$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/CF1EEA5232E311EFA2DDE95DC4F9AE02.roa File: CF1EEA5232E311EFA2DDE95DC4F9AE02.roa (raw, json) Hash identifier: ULVluCFhovh+irpQyv33O1sIga2ayiZniHW648kH7AA= Subject key identifier: 18:7E:C6:95:A3:39:C4:87:BD:A2:89:2C:D3:AA:7C:A1:4C:57:61:88 Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Certificate serial: 0677 Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/CF1EEA5232E311EFA2DDE95DC4F9AE02.roa Signing time: Wed 27 Aug 2025 01:06:15 +0000 ROA not before: Wed 27 Aug 2025 01:06:15 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55927 IP address blocks: 27.254.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Validity Not Before: Aug 27 01:06:15 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68ae5a07-87bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:54:05:48:58:93:16:86:f9:fc:61:1d:63:48: d9:fc:aa:58:f8:98:d7:2a:0d:13:18:c9:ed:ee:06: 3f:3a:a9:3c:45:50:d5:5a:06:32:03:6e:c8:ab:ee: 4e:4e:87:34:9a:c1:45:08:1b:98:40:59:2d:13:a6: f0:e7:b7:e6:fa:c3:0d:7a:c2:ca:ca:c1:a7:0c:83: 13:86:45:61:44:bc:b9:2b:d7:56:c4:9e:9b:16:d3: 2a:04:42:7e:43:f4:5c:4d:dc:bb:8a:99:09:24:c3: 89:93:7e:87:c3:00:4e:3b:06:82:b0:d6:1a:31:aa: 7d:9e:68:4f:53:12:b3:6b:c2:32:3f:bd:80:d9:1d: 36:98:b5:b5:2f:ff:c0:5d:e3:97:bb:36:52:fd:80: af:d8:20:3f:04:d3:46:a8:3e:38:23:15:2c:d8:7b: 8e:6e:49:fa:f5:4c:dc:16:4f:ce:c8:a5:4a:1a:6d: d4:c8:a8:f1:f8:80:81:83:36:47:ec:ee:fc:59:21: db:d6:73:ed:b7:13:fb:6a:d6:a9:1d:45:9f:32:a4: 8d:b9:77:1b:2d:59:8b:c8:cf:93:74:c6:66:c7:be: 1c:fb:e3:2c:07:05:94:a4:fe:bc:22:60:95:69:5b: 38:61:42:e7:75:28:9d:03:b8:54:1c:9f:a5:af:c1: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7E:C6:95:A3:39:C4:87:BD:A2:89:2C:D3:AA:7C:A1:4C:57:61:88 X509v3 Authority Key Identifier: keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/CF1EEA5232E311EFA2DDE95DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.254.221.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:5c:62:9a:45:76:c7:5e:97:d8:df:3b:2d:eb:98:14:05:38: 4e:4b:98:4a:3d:c5:5b:93:fe:fc:d4:7e:4a:82:12:70:05:e4: f8:b2:3d:a1:32:3e:4a:6a:9d:ef:fe:28:2e:6a:eb:f5:26:37: b7:ea:0e:18:0d:64:2a:c3:70:41:a6:5d:22:6b:1b:4c:09:2e: a9:c8:b5:2e:f2:60:0a:e0:c6:11:94:14:27:ef:92:94:84:ac: d7:5b:43:44:f6:c6:6e:5b:7e:88:18:31:a7:19:cf:fd:d2:fc: b1:90:25:c9:22:e9:0e:bb:7e:f5:75:fd:1e:14:24:65:f8:23: 56:1c:b4:7d:7c:26:f9:17:69:e6:3b:1c:0a:9a:cf:05:c9:f4: a8:f0:75:0d:10:b3:5b:da:6f:86:e5:a3:b8:a0:83:2a:1a:8c: 21:bb:95:f1:86:b7:96:0c:36:8b:b2:91:8a:c7:6b:bb:d5:c6: 4e:d5:fb:aa:ce:02:78:e1:c7:a8:47:78:ea:2f:25:ea:96:53: 7e:c7:d6:b1:cc:4b:d5:56:05:52:2b:f0:d4:36:64:94:2c:68: bc:65:0a:1f:00:28:41:e1:ec:65:a4:51:74:b9:cf:d2:c7:8d: 99:7f:f2:03:dc:eb:a2:e4:a1:9c:17:11:8a:6c:18:89:13:b5: 0d:67:b1:82 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1 OTVFNjFBMTkwHhcNMjUwODI3MDEwNjE1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFlNWEwNy04N2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4VQFSFiTFob5/GEdY0jZ/KpY+JjXKg0TGMnt7gY/Oqk8RVDVWgYyA27Iq+5O Toc0msFFCBuYQFktE6bw57fm+sMNesLKysGnDIMThkVhRLy5K9dWxJ6bFtMqBEJ+ Q/RcTdy7ipkJJMOJk36HwwBOOwaCsNYaMap9nmhPUxKza8IyP72A2R02mLW1L//A XeOXuzZS/YCv2CA/BNNGqD44IxUs2HuObkn69UzcFk/OyKVKGm3UyKjx+ICBgzZH 7O78WSHb1nPttxP7atapHUWfMqSNuXcbLVmLyM+TdMZmx74c++MsBwWUpP68ImCV aVs4YULndSidA7hUHJ+lr8E6PwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBh+xpWj OcSHvaKJLNOqfKFMV2GIMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvQ0YxRUVBNTIz MkUzMTFFRkEyRERFOTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAb/t0wDQYJKoZIhvcNAQELBQADggEBAFxcYppFdsdel9jf Oy3rmBQFOE5LmEo9xVuT/vzUfkqCEnAF5PiyPaEyPkpqne/+KC5q6/UmN7fqDhgN ZCrDcEGmXSJrG0wJLqnItS7yYArgxhGUFCfvkpSErNdbQ0T2xm5bfogYMacZz/3S /LGQJcki6Q67fvV1/R4UJGX4I1YctH18JvkXaeY7HAqazwXJ9KjwdQ0Qs1vab4bl o7iggyoajCG7lfGGt5YMNouykYrHa7vVxk7V+6rOAnjhx6hHeOovJeqWU37H1rHM S9VWBVIr8NQ2ZJQsaLxlCh8AKEHh7GWkUXS5z9LHjZl/8gPc66LkoZwXEYpsGIkT tQ1nsYI= -----END CERTIFICATE-----Generated at Mon Sep 8 06:17:33 2025 by rpki-client