$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/4435207C62B311F0A9203C48C4F9AE02.roa File: 4435207C62B311F0A9203C48C4F9AE02.roa (raw, json) Hash identifier: qF6LLppmzlX6UDZ/efg5JijGsRdlRNotr0lSe7O9lcE= Subject key identifier: 31:4C:A6:D5:68:85:E3:45:0E:28:74:CF:0F:27:F2:0E:60:4D:DE:09 Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305 Certificate serial: 027D Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/4435207C62B311F0A9203C48C4F9AE02.roa Signing time: Thu 17 Jul 2025 02:10:53 +0000 ROA not before: Thu 17 Jul 2025 02:10:53 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 400342 IP address blocks: 202.134.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 637 (0x27d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305 Validity Not Before: Jul 17 02:10:53 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68785bad-7f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4d:a6:40:f0:75:cb:c7:45:09:e0:16:f5:de: 18:a8:89:63:ca:46:98:ca:4b:74:d2:7f:77:f5:bb: 84:1c:10:53:b0:2d:b5:c0:69:95:d7:41:31:17:27: bb:07:77:2f:73:68:05:a0:7e:87:cd:de:24:39:60: 01:46:ee:f0:d2:7d:ca:09:7a:78:1b:cf:56:d5:36: 81:25:bd:cd:df:90:43:d1:6f:e9:20:b4:79:17:96: d0:4d:31:3c:36:46:6e:de:76:13:8c:6b:2d:59:70: 0e:0d:7a:34:15:e5:23:1c:0d:fe:f6:64:99:04:e0: c5:7a:3d:02:75:58:39:04:be:69:fd:ba:d3:a4:c9: f1:52:fe:3a:a6:2d:89:b5:07:0b:cb:f0:eb:4c:ca: ca:62:b8:03:f9:a7:33:fc:7d:fe:37:69:54:da:af: 0b:5b:09:75:55:35:56:6e:33:0b:d5:de:3a:04:1b: 94:98:47:14:70:79:81:50:9b:5b:14:da:4f:7d:9b: a5:a7:dc:9b:3b:c5:8f:60:de:99:e0:38:04:ac:20: b4:98:5e:dd:e4:4c:73:fe:2e:8b:0e:e7:a7:08:dd: c3:3f:fe:58:03:c5:fa:1c:de:6e:49:3a:04:bf:ed: e4:2e:7d:b6:95:85:85:66:f4:eb:20:72:80:fe:51: 8c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4C:A6:D5:68:85:E3:45:0E:28:74:CF:0F:27:F2:0E:60:4D:DE:09 X509v3 Authority Key Identifier: keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/4435207C62B311F0A9203C48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.134.249.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:0a:c5:91:22:ae:ad:33:2c:de:0b:2b:05:71:90:3c:15:ba: 98:d7:bb:96:b0:06:0d:8f:e5:1b:36:59:cc:02:a8:28:09:15: 8f:7e:8d:30:0d:9c:85:4c:52:6a:24:ef:b7:31:bd:d6:6a:8e: 3a:27:9e:32:a3:a8:40:55:7c:54:6b:8b:a9:37:91:d6:5d:45: 8d:1c:e1:a0:89:c4:a3:b7:70:66:0b:05:20:2e:67:e2:fb:08: 5b:e2:9e:22:26:38:f9:e6:ed:4c:aa:97:f3:76:7b:8b:82:f7: 78:62:23:e1:16:78:6e:49:8d:36:25:a5:f0:93:fb:51:20:ec: c5:51:9a:75:5a:d2:9f:02:89:a9:78:ec:f0:ff:bb:73:e4:d9: 1d:f7:0f:e0:57:c4:db:89:df:21:e1:94:73:68:52:c4:d2:9e: ea:f5:f0:b6:0a:27:a3:78:d1:e2:b0:35:c2:c8:62:a2:21:4b: dc:40:93:fe:ae:e4:66:0e:54:24:35:18:e6:e3:10:fa:cf:92: 31:b8:7c:d9:b1:2d:db:21:99:b1:da:32:50:dc:8c:8c:c5:fe: 89:cc:f3:0a:c3:c6:97:96:83:76:fa:7c:9d:b1:c5:39:fb:e5: 89:3f:72:73:36:d1:a3:36:65:f6:b8:44:84:9e:a2:07:0d:6b: 59:34:bc:d2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NTAxMTAvBgNVBAUTKDQ1NkVFQTA2OTJDNkE0RjI2RjUzRDJEMjM3RDFDQjRE Q0Q3ODMzMDUwHhcNMjUwNzE3MDIxMDUzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc4NWJhZC03ZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApE2mQPB1y8dFCeAW9d4YqIljykaYykt00n939buEHBBTsC21wGmV10ExFye7 B3cvc2gFoH6Hzd4kOWABRu7w0n3KCXp4G89W1TaBJb3N35BD0W/pILR5F5bQTTE8 NkZu3nYTjGstWXAODXo0FeUjHA3+9mSZBODFej0CdVg5BL5p/brTpMnxUv46pi2J tQcLy/DrTMrKYrgD+acz/H3+N2lU2q8LWwl1VTVWbjML1d46BBuUmEcUcHmBUJtb FNpPfZulp9ybO8WPYN6Z4DgErCC0mF7d5Exz/i6LDuenCN3DP/5YA8X6HN5uSToE v+3kLn22lYWFZvTrIHKA/lGMPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDFMptVo heNFDih0zw8n8g5gTd4JMB8GA1UdIwQYMBaAFEVu6gaSxqTyb1PS0jfRy03NeDMF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU1MC84NDAwOTU0QUNF QzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQSnZVOUxTTjlITFRjMTRN d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzY1NTAvODQwMDk1NEFDRUM0MTFFRDhBODNGQjExQzRGOUFFMDIvNDQzNTIwN0M2 MkIzMTFGMEE5MjAzQzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKhvkwDQYJKoZIhvcNAQELBQADggEBAFwKxZEirq0zLN4L KwVxkDwVupjXu5awBg2P5Rs2WcwCqCgJFY9+jTANnIVMUmok77cxvdZqjjonnjKj qEBVfFRri6k3kdZdRY0c4aCJxKO3cGYLBSAuZ+L7CFviniImOPnm7Uyql/N2e4uC 93hiI+EWeG5JjTYlpfCT+1Eg7MVRmnVa0p8Cial47PD/u3Pk2R33D+BXxNuJ3yHh lHNoUsTSnur18LYKJ6N40eKwNcLIYqIhS9xAk/6u5GYOVCQ1GObjEPrPkjG4fNmx LdshmbHaMlDcjIzF/onM8wrDxpeWg3b6fJ2xxTn75Yk/cnM20aM2Zfa4RISeogcN a1k0vNI= -----END CERTIFICATE-----Generated at Mon Jul 21 18:35:07 2025 by rpki-client