$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/E08658208D2D11F09327643FC4F9AE02.roa File: E08658208D2D11F09327643FC4F9AE02.roa (raw, json) Hash identifier: 41FC6Qh9FHv4UtlaWBSLbf5ObxYVTSL2scuznbl1Qds= Subject key identifier: 05:76:76:12:D6:83:95:46:3D:33:1D:77:5D:35:DD:D3:C7:FE:60:47 Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Certificate serial: 0128 Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/E08658208D2D11F09327643FC4F9AE02.roa Signing time: Tue 09 Sep 2025 03:34:23 +0000 ROA not before: Tue 09 Sep 2025 03:34:23 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 45652 IP address blocks: 43.252.120.0/22 maxlen: 24 103.233.80.0/22 maxlen: 24 110.34.139.0/24 maxlen: 24 110.34.158.0/24 maxlen: 24 110.34.162.0/23 maxlen: 24 110.34.164.0/24 maxlen: 24 110.34.166.0/24 maxlen: 24 110.34.180.0/23 maxlen: 24 110.34.183.0/24 maxlen: 24 110.34.184.0/23 maxlen: 24 110.34.186.0/23 maxlen: 24 110.34.188.0/23 maxlen: 24 110.34.190.0/23 maxlen: 24 110.34.220.0/22 maxlen: 24 2401:4a40::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Validity Not Before: Sep 9 03:34:23 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68bfa03f-2cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:07:73:bd:08:4f:05:bc:e5:00:d3:bf:bd:b2: 54:75:ba:dd:c3:5b:bc:27:66:1d:41:7d:4b:0b:e3: f1:85:22:8a:8a:f7:42:ca:bd:76:6e:a6:33:46:3b: a4:cf:06:db:87:a0:ab:ff:cb:da:6d:af:3d:46:eb: 2d:cc:eb:a1:77:7b:69:b0:1a:ea:b2:60:ac:2e:a0: 9e:22:01:d9:e7:37:d5:7c:61:26:fb:b7:ec:d0:4e: 3f:b7:61:04:28:5b:29:35:65:2e:e2:5d:e4:52:9e: 1a:74:5c:07:6d:a2:24:b1:55:31:95:58:52:7f:d9: e0:2c:02:d6:03:0a:d4:4a:df:58:e2:38:03:87:57: 35:51:18:86:00:6d:e8:a9:14:ea:79:c1:dd:a5:43: 02:1f:94:e9:c1:e3:d0:90:fd:9f:1b:81:0d:28:d2: 03:c3:99:d4:95:86:4d:d3:98:03:1a:85:ce:18:b3: 0e:e2:c0:3a:fd:76:f8:87:8a:94:c9:1e:00:33:05: cc:38:91:19:59:54:fd:14:c4:bf:e6:b8:c1:7b:21: d7:af:a5:db:a6:ba:be:45:28:26:e5:3a:d4:b7:11: e2:a7:e1:45:03:41:49:6c:6c:55:13:77:01:cc:51: 24:d9:44:10:d2:fb:90:52:9d:00:11:83:42:17:56: 33:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:76:76:12:D6:83:95:46:3D:33:1D:77:5D:35:DD:D3:C7:FE:60:47 X509v3 Authority Key Identifier: keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/E08658208D2D11F09327643FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.120.0/22 103.233.80.0/22 110.34.139.0/24 110.34.158.0/24 110.34.162.0-110.34.164.255 110.34.166.0/24 110.34.180.0/23 110.34.183.0-110.34.191.255 110.34.220.0/22 IPv6: 2401:4a40::/32 Signature Algorithm: sha256WithRSAEncryption 