$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/7CF84F084B9111EBBA09CA72C4F9AE02.roa File: 7CF84F084B9111EBBA09CA72C4F9AE02.roa (raw, json) Hash identifier: HBup3egCFQ+j4w8tn/YgKXDolvmk1GZOCKm/FjBELHI= Subject key identifier: 61:01:1B:12:09:09:A2:81:52:2B:8B:77:AC:FA:96:9A:3D:F9:EA:45 Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 0816 Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/7CF84F084B9111EBBA09CA72C4F9AE02.roa Signing time: Tue 02 Sep 2025 21:42:07 +0000 ROA not before: Tue 02 Sep 2025 21:42:07 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 133495 IP address blocks: 110.93.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 19:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2070 (0x816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Validity Not Before: Sep 2 21:42:07 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b764af-4cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:40:75:be:b6:4d:2f:83:f0:69:55:d8:ae:2f: ab:bc:7d:1b:34:cc:2a:eb:90:db:f0:bb:2d:be:34: c5:4a:8a:02:25:b4:56:20:62:74:53:f6:ff:22:ba: 89:8a:7b:94:a5:b6:8d:99:3d:4b:d5:4f:c9:dd:40: c7:25:15:39:76:31:c6:cd:c1:ff:27:1b:29:e5:3a: 8e:1e:f8:74:94:3e:26:87:1e:f6:a6:34:ca:0b:ba: 5a:d9:3f:32:12:20:96:f3:4d:6f:d5:65:e7:f0:19: 60:1c:93:bf:3c:06:5b:d7:42:79:c2:3f:a6:b0:15: 95:b2:ab:86:6d:cd:02:cc:ad:01:e0:4e:c8:bb:11: db:ea:df:11:5b:3d:c8:99:e7:67:15:cd:ef:7b:98: 3c:45:da:25:da:ef:e4:a2:0d:94:d9:27:78:9e:89: 18:5c:fa:3a:42:0d:35:44:8c:2f:8b:0f:fb:1c:51: f2:7a:70:40:2d:c8:c5:38:68:8d:ff:ff:c2:8d:a0: 8b:e0:a8:3c:f7:42:1e:a4:b3:8d:c1:66:01:8e:82: 92:f8:29:98:c3:b0:24:86:cd:cb:6e:f5:ff:6f:7b: 4d:6c:4b:17:a4:96:a5:1d:00:2d:37:6d:f5:16:1f: bb:7b:df:1f:79:71:2a:ef:34:b7:bd:ed:3b:0c:25: 39:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:01:1B:12:09:09:A2:81:52:2B:8B:77:AC:FA:96:9A:3D:F9:EA:45 X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/7CF84F084B9111EBBA09CA72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.93.193.0/24 Signature Algorithm: sha256WithRSAEncryption 70:ff:ef:7a:4d:d6:b8:d0:1d:51:b1:8d:16:df:ee:5a:81:59: 5d:ed:b4:eb:ee:24:ec:54:ba:7d:f2:c7:4b:c4:52:22:0a:a7: a8:ee:0e:7b:42:58:2e:f3:39:28:58:0e:e6:b2:6c:6e:f4:71: c9:b8:f6:f6:b6:26:1f:f5:c9:dd:dc:06:14:92:b9:99:66:3a: 48:7e:73:98:33:3a:ca:6c:ed:19:49:69:72:31:14:cc:92:97: b9:68:a6:fd:a9:0d:2e:42:97:af:94:13:6d:78:56:3f:ea:4f: 8d:e6:a0:8b:cc:b3:35:51:02:19:b8:8c:27:3e:81:83:8b:e3: 14:a4:2e:6f:36:7c:b8:c2:c4:86:cc:03:36:77:28:d9:3b:00: ab:dd:ce:fb:57:b7:2f:27:24:e2:a8:6d:72:9d:6c:5f:b2:45: d4:73:8a:09:05:98:55:3b:f1:48:ce:41:b9:97:fa:22:37:9a: 7a:75:5d:54:64:20:ae:78:d6:0d:b1:f3:37:14:87:ca:34:22: 80:8e:91:86:b8:2b:2b:1e:5d:78:2e:d3:04:b5:04:71:94:06: 7b:e5:96:cc:57:4f:ed:29:41:64:3b:72:ce:9b:7c:c2:da:aa: 62:4d:48:73:3f:07:9b:60:7d:13:eb:1f:a9:4b:e1:ee:d0:b8: 0a:a3:df:3b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjUwOTAyMjE0MjA3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3NjRhZi00Y2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEB1vrZNL4PwaVXYri+rvH0bNMwq65Db8LstvjTFSooCJbRWIGJ0U/b/IrqJ inuUpbaNmT1L1U/J3UDHJRU5djHGzcH/Jxsp5TqOHvh0lD4mhx72pjTKC7pa2T8y EiCW801v1WXn8BlgHJO/PAZb10J5wj+msBWVsquGbc0CzK0B4E7IuxHb6t8RWz3I mednFc3ve5g8Rdol2u/kog2U2Sd4nokYXPo6Qg01RIwviw/7HFHyenBALcjFOGiN ///CjaCL4Kg890IepLONwWYBjoKS+CmYw7Akhs3LbvX/b3tNbEsXpJalHQAtN231 Fh+7e98feXEq7zS3ve07DCU5MQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGEBGxIJ CaKBUiuLd6z6lpo9+epFMB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIyMEIvQkE3MUI2NDgxMjAzMTFFQkJBQTE5NDE0QzRGOUFFMDIvN0NGODRGMDg0 QjkxMTFFQkJBMDlDQTcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABuXcEwDQYJKoZIhvcNAQELBQADggEBAHD/73pN1rjQHVGx jRbf7lqBWV3ttOvuJOxUun3yx0vEUiIKp6juDntCWC7zOShYDuaybG70ccm49va2 Jh/1yd3cBhSSuZlmOkh+c5gzOsps7RlJaXIxFMySl7lopv2pDS5Cl6+UE214Vj/q T43moIvMszVRAhm4jCc+gYOL4xSkLm82fLjCxIbMAzZ3KNk7AKvdzvtXty8nJOKo bXKdbF+yRdRzigkFmFU78UjOQbmX+iI3mnp1XVRkIK541g2x8zcUh8o0IoCOkYa4 KyseXXgu0wS1BHGUBnvllsxXT+0pQWQ7cs6bfMLaqmJNSHM/B5tgfRPrH6lL4e7Q uAqj3zs= -----END CERTIFICATE-----Generated at Sat Sep 6 23:10:57 2025 by rpki-client