$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/A8ED74B2677F11F0A8B65370C4F9AE02.roa File: A8ED74B2677F11F0A8B65370C4F9AE02.roa (raw, json) Hash identifier: V/RoWqDdFNTou3RWIV5KwIL9w5loJak511PG4DuKPHs= Subject key identifier: A7:8D:A6:EB:04:43:83:45:34:8E:F8:55:A5:C9:66:CE:8D:06:29:83 Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 265B Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/A8ED74B2677F11F0A8B65370C4F9AE02.roa Signing time: Wed 23 Jul 2025 05:57:51 +0000 ROA not before: Wed 23 Jul 2025 05:57:51 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 7470 IP address blocks: 111.84.0.0/16 maxlen: 24 115.67.0.0/16 maxlen: 24 2404:8d00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 06:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9819 (0x265b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: Jul 23 05:57:51 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=688079de-0945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:79:cb:77:71:59:52:33:60:ce:ce:c9:78:06: dc:e3:bb:c2:6f:9e:c2:8b:00:b8:14:c7:5f:7f:2b: b5:60:07:77:0f:a5:18:62:22:8e:c8:3b:9f:9a:14: bb:59:e8:a6:ba:ac:0b:0e:34:e4:94:54:fb:80:fd: 55:2c:a5:b9:9f:70:be:42:d9:4a:28:62:a9:73:d4: e7:c0:cb:a1:15:c3:b0:78:65:76:0b:9b:41:ae:eb: 18:18:51:9a:7c:ea:69:09:8f:7b:76:25:2a:ea:a0: 9e:52:b5:bc:9d:12:9e:a7:11:1d:35:1d:bd:8a:cd: 21:76:30:1e:8e:2b:06:1f:0a:e8:d2:8f:84:d3:48: 39:97:e7:a6:5c:e3:43:c1:7c:21:09:34:88:61:d7: 53:82:be:8f:75:aa:17:43:17:74:a5:ac:22:14:4a: 1c:57:eb:a1:93:17:a8:0b:d5:d4:cd:d8:5a:49:72: 32:dc:cc:cb:df:c8:c3:aa:75:1e:4b:0e:46:9f:a3: e0:d7:7e:bc:db:5e:9b:33:a9:a4:83:2b:ee:2a:2e: 1f:12:0e:35:85:06:4d:7d:51:d1:87:69:80:fd:9c: 01:88:0b:e5:11:7d:5f:04:a7:7b:25:2c:9b:d4:94: b0:e6:3a:bb:2f:a3:7c:0c:5a:36:78:ef:8a:2e:8e: da:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8D:A6:EB:04:43:83:45:34:8E:F8:55:A5:C9:66:CE:8D:06:29:83 X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/A8ED74B2677F11F0A8B65370C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.84.0.0/16 115.67.0.0/16 IPv6: 2404:8d00::/29 Signature Algorithm: sha256WithRSAEncryption 13:cf:81:36:3c:3d:76:2b:b7:27:b9:02:87:46:4a:d8:74:ad: a2:a3:a5:98:63:34:98:c1:43:e8:b5:06:db:cb:09:d3:e3:51: 28:d5:4f:b7:ef:8c:6d:2f:a3:79:e7:2b:a3:db:e6:27:69:4a: a8:50:80:09:72:2a:28:df:4a:9a:2b:6b:2a:3c:06:5f:19:d8: 77:f9:15:f3:f5:27:2e:fd:e5:6c:92:4c:e3:92:71:d6:56:b3: 8e:ed:69:00:d0:bb:61:af:47:b1:bf:27:20:ae:73:96:d5:07: 46:eb:e0:6a:c5:d2:54:94:bb:b2:9e:a3:d2:b2:50:46:2e:2b: 6b:c5:e6:0c:6c:e4:47:e7:ad:8a:b5:72:70:d7:fe:90:c1:95: 36:e3:df:07:85:1c:de:08:4b:42:60:73:7b:f6:66:cd:e2:a1: 75:6e:ad:f7:b4:82:64:ac:90:86:c8:37:0a:ef:cc:54:65:a1: b6:c4:41:92:54:cd:17:c3:1a:26:bc:33:df:cb:2d:0b:c8:46: bf:ca:79:d7:7f:97:39:89:17:7b:b1:68:93:85:55:94:0e:cf: f6:35:c6:0f:a0:84:fe:ea:47:8e:a1:e9:c4:5f:6f:12:79:60: a2:04:7c:e5:05:58:6e:6a:f3:19:a8:8b:8a:d7:3d:38:e8:99: 34:f7:8b:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjUwNzIzMDU1NzUxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgwNzlkZS0wOTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9HnLd3FZUjNgzs7JeAbc47vCb57CiwC4FMdffyu1YAd3D6UYYiKOyDufmhS7 WeimuqwLDjTklFT7gP1VLKW5n3C+QtlKKGKpc9TnwMuhFcOweGV2C5tBrusYGFGa fOppCY97diUq6qCeUrW8nRKepxEdNR29is0hdjAejisGHwro0o+E00g5l+emXOND wXwhCTSIYddTgr6PdaoXQxd0pawiFEocV+uhkxeoC9XUzdhaSXIy3MzL38jDqnUe Sw5Gn6Pg1368216bM6mkgyvuKi4fEg41hQZNfVHRh2mA/ZwBiAvlEX1fBKd7JSyb 1JSw5jq7L6N8DFo2eO+KLo7aTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeNpusE Q4NFNI74VaXJZs6NBimDMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDExMzYvQ0YzMjgxQzgyMTVCMTFFNUE3QkY4OTBFQzRGOUFFMDIvQThFRDc0QjI2 NzdGMTFGMEE4QjY1MzcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMgYIKwYBBQUHAQcBAf8E IzAhMBAEAgABMAoDAwBvVAMDAHNDMA0EAgACMAcDBQMkBI0AMA0GCSqGSIb3DQEB CwUAA4IBAQATz4E2PD12K7cnuQKHRkrYdK2io6WYYzSYwUPotQbbywnT41Eo1U+3 74xtL6N55yuj2+YnaUqoUIAJcioo30qaK2sqPAZfGdh3+RXz9Scu/eVskkzjknHW VrOO7WkA0Lthr0exvycgrnOW1QdG6+BqxdJUlLuynqPSslBGLitrxeYMbORH562K tXJw1/6QwZU2498HhRzeCEtCYHN79mbN4qF1bq33tIJkrJCGyDcK78xUZaG2xEGS VM0XwxomvDPfyy0LyEa/ynnXf5c5iRd7sWiThVWUDs/2NcYPoIT+6keOoenEX28S eWCiBHzlBVhuavMZqIuK1z046Jk094ti -----END CERTIFICATE-----Generated at Wed Jul 23 17:21:30 2025 by rpki-client