$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/6553D6106C2B11EA87ED1160C4F9AE02.roa File: 6553D6106C2B11EA87ED1160C4F9AE02.roa (raw, json) Hash identifier: q+qDmuX1SDlNLGpbDpsIJ4dtsR3ZMPh1qGVJ0QRvta4= Subject key identifier: 2E:8B:97:F7:5B:29:32:10:01:F6:D9:E0:44:DE:77:B7:27:2F:5B:05 Certificate issuer: /CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579 Certificate serial: 0B49 Authority key identifier: 03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/6553D6106C2B11EA87ED1160C4F9AE02.roa Signing time: Wed 22 Oct 2025 20:08:54 +0000 ROA not before: Wed 22 Oct 2025 20:08:54 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 38256 IP address blocks: 124.6.224.0/20 maxlen: 21 124.6.224.0/24 maxlen: 24 124.6.225.0/24 maxlen: 24 124.6.226.0/24 maxlen: 24 124.6.227.0/24 maxlen: 24 124.6.228.0/24 maxlen: 24 124.6.229.0/24 maxlen: 24 124.6.230.0/24 maxlen: 24 124.6.231.0/24 maxlen: 24 124.6.232.0/24 maxlen: 24 124.6.233.0/24 maxlen: 24 124.6.234.0/24 maxlen: 24 124.6.235.0/24 maxlen: 24 124.6.236.0/24 maxlen: 24 124.6.237.0/24 maxlen: 24 124.6.238.0/24 maxlen: 24 124.6.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2889 (0xb49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4CAD, serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579 Validity Not Before: Oct 22 20:08:54 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f939d6-4d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:53:95:a3:b2:45:64:59:8a:3f:ed:a4:9b:54: 43:5b:68:57:71:a6:0b:d6:39:16:70:b8:af:ba:32: c6:14:ff:3c:82:13:cf:f4:2c:2b:99:93:82:66:f1: ff:68:db:96:76:12:3c:df:e7:3f:40:e8:1c:1e:11: f4:1f:cd:9f:7b:3e:af:f0:e4:ee:18:71:dc:d5:f6: 86:5c:2c:b6:7b:d3:a9:bb:da:58:38:ab:54:04:45: f9:45:70:4b:12:61:98:d3:55:be:ce:cc:70:58:83: fa:1f:07:cb:a3:05:d6:7d:35:c9:bd:8f:44:d4:4c: 97:3f:9d:68:55:ad:1b:5f:de:44:5c:c8:e3:85:5b: 59:a8:51:33:f4:8e:11:7a:72:61:6f:0f:4d:aa:72: 93:09:17:3b:2c:db:1d:c6:d2:c3:ab:1b:64:0e:0f: 7a:c7:60:05:0e:0d:68:ac:b9:fe:ab:53:16:18:b6: fb:87:b8:fe:bc:b2:60:b3:fb:81:95:57:18:70:42: 5b:34:6a:64:3f:40:13:05:4a:de:62:74:e5:dc:35: 12:65:5a:82:b9:6c:df:ca:00:36:93:19:c0:74:00: af:68:c7:80:7c:a3:79:b9:95:7c:e7:d6:96:a4:b7: 25:49:34:4f:b3:77:20:49:43:63:1c:b2:cd:78:f4: a0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8B:97:F7:5B:29:32:10:01:F6:D9:E0:44:DE:77:B7:27:2F:5B:05 X509v3 Authority Key Identifier: keyid:03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/6553D6106C2B11EA87ED1160C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 