$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BB4F8D0CE04611EC8B00CD1BC4F9AE02.roa File: BB4F8D0CE04611EC8B00CD1BC4F9AE02.roa (raw, json) Hash identifier: oOyiBQl9yrjhgatdCACDiRFaW/ACtLloENDWgx118Vc= Subject key identifier: D1:1B:65:84:51:87:7D:C8:48:AA:7F:82:C5:86:21:78:29:6C:65:D4 Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Certificate serial: 064C Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BB4F8D0CE04611EC8B00CD1BC4F9AE02.roa Signing time: Wed 27 Aug 2025 01:05:37 +0000 ROA not before: Wed 27 Aug 2025 01:05:37 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 134682 IP address blocks: 203.146.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1612 (0x64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Validity Not Before: Aug 27 01:05:37 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68ae59e1-af95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e5:75:de:9f:1d:0c:8b:c9:88:b5:1c:ae:0e: 26:2e:3c:66:d0:4d:88:ea:42:83:7b:d3:74:0f:4b: ac:68:43:f6:9c:84:8c:ae:de:dd:0f:a7:c4:f2:c0: 90:a0:a3:e3:04:f9:c9:6b:2a:39:0c:6a:a3:c5:30: 72:bf:1c:e1:d0:83:48:bf:6a:9f:9a:14:3a:02:0a: 03:4a:95:27:d6:50:82:97:d2:1a:04:1c:d5:19:a9: b8:fe:89:1f:f7:61:1b:53:77:a4:37:9e:39:e1:ab: 21:fc:fa:cf:41:dc:11:c4:8e:53:3a:6e:43:ca:8f: ab:d1:03:2d:5b:91:ff:e7:b9:16:89:15:8c:a0:8b: 16:c8:e6:c1:97:a6:22:69:42:e9:24:04:db:64:fa: cf:9b:bf:92:1a:51:ad:ce:c7:77:3e:12:c4:6b:61: ad:ae:04:03:f1:07:15:2c:c0:21:e2:9d:e6:03:9e: 36:f9:b7:c4:9d:3f:e7:09:4a:e9:fc:a6:60:54:e6: 21:5b:52:1a:84:55:15:16:0a:a4:54:7f:38:01:d3: 31:cd:ba:99:4d:af:46:32:8d:7f:86:b3:ce:b4:e6: b1:c3:70:96:bc:00:1f:31:e0:22:85:03:cb:9d:c2: 55:1d:d5:d7:2f:c7:33:a6:40:44:56:b3:1a:6b:31: 0c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1B:65:84:51:87:7D:C8:48:AA:7F:82:C5:86:21:78:29:6C:65:D4 X509v3 Authority Key Identifier: keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/BB4F8D0CE04611EC8B00CD1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.146.104.0/24 Signature Algorithm: sha256WithRSAEncryption a7:ac:8d:b3:f8:80:b2:dc:4b:b6:b6:b6:c3:b6:14:7c:ef:a6: fe:6a:e4:cc:6b:1f:12:e7:47:bd:57:03:5f:a0:5c:f9:8d:70: 89:48:ce:30:0f:e0:fb:0c:b7:eb:42:da:90:8c:15:d2:bf:71: 48:5d:4a:5b:e9:c7:88:97:27:3d:bf:a4:ca:cc:49:72:78:31: 2f:e9:ab:fc:fc:78:9e:ca:5b:4c:bf:e4:a0:15:79:d6:05:d6: a6:0c:ab:fd:17:e9:7f:48:97:81:98:47:5b:e6:a1:cd:ba:9e: 9a:e0:45:ec:a3:ef:50:ce:5d:3c:50:e0:92:66:60:0f:a9:be: 24:3a:16:46:4f:8b:4d:2c:f9:47:f3:3a:45:52:6d:cc:58:ca: c1:b4:cc:0a:e5:c6:e2:47:a8:37:74:70:23:16:7f:41:70:f3: 41:90:0b:d9:f2:1d:e2:4e:18:93:ac:dd:6d:b7:4c:2f:92:e3: 0c:49:4d:b1:91:77:60:ec:a0:b3:32:18:87:a1:b9:bd:23:0c: 55:a0:f9:bf:58:94:72:d7:3c:fb:0b:ba:f0:4b:b9:3d:e8:c2: 78:94:1a:19:51:8c:57:a3:df:de:74:ce:ff:e7:2d:72:4b:bf: a3:30:4f:8d:73:7e:9b:10:d9:e7:7c:d3:11:68:e4:31:79:30: 79:74:30:99 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1 OTVFNjFBMTkwHhcNMjUwODI3MDEwNTM3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFlNTllMS1hZjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uV13p8dDIvJiLUcrg4mLjxm0E2I6kKDe9N0D0usaEP2nISMrt7dD6fE8sCQ oKPjBPnJayo5DGqjxTByvxzh0INIv2qfmhQ6AgoDSpUn1lCCl9IaBBzVGam4/okf 92EbU3ekN5454ash/PrPQdwRxI5TOm5Dyo+r0QMtW5H/57kWiRWMoIsWyObBl6Yi aULpJATbZPrPm7+SGlGtzsd3PhLEa2GtrgQD8QcVLMAh4p3mA542+bfEnT/nCUrp /KZgVOYhW1IahFUVFgqkVH84AdMxzbqZTa9GMo1/hrPOtOaxw3CWvAAfMeAihQPL ncJVHdXXL8czpkBEVrMaazEM/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNEbZYRR h33ISKp/gsWGIXgpbGXUMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvQkI0RjhEMENF MDQ2MTFFQzhCMDBDRDFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLkmgwDQYJKoZIhvcNAQELBQADggEBAKesjbP4gLLcS7a2 tsO2FHzvpv5q5MxrHxLnR71XA1+gXPmNcIlIzjAP4PsMt+tC2pCMFdK/cUhdSlvp x4iXJz2/pMrMSXJ4MS/pq/z8eJ7KW0y/5KAVedYF1qYMq/0X6X9Il4GYR1vmoc26 nprgReyj71DOXTxQ4JJmYA+pviQ6FkZPi00s+UfzOkVSbcxYysG0zArlxuJHqDd0 cCMWf0Fw80GQC9nyHeJOGJOs3W23TC+S4wxJTbGRd2DsoLMyGIehub0jDFWg+b9Y lHLXPPsLuvBLuT3owniUGhlRjFej3950zv/nLXJLv6MwT41zfpsQ2ed80xFo5DF5 MHl0MJk= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:35 2025 by rpki-client