$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/388A8C304FFE11EFA3C2A52BC4F9AE02.roa File: 388A8C304FFE11EFA3C2A52BC4F9AE02.roa (raw, json) Hash identifier: P22WyvH2zds7n02NyF3dr/DUy77tJWH9XtxkAKmqbmc= Subject key identifier: 44:2F:5E:3D:D9:0B:4D:F9:FC:47:AF:58:BE:16:7F:B7:57:8B:39:92 Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Certificate serial: 066E Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/388A8C304FFE11EFA3C2A52BC4F9AE02.roa Signing time: Wed 27 Aug 2025 01:06:07 +0000 ROA not before: Wed 27 Aug 2025 01:06:07 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45458 IP address blocks: 58.137.110.0/24 maxlen: 24 58.137.199.0/24 maxlen: 24 203.170.169.0/24 maxlen: 24 203.170.186.0/24 maxlen: 24 203.170.187.0/24 maxlen: 24 203.170.206.0/24 maxlen: 24 203.170.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1646 (0x66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Validity Not Before: Aug 27 01:06:07 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68ae59ff-1a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:61:db:56:7c:ee:37:1f:ca:52:6c:2e:22: 72:bd:31:0d:13:fe:29:ae:eb:74:cc:ae:f0:df:d6: 3d:e8:5c:c6:f7:e4:6c:88:d0:84:39:b8:22:63:f3: 37:76:01:c3:d7:33:55:54:17:c0:1e:ba:08:51:6c: bc:10:1b:89:32:45:d0:92:13:29:44:13:43:3c:6c: 17:d0:47:8e:87:d7:9d:e6:8c:cf:a5:fe:18:c5:6f: 98:19:c9:7a:b5:b9:15:23:5b:22:ed:d6:20:2e:eb: b9:c3:fc:7b:f9:c3:10:c3:83:23:0f:30:64:6d:db: b7:2a:4a:41:d0:20:05:9c:8e:d5:dd:4c:47:7d:77: 63:2a:3b:3b:8e:ce:2b:3a:50:1b:2c:d2:60:e8:9b: d2:55:cc:87:b2:93:5e:8d:42:d3:bb:c8:f9:ea:25: 0f:29:d0:db:0c:af:d8:6d:a4:ca:4e:f8:9a:ff:46: ed:40:28:c2:6e:bc:de:b3:f5:a9:ab:55:6d:02:6a: 44:3c:8b:a9:39:c1:72:76:cf:2d:57:c5:16:60:32: ab:ec:5d:b7:0f:86:a2:8d:d3:c7:23:d9:fd:b2:df: 0d:f5:97:dc:43:11:76:ae:a1:3b:d7:d5:60:4a:b4: 25:9e:ba:37:8b:12:d4:a7:9e:a3:79:5d:1e:9d:3e: 2e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2F:5E:3D:D9:0B:4D:F9:FC:47:AF:58:BE:16:7F:B7:57:8B:39:92 X509v3 Authority Key Identifier: keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/388A8C304FFE11EFA3C2A52BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.137.110.0/24 58.137.199.0/24 203.170.169.0/24 203.170.186.0/23 203.170.206.0/23 Signature Algorithm: sha256WithRSAEncryption 23:25:fa:a7:dc:b4:89:b6:34:2a:c8:9f:b9:da:26:4f:1a:5f: a5:96:1a:32:41:59:18:6e:5c:fd:2d:25:1a:03:73:35:cb:98: 71:09:75:1c:b0:6f:b5:85:43:3d:d8:6e:e6:66:80:0d:79:a1: 6f:95:ba:8b:b4:e9:c5:3e:13:77:52:38:74:a1:e5:4f:b6:40: 31:8a:61:c6:a6:65:f8:4f:75:ac:76:75:d9:2f:38:7d:5a:1e: bf:e3:d9:ce:10:42:85:2a:91:d2:35:fd:e3:ce:38:cc:c8:b7: 6d:b7:65:d8:0d:0a:0d:21:91:bc:71:ab:35:ce:ec:c0:65:47: d8:da:ff:8e:82:1a:f8:e7:61:21:0e:cd:18:71:6a:c8:74:ac: 97:48:1f:c5:e3:1c:6d:e4:95:af:b7:84:00:ee:67:c8:c6:d6: 64:c9:0b:09:1e:43:e8:ed:a3:ac:12:54:a1:01:6a:44:ee:f6: 5a:db:48:95:5c:b6:56:dd:73:e4:29:bb:8a:86:76:a9:58:de: 2a:0a:d1:0a:02:32:7d:3c:e4:78:d2:df:72:f1:ce:64:89:cf: 4f:47:27:6c:b4:e7:c1:c7:32:48:5a:3e:fa:cd:a6:ab:85:43: f7:1d:45:3e:e5:0b:ed:ec:c7:7f:16:47:ca:c2:87:d8:c0:b7: 4b:89:c9:11 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1 OTVFNjFBMTkwHhcNMjUwODI3MDEwNjA3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFlNTlmZi0xYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtg9h21Z87jcfylJsLiJyvTENE/4prut0zK7w39Y96FzG9+RsiNCEObgiY/M3 dgHD1zNVVBfAHroIUWy8EBuJMkXQkhMpRBNDPGwX0EeOh9ed5ozPpf4YxW+YGcl6 tbkVI1si7dYgLuu5w/x7+cMQw4MjDzBkbdu3KkpB0CAFnI7V3UxHfXdjKjs7js4r OlAbLNJg6JvSVcyHspNejULTu8j56iUPKdDbDK/YbaTKTvia/0btQCjCbrzes/Wp q1VtAmpEPIupOcFyds8tV8UWYDKr7F23D4aijdPHI9n9st8N9ZfcQxF2rqE719Vg SrQlnro3ixLUp56jeV0enT4uzQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEQvXj3Z C035/EevWL4Wf7dXizmSMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvMzg4QThDMzA0 RkZFMTFFRkEzQzJBNTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAA6iW4DBAA6iccDBADLqqkDBAHLqroDBAHLqs4wDQYJKoZI hvcNAQELBQADggEBACMl+qfctIm2NCrIn7naJk8aX6WWGjJBWRhuXP0tJRoDczXL mHEJdRywb7WFQz3YbuZmgA15oW+Vuou06cU+E3dSOHSh5U+2QDGKYcamZfhPdax2 ddkvOH1aHr/j2c4QQoUqkdI1/ePOOMzIt223ZdgNCg0hkbxxqzXO7MBlR9ja/46C GvjnYSEOzRhxash0rJdIH8XjHG3kla+3hADuZ8jG1mTJCwkeQ+jto6wSVKEBakTu 9lrbSJVctlbdc+Qpu4qGdqlY3ioK0QoCMn085HjS33LxzmSJz09HJ2y058HHMkha PvrNpquFQ/cdRT7lC+3sx38WR8rCh9jAt0uJyRE= -----END CERTIFICATE-----Generated at Mon Sep 8 02:17:48 2025 by rpki-client