$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/3785190EF0FE11EEA034D07EC4F9AE02.roa File: 3785190EF0FE11EEA034D07EC4F9AE02.roa (raw, json) Hash identifier: nsCF4rGbw9XGs9CgJZKLcahJ7vZuzL6jjWzwGBe2QfI= Subject key identifier: 05:16:C6:4A:1D:78:52:FF:92:16:08:65:FB:F3:90:46:F9:F2:3A:F5 Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Certificate serial: 2A4E Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/3785190EF0FE11EEA034D07EC4F9AE02.roa Signing time: Wed 16 Jul 2025 15:52:26 +0000 ROA not before: Wed 16 Jul 2025 15:52:26 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 24323 IP address blocks: 43.245.192.0/22 maxlen: 22 43.245.192.0/24 maxlen: 24 43.245.193.0/24 maxlen: 24 43.245.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10830 (0x2a4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Validity Not Before: Jul 16 15:52:26 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6877caba-439b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b4:95:39:56:4c:4b:d4:d6:4d:90:87:c7:40: 0f:b9:1a:3b:b5:11:1c:95:e8:88:03:75:2b:e8:2c: da:1a:17:e6:2c:45:40:80:9a:40:6e:91:9e:22:0a: b4:77:68:24:2a:95:df:35:62:c6:7f:4c:35:c5:a9: 52:33:a4:61:5b:19:c6:1e:01:47:d0:ec:da:a3:39: 32:b6:43:6f:70:4c:8a:5b:f7:b8:e2:92:69:3f:97: 12:0f:7a:e5:c0:cf:84:7e:c9:fc:d7:ca:9f:e4:96: 76:47:4a:a7:28:eb:27:13:88:7a:e1:5d:d7:1e:07: 7c:d0:af:d0:b0:65:df:5b:43:d4:f6:78:94:fb:e8: bd:f2:e7:cf:73:02:7c:2a:3c:da:5b:97:61:a6:41: f5:2a:7d:c8:26:cd:6b:ca:d5:0f:40:d0:3d:7d:38: 10:b2:6e:b7:b3:d4:49:9c:2e:d5:3e:fc:78:9b:71: c4:95:bf:09:f7:e6:42:e9:53:49:05:e7:4b:77:3e: 03:4d:94:78:be:b2:fd:1e:3d:74:b7:81:62:52:41: 34:eb:9a:d7:cb:37:e2:37:6a:5d:c6:b0:6a:b4:3f: 0f:72:a2:c5:62:53:ba:70:0c:37:84:51:e2:2a:9f: 3d:23:7f:47:b1:4d:c3:ea:f4:7b:5f:1d:22:55:bd: 1f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:16:C6:4A:1D:78:52:FF:92:16:08:65:FB:F3:90:46:F9:F2:3A:F5 X509v3 Authority Key Identifier: keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/3785190EF0FE11EEA034D07EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.192.0/22 Signature Algorithm: sha256WithRSAEncryption 03:d8:20:f7:b7:74:8c:7b:9e:c7:3c:a8:3c:b1:15:6a:82:eb: 0a:21:ad:3e:40:3a:18:26:da:17:dc:e7:92:7d:0b:bf:e4:ca: be:26:77:df:9b:7c:dd:bb:a7:81:89:ba:6b:09:e8:89:53:d7: 07:4d:cf:91:6d:ac:8d:13:3b:08:99:44:8f:29:3a:b7:c6:81: 05:ea:b4:01:0a:03:5d:20:84:eb:1c:85:dc:b1:51:bd:71:6a: d2:0c:40:53:3e:bd:ad:67:d5:b1:40:1b:6a:ba:94:b9:8e:84: 1c:12:33:83:9f:ce:ba:ef:d3:bf:01:a1:95:03:53:d8:7b:6a: 70:37:7c:f9:9a:71:83:93:ec:09:49:2c:a3:55:ce:48:87:ed: 63:f7:be:56:f2:03:65:39:c3:d0:d5:e4:f8:a8:54:1c:ed:23: 14:42:a4:99:53:45:99:32:2b:58:e3:d4:e8:34:1e:25:f7:c5: 47:fd:5c:42:6a:c8:83:a9:75:a6:35:6a:0c:8b:06:72:0f:20: 63:32:3f:12:23:46:62:77:4e:46:00:96:28:d6:18:94:a0:61: 44:78:7b:44:02:83:7a:fe:ea:f8:57:0b:e9:f7:be:5a:b3:86: 10:cf:de:f2:88:44:bb:d2:db:a8:e2:cb:0c:ed:2b:ae:a9:8d: fe:de:29:e2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxQzcxMTAvBgNVBAUTKEU4REY4RDVFNEM4NERBODdENzI5QTczQzFDNEU4NjEx MzgxQUIyQzEwHhcNMjUwNzE2MTU1MjI2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc3Y2FiYS00MzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLSVOVZMS9TWTZCHx0APuRo7tREcleiIA3Ur6CzaGhfmLEVAgJpAbpGeIgq0 d2gkKpXfNWLGf0w1xalSM6RhWxnGHgFH0OzaozkytkNvcEyKW/e44pJpP5cSD3rl wM+Efsn818qf5JZ2R0qnKOsnE4h64V3XHgd80K/QsGXfW0PU9niU++i98ufPcwJ8 KjzaW5dhpkH1Kn3IJs1rytUPQNA9fTgQsm63s9RJnC7VPvx4m3HElb8J9+ZC6VNJ BedLdz4DTZR4vrL9Hj10t4FiUkE065rXyzfiN2pdxrBqtD8PcqLFYlO6cAw3hFHi Kp89I39HsU3D6vR7Xx0iVb0fiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAUWxkod eFL/khYIZfvzkEb58jr1MB8GA1UdIwQYMBaAFOjfjV5MhNqH1ymnPBxOhhE4GrLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFDNy85N0NGMjBGQTMz MjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJvZlhLYWM4SEU2R0VUZ2Fz c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOLU5Ya3lFMm9mWEthYzhIRTZHRVRnYXNzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjAxQzcvOTdDRjIwRkEzMzIzMTFFNEE2RTc0OTExQzRGOUFFMDIvMzc4NTE5MEVG MEZFMTFFRUEwMzREMDdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr9cAwDQYJKoZIhvcNAQELBQADggEBAAPYIPe3dIx7nsc8 qDyxFWqC6wohrT5AOhgm2hfc55J9C7/kyr4md9+bfN27p4GJumsJ6IlT1wdNz5Ft rI0TOwiZRI8pOrfGgQXqtAEKA10ghOschdyxUb1xatIMQFM+va1n1bFAG2q6lLmO hBwSM4Ofzrrv078BoZUDU9h7anA3fPmacYOT7AlJLKNVzkiH7WP3vlbyA2U5w9DV 5PioVBztIxRCpJlTRZkyK1jj1Og0HiX3xUf9XEJqyIOpdaY1agyLBnIPIGMyPxIj RmJ3TkYAlijWGJSgYUR4e0QCg3r+6vhXC+n3vlqzhhDP3vKIRLvS26jiywztK66p jf7eKeI= -----END CERTIFICATE-----Generated at Sun Jul 20 11:22:41 2025 by rpki-client