$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/4210D4508CD711F0A2DFAA45C4F9AE02.roa File: 4210D4508CD711F0A2DFAA45C4F9AE02.roa (raw, json) Hash identifier: 2JnfU/Mgp4zZ19X7p0k0eCs4HoUbNZM1uROYF0brrz8= Subject key identifier: 28:B5:89:DD:CC:25:C3:D5:B6:E3:05:53:D1:E6:1B:ED:6E:E1:DC:58 Certificate issuer: /CN=A91A7F6A/serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0 Certificate serial: 68 Authority key identifier: 95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/4210D4508CD711F0A2DFAA45C4F9AE02.roa Signing time: Mon 08 Sep 2025 17:14:20 +0000 ROA not before: Mon 08 Sep 2025 17:14:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153737 IP address blocks: 163.223.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F6A, serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0 Validity Not Before: Sep 8 17:14:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68bf0eec-9883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e7:0e:27:53:9e:26:6e:5c:11:93:84:fa:91: 79:00:dc:a8:11:25:14:82:4f:3c:f8:aa:96:82:37: 26:96:d8:7f:d8:21:a3:0c:f0:06:f3:4e:e6:01:f8: da:99:b2:aa:c3:1b:5a:41:4a:38:6e:76:4d:77:a1: 62:e9:59:9e:f1:b8:db:2e:29:ca:2a:fd:ed:1c:e1: 54:aa:b7:c0:0b:63:01:eb:08:f8:e8:cf:3a:8a:64: 38:8c:7e:a1:1c:74:34:52:87:61:80:bf:88:fb:3c: dc:2d:ff:3a:6d:ca:c5:21:f6:5f:06:06:f9:b1:dc: 30:78:bb:0b:ef:7e:c9:0a:d1:e6:e8:16:7a:c2:e1: f9:3d:7b:af:3a:c6:9a:e0:88:34:3b:2b:bb:59:80: fc:b0:17:41:46:82:82:10:36:72:7f:17:54:d4:79: 0c:97:f0:22:db:e6:ae:f1:41:d6:89:42:6b:8b:4e: 0e:10:6f:46:62:2c:47:43:45:8c:a5:23:df:ea:ce: 27:3d:90:40:1f:02:64:48:6f:84:ff:27:d5:a5:c0: c8:9c:b2:a9:5d:25:de:88:ee:c5:c0:e2:c5:51:ab: 89:0f:bd:3b:6c:a8:78:ec:07:70:97:54:54:30:b7: ae:1a:88:d7:bd:65:c5:ba:04:20:61:bc:57:7c:42: 16:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B5:89:DD:CC:25:C3:D5:B6:E3:05:53:D1:E6:1B:ED:6E:E1:DC:58 X509v3 Authority Key Identifier: keyid:95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/4210D4508CD711F0A2DFAA45C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.223.204.0/24 Signature Algorithm: sha256WithRSAEncryption 55:f9:f0:ec:b1:74:64:39:fd:a2:0e:46:bf:7b:5b:7a:c6:f2: 2c:b3:ce:63:a0:22:f7:c1:0a:ac:27:68:33:c1:3d:56:12:e9: f7:a4:3b:b9:cf:c8:04:aa:68:5c:7c:fc:51:8f:3d:53:bc:b6: eb:3e:99:32:d5:c3:8b:79:69:ee:92:ea:ed:73:71:83:1f:a0: 64:d0:40:13:78:2f:fd:a6:83:5a:b0:34:57:ab:44:4f:21:95: 7a:bc:2f:0b:df:60:cf:df:2a:ae:8b:1f:f5:ff:93:d2:31:4c: fe:0d:61:08:0c:5d:f2:e5:e2:40:4a:1b:b1:71:e7:c8:df:95: 65:28:e4:70:6a:e0:98:81:46:ed:ed:b1:f6:39:1e:ab:98:a9: b5:e3:cd:08:45:74:dd:6e:66:8d:75:49:e7:8e:bb:33:5f:63: c1:a2:05:b5:a4:30:86:a3:9a:22:07:b4:51:97:8e:a4:c1:ca: d2:ed:c4:24:30:71:70:57:56:4d:77:1b:ca:98:63:d4:a2:78: 01:2c:ab:cb:65:af:09:77:0e:8d:e8:2a:0f:80:e0:7f:d1:77: 2d:93:89:35:58:d4:41:dd:05:c9:74:46:03:60:6d:d5:d3:40: 68:c0:ee:1c:52:7f:66:bf:1a:65:c0:8d:5f:bc:86:35:a2:71: 38:07:b3:cd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0Y2QTExMC8GA1UEBRMoOTVENDJFQzJGNDY4QjdFMzhGOTU4QzhGQkE5MzE4MDEx N0RDMjZFMDAeFw0yNTA5MDgxNzE0MjBaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YmYwZWVjLTk4ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDz5w4nU54mblwRk4T6kXkA3KgRJRSCTzz4qpaCNyaW2H/YIaMM8AbzTuYB+NqZ sqrDG1pBSjhudk13oWLpWZ7xuNsuKcoq/e0c4VSqt8ALYwHrCPjozzqKZDiMfqEc dDRSh2GAv4j7PNwt/zptysUh9l8GBvmx3DB4uwvvfskK0eboFnrC4fk9e686xprg iDQ7K7tZgPywF0FGgoIQNnJ/F1TUeQyX8CLb5q7xQdaJQmuLTg4Qb0ZiLEdDRYyl I9/qzic9kEAfAmRIb4T/J9WlwMicsqldJd6I7sXA4sVRq4kPvTtsqHjsB3CXVFQw t64aiNe9ZcW6BCBhvFd8QhYHAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUKLWJ3cwl w9W24wVT0eYb7W7h3FgwHwYDVR0jBBgwFoAUldQuwvRot+OPlYyPupMYARfcJuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3RjZBLzdBNTI5ODc2MEFG MDExRjA4NTMxRDQzQ0M0RjlBRTAyL2xkUXV3dlJvdC1PUGxZeVB1cE1ZQVJmY0p1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbGRRdXd2Um90LU9QbFl5UHVwTVlBUmZjSnVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Y2QS83QTUyOTg3NjBBRjAxMUYwODUzMUQ0M0NDNEY5QUUwMi80MjEwRDQ1MDhD RDcxMUYwQTJERkFBNDVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKPfzDANBgkqhkiG9w0BAQsFAAOCAQEAVfnw7LF0ZDn9og5G v3tbesbyLLPOY6Ai98EKrCdoM8E9VhLp96Q7uc/IBKpoXHz8UY89U7y26z6ZMtXD i3lp7pLq7XNxgx+gZNBAE3gv/aaDWrA0V6tETyGVerwvC99gz98qrosf9f+T0jFM /g1hCAxd8uXiQEobsXHnyN+VZSjkcGrgmIFG7e2x9jkeq5iptePNCEV03W5mjXVJ 5467M19jwaIFtaQwhqOaIge0UZeOpMHK0u3EJDBxcFdWTXcbyphj1KJ4ASyry2Wv CXcOjegqD4Dgf9F3LZOJNVjUQd0FyXRGA2Bt1dNAaMDuHFJ/Zr8aZcCNX7yGNaJx OAezzQ== -----END CERTIFICATE-----Generated at Tue Sep 9 23:03:01 2025 by rpki-client