124.6.224.0/20 Signature Algorithm: sha256WithRSAEncryption 71:e1:52:50:03:40:61:91:5f:ed:df:60:97:d3:15:b0:68:b6: 3a:90:73:51:09:4e:51:b9:75:d3:79:65:d7:d7:b0:bb:51:4b: 8f:4f:de:47:77:e2:53:11:04:61:9a:7a:43:24:9f:f8:ac:f4: 00:46:8d:cb:ab:ff:1c:7e:6a:a6:87:a0:5f:b8:41:7e:89:e1: e3:ae:9a:97:ec:c6:11:2f:2e:15:d6:53:11:0d:a1:49:5f:4e: e4:ac:2d:79:21:25:cf:75:6d:72:bc:77:ec:a6:26:ba:ad:63: fb:63:65:6e:7e:00:07:5e:d1:c1:f6:e8:62:9c:f4:3c:6a:13: 19:89:c0:72:4d:8c:c6:68:1b:61:90:04:49:b9:1b:d0:98:f0: 49:70:6b:46:02:aa:ab:97:39:a7:b6:39:60:ca:c2:76:65:95: 22:f0:f5:75:67:5e:6c:40:b0:9a:d0:a9:9c:dc:b8:5c:58:f4: dc:41:48:ff:69:cd:5b:de:0b:b3:f6:29:e6:29:a6:15:51:90: e9:ea:6c:40:ec:db:3e:da:35:de:8d:86:44:ab:ff:1c:6a:97: 6f:09:89:36:ef:b5:59:fb:0e:4a:98:60:ae:fc:82:39:28:0d: 09:dd:59:8f:66:f0:4d:66:09:46:d2:d8:16:23:df:cc:9a:34: aa:08:53:c5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDQUQxMTAvBgNVBAUTKDAzQTNDODdBNEYyRDgyNTU5NDc2RjcxQ0ZBRUU1MjRG RjUxMTM1NzkwHhcNMjUxMDIyMjAwODU0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5MzlkNi00ZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7lOVo7JFZFmKP+2km1RDW2hXcaYL1jkWcLivujLGFP88ghPP9CwrmZOCZvH/ aNuWdhI83+c/QOgcHhH0H82fez6v8OTuGHHc1faGXCy2e9Opu9pYOKtUBEX5RXBL EmGY01W+zsxwWIP6HwfLowXWfTXJvY9E1EyXP51oVa0bX95EXMjjhVtZqFEz9I4R enJhbw9NqnKTCRc7LNsdxtLDqxtkDg96x2AFDg1orLn+q1MWGLb7h7j+vLJgs/uB lVcYcEJbNGpkP0ATBUreYnTl3DUSZVqCuWzfygA2kxnAdACvaMeAfKN5uZV859aW pLclSTRPs3cgSUNjHLLNePSguwIDAQABo4IClTCCApEwHQYDVR0OBBYEFC6Ll/db KTIQAfbZ4ETed7cnL1sFMB8GA1UdIwQYMBaAFAOjyHpPLYJVlHb3HPruUk/1ETV5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNENBRC85RkQ5N0EwODQ1 QzMxMUVBQkVGNUQ0MzlDNEY5QUUwMi9BNlBJZWs4dGdsV1VkdmNjLXU1U1RfVVJO WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2UEllazh0Z2xXVWR2Y2MtdTVTVF9VUk5Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRDQUQvOUZEOTdBMDg0NUMzMTFFQUJFRjVENDM5QzRGOUFFMDIvNjU1M0Q2MTA2 QzJCMTFFQTg3RUQxMTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAR8BuAwDQYJKoZIhvcNAQELBQADggEBAHHhUlADQGGRX+3f YJfTFbBotjqQc1EJTlG5ddN5ZdfXsLtRS49P3kd34lMRBGGaekMkn/is9ABGjcur /xx+aqaHoF+4QX6J4eOumpfsxhEvLhXWUxENoUlfTuSsLXkhJc91bXK8d+ymJrqt Y/tjZW5+AAde0cH26GKc9DxqExmJwHJNjMZoG2GQBEm5G9CY8Elwa0YCqquXOae2 OWDKwnZllSLw9XVnXmxAsJrQqZzcuFxY9NxBSP9pzVveC7P2KeYpphVRkOnqbEDs 2z7aNd6NhkSr/xxql28JiTbvtVn7DkqYYK78gjkoDQndWY9m8E1mCUbS2BYj38ya NKoIU8U= -----END CERTIFICATE-----Generated at Tue Nov 4 01:11:53 2025 by rpki-client