$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa File: 5480D316764D11EA8CB5C039C4F9AE02.roa (raw, json) Hash identifier: d+3xI/dPiUPnPzisac55VOoaa2WbK4PwW/+8FsppPKo= Subject key identifier: 64:96:A5:8F:2F:F2:B9:BE:16:20:00:5E:CD:84:B1:DC:C7:BB:E8:5D Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 2221 Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa Signing time: Thu 02 Oct 2025 16:13:44 +0000 ROA not before: Thu 02 Oct 2025 16:13:44 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 56308 IP address blocks: 43.255.124.0/22 maxlen: 22 45.125.196.0/22 maxlen: 22 2407:8100:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8737 (0x2221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF, serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Oct 2 16:13:44 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68dea4b8-6eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1a:c7:9e:d7:3b:86:66:77:b9:b2:36:47:c7: 12:18:47:59:35:f0:8e:a6:ca:8f:e6:57:4b:a1:ea: 29:62:78:be:c8:42:f7:2a:c5:dc:cb:fb:cc:64:45: d8:b0:8b:67:f6:58:6e:dd:42:ac:73:3d:f1:5f:2a: b7:ad:41:76:9c:6c:66:1e:0c:07:33:f4:27:b1:e5: 0c:0e:dd:db:1c:46:dd:47:ef:0d:ac:4e:86:35:01: 11:57:33:b6:79:6a:ed:86:ee:38:82:7f:ab:ca:c2: 09:04:dc:b8:f6:48:ee:b1:d8:ce:0b:c3:b3:ae:8c: 1c:ce:f1:e7:9d:77:14:d6:da:bd:bc:3a:91:d0:70: 51:3d:b8:e0:c4:f9:86:e1:b9:3c:ed:67:56:a5:dc: 59:3f:65:1c:2a:c9:51:3f:74:27:db:64:17:d0:67: b8:64:77:dd:80:4d:4c:ed:c4:dc:b4:68:4d:a1:7b: 33:be:4a:7a:b3:f6:d6:c1:c9:c0:9d:07:df:e6:b9: da:33:c8:06:e8:6d:bb:b0:09:c1:70:b7:1f:d6:70: b0:68:83:1a:a9:ca:8e:e5:ba:02:88:d9:1a:f0:f2: 51:9a:ab:d1:5c:4d:65:91:1a:32:57:9c:f4:18:f7: db:b0:d3:cf:dc:0b:b8:0d:49:2b:e0:76:5c:96:2a: f6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:96:A5:8F:2F:F2:B9:BE:16:20:00:5E:CD:84:B1:DC:C7:BB:E8:5D X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.124.0/22 45.125.196.0/22 IPv6: 2407:8100:5::/48 Signature Algorithm: sha256WithRSAEncryption 15:0a:77:8e:59:88:da:8b:0a:12:9d:d9:35:fe:90:13:0c:2a: e6:25:d6:b6:98:45:7f:37:17:a0:c9:d7:ef:93:1b:9b:0f:fc: 8a:09:c4:b7:17:e7:7b:39:ad:93:9b:8a:48:9c:96:42:1c:76: 4d:55:19:8f:d0:76:3a:be:52:e1:b5:7d:53:ec:38:bf:d8:fb: 57:a1:be:20:a1:f2:fb:a4:23:ef:0e:9a:5e:0a:ee:c8:33:6b: c3:26:e0:4b:09:0e:4f:9c:36:c5:1e:37:3c:f5:ad:df:eb:6f: c5:65:5b:45:f0:6b:48:2d:3c:fd:d6:b7:6d:14:35:50:aa:03: b5:dc:3b:76:26:65:e8:3f:8f:eb:e4:d6:b1:c2:0d:80:30:74: 47:ef:03:fa:0e:7a:b9:c4:4b:4c:b5:88:57:af:c3:46:b1:a5: b4:13:63:be:bb:06:70:96:a9:9b:de:28:63:85:bc:cd:af:71: f5:71:be:45:dd:de:1d:31:89:62:c9:1c:b0:0d:27:a5:dc:d8: ac:09:c4:73:f8:ac:7b:ed:49:b8:59:a5:87:cb:75:05:42:6b: 30:86:54:d4:34:a4:76:48:bb:0d:bf:a7:bb:38:4a:2e:9b:d4: cf:73:c5:6d:15:1f:9b:54:cd:28:81:60:d6:b2:59:ac:12:c0: b4:e4:c2:db -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICIiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjUxMDAyMTYxMzQ0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlYTRiOC02ZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBrHntc7hmZ3ubI2R8cSGEdZNfCOpsqP5ldLoeopYni+yEL3KsXcy/vMZEXY sItn9lhu3UKscz3xXyq3rUF2nGxmHgwHM/QnseUMDt3bHEbdR+8NrE6GNQERVzO2 eWrthu44gn+rysIJBNy49kjusdjOC8OzrowczvHnnXcU1tq9vDqR0HBRPbjgxPmG 4bk87WdWpdxZP2UcKslRP3Qn22QX0Ge4ZHfdgE1M7cTctGhNoXszvkp6s/bWwcnA nQff5rnaM8gG6G27sAnBcLcf1nCwaIMaqcqO5boCiNka8PJRmqvRXE1lkRoyV5z0 GPfbsNPP3Au4DUkr4HZclir2pQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFGSWpY8v 8rm+FiAAXs2EsdzHu+hdMB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBFQkYvNUY4NEQ3RDhEQjgwMTFFNTlBQjdFRDFFQzRGOUFFMDIvNTQ4MEQzMTY3 NjREMTFFQThDQjVDMDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAIr/3wDBAItfcQwDwQCAAIwCQMHACQHgQAABTANBgkqhkiG 9w0BAQsFAAOCAQEAFQp3jlmI2osKEp3ZNf6QEwwq5iXWtphFfzcXoMnX75Mbmw/8 ignEtxfnezmtk5uKSJyWQhx2TVUZj9B2Or5S4bV9U+w4v9j7V6G+IKHy+6Qj7w6a XgruyDNrwybgSwkOT5w2xR43PPWt3+tvxWVbRfBrSC08/da3bRQ1UKoDtdw7diZl 6D+P6+TWscINgDB0R+8D+g56ucRLTLWIV6/DRrGltBNjvrsGcJapm94oY4W8za9x 9XG+Rd3eHTGJYskcsA0npdzYrAnEc/ise+1JuFmlh8t1BUJrMIZU1DSkdki7Db+n uzhKLpvUz3PFbRUfm1TNKIFg1rJZrBLAtOTC2w== -----END CERTIFICATE-----Generated at Wed Nov 5 19:48:21 2025 by rpki-client