$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/445DB498796011EFA7E9391DC4F9AE02.roa File: 445DB498796011EFA7E9391DC4F9AE02.roa (raw, json) Hash identifier: dA0s4TToOxTxCGWPhL3CMsQZBEq0Isrnu6dBhBWPJ8w= Subject key identifier: 93:59:C7:C1:80:52:8A:36:AD:7D:54:CD:CE:62:A0:5A:86:71:6B:49 Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Certificate serial: 2A4D Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/445DB498796011EFA7E9391DC4F9AE02.roa Signing time: Wed 16 Jul 2025 15:52:25 +0000 ROA not before: Wed 16 Jul 2025 15:52:25 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 138420 IP address blocks: 43.245.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10829 (0x2a4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Validity Not Before: Jul 16 15:52:25 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6877cab9-6bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cd:9b:ca:18:c2:5e:22:55:b9:85:a3:00:db: c9:9d:f1:b2:40:a5:46:ce:5e:2d:dc:7b:10:26:4a: 08:48:65:3a:7f:42:3b:f3:cd:6c:dc:03:0d:c5:8a: 6d:48:0f:7a:8b:89:48:91:96:8a:8e:e8:e3:a0:1a: f7:78:37:df:fe:40:f3:8f:42:71:37:e6:fe:14:f6: f2:fd:01:9a:eb:18:fe:16:81:7f:28:d0:a5:4b:7e: 2e:e6:cf:9b:57:a2:4b:de:ba:0f:56:21:6f:b7:4c: 93:7c:49:4a:cd:61:f6:ad:59:43:f0:7a:57:87:12: 68:3a:42:05:2b:d4:67:36:21:e5:b6:ab:97:66:d4: ae:9c:bc:27:87:77:2a:f2:ae:e4:62:d1:5b:4c:eb: c0:c3:ca:08:c8:28:90:eb:d1:1b:14:83:7d:40:40: 02:4d:4d:af:15:82:29:0f:bf:62:ed:a8:08:13:aa: f1:88:05:db:62:57:03:d0:05:77:d1:6c:42:6f:4d: a1:2b:33:ea:b0:f2:cb:9e:33:3d:88:7f:ab:5b:99: 22:82:af:b0:40:92:3a:4a:1c:61:b0:74:23:64:bd: 9f:93:b9:89:7f:96:34:ae:2c:bf:30:7f:21:84:34: 72:9b:5a:e5:a3:31:f3:66:40:53:61:5e:6f:85:de: 7e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:59:C7:C1:80:52:8A:36:AD:7D:54:CD:CE:62:A0:5A:86:71:6B:49 X509v3 Authority Key Identifier: keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/445DB498796011EFA7E9391DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.195.0/24 Signature Algorithm: sha256WithRSAEncryption 64:e7:d0:37:e3:73:e1:0e:cc:b0:04:ab:12:8f:90:94:ce:f2: 7f:b4:cd:63:1e:0a:c8:fa:2d:c5:79:a1:f8:b4:8c:eb:ee:af: 40:63:1a:d2:c7:53:42:f1:a8:9d:e0:c5:12:4b:c9:3f:24:25: df:54:3f:33:71:e9:7d:de:f2:13:e5:e6:75:f5:d1:29:17:7a: f7:37:4c:5c:47:10:4a:fb:d8:13:12:9d:60:d4:ce:39:a1:e8: 73:5f:05:2f:a7:2b:4c:5b:50:40:7c:bf:2c:00:f0:1e:35:4f: ae:ec:5b:11:71:d9:c8:59:36:b8:79:33:81:ff:3a:61:a6:48: b5:1d:45:01:46:21:b0:67:da:81:ec:af:1a:18:8f:5a:80:22: c1:7b:76:7e:a0:81:7b:28:1e:56:a9:73:fe:b6:4c:6c:1a:61: 05:66:16:fc:a8:6e:57:b4:94:ae:d1:b1:fe:5c:55:3f:02:bb: a2:a0:2d:87:27:19:93:91:77:dc:df:e3:7d:54:cc:d0:6c:e3: ce:8c:0c:01:f4:3e:28:57:a0:1c:dd:fe:4d:8e:9b:5f:19:a8: 5a:d2:05:ce:88:c5:e6:51:3b:80:04:4c:6d:cf:86:92:ef:53: 32:f5:b3:a0:61:be:21:f0:32:1f:11:21:e1:a1:1b:1b:3e:65: b2:2b:5c:ec -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxQzcxMTAvBgNVBAUTKEU4REY4RDVFNEM4NERBODdENzI5QTczQzFDNEU4NjEx MzgxQUIyQzEwHhcNMjUwNzE2MTU1MjI1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc3Y2FiOS02YmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM2byhjCXiJVuYWjANvJnfGyQKVGzl4t3HsQJkoISGU6f0I7881s3AMNxYpt SA96i4lIkZaKjujjoBr3eDff/kDzj0JxN+b+FPby/QGa6xj+FoF/KNClS34u5s+b V6JL3roPViFvt0yTfElKzWH2rVlD8HpXhxJoOkIFK9RnNiHltquXZtSunLwnh3cq 8q7kYtFbTOvAw8oIyCiQ69EbFIN9QEACTU2vFYIpD79i7agIE6rxiAXbYlcD0AV3 0WxCb02hKzPqsPLLnjM9iH+rW5kigq+wQJI6ShxhsHQjZL2fk7mJf5Y0riy/MH8h hDRym1rlozHzZkBTYV5vhd5+owIDAQABo4IClTCCApEwHQYDVR0OBBYEFJNZx8GA Uoo2rX1Uzc5ioFqGcWtJMB8GA1UdIwQYMBaAFOjfjV5MhNqH1ymnPBxOhhE4GrLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFDNy85N0NGMjBGQTMz MjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJvZlhLYWM4SEU2R0VUZ2Fz c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOLU5Ya3lFMm9mWEthYzhIRTZHRVRnYXNzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjAxQzcvOTdDRjIwRkEzMzIzMTFFNEE2RTc0OTExQzRGOUFFMDIvNDQ1REI0OTg3 OTYwMTFFRkE3RTkzOTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr9cMwDQYJKoZIhvcNAQELBQADggEBAGTn0Dfjc+EOzLAE qxKPkJTO8n+0zWMeCsj6LcV5ofi0jOvur0BjGtLHU0LxqJ3gxRJLyT8kJd9UPzNx 6X3e8hPl5nX10SkXevc3TFxHEEr72BMSnWDUzjmh6HNfBS+nK0xbUEB8vywA8B41 T67sWxFx2chZNrh5M4H/OmGmSLUdRQFGIbBn2oHsrxoYj1qAIsF7dn6ggXsoHlap c/62TGwaYQVmFvyoble0lK7Rsf5cVT8Cu6KgLYcnGZORd9zf431UzNBs486MDAH0 PihXoBzd/k2Om18ZqFrSBc6IxeZRO4AETG3PhpLvUzL1s6BhviHwMh8RIeGhGxs+ ZbIrXOw= -----END CERTIFICATE-----Generated at Sun Jul 20 22:41:49 2025 by rpki-client