$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/42724A42D87811E98F4DC832C4F9AE02.roa File: 42724A42D87811E98F4DC832C4F9AE02.roa (raw, json) Hash identifier: SILTusquGoHpNsMBJynofIsPOUuJK+mXoArSIu6+szM= Subject key identifier: 0C:88:3B:0B:38:9E:0F:47:33:C1:41:A9:CB:AF:CD:95:31:DB:5F:6C Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 2799 Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/42724A42D87811E98F4DC832C4F9AE02.roa Signing time: Tue 08 Jul 2025 15:52:46 +0000 ROA not before: Tue 08 Jul 2025 15:52:46 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45667 IP address blocks: 202.60.206.0/24 maxlen: 24 203.159.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10137 (0x2799) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: Jul 8 15:52:46 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686d3ece-06d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3d:30:78:0d:e8:c3:95:55:ee:b4:e6:9e:29: 89:91:14:8d:5b:54:0e:46:51:23:af:c5:95:83:70: 51:a0:b4:6a:42:3f:15:d4:af:4b:9f:5c:27:70:17: d9:e5:2e:73:a5:ea:32:5a:ff:c0:98:00:6c:5f:e3: d1:65:61:6d:fe:74:15:5f:de:da:5b:76:57:f5:91: 84:ee:c9:ea:54:6e:bc:60:48:42:8d:60:e1:d9:2e: f1:46:9f:50:e0:c8:c0:8e:14:56:4e:8b:90:d0:45: 71:6d:d2:f5:70:a2:12:b5:3d:8a:b4:3a:6e:a1:b8: cb:1d:2a:7c:ab:52:04:d7:c4:de:b4:17:18:16:98: d8:e8:2e:53:1d:5e:9a:ee:93:60:4c:90:78:b0:71: f4:6b:b1:e1:f1:13:cb:0c:60:04:b5:38:62:c7:10: c3:f9:ca:1e:0f:6c:62:9c:f6:d5:3e:b2:09:3c:e7: 3f:8e:10:a8:b6:0d:24:ac:c3:f0:ee:1b:50:27:2d: 75:a4:9e:b3:fe:b5:e7:55:a0:be:0b:be:42:2c:5f: 33:bb:cf:7c:16:f2:ca:6c:41:ef:e9:13:59:85:4f: 5b:62:32:1f:0d:bc:38:5a:ea:a7:59:ba:95:9d:74: f1:68:af:e7:8a:04:db:32:c3:99:9f:76:c3:b4:d3: 72:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:88:3B:0B:38:9E:0F:47:33:C1:41:A9:CB:AF:CD:95:31:DB:5F:6C X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/42724A42D87811E98F4DC832C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.60.206.0/24 203.159.98.0/24 Signature Algorithm: sha256WithRSAEncryption 80:01:20:ae:d7:08:44:ca:75:44:d6:78:ec:5f:74:74:6e:e9: 97:f2:c5:87:8f:d8:e7:75:26:ba:aa:aa:9a:db:35:78:47:67: a3:36:de:0a:cb:95:7e:81:d2:e8:9f:03:48:01:50:38:6d:4d: a5:44:ab:f5:0a:d2:04:2e:b6:84:68:23:97:3e:a7:3e:78:9f: 12:83:78:17:a7:b8:33:bc:95:64:b0:14:8c:33:cb:e4:2f:86: 2c:3c:79:f6:63:bb:45:46:a0:d2:02:ce:b1:dc:fb:09:11:32: 57:01:9f:18:1e:65:78:c4:76:c2:c8:63:99:4c:e4:dd:70:a1: 95:59:8c:83:23:ea:d9:f7:fe:5b:9c:f1:b6:1e:3b:52:2c:58: 70:eb:e2:2a:40:0e:e6:c3:b5:72:9d:71:a9:3f:69:e8:05:d0: e6:87:80:88:6a:d5:78:2a:b6:ea:e4:06:6c:e7:5d:e3:a5:7f: 38:95:8a:2d:bb:bb:85:d4:bf:fe:ea:f2:5b:fe:d2:49:42:3a: f8:05:3d:a1:2e:f6:3f:bb:1d:9c:76:a7:f7:57:b8:72:4a:6f: d1:e5:76:d5:19:46:f2:82:f9:78:81:c0:13:eb:93:cc:93:55: c0:4e:8f:1b:e9:1a:3c:67:4c:1f:6f:7d:f8:96:bb:b8:a7:0e: e2:f1:85:3a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICJ5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjUwNzA4MTU1MjQ2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZkM2VjZS0wNmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmD0weA3ow5VV7rTmnimJkRSNW1QORlEjr8WVg3BRoLRqQj8V1K9Ln1wncBfZ 5S5zpeoyWv/AmABsX+PRZWFt/nQVX97aW3ZX9ZGE7snqVG68YEhCjWDh2S7xRp9Q 4MjAjhRWTouQ0EVxbdL1cKIStT2KtDpuobjLHSp8q1IE18TetBcYFpjY6C5THV6a 7pNgTJB4sHH0a7Hh8RPLDGAEtThixxDD+coeD2xinPbVPrIJPOc/jhCotg0krMPw 7htQJy11pJ6z/rXnVaC+C75CLF8zu898FvLKbEHv6RNZhU9bYjIfDbw4WuqnWbqV nXTxaK/nigTbMsOZn3bDtNNyFQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAyIOws4 ng9HM8FBqcuvzZUx219sMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFFNjAvRjE5OTY3MTJDN0NGMTFFNEIxM0JFMTIxQzRGOUFFMDIvNDI3MjRBNDJE ODc4MTFFOThGNERDODMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKPM4DBADLn2IwDQYJKoZIhvcNAQELBQADggEBAIABIK7X CETKdUTWeOxfdHRu6ZfyxYeP2Od1JrqqqprbNXhHZ6M23grLlX6B0uifA0gBUDht TaVEq/UK0gQutoRoI5c+pz54nxKDeBenuDO8lWSwFIwzy+Qvhiw8efZju0VGoNIC zrHc+wkRMlcBnxgeZXjEdsLIY5lM5N1woZVZjIMj6tn3/luc8bYeO1IsWHDr4ipA DubDtXKdcak/aegF0OaHgIhq1XgqturkBmznXeOlfziVii27u4XUv/7q8lv+0klC OvgFPaEu9j+7HZx2p/dXuHJKb9HldtUZRvKC+XiBwBPrk8yTVcBOjxvpGjxnTB9v ffiWu7inDuLxhTo= -----END CERTIFICATE-----Generated at Sun Jul 20 11:01:55 2025 by rpki-client