$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/301DED0C86F911F08DBDFA61C4F9AE02.roa File: 301DED0C86F911F08DBDFA61C4F9AE02.roa (raw, json) Hash identifier: AdxHV9vvwlkePP0ziZ0q7aeuDgAw2EtvgFWx56k+iSo= Subject key identifier: 70:4E:D6:0A:C1:EA:06:9E:CD:7D:7F:FE:FC:8D:6A:D0:0D:88:91:76 Certificate issuer: /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Certificate serial: 45 Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/301DED0C86F911F08DBDFA61C4F9AE02.roa Signing time: Mon 01 Sep 2025 06:02:06 +0000 ROA not before: Mon 01 Sep 2025 06:02:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17660 IP address blocks: 163.227.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Validity Not Before: Sep 1 06:02:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68b536de-5ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:c9:24:12:ab:9f:41:f7:0e:14:c6:c7:69: 53:bd:4d:bf:73:a9:77:8e:f6:cd:2c:62:ae:32:0d: 11:75:3a:55:92:0f:c4:ff:1d:d1:ef:fe:7d:77:e2: 6c:e5:fe:fe:0f:d5:22:d3:12:f1:8f:e3:26:eb:8b: fe:f5:98:14:cb:07:0b:ca:91:75:a5:76:32:60:b2: 8a:26:67:0d:1e:df:32:b4:93:cf:bb:e6:ba:b2:8b: 6a:5b:c3:14:63:42:00:a4:6e:65:30:cc:d9:dc:b6: 5a:fd:c6:d2:07:1d:dc:21:81:22:4d:13:18:a9:cd: 7c:a6:39:0d:66:26:66:3d:d4:8e:aa:58:f4:80:28: 71:13:df:37:ea:34:61:45:db:16:5c:b4:72:a6:9d: 20:30:5d:63:7c:a2:0c:2a:c1:84:12:b3:76:3b:c4: d9:8d:79:35:aa:06:f8:70:0c:39:24:ac:3c:d8:e5: 00:7b:ee:d7:dd:c1:a3:2e:ed:bb:1c:dd:54:2d:77: fc:0a:bb:6e:88:c3:99:31:ee:13:f1:45:36:eb:8c: 7c:2a:84:77:df:0b:01:ff:77:d8:a0:c2:82:1d:f2: ba:b5:bb:ab:31:86:c7:6e:b1:7c:4c:82:75:09:aa: 65:52:e1:d3:0a:b9:a2:e2:6e:1c:1b:69:23:60:aa: 92:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4E:D6:0A:C1:EA:06:9E:CD:7D:7F:FE:FC:8D:6A:D0:0D:88:91:76 X509v3 Authority Key Identifier: keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/301DED0C86F911F08DBDFA61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.227.22.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:25:ca:49:9b:f8:91:2e:70:2c:8d:fd:fb:8e:89:57:22:02: 33:f8:6d:d4:74:a3:71:05:8a:bd:a2:d8:9c:73:f9:49:67:dd: be:26:bc:16:eb:50:b8:34:08:f5:f5:88:35:4a:97:d9:a9:bc: cc:03:39:b8:23:b2:90:c8:a7:b0:50:23:e8:b4:72:a1:45:86: b9:41:5e:14:cb:fb:64:ee:98:70:f3:92:dc:05:ce:f8:2d:b2: 18:8b:c2:6e:b1:fe:82:58:7e:12:ba:f2:d5:ec:ff:70:55:bb: 34:59:2d:da:ec:69:c5:f6:ff:cf:9f:d1:59:b3:d7:7e:be:55: 95:d0:09:f9:d0:09:0c:fa:68:a9:fa:33:91:fb:38:dc:d1:46: 6e:39:6f:35:26:90:86:69:27:55:95:44:ac:fb:24:52:04:fe: 5b:bd:95:8b:65:f1:de:40:96:46:7d:1e:58:ee:93:26:1b:f3: db:2f:24:40:0b:70:c3:94:4d:a1:3a:15:eb:b2:bf:7d:29:e4: 3b:c6:e8:78:58:fc:c6:68:c1:26:9e:67:a3:30:91:97:b4:e4: e1:37:1e:85:bc:91:48:26:a4:66:15:d1:35:ac:51:0d:83:53: 68:28:cf:6d:93:be:5c:d3:2c:da:ac:8e:05:fc:b4:79:d3:a5: 28:fe:b9:13 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUZDRjExMC8GA1UEBRMoOThBRTk1NkQ0MjZFMTYwMkNFRDhCQjcyNTg4RjYyQTNE QTEyQTk1NTAeFw0yNTA5MDEwNjAyMDZaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YjUzNmRlLTVjYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6DskkEqufQfcOFMbHaVO9Tb9zqXeO9s0sYq4yDRF1OlWSD8T/HdHv/n134mzl /v4P1SLTEvGP4ybri/71mBTLBwvKkXWldjJgsoomZw0e3zK0k8+75rqyi2pbwxRj QgCkbmUwzNnctlr9xtIHHdwhgSJNExipzXymOQ1mJmY91I6qWPSAKHET3zfqNGFF 2xZctHKmnSAwXWN8ogwqwYQSs3Y7xNmNeTWqBvhwDDkkrDzY5QB77tfdwaMu7bsc 3VQtd/wKu26Iw5kx7hPxRTbrjHwqhHffCwH/d9igwoId8rq1u6sxhsdusXxMgnUJ qmVS4dMKuaLibhwbaSNgqpKFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUcE7WCsHq Bp7NfX/+/I1q0A2IkXYwHwYDVR0jBBgwFoAUmK6VbUJuFgLO2LtyWI9io9oSqVUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RkNGL0I4NEM2MDNBMUU1 RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdMTzJMdHlXSTlpbzlvU3FW VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUs2VmJVSnVGZ0xPMkx0eVdJOWlvOW9TcVZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUZDRi9CODRDNjAzQTFFNUYxMUYwOUU2QTZCNEZDNEY5QUUwMi8zMDFERUQwQzg2 RjkxMUYwOERCREZBNjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaPjFjANBgkqhkiG9w0BAQsFAAOCAQEATiXKSZv4kS5wLI39 +46JVyICM/ht1HSjcQWKvaLYnHP5SWfdvia8FutQuDQI9fWINUqX2am8zAM5uCOy kMinsFAj6LRyoUWGuUFeFMv7ZO6YcPOS3AXO+C2yGIvCbrH+glh+Erry1ez/cFW7 NFkt2uxpxfb/z5/RWbPXfr5VldAJ+dAJDPpoqfozkfs43NFGbjlvNSaQhmknVZVE rPskUgT+W72Vi2Xx3kCWRn0eWO6TJhvz2y8kQAtww5RNoToV67K/fSnkO8boeFj8 xmjBJp5nozCRl7Tk4TcehbyRSCakZhXRNaxRDYNTaCjPbZO+XNMs2qyOBfy0edOl KP65Ew== -----END CERTIFICATE-----Generated at Fri Sep 19 05:28:54 2025 by rpki-client