$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa File: AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa (raw, json) Hash identifier: gFJk3bH7mXlCaj14z9kV9xuGKxMKaTna9ngpZWUJXOU= Subject key identifier: 81:22:EE:1C:D3:FC:D4:B2:29:C1:FE:16:8C:EA:78:D3:39:39:9F:B5 Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 34D1 Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa Signing time: Wed 20 Aug 2025 14:50:59 +0000 ROA not before: Wed 20 Aug 2025 14:50:59 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 38592 IP address blocks: 101.2.160.0/21 maxlen: 24 103.5.232.0/22 maxlen: 24 119.10.168.0/22 maxlen: 22 119.10.168.0/24 maxlen: 24 119.10.169.0/24 maxlen: 24 119.10.170.0/24 maxlen: 24 119.10.171.0/24 maxlen: 24 119.10.172.0/22 maxlen: 24 163.47.84.0/22 maxlen: 24 202.65.168.0/21 maxlen: 24 203.80.188.0/22 maxlen: 24 2402:2300::/32 maxlen: 32 2402:2300::/48 maxlen: 48 2402:2300:1211::/48 maxlen: 48 2402:2300:1212::/48 maxlen: 48 2402:2300:1215::/48 maxlen: 48 2402:2300:1220::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13521 (0x34d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28, serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: Aug 20 14:50:59 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a5e0d3-4d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:fc:d2:cc:d7:41:bd:6e:ce:86:33:76:00: c5:31:9e:9e:cc:12:21:9a:20:41:46:d6:a6:00:cf: f0:47:39:0f:96:9f:f2:0b:50:8f:eb:bd:9d:e2:7a: a9:d7:b6:fa:e5:c6:3c:af:b8:bc:69:97:4d:76:72: e7:03:5f:48:af:83:ed:5f:94:9b:71:c4:57:07:92: b3:cf:93:fc:82:01:df:18:5a:4d:69:ae:31:a5:b2: 54:30:eb:64:fa:df:43:22:c7:d4:78:6e:a5:d5:05: 09:a3:dd:3e:d2:52:00:03:06:66:da:43:0f:50:e0: bf:14:d0:b7:cc:97:2d:41:9c:95:95:de:59:07:75: 41:07:30:4a:bb:43:70:23:63:51:b2:38:28:55:ef: 3e:4d:9c:21:94:72:57:e2:32:6e:8f:7a:30:9b:1a: 1f:66:dd:e3:22:49:61:5d:f4:f4:c1:b0:0a:02:7f: 69:1d:8d:b0:cd:28:55:03:a9:b3:58:23:39:dc:8f: 53:ad:cf:67:34:d3:57:17:f8:95:ee:57:e1:e4:70: 8e:54:9f:7a:a2:c3:87:71:d6:1b:39:30:96:99:74: f6:ff:da:02:dc:c9:3d:fb:34:6e:ea:40:a0:e9:9f: c6:4a:90:03:39:28:f9:e5:7b:b6:49:73:68:7b:20: 84:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:22:EE:1C:D3:FC:D4:B2:29:C1:FE:16:8C:EA:78:D3:39:39:9F:B5 X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.2.160.0/21 103.5.232.0/22 119.10.168.0/21 163.47.84.0/22 202.65.168.0/21 203.80.188.0/22 IPv6: 2402:2300::/32 Signature Algorithm: sha256WithRSAEncryption 14:50:7d:ac:f1:30:95:dc:6a:d8:1b:66:0f:df:d6:fb:ca:af: 87:7f:29:09:65:7b:53:32:1e:b4:97:99:81:87:f1:76:2c:6f: 44:52:e0:66:4a:a2:47:d9:b8:0a:f8:93:cd:a3:62:20:d5:8d: c3:2a:8b:44:9d:a3:94:6e:4f:d1:a6:0a:01:24:62:5c:e8:a9: 55:cd:07:39:f3:5a:0a:6c:26:4b:02:2e:af:9d:08:c3:f4:dc: db:b1:d6:5d:b2:43:bf:39:c5:5f:54:e2:6a:14:e0:a3:3f:9b: 17:1e:7e:f0:fe:fa:50:10:73:fe:fa:e9:6e:90:ec:77:7f:17: 56:82:40:05:bf:7a:e5:d4:1a:57:20:cb:7b:84:9d:e9:a2:98: 87:d3:65:3e:02:03:e5:6f:d4:97:ab:6c:cf:85:2d:79:2c:eb: e7:ae:a0:5e:1e:3d:ad:0a:ad:5e:08:26:bf:73:8b:0c:bd:a9: e8:05:61:4c:d4:39:f2:2f:e4:2b:9e:e9:db:a0:b4:59:c5:74: 16:4e:ba:7f:26:49:6b:ef:f3:2e:71:58:db:52:0a:01:79:ca: c0:75:93:27:6a:33:48:3c:88:61:1f:33:50:b8:ba:6d:39:e3: df:95:fe:62:0f:82:fc:58:a0:15:c0:ac:93:45:5c:11:7e:ec: 75:22:2b:6a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICNNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjUwODIwMTQ1MDU5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE1ZTBkMy00ZDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbn80szXQb1uzoYzdgDFMZ6ezBIhmiBBRtamAM/wRzkPlp/yC1CP672d4nqp 17b65cY8r7i8aZdNdnLnA19Ir4PtX5SbccRXB5Kzz5P8ggHfGFpNaa4xpbJUMOtk +t9DIsfUeG6l1QUJo90+0lIAAwZm2kMPUOC/FNC3zJctQZyVld5ZB3VBBzBKu0Nw I2NRsjgoVe8+TZwhlHJX4jJuj3owmxofZt3jIklhXfT0wbAKAn9pHY2wzShVA6mz WCM53I9Trc9nNNNXF/iV7lfh5HCOVJ96osOHcdYbOTCWmXT2/9oC3Mk9+zRu6kCg 6Z/GSpADOSj55Xu2SXNoeyCEfwIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFIEi7hzT /NSyKcH+FozqeNM5OZ+1MB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZEMjgvNjFENDUzMTAxRDkyMTFFMjlDNUYzQUY1MDhCMDJDRDIvQUE2OTY1RTRD RDhEMTFFRjhERjJFNjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MCoEAgABMCQDBANlAqADBAJnBegDBAN3CqgDBAKjL1QDBAPKQagDBALLULww DQQCAAIwBwMFACQCIwAwDQYJKoZIhvcNAQELBQADggEBABRQfazxMJXcatgbZg/f 1vvKr4d/KQlle1MyHrSXmYGH8XYsb0RS4GZKokfZuAr4k82jYiDVjcMqi0Sdo5Ru T9GmCgEkYlzoqVXNBznzWgpsJksCLq+dCMP03Nux1l2yQ785xV9U4moU4KM/mxce fvD++lAQc/766W6Q7Hd/F1aCQAW/euXUGlcgy3uEnemimIfTZT4CA+Vv1JerbM+F LXks6+euoF4ePa0KrV4IJr9ziwy9qegFYUzUOfIv5Cue6dugtFnFdBZOun8mSWvv 8y5xWNtSCgF5ysB1kydqM0g8iGEfM1C4um0549+V/mIPgvxYoBXArJNFXBF+7HUi K2o= -----END CERTIFICATE-----Generated at Fri Aug 22 18:54:36 2025 by rpki-client