9c:6c:94:98:c6:df:34:40:5f:f0:c9:37:d3:7f:e5:f6:35:4e: cd:16:86:3d:45:56:c3:9d:c6:03:5d:6f:6a:ea:1d:d6:72:1c: d1:ef:f9:2d:39:5c:1f:d2:ba:dd:7f:3f:64:22:66:2b:07:5a: b3:5a:ae:c3:0b:b8:2a:67:17:82:9f:79:ed:5d:7c:f0:a2:8d: 6d:a1:e2:86:88:0d:c6:7b:c0:68:3b:9e:7f:a1:01:00:fe:92: 28:6a:23:a2:2a:bb:05:f9:b5:41:2b:36:c0:a0:f7:bc:5d:49: 88:bd:e7:50:3f:ee:12:62:3b:43:19:d3:ee:49:e3:c2:71:0d: 75:df:9f:99:d8:74:6d:5a:58:a2:5a:ff:97:73:41:be:29:9b: 53:a2:c0:1b:cc:6b:75:b6:f3:04:07:24:c6:8b:c1:97:55:97: 64:bd:65:95:6b:ec:f1:09:53:90:b4:a5:f7:3e:79:ad:ed:35: 72:67:fc:41:e9:25:f8:9e:6f:47:41:c1:10:73:e8:ad:d5:d8: 6b:42:1c:a7:d5:05:16:54:8a:68:4d:85:4a:fc:d0:93:96:12: 53:3d:10:7d:1a:69:3d:b0:6b:2b:89:a6:39:2e:5b:c3:5a:c5: d3:4b:fb:f1:79:58:6c:95:2e:fe:b9:0a:29:5e:9c:74:ef:fd: 92:a0:1c:0b -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM1MzIxMTAvBgNVBAUTKEJDQUIzRTc2Rjg0RUQ0Mzc0MkYyQTA4MTI0MjcwOEU3 OTlDRTFCNUYwHhcNMjUwOTA5MDMzNDIzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGJmYTAzZi0yY2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3AdzvQhPBbzlANO/vbJUdbrdw1u8J2YdQX1LC+PxhSKKivdCyr12bqYzRjuk zwbbh6Cr/8vaba89RustzOuhd3tpsBrqsmCsLqCeIgHZ5zfVfGEm+7fs0E4/t2EE KFspNWUu4l3kUp4adFwHbaIksVUxlVhSf9ngLALWAwrUSt9Y4jgDh1c1URiGAG3o qRTqecHdpUMCH5TpwePQkP2fG4ENKNIDw5nUlYZN05gDGoXOGLMO4sA6/Xb4h4qU yR4AMwXMOJEZWVT9FMS/5rjBeyHXr6Xbprq+RSgm5TrUtxHip+FFA0FJbGxVE3cB zFEk2UQQ0vuQUp0AEYNCF1YzzQIDAQABo4IC5DCCAuAwHQYDVR0OBBYEFAV2dhLW g5VGPTMdd1013dPH/mBHMB8GA1UdIwQYMBaAFLyrPnb4TtQ3QvKggSQnCOeZzhtf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzUzMi9EQUEwRDBCNDAz N0UxMUVGODUyMEU3NThDNEY5QUUwMi92S3MtZHZoTzFEZEM4cUNCSkNjSTU1bk9H MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLcy1kdmhPMURkQzhxQ0JKQ2NJNTVuT0cxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUM1MzIvREFBMEQwQjQwMzdFMTFFRjg1MjBFNzU4QzRGOUFFMDIvRTA4NjU4MjA4 RDJEMTFGMDkzMjc2NDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbgYIKwYBBQUHAQcBAf8E XzBdMEwEAgABMEYDBAIr/HgDBAJn6VADBABuIosDBABuIp4wDAMEAW4iogMEAG4i pAMEAG4ipgMEAW4itDAMAwQAbiK3AwQGbiKAAwQCbiLcMA0EAgACMAcDBQAkAUpA MA0GCSqGSIb3DQEBCwUAA4IBAQCcbJSYxt80QF/wyTfTf+X2NU7NFoY9RVbDncYD XW9q6h3WchzR7/ktOVwf0rrdfz9kImYrB1qzWq7DC7gqZxeCn3ntXXzwoo1toeKG iA3Ge8BoO55/oQEA/pIoaiOiKrsF+bVBKzbAoPe8XUmIvedQP+4SYjtDGdPuSePC cQ1135+Z2HRtWliiWv+Xc0G+KZtTosAbzGt1tvMEByTGi8GXVZdkvWWVa+zxCVOQ tKX3Pnmt7TVyZ/xB6SX4nm9HQcEQc+it1dhrQhyn1QUWVIpoTYVK/NCTlhJTPRB9 Gmk9sGsriaY5LlvDWsXTS/vxeVhslS7+uQopXpx07/2SoBwL -----END CERTIFICATE-----Generated at Wed Sep 10 04:59:22 2025 by rpki-client