$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E0D37D808DED11EEB1192A11C4F9AE02.roa File: E0D37D808DED11EEB1192A11C4F9AE02.roa (raw, json) Hash identifier: IckR9Chrx08aDLaKgTUcfNojtL8hav1nPPwKRnewptI= Subject key identifier: DE:61:7A:A1:F3:A4:CC:87:F1:52:F3:4D:93:AC:0F:6C:49:09:A9:1A Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4E1E Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E0D37D808DED11EEB1192A11C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:57:24 +0000 ROA not before: Thu 28 Aug 2025 14:57:24 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45900 IP address blocks: 202.58.245.0/24 maxlen: 24 2001:df4:d600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19998 (0x4e1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:57:24 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e54-3b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:57:4d:57:08:2f:c8:6b:e4:89:62:3c:48:07: ec:30:b3:b4:12:25:43:b3:62:10:21:35:37:f4:e4: 05:2f:8a:96:cc:8a:bc:17:91:6c:1a:73:b8:49:50: 47:46:ac:94:a9:8d:07:1e:db:0e:ae:26:67:07:a2: 69:2a:3e:61:1f:03:91:ed:92:ef:bf:90:dc:33:13: ba:d8:c4:23:77:cc:76:a4:41:94:e5:0f:3b:c2:6e: 94:ed:17:00:bd:0a:f6:1a:e2:da:2c:22:39:7f:cb: 3b:ea:40:d1:7e:27:95:c2:f7:73:56:64:38:13:28: d1:6f:be:f1:1f:f7:71:1d:45:b2:97:5b:b4:b5:1d: 59:a5:52:5e:53:d4:87:76:30:ad:dc:ea:cc:70:69: 33:c5:39:14:d0:60:22:98:18:87:f6:67:14:be:36: f4:1f:e3:18:0d:56:3b:ef:34:80:1c:13:b3:32:65: 42:8a:fd:e6:65:9b:6f:83:02:67:d5:51:74:54:ce: b3:a8:dc:7e:a4:cd:9a:53:18:fe:04:b2:4a:c8:41: c9:75:9f:e5:59:45:09:ad:0b:c5:d6:5e:1c:cd:a1: 37:2b:96:4b:8b:d1:95:54:f0:7e:4b:97:44:23:86: d3:d0:d1:c7:07:2b:fe:e2:f2:b0:7c:f5:eb:91:b8: 9e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:61:7A:A1:F3:A4:CC:87:F1:52:F3:4D:93:AC:0F:6C:49:09:A9:1A X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E0D37D808DED11EEB1192A11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.58.245.0/24 IPv6: 2001:df4:d600::/48 Signature Algorithm: sha256WithRSAEncryption 72:f6:b9:0c:cb:1f:31:17:b5:66:a1:3b:43:d0:9d:70:90:cc: 13:39:74:66:4e:fc:89:c9:04:62:40:af:f5:3d:83:a2:94:52: 66:8e:3c:45:c6:3a:e8:a7:62:0e:80:39:9e:00:36:44:38:c3: 9c:cc:de:9e:51:c8:2e:0a:c5:07:1f:21:13:a2:c9:68:9b:2e: 38:ad:ee:93:74:3c:6b:8f:a3:20:24:91:03:61:5d:52:c9:d3: 0f:1f:4f:81:2b:2b:96:cb:10:ab:64:dc:c4:ac:95:22:01:0c: 55:45:81:e9:a7:12:2f:47:f1:11:eb:fd:bd:5f:57:66:83:8f: 85:92:72:8d:8a:9d:bf:9e:ef:f3:8b:a0:9f:53:0d:26:54:00: 68:28:66:9d:b7:f6:6e:59:d4:67:be:46:f8:9b:0a:0b:f8:1c: fb:c5:06:cd:e1:22:ae:48:32:bf:2a:d8:3d:24:00:03:d8:e2: 3c:e6:0e:78:b6:56:26:89:57:25:28:73:a4:58:ec:86:14:2b: 6e:ac:30:a9:59:7a:dd:f1:b0:61:0a:41:5a:b5:7f:4d:4f:fe: 60:ab:d4:65:02:5c:99:7f:b8:33:2a:59:3e:92:84:37:1b:ca: c2:d1:8d:a7:b6:7e:97:af:c0:0f:81:5f:6e:98:ab:4a:97:d8: 1a:0d:1e:66 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICTh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzI0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmU1NC0zYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFdNVwgvyGvkiWI8SAfsMLO0EiVDs2IQITU39OQFL4qWzIq8F5FsGnO4SVBH RqyUqY0HHtsOriZnB6JpKj5hHwOR7ZLvv5DcMxO62MQjd8x2pEGU5Q87wm6U7RcA vQr2GuLaLCI5f8s76kDRfieVwvdzVmQ4EyjRb77xH/dxHUWyl1u0tR1ZpVJeU9SH djCt3OrMcGkzxTkU0GAimBiH9mcUvjb0H+MYDVY77zSAHBOzMmVCiv3mZZtvgwJn 1VF0VM6zqNx+pM2aUxj+BLJKyEHJdZ/lWUUJrQvF1l4czaE3K5ZLi9GVVPB+S5dE I4bT0NHHByv+4vKwfPXrkbieQQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFN5heqHz pMyH8VLzTZOsD2xJCakaMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRTBEMzdEODA4 REVEMTFFRUIxMTkyQTExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADKOvUwDwQCAAIwCQMHACABDfTWADANBgkqhkiG9w0BAQsF AAOCAQEAcva5DMsfMRe1ZqE7Q9CdcJDMEzl0Zk78ickEYkCv9T2DopRSZo48RcY6 6KdiDoA5ngA2RDjDnMzenlHILgrFBx8hE6LJaJsuOK3uk3Q8a4+jICSRA2FdUsnT Dx9PgSsrlssQq2TcxKyVIgEMVUWB6acSL0fxEev9vV9XZoOPhZJyjYqdv57v84ug n1MNJlQAaChmnbf2blnUZ75G+JsKC/gc+8UGzeEirkgyvyrYPSQAA9jiPOYOeLZW JolXJShzpFjshhQrbqwwqVl63fGwYQpBWrV/TU/+YKvUZQJcmX+4MypZPpKENxvK wtGNp7Z+l6/AD4FfbpirSpfYGg0eZg== -----END CERTIFICATE-----Generated at Mon Sep 8 05:40:43 2025 by rpki-client