$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9D01D11E773011F0BC213446C4F9AE02.roa File: 9D01D11E773011F0BC213446C4F9AE02.roa (raw, json) Hash identifier: UsLuMs+4sYChL/Sf8MXBt8j2riHQZyV6MQ46fPX3xTo= Subject key identifier: 57:C3:69:A9:F5:B7:5B:59:AA:56:EC:3E:C8:24:DB:22:F4:EE:8B:EC Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4DF1 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9D01D11E773011F0BC213446C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:56:43 +0000 ROA not before: Thu 28 Aug 2025 14:56:43 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154105 IP address blocks: 202.83.2.0/23 maxlen: 24 2402:1e60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19953 (0x4df1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:56:43 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e2b-3275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:89:42:80:d3:51:7a:ad:31:c6:6d:d7:20:3b: 9a:21:50:0d:b1:e9:8c:a2:d6:4f:26:b7:f3:b1:73: a5:de:6f:a0:e4:99:7a:be:26:d6:59:53:ae:01:68: 05:21:7d:11:92:9f:1f:9c:4d:dd:0a:82:0a:8f:47: 26:8c:2c:df:94:fa:3a:ce:ab:f9:dc:7b:c0:b3:67: ed:4a:0d:26:01:26:a6:cd:85:11:88:ef:16:a0:1b: ff:82:af:76:52:49:3b:81:6c:64:6b:25:11:d5:97: a3:65:39:0b:21:de:f5:45:a2:28:e7:f8:30:f6:c5: 68:72:85:90:0e:dc:3c:64:a1:32:d0:9a:0b:db:8b: d1:d0:57:5a:d4:f6:1a:49:c3:09:ba:1d:83:09:61: 10:9f:a1:d3:d0:7e:68:fe:39:41:a3:d9:56:41:c3: 2c:19:07:ec:cc:be:5d:04:6d:0c:2e:dc:e8:aa:dd: 7b:c4:56:b6:b2:74:5c:c7:00:86:b3:c3:e3:56:30: c3:20:76:95:97:6e:31:0c:90:11:c0:51:67:f9:45: 07:b1:1f:1d:9e:e1:1a:c0:c8:c9:e4:ed:23:a2:22: ab:76:14:3b:d3:14:ac:5c:da:82:eb:82:44:74:d9: 3b:36:b0:12:44:ef:21:fc:c0:8f:d8:26:3a:38:af: d8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C3:69:A9:F5:B7:5B:59:AA:56:EC:3E:C8:24:DB:22:F4:EE:8B:EC X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9D01D11E773011F0BC213446C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.83.2.0/23 IPv6: 2402:1e60::/32 Signature Algorithm: sha256WithRSAEncryption a4:46:9d:17:77:6b:0f:c9:9a:52:ab:a7:ee:7a:23:6c:b5:f0: c7:fc:ad:1b:54:07:9e:52:d4:8c:ec:28:cf:db:30:e9:a0:93: 8e:11:08:ce:93:0b:4f:c9:80:8d:e5:0c:30:62:aa:39:fe:68: 33:81:ce:fa:a1:f9:51:3e:9d:02:26:40:45:44:85:1c:c7:2b: 5e:f9:d2:e5:7e:0e:58:00:3b:60:51:9d:53:a4:0e:b1:4f:9e: a6:c0:b4:2a:99:c1:0e:db:12:67:31:3c:11:04:5e:1c:ee:86: b0:16:b1:46:34:02:12:58:22:b2:6a:30:ca:64:85:c1:c5:85: 93:80:0f:e4:64:a9:06:a8:9b:66:cd:bc:f8:3a:c8:ee:cf:16: ee:1a:e8:6d:8b:76:ae:1e:1e:55:6a:d6:fe:90:1f:bc:85:71: e6:7a:8f:71:ad:99:7d:e3:8c:ef:79:34:05:17:2d:ea:af:4e: b2:28:55:54:c0:f7:e2:4c:17:77:cb:de:36:07:58:f3:c0:2b: 4e:d9:cc:7c:7d:6f:0b:bb:6f:b2:46:c6:ed:50:f2:39:c3:d1: 8c:19:ef:71:79:50:80:4c:57:5c:ed:d2:46:15:b7:d8:c8:bc: e3:c6:ff:1e:73:41:35:7f:5f:60:ae:f3:2a:17:10:2d:6b:9e: 75:53:f7:72 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICTfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjQzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmUyYi0zMjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YlCgNNReq0xxm3XIDuaIVANsemMotZPJrfzsXOl3m+g5Jl6vibWWVOuAWgF IX0Rkp8fnE3dCoIKj0cmjCzflPo6zqv53HvAs2ftSg0mASamzYURiO8WoBv/gq92 Ukk7gWxkayUR1ZejZTkLId71RaIo5/gw9sVocoWQDtw8ZKEy0JoL24vR0Fda1PYa ScMJuh2DCWEQn6HT0H5o/jlBo9lWQcMsGQfszL5dBG0MLtzoqt17xFa2snRcxwCG s8PjVjDDIHaVl24xDJARwFFn+UUHsR8dnuEawMjJ5O0joiKrdhQ70xSsXNqC64JE dNk7NrASRO8h/MCP2CY6OK/YSQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFfDaan1 t1tZqlbsPsgk2yL07ovsMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOUQwMUQxMUU3 NzMwMTFGMEJDMjEzNDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAHKUwIwDQQCAAIwBwMFACQCHmAwDQYJKoZIhvcNAQELBQAD ggEBAKRGnRd3aw/JmlKrp+56I2y18Mf8rRtUB55S1IzsKM/bMOmgk44RCM6TC0/J gI3lDDBiqjn+aDOBzvqh+VE+nQImQEVEhRzHK1750uV+DlgAO2BRnVOkDrFPnqbA tCqZwQ7bEmcxPBEEXhzuhrAWsUY0AhJYIrJqMMpkhcHFhZOAD+RkqQaom2bNvPg6 yO7PFu4a6G2Ldq4eHlVq1v6QH7yFceZ6j3GtmX3jjO95NAUXLeqvTrIoVVTA9+JM F3fL3jYHWPPAK07ZzHx9bwu7b7JGxu1Q8jnD0YwZ73F5UIBMV1zt0kYVt9jIvOPG /x5zQTV/X2Cu8yoXEC1rnnVT93I= -----END CERTIFICATE-----Generated at Mon Sep 8 05:44:53 2025 by rpki-client