$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/2B1D3BB2305811EA8D5B6479C4F9AE02.roa File: 2B1D3BB2305811EA8D5B6479C4F9AE02.roa (raw, json) Hash identifier: SccF8HRtnWqPr6dbqcwFHPaBm6ma5y4QuMfEodFq0x8= Subject key identifier: E4:A0:60:66:2B:4E:73:22:C2:0B:F5:3C:39:42:9D:29:0E:F6:11:32 Certificate issuer: /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Certificate serial: 0B8D Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/2B1D3BB2305811EA8D5B6479C4F9AE02.roa Signing time: Thu 10 Jul 2025 19:28:56 +0000 ROA not before: Thu 10 Jul 2025 19:28:56 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55552 IP address blocks: 202.52.42.0/23 maxlen: 23 2001:df0:a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2957 (0xb8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6B27, serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Validity Not Before: Jul 10 19:28:56 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68701478-7e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:3a:fc:49:e7:21:ea:2c:85:d5:3e:9d:70: b5:c0:40:e4:0d:2d:2d:71:bb:2a:67:f4:35:62:63: 01:b0:0c:73:d5:8f:a0:89:69:01:21:ea:36:60:60: 59:a6:e7:20:9a:58:60:ba:e9:fb:4e:bf:40:9a:b0: 33:f8:ee:e4:34:0c:89:6b:cb:cf:45:48:d8:d6:db: bd:e1:80:93:4d:b0:aa:75:22:45:2a:64:69:71:1e: 74:87:dd:99:70:5e:6d:ec:f5:f9:65:27:f5:eb:83: 6a:cc:02:04:30:29:6f:b8:3e:27:26:29:fb:38:1f: 08:56:1e:d8:fa:63:b8:a2:bf:6d:83:d5:b4:98:f0: b7:22:b1:09:a6:db:21:ae:85:79:72:07:6e:08:3b: 61:c2:76:55:7b:54:0e:17:9d:d6:c6:14:e6:8b:86: fe:4d:29:32:1e:6b:c4:c1:a4:19:25:42:fa:57:d8: f9:17:31:55:64:52:83:51:50:aa:5f:b6:c2:3e:7c: 60:16:60:80:57:88:e5:ad:59:3a:17:76:4b:90:de: 9b:4d:c4:94:f7:80:93:08:d6:92:89:3e:34:11:a9: 17:77:dc:51:7a:4e:aa:27:ac:02:ea:0e:35:40:88: 44:79:c4:09:4e:a7:91:67:e2:f4:bf:7e:6b:55:35: 93:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A0:60:66:2B:4E:73:22:C2:0B:F5:3C:39:42:9D:29:0E:F6:11:32 X509v3 Authority Key Identifier: keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/2B1D3BB2305811EA8D5B6479C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.52.42.0/23 IPv6: 2001:df0:a5::/48 Signature Algorithm: sha256WithRSAEncryption 07:99:46:84:12:c9:6f:35:8f:c6:cb:3a:f3:b6:65:e1:3b:43: e2:ec:5d:69:43:7e:b0:6f:f0:84:dc:02:0e:be:4e:fd:15:e8: b9:d9:8e:5a:58:f9:5a:71:ba:92:05:b0:f3:94:98:d4:26:66: 09:65:99:e4:e0:1b:3b:5c:ae:31:12:5f:7b:b9:0c:c3:27:cc: e2:dd:c9:2e:1a:01:43:9b:99:eb:80:a3:ca:ce:a1:e1:93:ab: 78:98:bb:3a:9a:5e:92:48:d7:45:8e:fb:a3:7a:90:b9:0b:ea: 76:e3:0e:6d:a8:ae:4c:db:25:34:4c:cc:0b:6a:43:7c:05:76: e9:c8:d2:a4:36:e8:b3:14:eb:dc:db:96:03:be:31:88:90:74: 38:3e:73:7b:60:62:71:1d:95:16:5c:b3:fc:54:e0:2f:77:69: 94:5f:1b:5e:10:4a:61:5c:b1:ae:68:69:68:9e:e3:7b:b4:c7: 01:92:37:90:09:28:00:f2:cc:16:1f:64:15:9a:e0:d9:70:0b: 9f:ba:d2:de:e5:d1:ce:b0:e0:26:68:9a:76:a0:68:65:f2:3f: 9d:9b:32:91:be:35:aa:ea:5e:42:a5:7b:26:dd:38:02:75:7b: 66:5d:e8:94:e0:2b:9d:4d:51:26:d5:6b:ed:e6:57:44:a5:78: 63:14:83:34 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICC40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCMjcxMTAvBgNVBAUTKDlFQ0IyMkFDREUwOTY3QTA1ODM3RTU4RkM3MzFEMzU3 RTM3NjM3RjgwHhcNMjUwNzEwMTkyODU2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcwMTQ3OC03ZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRY6/EnnIeoshdU+nXC1wEDkDS0tcbsqZ/Q1YmMBsAxz1Y+giWkBIeo2YGBZ pucgmlhguun7Tr9AmrAz+O7kNAyJa8vPRUjY1tu94YCTTbCqdSJFKmRpcR50h92Z cF5t7PX5ZSf164NqzAIEMClvuD4nJin7OB8IVh7Y+mO4or9tg9W0mPC3IrEJptsh roV5cgduCDthwnZVe1QOF53WxhTmi4b+TSkyHmvEwaQZJUL6V9j5FzFVZFKDUVCq X7bCPnxgFmCAV4jlrVk6F3ZLkN6bTcSU94CTCNaSiT40EakXd9xRek6qJ6wC6g41 QIhEecQJTqeRZ+L0v35rVTWT6QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOSgYGYr TnMiwgv1PDlCnSkO9hEyMB8GA1UdIwQYMBaAFJ7LIqzeCWegWDflj8cx01fjdjf4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkIyNy84MkJGMkJGNDMw NTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2QllOLVdQeHpIVFYtTjJO X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zc2lyTjRKWjZCWU4tV1B4ekhUVi1OMk5fZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZCMjcvODJCRjJCRjQzMDU0MTFFQUFGQzkxMTZFQzRGOUFFMDIvMkIxRDNCQjIz MDU4MTFFQThENUI2NDc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHKNCowDwQCAAIwCQMHACABDfAApTANBgkqhkiG9w0BAQsF AAOCAQEAB5lGhBLJbzWPxss687Zl4TtD4uxdaUN+sG/whNwCDr5O/RXoudmOWlj5 WnG6kgWw85SY1CZmCWWZ5OAbO1yuMRJfe7kMwyfM4t3JLhoBQ5uZ64Cjys6h4ZOr eJi7OppekkjXRY77o3qQuQvqduMObaiuTNslNEzMC2pDfAV26cjSpDbosxTr3NuW A74xiJB0OD5ze2BicR2VFlyz/FTgL3dplF8bXhBKYVyxrmhpaJ7je7THAZI3kAko APLMFh9kFZrg2XALn7rS3uXRzrDgJmiadqBoZfI/nZsykb41qupeQqV7Jt04AnV7 Zl3olOArnU1RJtVr7eZXRKV4YxSDNA== -----END CERTIFICATE-----Generated at Mon Jul 21 07:19:34 2025 by rpki-client