$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa File: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (raw, json) Hash identifier: qU4UvdAU1Y7BCQ9LZ+rlqRsb/zU78HiYK5hb24/5BaU= Subject key identifier: 32:0D:B0:71:5A:AD:3D:E0:4B:4B:C8:22:BE:38:5C:DF:72:6C:07:60 Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Certificate serial: FE Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa Signing time: Wed 21 May 2025 04:35:22 +0000 ROA not before: Wed 21 May 2025 04:35:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 131239 IP address blocks: 202.37.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053 Validity Not Before: May 21 04:35:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=682d580a-f00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3d:ba:ea:4a:8e:2d:1b:2f:18:50:82:2d:30: 2b:55:0a:55:c8:47:bb:d9:4f:7b:19:1c:df:64:8b: ce:07:4c:45:d8:05:c4:ec:c8:c4:1f:fd:b0:25:fb: d2:ca:ca:d4:1f:61:89:e8:e7:27:ea:cd:ac:a8:0f: 63:06:48:ee:c5:99:16:6f:48:46:aa:46:50:f9:1f: a9:68:6a:f7:a0:b6:b5:2a:9f:89:83:79:45:0c:b0: 1b:8c:e0:c2:b1:d2:1b:b7:dd:35:06:26:23:aa:94: 34:67:0d:1d:f9:73:f0:32:97:72:68:bc:6a:a0:54: 90:5d:f2:83:0a:9f:54:f3:51:be:be:88:6b:86:f7: 65:4e:5f:7e:0b:42:49:70:9d:50:bf:da:a0:98:84: a0:b6:78:c0:49:3b:ed:28:c0:1e:fc:a0:1c:e0:01: dd:fe:b5:d7:80:ba:39:9e:aa:0b:de:6d:55:42:20: 4e:3b:11:97:97:77:5d:d0:2d:06:fb:e0:18:07:2b: c0:26:fc:10:51:bd:bd:f0:c0:d6:ae:1a:9a:67:bd: 0c:9b:fc:35:f2:04:5c:54:bc:b3:60:fb:49:8b:34: 43:3d:ba:d9:da:3a:fe:17:d5:f6:43:6e:16:ed:98: 42:1f:6a:e4:c6:fb:9e:79:e8:96:7d:d6:6c:ff:4a: 86:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0D:B0:71:5A:AD:3D:E0:4B:4B:C8:22:BE:38:5C:DF:72:6C:07:60 X509v3 Authority Key Identifier: keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.37.64.0/23 Signature Algorithm: sha256WithRSAEncryption 46:d7:4b:6b:88:c1:da:fc:f7:2b:f1:83:c1:0b:c6:a7:9f:0c: 2e:e2:46:20:f8:28:6f:cb:3e:0e:d9:b7:6e:95:e8:4d:a1:d9: 16:14:c0:9b:d2:eb:7c:a1:0d:bc:e3:e5:22:d5:3e:64:32:2f: 2e:bc:74:b2:11:b8:64:ae:3f:8a:3b:c8:9e:bc:02:8b:09:e9: 19:b4:e1:bb:10:4e:4c:97:71:0d:dd:9b:95:b0:88:c8:96:46: d2:1b:53:2e:1c:1d:9b:95:53:13:0e:53:81:c8:f7:a0:19:75: 59:75:b9:5f:8f:0c:33:d9:96:fc:2c:a6:ca:2d:13:9b:b1:11: 5d:68:ec:ce:e4:07:ef:95:14:cf:a7:e6:18:37:b5:de:60:5d: f9:e9:44:05:26:31:52:dd:35:1a:28:f7:2b:d5:8e:d8:f9:dd: e9:56:aa:bc:d3:2c:a6:9b:0e:68:f7:8e:ba:68:9f:26:d5:f8: 9d:5c:61:2d:fd:e0:a9:07:1b:62:4b:d9:fe:70:71:43:31:84: c8:73:26:1e:ac:fd:f6:7b:8a:9f:bf:e7:fe:1f:f9:46:3a:e1: ba:1c:6f:bd:63:56:c9:ed:b7:09:7a:93:18:71:5c:f7:33:e2: ca:3b:3b:8e:94:86:8e:7c:9f:77:99:7b:32:62:76:c7:25:ac: c6:84:16:fa -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTczQjgxMTAvBgNVBAUTKDhDQjk2RjBEQ0E4NEIyMEI0OUEwNzEyOEU3NzczNzIw NThBNjkwNTMwHhcNMjUwNTIxMDQzNTIyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJkNTgwYS1mMDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArT266kqOLRsvGFCCLTArVQpVyEe72U97GRzfZIvOB0xF2AXE7MjEH/2wJfvS ysrUH2GJ6Ocn6s2sqA9jBkjuxZkWb0hGqkZQ+R+paGr3oLa1Kp+Jg3lFDLAbjODC sdIbt901BiYjqpQ0Zw0d+XPwMpdyaLxqoFSQXfKDCp9U81G+vohrhvdlTl9+C0JJ cJ1Qv9qgmISgtnjASTvtKMAe/KAc4AHd/rXXgLo5nqoL3m1VQiBOOxGXl3dd0C0G ++AYByvAJvwQUb298MDWrhqaZ70Mm/w18gRcVLyzYPtJizRDPbrZ2jr+F9X2Q24W 7ZhCH2rkxvueeeiWfdZs/0qG2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDINsHFa rT3gS0vIIr44XN9ybAdgMB8GA1UdIwQYMBaAFIy5bw3KhLILSaBxKOd3NyBYppBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzNCOC84NEE0QTEwQ0I4 QzYxMUVFQTNBRkQ2MTBDNEY5QUUwMi9qTGx2RGNxRXNndEpvSEVvNTNjM0lGaW1r Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMbHZEY3FFc2d0Sm9IRW81M2MzSUZpbWtGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTczQjgvODRBNEExMENCOEM2MTFFRUEzQUZENjEwQzRGOUFFMDIvRjZFN0NFRDhC OEM2MTFFRUFDMTNDQzExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHKJUAwDQYJKoZIhvcNAQELBQADggEBAEbXS2uIwdr89yvx g8ELxqefDC7iRiD4KG/LPg7Zt26V6E2h2RYUwJvS63yhDbzj5SLVPmQyLy68dLIR uGSuP4o7yJ68AosJ6Rm04bsQTkyXcQ3dm5WwiMiWRtIbUy4cHZuVUxMOU4HI96AZ dVl1uV+PDDPZlvwspsotE5uxEV1o7M7kB++VFM+n5hg3td5gXfnpRAUmMVLdNRoo 9yvVjtj53elWqrzTLKabDmj3jrponybV+J1cYS394KkHG2JL2f5wcUMxhMhzJh6s /fZ7ip+/5/4f+UY64bocb71jVsnttwl6kxhxXPcz4so7O46Uho58n3eZezJidscl rMaEFvo= -----END CERTIFICATE-----Generated at Fri Jun 13 09:38:45 2025 by rpki-client