$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/675D716092EE11F0990BEA65C4F9AE02.roa File: 675D716092EE11F0990BEA65C4F9AE02.roa (raw, json) Hash identifier: 4QCa8Wv6sDtZDWi9ABDwu1xQIu9iLo9GAI+6YdZfu04= Subject key identifier: E6:3A:83:15:EC:6A:51:23:03:5B:A6:8F:0F:E7:E7:1D:6A:05:33:9F Certificate issuer: /CN=A91AC567/serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC Certificate serial: 0E Authority key identifier: 85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/675D716092EE11F0990BEA65C4F9AE02.roa Signing time: Tue 16 Sep 2025 11:15:08 +0000 ROA not before: Tue 16 Sep 2025 11:15:08 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 131247 IP address blocks: 202.66.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC567, serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC Validity Not Before: Sep 16 11:15:08 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c946bc-72aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3f:00:9f:70:b7:3c:af:f9:f9:b1:ff:95:30: ac:b2:bf:45:e7:f3:cc:e6:b4:22:58:69:80:7c:23: df:f2:75:07:77:74:bd:b5:07:4b:b7:c8:29:88:17: e9:f7:ca:bf:c1:31:12:a8:34:58:2e:de:14:c2:61: f6:f8:02:39:95:28:03:14:3c:b2:70:7a:d5:79:dd: 26:8b:f2:43:e7:b8:0a:b6:a2:ce:f9:ef:47:a7:fb: 38:dd:fc:7b:4a:09:d8:b2:af:23:60:52:52:a0:c1: 71:21:d6:00:f8:3f:e2:51:ac:5b:af:d6:ad:b5:75: d6:19:ff:6c:1f:87:5a:88:8c:ed:af:97:24:44:fd: 4d:25:86:63:22:01:4b:c3:37:fd:d0:ae:e7:cf:a0: b7:aa:c9:87:d8:00:fb:67:0a:9d:b0:e9:f9:70:bb: 4e:f9:d3:34:fe:37:ec:5a:57:6d:1a:a5:52:c8:8c: 2b:a1:11:57:8a:8f:cf:fb:e3:a2:12:b2:ec:b9:90: f9:0f:bd:c4:c5:3d:ba:70:ac:f1:8d:ed:84:97:c3: 11:6f:82:b4:90:1a:ba:9e:ac:57:32:b8:ec:82:88: 0f:dc:10:96:f6:f7:4e:a2:34:7b:93:4b:1c:19:3f: 73:48:95:40:fd:c9:24:d2:24:93:a3:ac:46:ab:61: ce:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3A:83:15:EC:6A:51:23:03:5B:A6:8F:0F:E7:E7:1D:6A:05:33:9F X509v3 Authority Key Identifier: keyid:85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/675D716092EE11F0990BEA65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.66.183.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:88:d4:c4:10:60:75:68:7c:ba:7d:59:0b:51:28:42:f9:1d: 55:45:e0:8b:8f:53:af:99:ac:c4:79:bd:07:f3:15:d1:64:c0: 48:6a:86:6e:4b:dc:8e:36:84:2f:10:60:ae:0b:12:79:a5:8c: 62:45:9b:f9:76:fa:46:ff:f7:73:c3:fd:04:15:d8:8e:be:ce: c4:c9:f4:ef:19:74:eb:c6:8c:e6:5c:8c:0b:14:df:94:f5:01: 8c:9b:c0:58:7c:b8:11:56:3c:a5:cc:61:94:af:69:da:26:b4: ea:d9:f4:aa:3a:19:f3:10:71:c3:25:8e:a1:10:be:94:4a:ad: 4e:05:55:26:6b:f4:c2:9f:d3:45:7d:1a:90:fa:f5:57:33:c4: 6c:8a:85:4a:6c:63:08:cc:0a:24:02:32:77:d9:7a:87:ef:99: 99:a2:25:fe:9a:2e:e3:ae:81:41:7b:a9:2e:dd:13:5b:5c:52: 75:5c:54:50:d5:a9:66:02:fb:9a:9a:1a:82:e4:ef:71:a2:35: 17:a7:a5:06:ca:6e:45:0f:6f:0d:2f:c6:67:e4:d7:f8:b6:2b: af:cc:53:b4:5a:aa:66:0c:e1:aa:8b:3c:9d:24:89:09:d7:84: a3:e7:3d:3d:0e:69:aa:fb:1b:ec:0f:7a:a2:4e:d4:c7:55:88: 78:05:6a:58 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzU2NzExMC8GA1UEBRMoODU2QkMxOUZFRUJFQjBCNTU5NUYwM0JCMTIxNDgzRTUz QTgxMDNDQzAeFw0yNTA5MTYxMTE1MDhaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4Yzk0NmJjLTcyYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCPwCfcLc8r/n5sf+VMKyyv0Xn88zmtCJYaYB8I9/ydQd3dL21B0u3yCmIF+n3 yr/BMRKoNFgu3hTCYfb4AjmVKAMUPLJwetV53SaL8kPnuAq2os7570en+zjd/HtK CdiyryNgUlKgwXEh1gD4P+JRrFuv1q21ddYZ/2wfh1qIjO2vlyRE/U0lhmMiAUvD N/3QrufPoLeqyYfYAPtnCp2w6flwu0750zT+N+xaV20apVLIjCuhEVeKj8/746IS suy5kPkPvcTFPbpwrPGN7YSXwxFvgrSQGrqerFcyuOyCiA/cEJb2906iNHuTSxwZ P3NIlUD9ySTSJJOjrEarYc7FAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU5jqDFexq USMDW6aPD+fnHWoFM58wHwYDVR0jBBgwFoAUhWvBn+6+sLVZXwO7EhSD5TqBA8ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNTY3LzQwRUYyRkQwODZD RjExRjBCODcwN0E1NEM0RjlBRTAyL2hXdkJuLTYtc0xWWlh3TzdFaFNENVRxQkE4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFd2Qm4tNi1zTFZaWHdPN0VoU0Q1VHFCQTh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzU2Ny80MEVGMkZEMDg2Q0YxMUYwQjg3MDdBNTRDNEY5QUUwMi82NzVENzE2MDky RUUxMUYwOTkwQkVBNjVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMpCtzANBgkqhkiG9w0BAQsFAAOCAQEAC4jUxBBgdWh8un1Z C1EoQvkdVUXgi49Tr5msxHm9B/MV0WTASGqGbkvcjjaELxBgrgsSeaWMYkWb+Xb6 Rv/3c8P9BBXYjr7OxMn07xl068aM5lyMCxTflPUBjJvAWHy4EVY8pcxhlK9p2ia0 6tn0qjoZ8xBxwyWOoRC+lEqtTgVVJmv0wp/TRX0akPr1VzPEbIqFSmxjCMwKJAIy d9l6h++ZmaIl/pou466BQXupLt0TW1xSdVxUUNWpZgL7mpoaguTvcaI1F6elBspu RQ9vDS/GZ+TX+LYrr8xTtFqqZgzhqos8nSSJCdeEo+c9PQ5pqvsb7A96ok7Ux1WI eAVqWA== -----END CERTIFICATE-----Generated at Fri Sep 19 02:29:03 2025 by rpki-client