$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0E4891CCE1511EDAA593314C4F9AE02.roa File: C0E4891CCE1511EDAA593314C4F9AE02.roa (raw, json) Hash identifier: R6nmjbq2rH9xQ9bxMzTGHKDxN8dYJozHLsw93vuPLhc= Subject key identifier: A1:69:14:81:65:72:17:BF:42:5A:CC:F0:46:36:FC:ED:86:E2:C9:60 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4E27 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0E4891CCE1511EDAA593314C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:57:32 +0000 ROA not before: Thu 28 Aug 2025 14:57:32 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 55313 IP address blocks: 27.118.16.0/20 maxlen: 24 45.126.92.0/22 maxlen: 24 103.245.148.0/22 maxlen: 24 2400:9bc0::/32 maxlen: 32 2400:9bc0::/48 maxlen: 48 2400:9bc0:1::/48 maxlen: 48 2400:9bc0:2::/48 maxlen: 48 2400:9bc0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20007 (0x4e27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:57:32 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e5c-1bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b6:be:04:8a:94:24:41:db:bf:97:85:01:be: 60:3d:a1:9e:63:a2:41:d7:1e:c8:7c:75:5d:74:53: 0a:10:34:78:e5:9f:fa:0b:44:bd:6e:4f:6f:0c:82: 8f:3a:ad:52:77:5d:0a:79:31:1b:16:3f:e4:b2:3b: e3:d2:57:84:12:28:32:49:39:15:67:ac:77:20:4a: 2c:a6:3c:39:75:76:52:cc:d3:f7:be:46:8a:55:5a: ac:26:17:22:62:78:25:39:72:10:49:88:d2:07:72: f4:fd:6d:f0:9d:3d:39:a5:cd:32:9c:7b:bc:e7:19: 90:b6:96:35:e7:3e:7f:bf:22:19:68:85:12:92:60: fc:e8:ff:fc:a9:29:f4:20:b4:07:c9:cc:f6:3c:e5: bc:5d:b9:c4:78:2d:c4:cc:f5:95:9b:13:aa:22:2b: 00:48:a1:6f:a5:38:13:11:16:da:2d:ec:f6:8b:17: 6a:a3:ec:1e:d6:e0:4f:3d:e4:d6:c9:a3:91:3e:0c: d6:cd:58:ba:5c:31:83:c9:96:05:ea:28:31:50:be: ec:3c:51:5a:5d:9a:ee:27:4e:10:93:8c:8f:5d:81: 83:44:d9:c5:1e:81:e3:a5:5e:0e:fa:f2:38:f9:f1: 5c:cd:f7:d8:8b:01:9b:f2:09:a1:65:de:2e:51:b5: 2c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:69:14:81:65:72:17:BF:42:5A:CC:F0:46:36:FC:ED:86:E2:C9:60 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0E4891CCE1511EDAA593314C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.118.16.0/20 45.126.92.0/22 103.245.148.0/22 IPv6: 2400:9bc0::/32 Signature Algorithm: sha256WithRSAEncryption 79:aa:8f:80:be:96:bd:7a:56:83:ff:32:24:45:39:80:a5:57: c0:f5:a0:45:5c:aa:30:b2:b0:15:5e:ca:44:21:49:dd:ef:61: 82:d0:42:02:b3:8e:28:6e:d0:60:2f:b0:02:50:4b:17:a1:88: 20:7d:5d:38:fe:8a:b0:81:ac:d7:c8:8a:4e:b6:ed:db:31:0c: 13:d1:e1:42:54:03:de:6e:d0:ac:80:d6:80:45:f7:ae:33:69: 53:b0:07:1a:3b:ca:f8:dc:60:b5:c2:72:bf:69:43:ec:4e:3c: c7:a5:93:48:6b:78:4c:85:d5:70:f8:d0:7f:30:4d:54:30:aa: a3:ee:6a:e8:7d:94:cb:9f:94:98:71:7a:ca:7c:45:bb:91:cc: 3d:69:99:47:f6:de:45:fd:90:c4:69:04:1b:da:ac:41:cb:5c: 0e:5b:b0:9d:99:e6:b9:0b:67:48:11:3b:c4:a0:09:fb:94:23: be:59:13:9d:f7:fd:ee:fb:0b:fc:43:f4:38:3a:61:78:b5:b2: dc:b0:e4:d7:42:91:a8:1a:94:8d:55:c7:f2:f2:3c:d0:b0:96: 93:05:4e:29:03:37:99:31:ce:1a:ea:47:9e:8d:73:22:85:bb: ce:4a:20:7b:e4:96:bd:2e:f8:cf:65:02:97:48:ff:a0:9b:c0: e4:96:02:e8 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICTicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzMyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmU1Yy0xYmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ba+BIqUJEHbv5eFAb5gPaGeY6JB1x7IfHVddFMKEDR45Z/6C0S9bk9vDIKP Oq1Sd10KeTEbFj/ksjvj0leEEigySTkVZ6x3IEospjw5dXZSzNP3vkaKVVqsJhci YnglOXIQSYjSB3L0/W3wnT05pc0ynHu85xmQtpY15z5/vyIZaIUSkmD86P/8qSn0 ILQHycz2POW8XbnEeC3EzPWVmxOqIisASKFvpTgTERbaLez2ixdqo+we1uBPPeTW yaORPgzWzVi6XDGDyZYF6igxUL7sPFFaXZruJ04Qk4yPXYGDRNnFHoHjpV4O+vI4 +fFczffYiwGb8gmhZd4uUbUsMwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFKFpFIFl che/QlrM8EY2/O2G4slgMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzBFNDg5MUND RTE1MTFFREFBNTkzMzE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAQbdhADBAItflwDBAJn9ZQwDQQCAAIwBwMFACQAm8AwDQYJ KoZIhvcNAQELBQADggEBAHmqj4C+lr16VoP/MiRFOYClV8D1oEVcqjCysBVeykQh Sd3vYYLQQgKzjihu0GAvsAJQSxehiCB9XTj+irCBrNfIik627dsxDBPR4UJUA95u 0KyA1oBF964zaVOwBxo7yvjcYLXCcr9pQ+xOPMelk0hreEyF1XD40H8wTVQwqqPu auh9lMuflJhxesp8RbuRzD1pmUf23kX9kMRpBBvarEHLXA5bsJ2Z5rkLZ0gRO8Sg CfuUI75ZE533/e77C/xD9Dg6YXi1styw5NdCkagalI1Vx/LyPNCwlpMFTikDN5kx zhrqR56NcyKFu85KIHvklr0u+M9lApdI/6CbwOSWAug= -----END CERTIFICATE-----Generated at Mon Sep 8 05:36:02 2025 by rpki-client