$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/0AC13D943C5711F0BFBB572EC4F9AE02.roa File: 0AC13D943C5711F0BFBB572EC4F9AE02.roa (raw, json) Hash identifier: YOcyb8iWuylKvWFBS/Bta6UF3QGtIDH67OBUVQTKYG4= Subject key identifier: A9:63:2E:6D:3D:B3:EA:80:24:FB:7B:50:D2:E6:48:E5:3C:E8:DC:11 Certificate issuer: /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A Certificate serial: 45 Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/0AC13D943C5711F0BFBB572EC4F9AE02.roa Signing time: Sat 05 Jul 2025 08:14:01 +0000 ROA not before: Sat 05 Jul 2025 08:14:01 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 8075 IP address blocks: 203.2.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A Validity Not Before: Jul 5 08:14:01 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6868dec9-b859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:35:7e:ec:9e:ac:da:28:8d:48:ee:b4:50:c8: 69:a8:60:b4:7c:7b:3c:2b:c8:82:16:4f:d4:1e:e5: 4b:da:bf:e5:26:40:ac:fe:1a:2d:49:68:e5:c0:db: 5a:a7:88:05:4a:6e:36:d6:02:06:11:20:58:5b:f5: cf:48:b8:7d:d3:74:fb:53:ef:ef:6c:c1:52:a6:96: 2d:4c:6f:90:cf:d9:c3:e1:9a:31:7c:7b:6f:a1:7d: f8:b0:f1:e2:bc:1d:0d:6d:e6:99:29:83:9b:7f:27: 3d:ed:a9:60:5c:ae:0b:c1:8f:08:dc:e1:be:eb:07: 3b:39:24:e8:e4:43:8a:f9:c9:c5:2c:9f:3d:39:93: 1d:3b:7d:fc:8e:b7:98:f4:29:82:af:85:3e:1e:f0: f7:7a:ca:12:2e:c8:9b:aa:01:c6:98:ef:af:94:e8: 5e:a4:15:15:96:d1:40:85:8d:f4:48:47:0b:14:95: 3b:c2:11:f4:d4:2e:73:5f:20:0d:71:a4:a6:43:72: c7:ca:af:b4:2a:35:97:fb:54:37:87:78:a4:c4:a5: 63:83:c9:8d:c9:98:23:96:97:3e:ff:2c:27:84:00: 57:57:21:c3:5e:ab:0b:18:a2:c3:54:a1:b0:ae:31: dd:31:d3:44:56:a4:89:48:65:31:7a:be:40:d9:3c: f9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:63:2E:6D:3D:B3:EA:80:24:FB:7B:50:D2:E6:48:E5:3C:E8:DC:11 X509v3 Authority Key Identifier: keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/0AC13D943C5711F0BFBB572EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.2.220.0/24 Signature Algorithm: sha256WithRSAEncryption dc:8d:38:9b:03:ba:40:bb:f5:47:21:90:0f:e4:eb:ab:1f:60: de:b6:5b:99:fe:1f:e2:83:4a:51:ae:e1:de:ce:05:cf:49:0c: 56:10:79:98:c1:87:61:65:23:32:bd:b0:83:31:56:44:14:70: 13:c6:22:88:c7:d0:d0:84:a1:d0:2e:68:3e:41:37:0c:cb:e8: 1a:a5:1d:b3:be:b2:a9:05:17:ea:63:e8:46:a8:d5:f4:84:a1: 60:ef:11:94:40:0a:3c:97:55:54:2d:a4:4d:e8:bc:d7:cc:9f: 65:1c:49:6d:c6:c7:b8:b1:89:17:07:99:a9:85:b9:5d:95:3e: 4d:bf:c1:f8:00:b6:f4:09:b7:35:82:63:2e:64:35:ab:9b:f9: 99:31:55:b7:b7:58:2e:c4:10:9b:5b:9a:0f:78:61:fc:a8:dc: 7a:8e:f2:23:28:38:27:1f:8d:a6:71:59:1f:68:56:42:e2:a0: 65:04:0c:2e:42:1d:66:90:06:7a:2e:80:a3:cf:60:8c:e2:da: 8b:40:da:ab:47:85:c8:fa:aa:86:73:10:c8:fa:48:a2:27:bc: d9:ad:c7:c2:fc:ec:b6:99:66:81:57:28:29:da:9d:7d:88:ae: d3:44:2c:0a:6c:17:5f:d4:e2:d3:91:ff:9f:ea:49:e0:03:f0: eb:2b:be:51 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0FBNTExMC8GA1UEBRMoRjcyNjdFODBCRTgxN0YwNDNEMjhGQjdFNzMwNUY0QzQ4 OEE4MzkxQTAeFw0yNTA3MDUwODE0MDFaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NjhkZWM5LWI4NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMNX7snqzaKI1I7rRQyGmoYLR8ezwryIIWT9Qe5Uvav+UmQKz+Gi1JaOXA21qn iAVKbjbWAgYRIFhb9c9IuH3TdPtT7+9swVKmli1Mb5DP2cPhmjF8e2+hffiw8eK8 HQ1t5pkpg5t/Jz3tqWBcrgvBjwjc4b7rBzs5JOjkQ4r5ycUsnz05kx07ffyOt5j0 KYKvhT4e8Pd6yhIuyJuqAcaY76+U6F6kFRWW0UCFjfRIRwsUlTvCEfTULnNfIA1x pKZDcsfKr7QqNZf7VDeHeKTEpWODyY3JmCOWlz7/LCeEAFdXIcNeqwsYosNUobCu Md0x00RWpIlIZTF6vkDZPPm1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUqWMubT2z 6oAk+3tQ0uZI5Tzo3BEwHwYDVR0jBBgwFoAU9yZ+gL6BfwQ9KPt+cwX0xIioORow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3QUE1L0JBRkIzNTc0MTVC QjExRjBCRkQ1NDg4MUM0RjlBRTAyLzl5Wi1nTDZCZndROUtQdC1jd1gweElpb09S by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXlaLWdMNkJmd1E5S1B0LWN3WDB4SWlvT1JvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0FBNS9CQUZCMzU3NDE1QkIxMUYwQkZENTQ4ODFDNEY5QUUwMi8wQUMxM0Q5NDND NTcxMUYwQkZCQjU3MkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsC3DANBgkqhkiG9w0BAQsFAAOCAQEA3I04mwO6QLv1RyGQ D+Trqx9g3rZbmf4f4oNKUa7h3s4Fz0kMVhB5mMGHYWUjMr2wgzFWRBRwE8YiiMfQ 0ISh0C5oPkE3DMvoGqUds76yqQUX6mPoRqjV9IShYO8RlEAKPJdVVC2kTei818yf ZRxJbcbHuLGJFweZqYW5XZU+Tb/B+AC29Am3NYJjLmQ1q5v5mTFVt7dYLsQQm1ua D3hh/Kjceo7yIyg4Jx+NpnFZH2hWQuKgZQQMLkIdZpAGei6Ao89gjOLai0Daq0eF yPqqhnMQyPpIoie82a3HwvzstplmgVcoKdqdfYiu00QsCmwXX9Ti05H/n+pJ4APw 6yu+UQ== -----END CERTIFICATE-----Generated at Sun Jul 20 09:39:11 2025 by rpki-client