f5:62:17:f6:98:83:db: 9b:33:69:25:98:dc:4b:c1:39:e7:1f:e4:96:d5:05: 88:02:07:d4:ee:8f:73:49:68:cb:9d:eb:7b:d1:e4: 42:44:60:d3:90:dd:b6:da:8d:d5:b1:c1:cb:47:b2: 68:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:68:9A:6C:17:B0:39:A5:09:BE:43:5F:26:65:C4:67:CC:87:5F:2B X509v3 Authority Key Identifier: keyid:E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.128.12.0/22 103.84.172.0/22 IPv6: 2400:a2c0::/32 Signature Algorithm: sha256WithRSAEncryption 0d:e4:c6:35:36:f2:a9:b0:11:0c:4a:08:74:05:2c:e5:6e:6d: 41:d6:8c:05:dd:ca:dc:b7:5d:1c:e6:41:13:99:81:d0:14:b2: 3d:3c:f4:5d:8b:63:93:e4:6d:c7:88:cc:83:83:88:74:cd:ca: 80:7c:81:ab:9b:df:a6:3d:c4:f1:b8:85:55:3a:ea:90:ab:b5: f3:4e:ad:f6:3b:0e:41:1e:02:bd:eb:ce:80:5e:d0:62:f3:b1: 12:56:03:3d:f6:b0:e6:20:9e:c0:0d:f1:c4:fa:4c:e6:6c:76: 4c:02:69:c2:47:6d:1d:df:2e:9d:29:26:83:39:35:b6:f2:f6: b1:6e:2c:63:2b:1b:4a:04:96:00:6d:0a:ff:97:e7:e5:92:07: 52:82:2c:b7:07:d6:22:bd:d8:3c:2e:91:73:bc:d7:66:52:d7: 52:f5:6b:11:cb:8d:e9:0e:c2:0e:33:4f:bc:48:e0:83:08:f5: 82:34:43:31:d0:e8:04:ca:7c:47:63:70:28:a6:46:98:27:e5: 00:40:72:97:fe:ba:21:09:dd:6a:ac:77:f5:96:eb:05:ef:07: f8:b0:77:b1:a0:18:d6:c4:4c:b8:08:8f:e2:92:75:bb:9c:36: 6e:2e:52:0a:a5:42:94:5b:47:bd:a2:c7:17:fd:12:2b:bc:32: 54:c6:0f:87 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QTUxMTAvBgNVBAUTKEU4M0ZDRjRDNkZDOEQ3NEYzQjZBQjQyNTYwNkUyQkM3 NzQ2RDY2NDAwHhcNMjUwODE4MjEzMTIzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzOWJhYi1kMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CBE7lDq9bQiiTVnMq8DMkXVejV1OlmhZzPzXvbVbnPDx17iIki9xgh1QuyJ 9Ddt5dmKQEseiuhTQYV2IeEZ/zW7dax4Bt7kqQw5uOSyGYZ2zl5mWHeMHm1hChBs 9zNZJh63PxUAfGQoied/mfItKR3yI1RJdUvd/jp5ca1HIdJxzeFawtYTOyrFwsIG LNSF6t/k5h1Kf6M++9LBvzS6RblDQjB8dfbGkZKuzAJjfuxPly1C2VJuz5QDgJTX CUnp4q8pVpJbZdTlc/ViF/aYg9ubM2klmNxLwTnnH+SW1QWIAgfU7o9zSWjLnet7 0eRCRGDTkN222o3VscHLR7JohwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFDNommwX sDmlCb5DXyZlxGfMh18rMB8GA1UdIwQYMBaAFOg/z0xvyNdPO2q0JWBuK8d0bWZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBNS8wRTgyQzJFQ0M0 RjAxMUVBOTFEQ0RGNzdDNEY5QUUwMi82RF9QVEdfSTEwODdhclFsWUc0cngzUnRa a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZEX1BUR19JMTA4N2FyUWxZRzRyeDNSdFprQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUM5QTUvMEU4MkMyRUNDNEYwMTFFQTkxRENERjc3QzRGOUFFMDIvN0FCQzNBRThF M0RGMTFFRjgzRENGQjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIOgAwDBAJnVKwwDQQCAAIwBwMFACQAosAwDQYJKoZIhvcN AQELBQADggEBAA3kxjU28qmwEQxKCHQFLOVubUHWjAXdyty3XRzmQROZgdAUsj08 9F2LY5PkbceIzIODiHTNyoB8gaub36Y9xPG4hVU66pCrtfNOrfY7DkEeAr3rzoBe 0GLzsRJWAz32sOYgnsAN8cT6TOZsdkwCacJHbR3fLp0pJoM5Nbby9rFuLGMrG0oE lgBtCv+X5+WSB1KCLLcH1iK92DwukXO812ZS11L1axHLjekOwg4zT7xI4IMI9YI0 QzHQ6ATKfEdjcCimRpgn5QBAcpf+uiEJ3Wqsd/WW6wXvB/iwd7GgGNbETLgIj+KS dbucNm4uUgqlQpRbR72ixxf9Eiu8MlTGD4c= -----END CERTIFICATE-----Generated at Wed Nov 5 21:13:45 2025 by rpki-client