$ rpki-client -vvf rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/BFEE74284D9811F0930F6465C4F9AE02.roa File: BFEE74284D9811F0930F6465C4F9AE02.roa (raw, json) Hash identifier: utYcBcFgJK+aEaHZM9pNCTgsikhCHuFU4gRIhVACRLY= Subject key identifier: 0F:BB:DC:F1:3F:2A:FA:49:A8:6B:70:F7:E5:35:08:E8:D4:A6:26:73 Certificate issuer: /CN=A91657FE/serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A Certificate serial: 04 Authority key identifier: C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/BFEE74284D9811F0930F6465C4F9AE02.roa Signing time: Fri 20 Jun 2025 05:38:10 +0000 ROA not before: Fri 20 Jun 2025 05:38:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132584 IP address blocks: 203.56.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657FE, serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A Validity Not Before: Jun 20 05:38:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6854f3c2-9d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:07:f5:61:17:0a:1e:b8:90:0d:ff:68:cf:f8: 70:b1:93:d2:e6:fd:3b:4e:73:af:23:22:0a:34:86: 0b:14:b2:17:91:d9:88:39:8d:9d:ee:25:76:b1:bb: 58:ce:c5:da:97:9a:48:b8:c2:d1:bb:71:8a:1b:43: 38:13:d8:12:39:19:78:5f:51:c6:14:87:d9:27:17: aa:7f:c4:fc:c0:63:67:e2:54:af:bf:e3:92:34:70: 44:b2:65:6f:14:89:42:7d:c5:5e:ba:69:fe:02:e7: 29:22:99:73:f7:b3:6c:95:71:7b:19:0c:db:79:db: 3e:30:18:df:90:44:df:cc:87:95:0d:bb:dd:7a:4a: 99:68:ca:7f:05:33:3e:32:a9:e7:55:46:cd:ef:e0: bf:9a:52:ab:f4:8d:52:31:ab:67:74:aa:5b:83:17: a8:4b:f3:ba:03:99:5b:b2:c5:69:c6:d7:34:fe:64: 0f:df:5f:b6:05:90:f5:3a:b1:72:40:81:64:6a:d8: e1:4f:9e:4e:9e:c4:50:a0:26:04:4b:99:7b:d8:70: 00:bc:a2:16:e9:a8:08:e2:6b:b1:8a:0b:cc:ea:d1: 13:d1:e3:bf:0f:7b:6d:be:bf:56:6f:cf:a5:ce:19: 26:0c:dc:dc:3f:8c:0f:2f:ce:3d:ed:7d:0b:27:66: ee:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BB:DC:F1:3F:2A:FA:49:A8:6B:70:F7:E5:35:08:E8:D4:A6:26:73 X509v3 Authority Key Identifier: keyid:C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/BFEE74284D9811F0930F6465C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.56.195.0/24 Signature Algorithm: sha256WithRSAEncryption 01:1d:44:83:0e:a7:59:c0:61:4d:13:09:ad:1d:87:9a:8f:d4: 88:c1:52:65:06:1e:a5:98:44:d6:72:ed:dd:74:7f:b6:b0:a1: 6c:d3:90:ef:ca:85:5e:79:41:ab:db:74:82:3a:54:ff:1c:5e: d3:dd:b3:ab:87:bc:5e:20:c1:e5:22:ca:ec:c1:b8:1a:0f:ee: f6:a0:5a:fb:1e:5f:9d:c7:35:bc:d6:77:04:93:ab:dc:14:7a: 5b:89:3e:ec:83:c1:ab:7e:81:85:df:e5:27:50:bc:6c:d9:d8: ec:6b:d8:f2:54:de:86:08:cf:55:2e:25:f0:54:86:6b:4c:b6: 48:02:8e:17:02:00:6b:be:59:77:94:16:86:c7:24:24:59:39: 28:aa:f0:ab:0c:31:7f:5c:4c:98:3f:9d:fc:b1:04:46:86:60: 3e:d3:5e:fe:5c:8c:78:c0:2c:1e:66:14:d2:87:16:76:e5:8a: 7d:1e:b4:a8:ae:e3:b8:76:9b:c3:93:0f:03:12:ef:5f:23:02: 20:c7:bb:a8:97:c5:69:ab:2b:08:74:f5:71:12:6e:b8:c6:29: 17:29:c8:ae:37:b4:5c:26:fe:5c:08:b0:be:8f:e7:d0:ea:3c: d4:15:8e:ae:f0:c5:dc:fc:8f:ca:96:95:23:f1:7f:bd:8c:a8: 83:32:e5:7e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTdGRTExMC8GA1UEBRMoQzgwOTczRDE2Q0NDQzlFMThDMTNBNjg4MDMzREM0RDBG MEU2MUM0QTAeFw0yNTA2MjAwNTM4MTBaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NTRmM2MyLTlkMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsB/VhFwoeuJAN/2jP+HCxk9Lm/TtOc68jIgo0hgsUsheR2Yg5jZ3uJXaxu1jO xdqXmki4wtG7cYobQzgT2BI5GXhfUcYUh9knF6p/xPzAY2fiVK+/45I0cESyZW8U iUJ9xV66af4C5ykimXP3s2yVcXsZDNt52z4wGN+QRN/Mh5UNu916Sployn8FMz4y qedVRs3v4L+aUqv0jVIxq2d0qluDF6hL87oDmVuyxWnG1zT+ZA/fX7YFkPU6sXJA gWRq2OFPnk6exFCgJgRLmXvYcAC8ohbpqAjia7GKC8zq0RPR478Pe22+v1Zvz6XO GSYM3Nw/jA8vzj3tfQsnZu4lAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUD7vc8T8q +kmoa3D35TUI6NSmJnMwHwYDVR0jBBgwFoAUyAlz0WzMyeGME6aIAz3E0PDmHEow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1N0ZFL0MwODc1NzIyNEQ4 QjExRjA4RUFDNTgyM0M0RjlBRTAyL3lBbHowV3pNeWVHTUU2YUlBejNFMFBEbUhF by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveUFsejBXek15ZUdNRTZhSUF6M0UwUERtSEVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdGRS9DMDg3NTcyMjREOEIxMUYwOEVBQzU4MjNDNEY5QUUwMi9CRkVFNzQyODRE OTgxMUYwOTMwRjY0NjVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMs4wzANBgkqhkiG9w0BAQsFAAOCAQEAAR1Egw6nWcBhTRMJ rR2Hmo/UiMFSZQYepZhE1nLt3XR/trChbNOQ78qFXnlBq9t0gjpU/xxe092zq4e8 XiDB5SLK7MG4Gg/u9qBa+x5fncc1vNZ3BJOr3BR6W4k+7IPBq36Bhd/lJ1C8bNnY 7GvY8lTehgjPVS4l8FSGa0y2SAKOFwIAa75Zd5QWhsckJFk5KKrwqwwxf1xMmD+d /LEERoZgPtNe/lyMeMAsHmYU0ocWduWKfR60qK7juHabw5MPAxLvXyMCIMe7qJfF aasrCHT1cRJuuMYpFynIrje0XCb+XAiwvo/n0Oo81BWOrvDF3PyPypaVI/F/vYyo gzLlfg== -----END CERTIFICATE-----Generated at Wed Jul 2 15:29:11 2025 by rpki-client