$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2DDD8D12E0D111ECAF88A30DC4F9AE02.roa File: 2DDD8D12E0D111ECAF88A30DC4F9AE02.roa (raw, json) Hash identifier: jXax/rT39jsQOTQeSivQywIYuA12bsvwhwqXVnfiZ40= Subject key identifier: 55:C0:67:F5:5D:A8:84:EA:2C:0D:82:69:85:1F:DE:0B:09:97:B0:52 Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Certificate serial: 066A Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2DDD8D12E0D111ECAF88A30DC4F9AE02.roa Signing time: Wed 27 Aug 2025 01:06:03 +0000 ROA not before: Wed 27 Aug 2025 01:06:03 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38815 IP address blocks: 202.183.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Validity Not Before: Aug 27 01:06:03 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68ae59fb-8c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:52:76:e6:60:0c:08:73:be:1a:99:ce:38:e6: 34:dc:a8:ea:35:13:82:9f:61:cd:4b:ea:a7:f6:f8: ae:ff:38:ec:a0:51:37:5e:b8:fd:02:fd:a4:e4:9f: 97:0f:7f:3b:2c:39:0f:37:90:25:22:27:fb:fd:b1: 07:10:08:b3:fa:6a:e4:a7:5e:e9:00:b1:d9:40:bf: 79:0d:8f:e6:dc:70:36:82:b8:16:79:2a:62:c2:00: 8a:54:14:48:54:75:f4:6e:50:06:99:73:ac:91:3e: b8:56:74:1c:aa:95:8a:12:6c:85:a4:95:e7:43:05: d1:25:40:01:df:b3:f8:f0:01:0f:48:e6:4e:6a:1e: 1c:44:41:a9:7f:27:54:e2:4e:a4:d7:5f:24:ae:ac: 84:98:e0:83:e4:e0:93:48:9a:96:76:f4:66:75:09: aa:b5:c6:75:f3:07:96:3e:a6:fd:1c:f6:8c:2b:a1: 93:ed:de:cf:09:d0:ed:60:67:20:cf:a6:c0:14:2f: bf:03:4a:a4:08:c2:16:16:01:06:2e:48:17:eb:3d: 48:62:74:a5:9c:ba:8d:07:4b:26:92:d9:96:85:0e: 6e:6d:18:6c:95:41:88:bf:02:a6:99:e1:20:1b:aa: ef:f2:03:9f:de:9e:76:70:5c:4a:68:8a:4f:7a:63: b4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C0:67:F5:5D:A8:84:EA:2C:0D:82:69:85:1F:DE:0B:09:97:B0:52 X509v3 Authority Key Identifier: keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/2DDD8D12E0D111ECAF88A30DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.183.202.0/24 Signature Algorithm: sha256WithRSAEncryption 93:3d:fe:f1:39:be:80:23:a6:09:ad:ee:fa:c4:03:76:e9:81: af:40:47:1d:24:d8:d0:07:d1:c3:7b:2d:44:45:d8:4c:42:1c: 1b:bc:cd:c2:61:f7:1e:40:17:11:d5:3c:45:e6:c0:51:6e:bd: 54:3c:08:b1:43:e6:eb:b3:d0:da:64:36:95:24:41:a6:25:b1: 6f:6d:ba:72:e4:3c:8f:43:0d:cf:ac:8f:b7:92:90:b5:e3:8e: 46:f6:65:26:d0:94:4b:58:1d:3f:48:03:1e:22:4c:b4:4e:54: fe:e3:59:18:8d:04:a6:1b:d5:3b:c7:38:e0:af:25:28:a3:b2: 4d:e0:f7:1e:c3:18:2e:db:7b:0d:58:e3:b3:c1:44:9a:63:9d: 46:cb:61:22:db:a9:72:76:7b:40:68:0c:b0:25:ed:2c:bd:59: ba:cb:9a:a5:97:e7:3e:2b:53:de:05:e5:2b:49:c1:37:fa:f3: 0c:63:11:ea:36:45:c5:90:ba:2f:55:59:db:2f:9e:c4:5d:8e: c8:00:d0:11:67:f5:7b:57:33:4b:d4:d2:31:ca:58:3e:5d:e6: c6:a9:22:bc:e3:7c:85:01:9e:f1:d8:80:35:7a:fa:6c:ac:95: 5e:1c:aa:81:40:27:40:77:96:5e:6e:aa:8d:d6:fe:82:4d:0b: d0:63:52:2e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1 OTVFNjFBMTkwHhcNMjUwODI3MDEwNjAzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFlNTlmYi04Yzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+FJ25mAMCHO+GpnOOOY03KjqNROCn2HNS+qn9viu/zjsoFE3Xrj9Av2k5J+X D387LDkPN5AlIif7/bEHEAiz+mrkp17pALHZQL95DY/m3HA2grgWeSpiwgCKVBRI VHX0blAGmXOskT64VnQcqpWKEmyFpJXnQwXRJUAB37P48AEPSOZOah4cREGpfydU 4k6k118krqyEmOCD5OCTSJqWdvRmdQmqtcZ18weWPqb9HPaMK6GT7d7PCdDtYGcg z6bAFC+/A0qkCMIWFgEGLkgX6z1IYnSlnLqNB0smktmWhQ5ubRhslUGIvwKmmeEg G6rv8gOf3p52cFxKaIpPemO0OQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFXAZ/Vd qITqLA2CaYUf3gsJl7BSMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvMkRERDhEMTJF MEQxMTFFQ0FGODhBMzBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKt8owDQYJKoZIhvcNAQELBQADggEBAJM9/vE5voAjpgmt 7vrEA3bpga9ARx0k2NAH0cN7LURF2ExCHBu8zcJh9x5AFxHVPEXmwFFuvVQ8CLFD 5uuz0NpkNpUkQaYlsW9tunLkPI9DDc+sj7eSkLXjjkb2ZSbQlEtYHT9IAx4iTLRO VP7jWRiNBKYb1TvHOOCvJSijsk3g9x7DGC7bew1Y47PBRJpjnUbLYSLbqXJ2e0Bo DLAl7Sy9WbrLmqWX5z4rU94F5StJwTf68wxjEeo2RcWQui9VWdsvnsRdjsgA0BFn 9XtXM0vU0jHKWD5d5sapIrzjfIUBnvHYgDV6+myslV4cqoFAJ0B3ll5uqo3W/oJN C9BjUi4= -----END CERTIFICATE-----Generated at Mon Sep 8 06:16:19 2025 by rpki-client