$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2D3887CCE0D111ECAF88A30DC4F9AE02.roa File: 2D3887CCE0D111ECAF88A30DC4F9AE02.roa (raw, json) Hash identifier: 5ku3hKR38WBW6uHq7LQiE5lMaSBMG6T4cErrtzA8G+w= Subject key identifier: 20:BA:F2:2A:DC:02:37:EC:DB:10:1C:89:C4:1B:2E:DB:E5:9E:17:CB Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Certificate serial: 0661 Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2D3887CCE0D111ECAF88A30DC4F9AE02.roa Signing time: Wed 27 Aug 2025 01:05:54 +0000 ROA not before: Wed 27 Aug 2025 01:05:54 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 24237 IP address blocks: 202.183.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Validity Not Before: Aug 27 01:05:54 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68ae59f2-063a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:bf:ec:f9:84:bb:ec:e0:3a:5a:c5:8d:34: 14:80:72:b4:51:02:da:7d:9b:ef:f3:bb:ad:53:bf: 32:6f:c0:cd:f4:3e:fa:8c:20:8e:2a:ee:3e:43:17: 33:15:98:e3:a8:63:27:e6:66:30:25:d7:3d:36:14: d7:56:1b:ad:8a:c3:da:c5:90:d1:84:90:ce:45:8f: 7d:c2:47:5c:6a:4c:84:6f:c5:97:c3:2e:c3:0a:24: f1:8e:47:fc:0c:5f:7c:74:8e:31:ff:0b:a0:9d:1b: ba:3f:7f:e3:37:1c:a3:89:d4:6d:b4:e3:82:5a:0d: 7e:70:7f:02:dc:63:da:70:d1:26:03:c2:87:0f:b9: 82:3f:9e:32:8e:30:10:e3:88:e2:27:d7:ce:5c:ad: 22:ba:55:ab:7b:29:01:f6:49:77:e4:ed:e6:3e:5f: 5f:98:16:a1:d5:77:87:33:a5:b3:99:65:15:54:0f: ce:78:88:dd:83:a2:b7:86:f9:9c:2e:36:82:1c:32: 38:5a:ef:5f:ab:0c:9e:38:e2:ac:5e:ef:0d:87:52: 6c:f7:c3:4e:96:78:66:31:13:7d:31:b4:5d:d0:7f: 74:5e:75:ef:80:48:6b:81:10:de:25:1b:c9:cd:9b: 52:9b:73:fa:a6:fe:f4:62:a6:46:1b:70:96:c9:e3: e3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BA:F2:2A:DC:02:37:EC:DB:10:1C:89:C4:1B:2E:DB:E5:9E:17:CB X509v3 Authority Key Identifier: keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2D3887CCE0D111ECAF88A30DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.183.196.0/24 Signature Algorithm: sha256WithRSAEncryption 71:5e:a9:1f:6d:2d:20:7b:c8:e9:2e:85:f4:48:d9:78:a4:b5: f7:da:16:ee:aa:d6:75:1b:f2:ad:6e:a5:ab:72:fa:e7:04:77: 3b:97:89:bd:f4:a4:56:3f:b7:b1:a9:0f:b8:33:82:34:c6:eb: a6:ef:80:5c:77:0a:c4:b5:ee:75:fb:13:05:ad:8a:b1:74:15: da:86:77:39:41:c8:17:28:ca:7d:28:0a:56:15:cf:11:40:42: c0:e3:7d:75:df:6f:6a:81:f1:1b:e1:bd:31:74:61:30:d8:13: c5:95:f9:fc:0b:40:57:a6:18:70:5e:fa:ef:e6:f5:9b:ad:48: 0b:90:09:79:37:56:aa:16:5a:1f:15:4c:0d:c9:00:0b:09:9b: 2c:4d:4d:11:fb:87:c8:74:cc:87:be:ee:a6:16:b3:b4:d5:de: 2c:92:af:6b:e1:1c:d6:51:91:88:3f:4c:84:74:19:bf:cc:35: 13:8d:dd:8d:e5:f4:44:f6:8e:ba:83:e5:1e:6d:79:52:2f:a3: d3:8f:82:33:9c:4e:2f:8a:ad:15:12:04:57:5b:04:55:97:69: 94:4d:41:60:b5:7a:e1:e1:b9:c0:8a:b7:32:56:b2:37:2e:a1: a5:18:8e:42:c7:f5:d7:91:dd:49:a5:ab:d0:9b:64:f6:dd:11: 88:9c:a7:11 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1 OTVFNjFBMTkwHhcNMjUwODI3MDEwNTU0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFlNTlmMi0wNjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaC/7PmEu+zgOlrFjTQUgHK0UQLafZvv87utU78yb8DN9D76jCCOKu4+Qxcz FZjjqGMn5mYwJdc9NhTXVhutisPaxZDRhJDORY99wkdcakyEb8WXwy7DCiTxjkf8 DF98dI4x/wugnRu6P3/jNxyjidRttOOCWg1+cH8C3GPacNEmA8KHD7mCP54yjjAQ 44jiJ9fOXK0iulWreykB9kl35O3mPl9fmBah1XeHM6WzmWUVVA/OeIjdg6K3hvmc LjaCHDI4Wu9fqwyeOOKsXu8Nh1Js98NOlnhmMRN9MbRd0H90XnXvgEhrgRDeJRvJ zZtSm3P6pv70YqZGG3CWyePjiQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCC68irc Ajfs2xAcicQbLtvlnhfLMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvMkQzODg3Q0NF MEQxMTFFQ0FGODhBMzBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKt8QwDQYJKoZIhvcNAQELBQADggEBAHFeqR9tLSB7yOku hfRI2XiktffaFu6q1nUb8q1upaty+ucEdzuXib30pFY/t7GpD7gzgjTG66bvgFx3 CsS17nX7EwWtirF0FdqGdzlByBcoyn0oClYVzxFAQsDjfXXfb2qB8RvhvTF0YTDY E8WV+fwLQFemGHBe+u/m9ZutSAuQCXk3VqoWWh8VTA3JAAsJmyxNTRH7h8h0zIe+ 7qYWs7TV3iySr2vhHNZRkYg/TIR0Gb/MNRON3Y3l9ET2jrqD5R5teVIvo9OPgjOc Ti+KrRUSBFdbBFWXaZRNQWC1euHhucCKtzJWsjcuoaUYjkLH9deR3Umlq9CbZPbd EYicpxE= -----END CERTIFICATE-----Generated at Mon Sep 8 06:16:21 2025 by rpki-client