$ rpki-client -vvf rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/94BF06A8F31D11EA8D62F57EC4F9AE02.roa File: 94BF06A8F31D11EA8D62F57EC4F9AE02.roa (raw, json) Hash identifier: QmpltAdf0nLFZT8gwBfGo76407/WjBUywxAPLq9iwsw= Subject key identifier: F6:23:A6:62:DD:E2:4D:F3:C8:72:23:EF:07:F6:49:0E:2A:1C:AE:55 Certificate issuer: /CN=A91717C0/serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Certificate serial: 07E4 Authority key identifier: F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/94BF06A8F31D11EA8D62F57EC4F9AE02.roa Signing time: Thu 26 Jun 2025 21:28:36 +0000 ROA not before: Thu 26 Jun 2025 21:28:36 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 9241 IP address blocks: 202.170.32.0/20 maxlen: 20 202.170.33.0/24 maxlen: 24 202.170.36.0/24 maxlen: 24 202.170.38.0/24 maxlen: 24 202.170.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2020 (0x7e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717C0, serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Validity Not Before: Jun 26 21:28:36 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685dbb83-a110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:68:35:3a:17:61:40:76:e6:a9:3a:9e:36:51: 96:f2:fe:14:bc:cc:12:5d:16:a0:67:b0:aa:6f:b5: e7:63:29:fd:bd:f6:82:05:e8:7d:bf:6f:6f:28:74: 3d:ac:3c:fc:4e:57:cd:05:f8:d4:1f:ba:ff:3c:e2: c2:7c:d3:79:5d:06:8b:b6:3e:a1:66:7e:da:54:63: 7e:58:90:51:4a:7a:66:08:d0:f0:bf:d8:a5:57:36: c7:a7:ff:b1:df:03:a1:00:31:9b:00:28:30:5f:68: 6c:f4:c4:4e:ea:0d:67:fd:c4:fe:b0:0a:ec:ca:27: 8c:88:77:31:94:4a:c2:0f:67:72:77:f9:a5:be:4c: 77:bf:99:c1:2e:6b:e0:43:f1:d9:8c:d4:8d:8b:4d: a9:a7:eb:c2:fa:ec:80:90:b3:19:73:3e:2a:9a:cb: dd:28:64:65:2f:34:e1:e4:ee:93:65:c4:43:0b:bd: 34:59:84:0a:ba:9f:51:a7:2f:ed:30:fe:59:9f:c3: b3:21:3f:86:ea:79:d7:af:87:e6:91:96:db:81:fe: 03:9b:4b:10:de:29:d7:f0:bd:16:38:c6:e1:d5:fb: 1b:46:7b:b5:7c:e8:a2:be:c0:c1:48:a8:00:1d:1c: ae:d9:40:51:cd:d2:9e:81:e5:15:17:a3:99:55:71: 2c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:23:A6:62:DD:E2:4D:F3:C8:72:23:EF:07:F6:49:0E:2A:1C:AE:55 X509v3 Authority Key Identifier: keyid:F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/94BF06A8F31D11EA8D62F57EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.170.32.0/20 Signature Algorithm: sha256WithRSAEncryption 29:c6:e2:36:1d:26:8b:bd:69:91:c2:3b:64:6a:e7:f6:a3:aa: c0:21:08:35:f4:a7:b1:fa:43:80:17:38:f0:d6:a5:bf:a7:f7: 4b:00:92:c4:72:2f:9f:8c:4f:14:9d:bc:37:df:e3:73:1b:62: 8e:e0:1b:76:83:86:13:0f:71:c2:7c:4a:cb:da:73:52:ed:eb: 4e:8c:1e:3b:ed:98:b7:dc:28:20:d9:47:89:04:3a:76:67:7e: e7:9d:e6:62:31:cc:a0:23:4d:38:2e:7d:f4:c8:00:e2:a1:1a: 83:7f:5c:33:4e:e9:07:c1:42:21:19:56:ea:f0:50:18:73:46: f2:4f:6c:0b:6d:d1:6a:56:ea:1d:f0:25:be:8e:6a:ca:d8:3d: d2:8c:3f:9d:5c:b6:f2:98:af:dd:c3:80:1f:54:58:82:ae:7a: ff:cd:57:4a:dc:db:1a:da:8b:78:eb:76:12:01:f9:ff:ec:45: 78:cb:d3:84:66:0c:3e:f2:90:c4:79:46:15:d9:44:c3:8d:24: f2:8b:0b:07:a8:3c:46:d4:00:de:4a:95:97:97:7a:88:fb:61: 45:10:0c:4a:cd:ed:42:00:10:7d:c7:27:a3:e1:6e:69:48:78: 7b:e0:f4:3b:39:43:88:90:a3:fd:45:4b:88:57:31:99:66:49: 11:56:b8:78 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3QzAxMTAvBgNVBAUTKEY3NTE0M0FCNUJFODMwQkU5M0JDRDc3NkQzMzJCMEZE NUI3ODdFM0IwHhcNMjUwNjI2MjEyODM2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVkYmI4My1hMTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2g1OhdhQHbmqTqeNlGW8v4UvMwSXRagZ7Cqb7XnYyn9vfaCBeh9v29vKHQ9 rDz8TlfNBfjUH7r/POLCfNN5XQaLtj6hZn7aVGN+WJBRSnpmCNDwv9ilVzbHp/+x 3wOhADGbACgwX2hs9MRO6g1n/cT+sArsyieMiHcxlErCD2dyd/mlvkx3v5nBLmvg Q/HZjNSNi02pp+vC+uyAkLMZcz4qmsvdKGRlLzTh5O6TZcRDC700WYQKup9Rpy/t MP5Zn8OzIT+G6nnXr4fmkZbbgf4Dm0sQ3inX8L0WOMbh1fsbRnu1fOiivsDBSKgA HRyu2UBRzdKegeUVF6OZVXEsPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPYjpmLd 4k3zyHIj7wf2SQ4qHK5VMB8GA1UdIwQYMBaAFPdRQ6tb6DC+k7zXdtMysP1beH47 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdDMC8wMThFQkU1OEYz MUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01MNlR2TmQyMHpLd19WdDRm anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxRkRxMXZvTUw2VHZOZDIwekt3X1Z0NGZqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE3QzAvMDE4RUJFNThGMzFBMTFFQUJDMDBDQzVDQzRGOUFFMDIvOTRCRjA2QThG MzFEMTFFQThENjJGNTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBATKqiAwDQYJKoZIhvcNAQELBQADggEBACnG4jYdJou9aZHC O2Rq5/ajqsAhCDX0p7H6Q4AXOPDWpb+n90sAksRyL5+MTxSdvDff43MbYo7gG3aD hhMPccJ8Ssvac1Lt606MHjvtmLfcKCDZR4kEOnZnfued5mIxzKAjTTguffTIAOKh GoN/XDNO6QfBQiEZVurwUBhzRvJPbAtt0WpW6h3wJb6OasrYPdKMP51ctvKYr93D gB9UWIKuev/NV0rc2xrai3jrdhIB+f/sRXjL04RmDD7ykMR5RhXZRMONJPKLCweo PEbUAN5KlZeXeoj7YUUQDErN7UIAEH3HJ6PhbmlIeHvg9Ds5Q4iQo/1FS4hXMZlm SRFWuHg= -----END CERTIFICATE-----Generated at Mon Jul 21 06:55:11 2025 by rpki-client