$ rpki-client -vvf rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/720ED6F487CB11F0B605C67DC4F9AE02.roa File: 720ED6F487CB11F0B605C67DC4F9AE02.roa (raw, json) Hash identifier: Rjr6eKNeN1KpnMLB6OZbv1JZX2fU2WirfbjPXhZ6QK4= Subject key identifier: 42:6D:33:90:3B:80:86:24:8F:90:2B:56:6B:FD:4B:78:5B:4C:5F:21 Certificate issuer: /CN=A91523FF/serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7 Certificate serial: 02 Authority key identifier: 60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/720ED6F487CB11F0B605C67DC4F9AE02.roa Signing time: Tue 02 Sep 2025 07:07:11 +0000 ROA not before: Tue 02 Sep 2025 07:07:11 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 139043 IP address blocks: 202.66.180.0/24 maxlen: 24 202.66.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 08:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91523FF, serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7 Validity Not Before: Sep 2 07:07:11 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b6979f-693b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:57:7d:8c:11:65:95:22:ff:20:44:a5:05:96: b4:2e:55:aa:5e:99:3c:be:6b:fa:ba:53:7c:8d:ab: 0a:bd:8c:9b:4b:da:44:fc:b2:82:bc:eb:91:ac:62: 85:67:5f:f7:54:22:81:26:96:4f:10:4c:58:b0:73: 58:2b:11:25:3b:70:61:f7:79:45:82:27:e6:87:da: da:72:fc:86:78:e7:8c:10:e4:fe:65:1c:db:99:02: af:ae:45:80:ac:3b:b6:fe:58:6a:56:12:e5:d7:9c: fe:49:cf:f8:6d:84:1a:69:27:42:a1:73:78:77:47: 6e:a6:c2:a7:f6:40:b5:95:90:9a:2d:74:26:1c:c6: 64:f3:3b:ba:1e:ab:41:58:68:51:33:5e:1a:fb:1b: 0d:cf:af:2d:6c:b2:41:ca:43:e5:4d:e7:dd:b4:16: fc:d2:6a:41:be:9c:c8:9f:cb:81:a3:fa:8f:23:ec: 96:d3:e7:88:7b:9f:5a:bb:15:24:a7:57:53:0c:eb: a3:cb:2c:81:39:3b:dc:ad:ca:f8:0e:31:01:71:87: 9c:0d:40:09:70:db:b3:5e:36:5f:65:f7:93:6e:af: e3:3e:7b:9f:87:0f:2a:5f:7e:71:df:ac:9c:61:e9: 9d:62:21:ae:04:a1:32:98:d6:da:40:d7:c2:43:f1: 07:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6D:33:90:3B:80:86:24:8F:90:2B:56:6B:FD:4B:78:5B:4C:5F:21 X509v3 Authority Key Identifier: keyid:60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/720ED6F487CB11F0B605C67DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.66.180.0/23 Signature Algorithm: sha256WithRSAEncryption a0:e3:bb:74:cf:a8:b7:d7:20:04:8e:cb:88:53:b6:6b:92:60: 25:a5:32:2e:c1:c5:cb:03:84:78:aa:1a:de:f3:57:60:77:a6: ca:2c:c7:a9:47:51:05:6f:9f:b7:71:59:09:24:e4:b1:1b:09: ac:b3:83:c0:21:db:9f:f3:71:b3:5f:04:b0:44:66:d7:a4:03: e0:c9:d2:a8:21:26:75:94:1a:a1:1b:a5:c1:5f:54:3b:13:9d: 2d:e3:11:08:64:b0:0b:f8:8d:a2:49:b4:66:ff:da:40:c3:c9: f4:62:a2:1b:49:5d:6b:b2:2d:fd:16:ae:89:03:43:fc:af:8d: 37:47:d8:07:32:ae:aa:d5:fd:62:74:0e:2f:93:e0:a7:44:9a: 3d:36:d6:73:97:2d:8f:ae:dc:45:d0:09:eb:38:0d:78:42:35: bd:3e:5a:7b:4a:e4:0a:2f:bd:bf:2a:e2:57:95:16:b3:3f:5e: 8d:52:1f:e1:83:fd:f9:59:fe:95:e9:b1:c4:52:2e:47:92:9c: 1d:26:71:6b:86:21:e8:06:07:0c:46:22:05:35:d0:1f:47:11: 81:7e:2e:96:0f:88:a2:97:82:63:b1:6a:aa:a5:f6:b9:83:59: 63:f0:fe:09:e3:47:7f:a4:1a:c5:c4:d4:d5:65:a1:ee:aa:f8: f0:bc:23:23 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjNGRjExMC8GA1UEBRMoNjA2QjRGNDJFRTk3Rjc0ODhFQzIwQjYzRDhCMUFBRjZE NDJEOUNBNzAeFw0yNTA5MDIwNzA3MTFaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YjY5NzlmLTY5M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzV32MEWWVIv8gRKUFlrQuVapemTy+a/q6U3yNqwq9jJtL2kT8soK865GsYoVn X/dUIoEmlk8QTFiwc1grESU7cGH3eUWCJ+aH2tpy/IZ454wQ5P5lHNuZAq+uRYCs O7b+WGpWEuXXnP5Jz/hthBppJ0Khc3h3R26mwqf2QLWVkJotdCYcxmTzO7oeq0FY aFEzXhr7Gw3Pry1sskHKQ+VN5920FvzSakG+nMify4Gj+o8j7JbT54h7n1q7FSSn V1MM66PLLIE5O9ytyvgOMQFxh5wNQAlw27NeNl9l95Nur+M+e5+HDypffnHfrJxh 6Z1iIa4EoTKY1tpA18JD8QdPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUQm0zkDuA hiSPkCtWa/1LeFtMXyEwHwYDVR0jBBgwFoAUYGtPQu6X90iOwgtj2LGq9tQtnKcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyM0ZGLzIwMEMzNzdBODdD QjExRjA4MDJCMjI3REM0RjlBRTAyL1lHdFBRdTZYOTBpT3dndGoyTEdxOXRRdG5L Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWUd0UFF1Nlg5MGlPd2d0ajJMR3E5dFF0bktjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjNGRi8yMDBDMzc3QTg3Q0IxMUYwODAyQjIyN0RDNEY5QUUwMi83MjBFRDZGNDg3 Q0IxMUYwQjYwNUM2N0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcpCtDANBgkqhkiG9w0BAQsFAAOCAQEAoOO7dM+ot9cgBI7L iFO2a5JgJaUyLsHFywOEeKoa3vNXYHemyizHqUdRBW+ft3FZCSTksRsJrLODwCHb n/Nxs18EsERm16QD4MnSqCEmdZQaoRulwV9UOxOdLeMRCGSwC/iNokm0Zv/aQMPJ 9GKiG0lda7It/RauiQND/K+NN0fYBzKuqtX9YnQOL5Pgp0SaPTbWc5ctj67cRdAJ 6zgNeEI1vT5ae0rkCi+9vyriV5UWsz9ejVIf4YP9+Vn+lemxxFIuR5KcHSZxa4Yh 6AYHDEYiBTXQH0cRgX4ulg+IopeCY7FqqqX2uYNZY/D+CeNHf6QaxcTU1WWh7qr4 8LwjIw== -----END CERTIFICATE-----Generated at Sun Nov 2 10:23:30 2025 by rpki-client