$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/C1B9CC1239DE11F0B191D94AC4F9AE02.roa File: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (raw, json) Hash identifier: C5mtfa3ZF1KEnyDRrBvvk8V/nxHuXLLm9mRYEmWk30I= Subject key identifier: 1F:FE:7E:96:E7:BB:2B:0F:26:5F:DC:D4:AC:2D:BD:73:01:8A:56:3E Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Certificate serial: 272D Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/C1B9CC1239DE11F0B191D94AC4F9AE02.roa Signing time: Mon 26 May 2025 03:08:55 +0000 ROA not before: Mon 26 May 2025 03:08:55 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 9386 IP address blocks: 202.128.48.0/22 maxlen: 22 202.128.52.0/22 maxlen: 22 202.128.56.0/22 maxlen: 22 202.128.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 15:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10029 (0x272d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5 Validity Not Before: May 26 03:08:55 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6833db46-e62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:de:59:5d:8a:b2:a5:73:1e:8c:2b:29:6c: 0e:84:0a:57:ee:8e:59:da:95:ca:61:19:b3:76:80: e5:4e:66:c8:25:d0:5a:62:da:5a:d7:cc:ab:bd:af: 2d:22:0b:6f:30:b5:18:e0:be:42:67:d6:48:c4:34: 98:e6:e4:7a:0a:d0:de:6f:07:9c:6d:bf:19:31:db: 8d:2d:fb:47:2b:77:84:96:e3:ed:5f:41:33:25:af: b3:87:b8:f1:18:25:dc:a0:a0:ac:cc:13:0e:d7:64: 83:43:f1:17:2e:4c:aa:2c:fa:05:9f:9d:99:70:88: 44:b3:3b:66:93:fe:e0:6e:95:7e:a2:34:ef:88:ff: 8d:39:be:ad:df:af:d7:bd:3a:90:24:0f:a4:05:34: 7a:bc:6c:af:ee:db:cb:b5:d2:14:74:2b:c0:22:75: d2:96:6b:e1:23:ea:9a:24:7a:12:78:aa:ea:74:b9: f7:da:f8:cf:da:9f:3f:54:9e:8d:58:36:e5:59:61: 4a:4d:2a:ec:f6:12:45:b6:cf:ec:da:08:65:76:87: 0c:e3:0b:5d:8a:5a:02:ba:d6:d8:ce:1a:c9:c6:c0: 1a:0a:72:71:68:e5:3e:9d:c3:a1:1c:4d:e1:5d:9a: 6b:76:af:43:b2:37:9e:c4:d6:27:a9:3b:99:72:7c: cd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FE:7E:96:E7:BB:2B:0F:26:5F:DC:D4:AC:2D:BD:73:01:8A:56:3E X509v3 Authority Key Identifier: keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/C1B9CC1239DE11F0B191D94AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.128.48.0/20 Signature Algorithm: sha256WithRSAEncryption 82:73:c2:48:dd:7a:d3:68:25:f7:03:3c:d3:42:d4:90:66:ee: e9:ae:9b:80:ef:95:86:a0:f1:03:b3:f6:15:dc:a0:42:16:8a: 01:12:6e:23:d8:56:f3:97:b0:6f:19:02:89:19:e9:fd:e8:77: da:db:08:a1:bb:dd:30:4b:c9:bc:1c:46:ae:41:d4:aa:41:e1: 53:88:5e:a4:5a:ab:bd:d8:e2:04:a3:48:2f:ba:fe:db:32:29: 62:10:47:49:2a:59:c7:46:17:4e:0d:20:3a:be:f9:bf:10:9f: 03:dc:87:4d:b5:c6:8c:19:16:84:b2:4f:15:40:e8:07:da:c0: a7:00:d0:fc:75:84:50:70:d3:35:26:a4:a3:1e:14:9b:b5:a2: d7:e5:5d:13:58:64:c0:b3:08:65:51:6c:a6:99:7c:90:a5:a4: 7f:f8:a4:f8:99:49:25:79:5c:79:fa:6e:a1:73:8a:e4:74:3a: 2b:00:bd:2c:72:21:15:8c:75:49:f1:6f:4b:16:a7:0a:60:68: 47:d3:39:15:45:d0:39:7c:77:04:0a:7b:d4:af:b6:df:4a:f5: 90:62:ee:b5:18:3f:8b:82:0e:cb:bb:ee:d6:66:0c:d2:06:1a: 83:d6:d8:ec:d6:a6:2d:3b:b2:70:4c:fb:44:3d:73:73:32:d9: c4:13:71:62 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4 NTFBQThBRjUwHhcNMjUwNTI2MDMwODU1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODMzZGI0Ni1lNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfjeWV2KsqVzHowrKWwOhApX7o5Z2pXKYRmzdoDlTmbIJdBaYtpa18yrva8t IgtvMLUY4L5CZ9ZIxDSY5uR6CtDebwecbb8ZMduNLftHK3eEluPtX0EzJa+zh7jx GCXcoKCszBMO12SDQ/EXLkyqLPoFn52ZcIhEsztmk/7gbpV+ojTviP+NOb6t36/X vTqQJA+kBTR6vGyv7tvLtdIUdCvAInXSlmvhI+qaJHoSeKrqdLn32vjP2p8/VJ6N WDblWWFKTSrs9hJFts/s2ghldocM4wtdiloCutbYzhrJxsAaCnJxaOU+ncOhHE3h XZprdq9DsjeexNYnqTuZcnzNewIDAQABo4IClTCCApEwHQYDVR0OBBYEFB/+fpbn uysPJl/c1KwtvXMBilY+MB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjc1RkQvRTFFRkQ5QjZERUNFMTFFNEExNEYwMDY4QzRGOUFFMDIvQzFCOUNDMTIz OURFMTFGMEIxOTFEOTRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBATKgDAwDQYJKoZIhvcNAQELBQADggEBAIJzwkjdetNoJfcD PNNC1JBm7umum4DvlYag8QOz9hXcoEIWigESbiPYVvOXsG8ZAokZ6f3od9rbCKG7 3TBLybwcRq5B1KpB4VOIXqRaq73Y4gSjSC+6/tsyKWIQR0kqWcdGF04NIDq++b8Q nwPch021xowZFoSyTxVA6AfawKcA0Px1hFBw0zUmpKMeFJu1otflXRNYZMCzCGVR bKaZfJClpH/4pPiZSSV5XHn6bqFziuR0OisAvSxyIRWMdUnxb0sWpwpgaEfTORVF 0Dl8dwQKe9Svtt9K9ZBi7rUYP4uCDsu77tZmDNIGGoPW2OzWpi07snBM+0Q9c3My 2cQTcWI= -----END CERTIFICATE-----Generated at Sun Nov 2 12:44:59 2025 by rpki-client