$ rpki-client -vvf rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/CF5EEDA6894411F0BE628977C4F9AE02.roa File: CF5EEDA6894411F0BE628977C4F9AE02.roa (raw, json) Hash identifier: 17QpSjP3T4fN2iFoeGDXqVvnkQ3k4lIOqR9Kwrs2UKY= Subject key identifier: 91:8D:34:6F:2C:16:CB:F5:0A:52:84:2F:2C:31:34:24:01:4C:AD:49 Certificate issuer: /CN=A91992FA/serialNumber=057B537740382678A078F5BF284C726794B9D134 Certificate serial: 68 Authority key identifier: 05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/CF5EEDA6894411F0BE628977C4F9AE02.roa Signing time: Thu 04 Sep 2025 04:08:28 +0000 ROA not before: Thu 04 Sep 2025 04:08:28 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 153611 IP address blocks: 163.61.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91992FA, serialNumber=057B537740382678A078F5BF284C726794B9D134 Validity Not Before: Sep 4 04:08:28 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68b910bc-f789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:b9:8e:6a:c5:71:d6:fc:fd:da:0a:74:de: 17:18:7f:24:2b:3b:ad:88:eb:17:44:43:46:e1:d7: 82:eb:10:16:fe:75:e6:e6:3a:1a:29:79:23:42:33: 0c:35:6b:de:94:47:09:28:56:c9:e4:91:ce:66:6a: 7b:e0:9a:7f:a3:9d:9d:d0:56:a8:64:d8:1d:bf:4e: 00:f8:bd:ce:e6:e5:ce:c0:a7:31:e9:ff:c2:91:4a: fe:9a:87:f1:88:1f:3b:d2:27:19:e6:79:bf:33:7f: 74:a1:06:f4:77:d5:39:14:f3:f8:ab:0d:97:29:eb: b0:68:b9:a1:a1:e1:52:d3:71:f8:71:9e:a1:5d:83: 9d:94:59:28:2d:9d:39:05:56:77:24:ac:9a:ae:ee: c4:28:a6:2b:fa:12:25:fb:df:b4:85:74:c8:ee:df: 4e:2d:75:5e:02:1f:20:a8:0f:52:6b:3b:0e:4f:d4: ae:62:5d:46:58:33:26:16:24:1e:db:41:62:aa:f7: 0c:31:f7:63:fe:1c:6d:9b:73:43:2e:7e:fa:ac:56: 34:8b:59:f4:c6:b0:d6:f8:a6:df:f4:b8:98:d8:a9: 7f:c3:ad:f0:1d:e7:8e:a8:e6:3f:7b:ad:60:a9:4e: fa:04:43:50:26:b9:d9:ce:94:50:22:b7:75:5b:19: 76:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8D:34:6F:2C:16:CB:F5:0A:52:84:2F:2C:31:34:24:01:4C:AD:49 X509v3 Authority Key Identifier: keyid:05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/CF5EEDA6894411F0BE628977C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.150.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:eb:1a:ba:66:cd:99:6d:48:19:98:61:0f:2c:52:93:45:4a: db:2c:ad:e8:35:14:aa:b7:9c:cc:47:81:64:ab:1e:af:39:0f: 3e:0c:33:69:7e:f2:b6:4d:1c:62:2f:6b:4e:e7:c8:56:d1:67: d6:d4:df:95:d7:ac:26:f3:d4:00:2d:84:b1:bc:c7:e1:7a:e0: 7e:90:06:bb:c4:f1:3b:bd:7e:c0:0a:d6:d9:a4:f6:95:ec:ff: 0d:41:28:68:1f:5c:cd:c9:ed:34:83:e2:6e:87:11:e9:d2:98: 62:d6:cd:1a:88:cc:c6:22:e2:b9:0a:5f:74:97:70:c2:19:5e: 2e:cd:7a:2f:9d:77:f1:c0:0b:9b:38:21:94:75:49:ab:fa:ec: e9:5f:07:84:98:ee:21:37:86:23:a2:ca:e2:f3:62:30:5f:e0: bf:b9:3f:b1:c9:53:58:15:96:37:ac:4c:b9:46:36:74:af:ee: 57:44:3c:27:21:1a:04:a5:82:9a:51:c8:d3:50:00:a3:2f:4a: 1e:b9:84:49:23:2f:1f:61:7c:fb:cf:d5:1a:23:8a:95:56:7a: cd:e0:91:f0:6c:c8:71:12:64:0f:87:a8:27:48:7d:f9:61:11: 16:83:ca:2a:98:5a:96:35:a0:ac:8b:81:32:ce:ff:6d:05:73: d1:5a:63:01 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTJGQTExMC8GA1UEBRMoMDU3QjUzNzc0MDM4MjY3OEEwNzhGNUJGMjg0QzcyNjc5 NEI5RDEzNDAeFw0yNTA5MDQwNDA4MjhaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YjkxMGJjLWY3ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMLLmOasVx1vz92gp03hcYfyQrO62I6xdEQ0bh14LrEBb+debmOhopeSNCMww1 a96URwkoVsnkkc5manvgmn+jnZ3QVqhk2B2/TgD4vc7m5c7ApzHp/8KRSv6ah/GI HzvSJxnmeb8zf3ShBvR31TkU8/irDZcp67BouaGh4VLTcfhxnqFdg52UWSgtnTkF VnckrJqu7sQopiv6EiX737SFdMju304tdV4CHyCoD1JrOw5P1K5iXUZYMyYWJB7b QWKq9wwx92P+HG2bc0MufvqsVjSLWfTGsNb4pt/0uJjYqX/DrfAd546o5j97rWCp TvoEQ1AmudnOlFAit3VbGXY3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUkY00bywW y/UKUoQvLDE0JAFMrUkwHwYDVR0jBBgwFoAUBXtTd0A4JnigePW/KExyZ5S50TQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5MkZBL0ZBNDZFMEQyRUUw MzExRUY5QzJCOEE0OUM0RjlBRTAyL0JYdFRkMEE0Sm5pZ2VQV19LRXh5WjVTNTBU US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQlh0VGQwQTRKbmlnZVBXX0tFeHlaNVM1MFRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTJGQS9GQTQ2RTBEMkVFMDMxMUVGOUMyQjhBNDlDNEY5QUUwMi9DRjVFRURBNjg5 NDQxMUYwQkU2Mjg5NzdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaM9ljANBgkqhkiG9w0BAQsFAAOCAQEAiusaumbNmW1IGZhh DyxSk0VK2yyt6DUUqreczEeBZKserzkPPgwzaX7ytk0cYi9rTufIVtFn1tTfldes JvPUAC2EsbzH4XrgfpAGu8TxO71+wArW2aT2lez/DUEoaB9czcntNIPibocR6dKY YtbNGojMxiLiuQpfdJdwwhleLs16L5138cALmzghlHVJq/rs6V8HhJjuITeGI6LK 4vNiMF/gv7k/sclTWBWWN6xMuUY2dK/uV0Q8JyEaBKWCmlHI01AAoy9KHrmESSMv H2F8+8/VGiOKlVZ6zeCR8GzIcRJkD4eoJ0h9+WERFoPKKphaljWgrIuBMs7/bQVz 0VpjAQ== -----END CERTIFICATE-----Generated at Mon Sep 8 12:58:00 2025 by rpki-client