$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AA9ED48C63C811F08E5A7159C4F9AE02.roa File: AA9ED48C63C811F08E5A7159C4F9AE02.roa (raw, json) Hash identifier: kqaWonspwhDoUhE9oNUF9XXJIf2+YSKZzHSkZlXR8oA= Subject key identifier: 80:74:24:3C:62:61:39:0C:FD:5E:9D:E7:92:5B:BD:36:4B:FA:E0:68 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 288B Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AA9ED48C63C811F08E5A7159C4F9AE02.roa Signing time: Fri 18 Jul 2025 11:32:08 +0000 ROA not before: Fri 18 Jul 2025 11:32:08 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135377 IP address blocks: 113.203.224.0/24 maxlen: 24 113.203.225.0/24 maxlen: 24 113.203.226.0/24 maxlen: 24 113.203.227.0/24 maxlen: 24 113.203.228.0/24 maxlen: 24 113.203.229.0/24 maxlen: 24 113.203.230.0/24 maxlen: 24 113.203.231.0/24 maxlen: 24 113.203.244.0/24 maxlen: 24 113.203.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10379 (0x288b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Jul 18 11:32:08 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=687a30b8-27e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:aa:87:98:36:d5:fd:ea:1c:b0:ee:cb:92:c0: 57:77:70:a1:95:28:a5:ac:9a:72:e1:b9:06:d9:61: c7:1c:ee:8c:9d:9e:fa:5f:68:69:4d:6d:77:85:1e: 76:71:0e:b9:e9:8c:ae:15:1b:1d:e8:16:24:21:0c: 37:2d:f0:c6:59:cc:b3:27:05:eb:d9:03:cc:13:cd: 94:fd:38:bb:bc:bb:64:9d:1c:8e:d4:57:3d:de:a6: 6b:32:84:56:0c:10:51:16:78:3e:7a:02:d2:f1:df: ba:b2:7f:96:fd:f3:d9:2f:3e:dd:b5:94:18:3e:11: 24:13:69:a5:14:0c:37:72:53:3c:22:b0:37:bc:31: f8:26:70:b7:e7:3c:9a:88:9c:ed:da:63:85:0f:cc: bc:fb:84:77:fe:d0:a4:e6:0d:ab:5b:7d:ec:bf:3c: ce:0f:39:4f:b3:76:66:d1:63:06:95:8e:95:0b:09: 18:f0:a9:ed:dc:27:33:51:ee:5e:89:7f:b7:85:6b: f0:2e:af:e6:44:f8:2b:d1:f2:1c:d8:90:49:43:3b: 4a:0e:c2:85:94:e2:0a:fd:c0:d4:6f:11:d0:4a:00: e7:28:7c:0f:89:16:22:53:68:f0:ca:2b:1c:91:9b: bf:00:ee:fd:bd:dc:89:9b:69:a7:f2:99:f8:1d:6e: 9d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:74:24:3C:62:61:39:0C:FD:5E:9D:E7:92:5B:BD:36:4B:FA:E0:68 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AA9ED48C63C811F08E5A7159C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.203.224.0/21 113.203.244.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:ef:d2:f2:2d:57:f0:f5:d4:29:2f:9a:0c:73:7f:16:00:de: 2a:92:48:3e:d2:df:06:13:87:a8:1c:02:4e:0b:bd:75:29:a0: a8:b0:f8:8a:57:76:f3:0d:3c:21:92:c9:10:61:8d:17:00:e2: fe:9f:c3:97:28:73:c8:44:e7:47:d2:a7:3b:8f:c8:9e:55:a5: b8:e5:a7:eb:d1:26:27:89:6f:82:a8:b0:8f:3f:d2:47:52:6f: c8:9f:71:60:c4:78:64:4b:b0:b1:43:19:91:26:54:36:a7:a1: 3b:b4:bd:51:d2:ad:7a:fc:30:e3:97:ea:bd:a5:28:da:7e:e7: a7:ce:dd:29:3f:a2:83:cd:10:a2:40:03:e5:fc:d7:a0:cb:7c: c8:d1:3a:54:4a:b1:7b:1e:82:36:3b:2d:60:f6:df:83:22:43: 30:c6:59:c0:80:e4:2d:ad:d9:0f:03:ab:51:19:9f:ea:aa:ec: 9d:32:74:c5:fb:45:89:ee:ca:d6:9c:6d:51:ae:7e:bf:55:56: 41:42:d5:01:86:ad:f7:82:24:f4:93:03:53:b3:99:a9:8f:11: b6:68:4c:bd:eb:bd:6e:b5:40:0c:3e:b6:1d:9b:77:21:ad:5d: f2:2c:a3:64:93:55:28:9c:49:77:24:c0:14:ff:ac:4e:e4:1c: 0b:e5:b3:20 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICKIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjUwNzE4MTEzMjA4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdhMzBiOC0yN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6qHmDbV/eocsO7LksBXd3ChlSilrJpy4bkG2WHHHO6MnZ76X2hpTW13hR52 cQ656YyuFRsd6BYkIQw3LfDGWcyzJwXr2QPME82U/Ti7vLtknRyO1Fc93qZrMoRW DBBRFng+egLS8d+6sn+W/fPZLz7dtZQYPhEkE2mlFAw3clM8IrA3vDH4JnC35zya iJzt2mOFD8y8+4R3/tCk5g2rW33svzzODzlPs3Zm0WMGlY6VCwkY8Knt3CczUe5e iX+3hWvwLq/mRPgr0fIc2JBJQztKDsKFlOIK/cDUbxHQSgDnKHwPiRYiU2jwyisc kZu/AO79vdyJm2mn8pn4HW6d8wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIB0JDxi YTkM/V6d55JbvTZL+uBoMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQUE5RUQ0OEM2 M0M4MTFGMDhFNUE3MTU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBANxy+ADBAFxy/QwDQYJKoZIhvcNAQELBQADggEBAG3v0vIt V/D11CkvmgxzfxYA3iqSSD7S3wYTh6gcAk4LvXUpoKiw+IpXdvMNPCGSyRBhjRcA 4v6fw5coc8hE50fSpzuPyJ5Vpbjlp+vRJieJb4KosI8/0kdSb8ifcWDEeGRLsLFD GZEmVDanoTu0vVHSrXr8MOOX6r2lKNp+56fO3Sk/ooPNEKJAA+X816DLfMjROlRK sXsegjY7LWD234MiQzDGWcCA5C2t2Q8Dq1EZn+qq7J0ydMX7RYnuytacbVGufr9V VkFC1QGGrfeCJPSTA1OzmamPEbZoTL3rvW61QAw+th2bdyGtXfIso2STVSicSXck wBT/rE7kHAvlsyA= -----END CERTIFICATE-----Generated at Sun Jul 20 14:41:19 2025 by rpki-client