$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa File: CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa (raw, json) Hash identifier: 9Z+s94Y5T1K7IVPTPlx/BgDTI68R9a8i/jpS5x1Nr4c= Subject key identifier: D2:0E:7D:22:6E:B3:72:88:F7:0A:64:F9:32:BE:AF:61:3A:88:06:BA Certificate issuer: /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592 Certificate serial: 0A11 Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa Signing time: Fri 10 Oct 2025 21:20:33 +0000 ROA not before: Fri 10 Oct 2025 21:20:33 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 14618 IP address blocks: 203.210.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2577 (0xa11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8666, serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592 Validity Not Before: Oct 10 21:20:33 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e978a0-0d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:76:22:a4:45:5f:c7:4d:b5:b0:1f:c6:3d:75: f2:79:dd:c1:63:c0:ef:38:70:a5:d1:25:26:17:97: 90:f6:c2:db:84:7e:a0:c5:fb:c5:34:46:e9:66:22: 75:d6:23:be:0d:c4:04:fd:56:31:a4:dc:f4:2a:18: 6b:17:ec:dc:25:b7:77:3e:b9:fe:ab:d6:be:67:0e: 78:f5:30:fe:3f:a0:9a:fc:32:99:5e:b7:3c:aa:aa: 99:ab:ba:fe:02:c1:5c:6e:8c:47:f6:bf:85:07:c7: cc:75:95:83:ed:1f:26:ad:30:55:5b:31:1a:91:0e: df:45:21:75:88:a8:81:88:4a:ca:5d:37:88:9a:fb: df:95:b3:e0:c5:5b:79:92:10:45:e0:16:b1:f2:94: 49:a3:40:25:82:f6:8d:6b:ba:fa:4d:c1:63:de:3c: d7:29:fd:96:2d:73:5f:5a:76:6c:3f:6a:89:50:41: d4:8b:7c:79:57:f2:2e:a8:18:ac:9e:00:9a:bc:81: f1:d3:cf:d3:57:24:4a:cb:fd:2e:d0:3b:dc:7e:7c: 4b:be:38:3b:3b:b3:a3:aa:4d:e5:94:c9:c6:be:0d: 84:c0:07:8c:4a:14:5d:8a:58:e4:9a:1a:d1:0b:44: 2b:f3:50:24:89:87:b0:18:f3:48:06:1f:96:93:58: 77:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0E:7D:22:6E:B3:72:88:F7:0A:64:F9:32:BE:AF:61:3A:88:06:BA X509v3 Authority Key Identifier: keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.210.75.0/24 Signature Algorithm: sha256WithRSAEncryption 70:a0:18:40:64:66:28:ab:e5:11:de:56:e4:b5:7c:0d:f0:34: 87:ad:e1:90:04:cc:4f:72:90:2b:72:9c:66:00:77:68:8c:99: 1b:09:0d:27:5e:3b:e0:0e:7b:d0:d5:45:eb:35:50:8d:e4:07: 19:5f:22:31:9e:95:d7:d6:2c:42:7f:57:27:11:89:38:cb:fe: 0d:89:54:5b:3c:8f:af:fb:13:d7:51:2e:a1:95:30:ad:c8:92: 47:bd:f2:58:d1:67:e7:c7:41:6a:49:9b:d0:95:69:fa:41:02: 3e:69:87:c7:3a:42:da:98:aa:00:a9:6a:cd:bb:9d:36:27:43: c7:24:d0:74:95:9f:ba:89:4a:6d:0c:c6:62:e7:f1:a7:72:09: 9e:ce:70:d0:33:da:d9:04:6b:22:25:00:a0:21:f9:42:76:c8: 6e:ff:4e:8c:63:6e:51:47:52:32:5e:9a:b0:4a:75:cf:63:5d: 3c:f7:d3:11:78:8d:d2:ea:5c:bb:cc:27:75:e9:94:b3:f3:82: c8:fe:d2:1f:18:fc:a3:89:d6:a1:5a:39:57:61:43:15:bf:1d: 9e:34:dc:0e:14:c6:a1:5c:93:a0:01:80:55:4f:7d:cb:9b:d3: a2:4a:17:de:e8:63:b7:2d:04:c3:37:2b:e2:fd:6c:c0:69:db: 1d:4d:cc:f9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICChEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NjYxMTAvBgNVBAUTKDMyODQzMzg0RkFFNkFGNkMzMTc2RTFERjc0RTkwODgx RDZEOTc1OTIwHhcNMjUxMDEwMjEyMDMzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU5NzhhMC0wZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nYipEVfx021sB/GPXXyed3BY8DvOHCl0SUmF5eQ9sLbhH6gxfvFNEbpZiJ1 1iO+DcQE/VYxpNz0KhhrF+zcJbd3Prn+q9a+Zw549TD+P6Ca/DKZXrc8qqqZq7r+ AsFcboxH9r+FB8fMdZWD7R8mrTBVWzEakQ7fRSF1iKiBiErKXTeImvvflbPgxVt5 khBF4Bax8pRJo0AlgvaNa7r6TcFj3jzXKf2WLXNfWnZsP2qJUEHUi3x5V/IuqBis ngCavIHx08/TVyRKy/0u0DvcfnxLvjg7O7Ojqk3llMnGvg2EwAeMShRdiljkmhrR C0Qr81AkiYewGPNIBh+Wk1h3qQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNIOfSJu s3KI9wpk+TK+r2E6iAa6MB8GA1UdIwQYMBaAFDKEM4T65q9sMXbh33TpCIHW2XWS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY2Ni82MjNDRDZFNDg0 RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIyd3hkdUhmZE9rSWdkYlpk WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01vUXpoUHJtcjJ3eGR1SGZkT2tJZ2RiWmRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTg2NjYvNjIzQ0Q2RTQ4NEYzMTFFQUIxRkJCQjE4QzRGOUFFMDIvQ0U3REE5MUE4 QzA5MTFFQUFGRjZDRDI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADL0kswDQYJKoZIhvcNAQELBQADggEBAHCgGEBkZiir5RHe VuS1fA3wNIet4ZAEzE9ykCtynGYAd2iMmRsJDSdeO+AOe9DVRes1UI3kBxlfIjGe ldfWLEJ/VycRiTjL/g2JVFs8j6/7E9dRLqGVMK3Ikke98ljRZ+fHQWpJm9CVafpB Aj5ph8c6QtqYqgCpas27nTYnQ8ck0HSVn7qJSm0MxmLn8adyCZ7OcNAz2tkEayIl AKAh+UJ2yG7/ToxjblFHUjJemrBKdc9jXTz30xF4jdLqXLvMJ3XplLPzgsj+0h8Y /KOJ1qFaOVdhQxW/HZ403A4UxqFck6ABgFVPfcub06JKF97oY7ctBMM3K+L9bMBp 2x1NzPk= -----END CERTIFICATE-----Generated at Thu Oct 16 07:46:32 2025 by rpki-client