$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C32AE2E21AB811F08F3C8B74C4F9AE02.roa File: C32AE2E21AB811F08F3C8B74C4F9AE02.roa (raw, json) Hash identifier: V3yTnUOCG7E6vMPM61XH4oxD09h5ZwPyMaQPkqtwh5s= Subject key identifier: FC:54:02:B7:DE:9D:05:F5:8E:49:9C:9D:B3:8C:39:56:46:60:96:F3 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 2835 Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C32AE2E21AB811F08F3C8B74C4F9AE02.roa Signing time: Fri 11 Jul 2025 11:02:03 +0000 ROA not before: Fri 11 Jul 2025 11:02:03 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 213441 IP address blocks: 115.167.3.0/24 maxlen: 24 175.110.99.0/24 maxlen: 24 223.29.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10293 (0x2835) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Jul 11 11:02:03 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6870ef2a-be8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:06:79:18:98:79:3f:79:f8:b6:1b:cb:e4: 47:f9:35:9f:fc:4c:b9:bc:7a:f3:b9:d8:cb:b0:8c: f8:ed:a6:a2:cb:5d:c8:32:8f:3b:a8:4f:0c:9b:b2: 43:25:2b:3a:6d:f6:bd:c0:7d:5c:11:fc:dd:16:65: 61:83:cb:e6:96:60:00:3c:e3:57:fb:c0:f9:08:32: 13:79:fb:49:ce:1b:6b:05:98:4d:5a:e5:b7:f8:72: fb:68:e3:dc:75:e0:65:f4:77:ef:34:ba:98:fa:81: 42:6b:6b:14:7e:77:31:fa:e9:5e:41:62:b5:a5:b7: de:bf:4d:53:51:23:43:49:5e:43:b2:3d:31:7d:7d: cd:ae:03:bf:bb:eb:b2:e0:6c:35:0d:24:31:37:35: f9:08:cc:75:2a:cb:e1:71:5f:24:8e:83:75:5e:97: 62:8b:dd:b4:81:d8:f0:64:10:57:a7:08:a8:31:4b: 24:b4:3f:60:2b:63:8a:62:70:24:10:c3:d2:e6:b5: 54:86:86:65:c0:4b:25:12:a0:2c:c0:89:3e:3a:b2: 10:a3:2e:c4:05:3b:43:c3:0e:c9:45:95:80:57:b3: bb:2a:90:a1:99:80:1d:81:55:87:23:1c:8f:08:0b: 25:48:ce:2b:60:3b:2c:90:84:5a:62:4a:ef:9b:8f: 09:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:54:02:B7:DE:9D:05:F5:8E:49:9C:9D:B3:8C:39:56:46:60:96:F3 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C32AE2E21AB811F08F3C8B74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.167.3.0/24 175.110.99.0/24 223.29.226.0/24 Signature Algorithm: sha256WithRSAEncryption 15:ed:61:9b:bd:53:6c:0d:0a:3f:f2:5e:46:0f:4b:25:62:d1: c0:b4:43:92:e2:90:1b:37:63:0d:92:eb:b0:27:64:03:97:35: 5b:e4:72:86:72:78:4d:f8:b2:09:1d:2b:9b:ac:a1:f4:04:ce: e1:43:07:c3:63:e1:32:63:a8:87:d5:ba:f2:fb:7a:66:0f:db: 77:48:90:bb:97:06:0b:4f:14:5d:5f:7c:ac:cc:93:89:18:3c: 7f:60:31:b8:e0:c7:e1:fa:8e:89:c5:df:9e:f2:a2:d3:2c:f9: c1:10:3a:64:cc:a1:c4:aa:41:99:8a:e1:69:60:e5:e5:da:79: 42:c5:30:d4:17:0c:4d:cc:79:f1:90:5c:d8:f1:89:e2:e4:b2: 38:2b:e1:81:7e:3f:36:4d:88:38:f9:91:b4:96:5e:00:8f:a4: b9:0d:21:2a:bb:88:d4:3c:36:66:49:f0:9b:28:c4:24:12:4e: e5:ef:5f:65:c8:18:f7:07:bc:a8:a3:75:19:26:c0:34:dd:2b: f1:6a:65:d9:95:88:5a:d1:f5:2d:cd:8d:cc:e7:6a:02:6c:ee: c0:14:87:82:9a:22:99:4d:d1:fe:7b:51:bd:42:d8:8f:5d:c5: 7d:4d:14:81:5d:9c:2b:6b:4b:e0:b6:fd:ad:6d:20:0e:ae:3e: bc:12:86:8a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICKDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjUwNzExMTEwMjAzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcwZWYyYS1iZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfMGeRiYeT95+LYby+RH+TWf/Ey5vHrzudjLsIz47aaiy13IMo87qE8Mm7JD JSs6bfa9wH1cEfzdFmVhg8vmlmAAPONX+8D5CDITeftJzhtrBZhNWuW3+HL7aOPc deBl9HfvNLqY+oFCa2sUfncx+uleQWK1pbfev01TUSNDSV5Dsj0xfX3NrgO/u+uy 4Gw1DSQxNzX5CMx1KsvhcV8kjoN1Xpdii920gdjwZBBXpwioMUsktD9gK2OKYnAk EMPS5rVUhoZlwEslEqAswIk+OrIQoy7EBTtDww7JRZWAV7O7KpChmYAdgVWHIxyP CAslSM4rYDsskIRaYkrvm48JOwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPxUArfe nQX1jkmcnbOMOVZGYJbzMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQzMyQUUyRTIx QUI4MTFGMDhGM0M4Qjc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABzpwMDBACvbmMDBADfHeIwDQYJKoZIhvcNAQELBQADggEB ABXtYZu9U2wNCj/yXkYPSyVi0cC0Q5LikBs3Yw2S67AnZAOXNVvkcoZyeE34sgkd K5usofQEzuFDB8Nj4TJjqIfVuvL7emYP23dIkLuXBgtPFF1ffKzMk4kYPH9gMbjg x+H6jonF357yotMs+cEQOmTMocSqQZmK4Wlg5eXaeULFMNQXDE3MefGQXNjxieLk sjgr4YF+PzZNiDj5kbSWXgCPpLkNISq7iNQ8NmZJ8JsoxCQSTuXvX2XIGPcHvKij dRkmwDTdK/FqZdmViFrR9S3NjcznagJs7sAUh4KaIplN0f57Ub1C2I9dxX1NFIFd nCtrS+C2/a1tIA6uPrwShoo= -----END CERTIFICATE-----Generated at Mon Jul 21 07:32:19 2025 by rpki-client