$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBA122A063E311EC8B936683C4F9AE02.roa File: BBA122A063E311EC8B936683C4F9AE02.roa (raw, json) Hash identifier: 23Xg9USp4dcVo/3ZE3lIlyHcDK0qYrfZl302VPd4Vi0= Subject key identifier: E9:9A:64:FC:27:DB:45:0A:26:AF:EB:41:38:D6:4E:4F:95:87:A0:92 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4E0F Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBA122A063E311EC8B936683C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:57:11 +0000 ROA not before: Thu 28 Aug 2025 14:57:11 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 38737 IP address blocks: 203.119.68.0/22 maxlen: 24 2001:dc8:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19983 (0x4e0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:57:11 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e46-3de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:ec:03:c5:1c:9e:e6:3f:71:3a:35:d5:bb: 64:da:7e:d5:96:b6:4d:3b:ac:82:06:47:42:b8:5d: c3:e6:0f:20:9f:48:d9:8d:ae:8f:0e:80:d9:6a:ae: 49:63:eb:0d:62:e7:1e:62:d1:51:45:46:26:db:0e: 3e:f9:af:47:4b:21:6e:f7:ac:7c:a9:4d:81:b1:8d: 75:e6:74:86:d8:d1:7a:a7:bd:b0:88:ff:a1:5a:42: 45:5f:c1:8c:9c:1d:1f:90:81:32:d7:24:fa:b2:36: 95:34:91:35:cd:5c:b2:f6:bb:e2:83:1f:7e:9d:37: 22:ca:d5:5d:78:05:82:d8:81:8a:73:ab:66:2b:19: ab:b8:ad:56:17:25:41:4d:e7:a2:1e:07:96:83:07: b5:b2:c4:a6:ed:7e:98:45:7d:59:73:e6:f4:f7:c5: ec:67:4b:4d:b6:29:4c:1a:64:aa:8a:5f:8e:b8:36: 7c:aa:b6:83:ea:a4:f1:74:4d:be:b3:87:a5:d2:35: d4:a8:a2:bb:3b:38:97:fe:99:50:80:fb:ba:08:be: e2:30:3d:71:ef:40:64:1d:f5:24:15:0f:89:d2:30: 42:38:65:f1:3d:f0:8e:3c:f6:43:74:c7:53:aa:7d: 55:aa:63:a6:22:79:0d:b1:44:64:95:33:3b:f5:fa: f1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9A:64:FC:27:DB:45:0A:26:AF:EB:41:38:D6:4E:4F:95:87:A0:92 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBA122A063E311EC8B936683C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.119.68.0/22 IPv6: 2001:dc8:d000::/48 Signature Algorithm: sha256WithRSAEncryption 7e:c1:e8:14:0b:ff:e2:06:42:9d:1c:69:3e:f0:2c:93:e0:85: 1b:eb:59:c2:78:db:12:82:15:6a:78:04:51:2d:df:80:4d:93: b8:d7:39:fa:fc:bb:7d:36:5c:ae:22:04:9b:e6:b0:dd:32:12: af:13:ce:22:52:f1:d4:c3:bc:a2:01:c0:f3:ce:83:61:ad:4b: 32:40:51:2a:b3:c4:37:a1:f0:47:de:4c:3d:ba:1f:47:8c:ea: 74:49:16:bf:43:fb:4e:e0:75:fe:53:ee:cc:9e:51:c4:c0:a6: d6:d6:80:b2:a9:8f:b8:82:74:16:a4:e9:f9:a4:a0:fa:03:da: 5e:17:06:9d:25:ee:47:41:81:ad:8e:ab:f4:72:d6:2e:f4:1b: 2c:03:b2:56:ee:a8:fd:a6:b1:2c:4f:46:9f:1e:cd:ae:01:20: 74:07:54:00:9e:70:7e:7f:ef:94:5d:b2:d2:30:0a:a2:4b:35: 43:00:62:7d:8a:ef:65:65:e7:5a:e3:50:0a:f1:6e:8d:a4:21: 1d:45:ef:e9:e2:5e:18:4e:f8:78:ac:59:8a:6c:ce:e5:95:19: f2:8e:fb:ad:bd:7b:d8:2b:d3:92:cc:96:0e:f5:2d:3b:e8:98: 28:17:0e:65:ce:f0:e0:dc:bd:62:e3:f1:71:5d:85:86:db:1e: 43:1c:2f:e1 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICTg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzExWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmU0Ni0zZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArw3sA8UcnuY/cTo11btk2n7VlrZNO6yCBkdCuF3D5g8gn0jZja6PDoDZaq5J Y+sNYuceYtFRRUYm2w4++a9HSyFu96x8qU2BsY115nSG2NF6p72wiP+hWkJFX8GM nB0fkIEy1yT6sjaVNJE1zVyy9rvigx9+nTciytVdeAWC2IGKc6tmKxmruK1WFyVB TeeiHgeWgwe1ssSm7X6YRX1Zc+b098XsZ0tNtilMGmSqil+OuDZ8qraD6qTxdE2+ s4el0jXUqKK7OziX/plQgPu6CL7iMD1x70BkHfUkFQ+J0jBCOGXxPfCOPPZDdMdT qn1VqmOmInkNsURklTM79frxRwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOmaZPwn 20UKJq/rQTjWTk+Vh6CSMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQkJBMTIyQTA2 M0UzMTFFQzhCOTM2NjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBALLd0QwDwQCAAIwCQMHACABDcjQADANBgkqhkiG9w0BAQsF AAOCAQEAfsHoFAv/4gZCnRxpPvAsk+CFG+tZwnjbEoIVangEUS3fgE2TuNc5+vy7 fTZcriIEm+aw3TISrxPOIlLx1MO8ogHA886DYa1LMkBRKrPEN6HwR95MPbofR4zq dEkWv0P7TuB1/lPuzJ5RxMCm1taAsqmPuIJ0FqTp+aSg+gPaXhcGnSXuR0GBrY6r 9HLWLvQbLAOyVu6o/aaxLE9Gnx7NrgEgdAdUAJ5wfn/vlF2y0jAKoks1QwBifYrv ZWXnWuNQCvFujaQhHUXv6eJeGE74eKxZimzO5ZUZ8o77rb172CvTksyWDvUtO+iY KBcOZc7w4Ny9YuPxcV2FhtseQxwv4Q== -----END CERTIFICATE-----Generated at Mon Sep 8 05:38:35 2025 by rpki-client