$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/825750627F6B11F09EC5790EC4F9AE02.roa File: 825750627F6B11F09EC5790EC4F9AE02.roa (raw, json) Hash identifier: ZdaRZRUO+aUgJQOGUU3WAZtGea9KJyjV/EubWQK476M= Subject key identifier: D9:F7:51:E2:7F:28:D3:2F:EF:08:97:85:12:3D:5D:01:5F:DC:A8:99 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4CE1 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/825750627F6B11F09EC5790EC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:52:58 +0000 ROA not before: Thu 28 Aug 2025 14:52:58 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131435 IP address blocks: 45.119.216.0/22 maxlen: 24 103.60.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19681 (0x4ce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:52:58 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d49-d4ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:94:32:18:d1:32:0c:24:e4:e0:69:3e:1c:d5: e7:87:a9:b1:ac:74:2f:07:88:59:37:ea:c3:41:35: 06:0d:eb:e5:63:da:e6:b8:1e:75:3a:78:7c:05:53: af:e8:f2:5b:aa:ef:1d:ae:73:ab:b8:22:26:5e:bf: d4:bd:2e:c6:98:a5:bb:fe:ac:76:82:97:bf:bb:d2: 46:06:8b:37:f8:30:9c:45:5d:1d:6e:6c:e8:a9:79: e2:e0:32:4f:d3:8b:39:70:73:d3:14:82:54:46:38: 67:9e:78:49:6d:85:78:e3:47:e0:d8:8d:d9:4d:62: 89:38:fa:dd:5f:dd:c7:c2:35:85:cb:fa:e8:c0:75: 87:c5:f9:d1:f1:45:4d:90:4d:76:c0:0e:5e:b5:3e: 4f:5d:2a:28:80:33:10:e0:df:83:a1:5c:84:1c:e7: 12:22:28:01:72:77:14:bc:67:9a:74:22:2c:1d:ef: 24:28:89:ea:56:60:68:d7:30:bd:05:be:73:37:97: 85:49:c1:23:12:24:18:27:9a:a6:ab:20:c2:aa:4f: 35:1d:4a:62:9b:a6:d5:dd:91:85:7a:88:dd:58:ed: b8:7a:ed:83:be:d2:0a:eb:a5:98:76:4f:89:99:47: ed:ca:f2:27:5c:78:d3:ad:43:e7:9a:80:11:66:24: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F7:51:E2:7F:28:D3:2F:EF:08:97:85:12:3D:5D:01:5F:DC:A8:99 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/825750627F6B11F09EC5790EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.119.216.0/22 103.60.16.0/22 Signature Algorithm: sha256WithRSAEncryption bd:08:42:07:8c:ef:66:9d:a3:e5:ae:78:e1:4b:a7:45:48:78: b7:4e:20:25:c8:0d:67:ac:06:05:e7:0c:5b:c3:31:b6:bb:56: d3:3f:0b:ce:ee:ff:74:53:e0:8c:22:47:99:c8:2a:12:87:95: 9c:5a:b9:57:4c:77:4b:bb:23:ab:4f:29:83:60:3d:03:79:b4: e0:e8:af:ec:22:c9:04:91:55:27:18:d3:28:c8:7d:51:0c:ac: 4d:0b:09:ed:cd:90:c8:3d:0f:be:4e:27:89:7e:93:e2:cb:35: e6:2b:ea:92:80:f2:c4:24:87:e4:ca:e1:bc:b7:3d:21:c9:98: 11:df:6b:04:0f:96:24:64:d1:19:26:3d:10:ce:90:b1:93:8e: 28:c3:8f:a3:19:f5:c1:75:7f:73:ce:15:c4:57:57:ab:c1:a9: cf:71:08:70:43:ec:c4:62:5e:f5:50:b6:2a:41:8f:dd:01:fd: 66:7e:50:94:b8:67:98:26:ef:36:21:34:03:91:e1:d1:97:2e: 85:b5:ea:d2:ce:e5:d4:49:96:26:4b:e2:f2:bb:04:cd:42:f0: 56:0c:d0:93:e3:4e:3c:3d:3e:42:66:76:dd:62:d9:62:e3:92: 85:5d:ba:b3:0e:ba:09:29:84:58:31:96:35:0e:c0:b1:bd:68: 04:44:eb:a6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICTOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MjU4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQ0OS1kNGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZQyGNEyDCTk4Gk+HNXnh6mxrHQvB4hZN+rDQTUGDevlY9rmuB51Onh8BVOv 6PJbqu8drnOruCImXr/UvS7GmKW7/qx2gpe/u9JGBos3+DCcRV0dbmzoqXni4DJP 04s5cHPTFIJURjhnnnhJbYV440fg2I3ZTWKJOPrdX93HwjWFy/rowHWHxfnR8UVN kE12wA5etT5PXSoogDMQ4N+DoVyEHOcSIigBcncUvGeadCIsHe8kKInqVmBo1zC9 Bb5zN5eFScEjEiQYJ5qmqyDCqk81HUpim6bV3ZGFeojdWO24eu2DvtIK66WYdk+J mUftyvInXHjTrUPnmoARZiRXgQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNn3UeJ/ KNMv7wiXhRI9XQFf3KiZMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODI1NzUwNjI3 RjZCMTFGMDlFQzU3OTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItd9gDBAJnPBAwDQYJKoZIhvcNAQELBQADggEBAL0IQgeM 72ado+WueOFLp0VIeLdOICXIDWesBgXnDFvDMba7VtM/C87u/3RT4IwiR5nIKhKH lZxauVdMd0u7I6tPKYNgPQN5tODor+wiyQSRVScY0yjIfVEMrE0LCe3NkMg9D75O J4l+k+LLNeYr6pKA8sQkh+TK4by3PSHJmBHfawQPliRk0RkmPRDOkLGTjijDj6MZ 9cF1f3POFcRXV6vBqc9xCHBD7MRiXvVQtipBj90B/WZ+UJS4Z5gm7zYhNAOR4dGX LoW16tLO5dRJliZL4vK7BM1C8FYM0JPjTjw9PkJmdt1i2WLjkoVdurMOugkphFgx ljUOwLG9aARE66Y= -----END CERTIFICATE-----Generated at Mon Sep 8 05:39:25 2025 by rpki-client