$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/A87BC510622E11EC92E1870CC4F9AE02.roa File: A87BC510622E11EC92E1870CC4F9AE02.roa (raw, json) Hash identifier: 1DZcNpDHzzTtCr5+Y6ZKGblRfHTeQUJGW1MQDytyGms= Subject key identifier: AC:97:D1:BF:F4:00:B5:C8:3E:6E:00:40:32:34:51:3B:45:10:78:A5 Certificate issuer: /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Certificate serial: 0451 Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/A87BC510622E11EC92E1870CC4F9AE02.roa Signing time: Sun 27 Jul 2025 00:35:44 +0000 ROA not before: Sun 27 Jul 2025 00:35:44 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 38259 IP address blocks: 122.248.0.0/20 maxlen: 20 122.248.0.0/24 maxlen: 24 122.248.1.0/24 maxlen: 24 202.84.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1105 (0x451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEB30, serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC Validity Not Before: Jul 27 00:35:44 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6885745f-4d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ba:75:7c:52:41:98:2e:d8:b2:ab:41:20:9e: a5:8a:81:42:ec:d0:bd:29:21:5d:1c:56:e4:dc:37: 30:f8:90:01:8a:b8:ad:c2:2b:04:a1:5e:b2:5f:21: 45:50:05:93:9d:77:60:55:3d:95:bf:00:06:6d:38: bf:f0:24:50:09:44:ea:e1:32:75:9a:24:b1:1f:26: 49:24:74:86:a7:d1:4a:ad:ae:95:74:54:ab:16:e7: 83:a0:5c:69:67:8c:75:aa:e3:7e:b3:d0:a6:30:5f: a2:1d:ee:55:79:8d:1e:64:73:0c:8a:ff:0d:94:54: 2b:e3:7a:72:f7:8c:44:97:51:1e:6d:97:dc:46:70: c9:8e:fd:84:38:98:f3:0c:d9:8f:6c:a5:25:91:04: 0b:9b:23:60:4d:1c:04:a6:6b:4f:8c:ed:9d:31:e3: 4a:64:a2:f4:06:7a:0a:4d:63:b6:df:cf:b1:a3:48: a9:bb:0b:42:c2:fb:c6:92:f9:09:37:5a:f5:50:d6: 4c:bd:96:bd:0f:6b:28:36:3a:57:dd:66:22:72:5b: 67:9a:1c:87:9f:c4:ee:77:c6:35:5c:24:94:2e:18: c1:b5:80:7b:8f:d8:97:48:67:36:4f:03:cb:1a:ab: 0e:3e:0d:7b:4e:62:d1:9e:a5:aa:76:25:db:99:d1: 4d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:97:D1:BF:F4:00:B5:C8:3E:6E:00:40:32:34:51:3B:45:10:78:A5 X509v3 Authority Key Identifier: keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/A87BC510622E11EC92E1870CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.248.0.0/20 202.84.64.0/21 Signature Algorithm: sha256WithRSAEncryption 5d:a0:30:05:9d:ca:cb:05:e1:94:20:1d:c4:d5:f5:82:25:e8: 2b:15:e7:8a:30:28:a2:6b:cd:63:9b:ac:a2:89:ab:e3:66:aa: 51:17:be:80:58:c2:c8:be:b0:21:d2:4c:f4:76:d2:bf:d2:b1: be:ff:7c:00:7e:45:3f:06:7a:fd:3f:b8:45:43:f9:72:f7:9c: 34:62:11:d4:d6:c6:05:27:52:9b:93:c0:bd:f6:58:ec:42:e2: 17:c6:7e:bb:91:19:32:5d:cc:aa:16:3e:b8:dd:8b:3f:a2:c9: 48:d6:8f:b1:62:49:9d:58:07:0f:f4:65:67:e1:4c:b7:f9:09: 03:68:97:dd:d3:cc:61:63:e9:ce:97:e0:50:9f:93:41:08:c4: 93:96:c5:7a:d4:1f:0a:13:b6:e3:61:d0:19:78:bb:0c:01:9c: 86:f3:0c:4c:11:f4:7d:ff:e9:c3:26:30:c1:d6:3b:73:13:7d: 02:6c:44:b6:d4:f7:fb:f3:04:4b:0f:ed:34:e8:12:72:be:3f: b4:e1:e4:8a:97:a5:cd:1d:d9:64:6f:5e:9b:34:05:d2:6e:15: 85:b1:41:f1:3a:ab:9c:09:7f:2a:72:9b:ee:55:d6:6d:1c:ab: 3b:ec:2d:2a:f1:e8:b9:73:34:54:85:2c:4b:7e:ec:ae:c3:ee: 0f:d4:ea:ff -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVCMzAxMTAvBgNVBAUTKDE5QUUzMUY5NTQ4MTdCQUU2MjA4QzM3MjExMDhCOEU4 RkY4QjNGQkMwHhcNMjUwNzI3MDAzNTQ0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg1NzQ1Zi00ZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7p1fFJBmC7YsqtBIJ6lioFC7NC9KSFdHFbk3Dcw+JABiritwisEoV6yXyFF UAWTnXdgVT2VvwAGbTi/8CRQCUTq4TJ1miSxHyZJJHSGp9FKra6VdFSrFueDoFxp Z4x1quN+s9CmMF+iHe5VeY0eZHMMiv8NlFQr43py94xEl1EebZfcRnDJjv2EOJjz DNmPbKUlkQQLmyNgTRwEpmtPjO2dMeNKZKL0BnoKTWO238+xo0ipuwtCwvvGkvkJ N1r1UNZMvZa9D2soNjpX3WYicltnmhyHn8Tud8Y1XCSULhjBtYB7j9iXSGc2TwPL GqsOPg17TmLRnqWqdiXbmdFNrwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKyX0b/0 ALXIPm4AQDI0UTtFEHilMB8GA1UdIwQYMBaAFBmuMflUgXuuYgjDchEIuOj/iz+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUIzMC85RENFQjYzODYy MkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2NWlDTU55RVFpNDZQLUxQ N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhNHgtVlNCZTY1aUNNTnlFUWk0NlAtTFA3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVCMzAvOURDRUI2Mzg2MjJDMTFFQzgxOEVBMDBCQzRGOUFFMDIvQTg3QkM1MTA2 MjJFMTFFQzkyRTE4NzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAR6+AADBAPKVEAwDQYJKoZIhvcNAQELBQADggEBAF2gMAWd yssF4ZQgHcTV9YIl6CsV54owKKJrzWObrKKJq+NmqlEXvoBYwsi+sCHSTPR20r/S sb7/fAB+RT8Gev0/uEVD+XL3nDRiEdTWxgUnUpuTwL32WOxC4hfGfruRGTJdzKoW Prjdiz+iyUjWj7FiSZ1YBw/0ZWfhTLf5CQNol93TzGFj6c6X4FCfk0EIxJOWxXrU HwoTtuNh0Bl4uwwBnIbzDEwR9H3/6cMmMMHWO3MTfQJsRLbU9/vzBEsP7TToEnK+ P7Th5IqXpc0d2WRvXps0BdJuFYWxQfE6q5wJfypym+5V1m0cqzvsLSrx6LlzNFSF LEt+7K7D7g/U6v8= -----END CERTIFICATE-----Generated at Wed Nov 5 19:46:54 2025 by rpki-client