$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/6C18BEE0519811F08E123360C4F9AE02.roa File: 6C18BEE0519811F08E123360C4F9AE02.roa (raw, json) Hash identifier: qiTyDM4L6mog1MdHqwGPY5fp1OlDtmdk/4+Gu1p7lHs= Subject key identifier: F0:F6:02:80:95:B1:93:12:0C:A8:A8:68:51:8A:C5:CF:EF:22:05:85 Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Certificate serial: 3F Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/6C18BEE0519811F08E123360C4F9AE02.roa Signing time: Fri 03 Oct 2025 08:04:43 +0000 ROA not before: Fri 03 Oct 2025 08:04:43 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 5400 IP address blocks: 203.158.64.0/23 maxlen: 23 203.158.66.0/23 maxlen: 23 203.158.68.0/23 maxlen: 23 203.158.70.0/23 maxlen: 23 203.158.72.0/23 maxlen: 23 203.158.74.0/23 maxlen: 23 203.158.76.0/23 maxlen: 23 203.158.78.0/23 maxlen: 23 203.158.80.0/23 maxlen: 23 203.158.82.0/23 maxlen: 23 203.158.84.0/23 maxlen: 23 203.158.86.0/23 maxlen: 23 203.158.88.0/24 maxlen: 24 203.158.89.0/24 maxlen: 24 203.158.90.0/23 maxlen: 23 203.158.92.0/24 maxlen: 24 203.158.93.0/24 maxlen: 24 203.158.94.0/24 maxlen: 24 203.158.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 11:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Validity Not Before: Oct 3 08:04:43 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68df839b-d5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:50:45:81:8b:d8:13:02:17:4e:9c:95:c7:ed: 97:91:b3:47:f8:6e:97:b7:fc:47:fd:b9:4b:0a:6a: 1f:d7:e1:53:db:2a:14:11:a1:66:ca:a8:ab:04:da: 75:98:d3:cf:3d:76:7b:5c:63:18:a2:a8:dd:15:b7: c1:1f:95:d1:9d:22:f9:bb:b8:52:b5:ca:a4:9c:5b: 89:90:e7:d0:23:b4:e4:a2:8d:29:97:b6:5f:5a:40: 98:9a:2b:1c:74:fc:6f:d8:89:29:98:d1:7a:92:45: 8b:3b:69:d7:45:57:a8:70:6d:0e:d1:60:88:7b:7c: a3:87:dc:10:6d:d5:59:a5:1c:25:4c:f0:c2:79:aa: 76:63:0e:30:e0:40:f2:5a:be:c2:3e:38:f1:07:c8: 80:d0:2f:16:9c:a6:1d:41:03:32:df:17:78:76:e6: 22:b0:6c:c1:0f:68:4f:8b:d2:14:c7:07:1b:e1:e3: 5f:31:3b:77:c4:f8:3d:7a:cd:e1:2e:4b:b2:11:b1: 3f:5e:50:65:45:51:97:22:0b:f5:1e:d7:65:da:07: 6e:18:3a:09:cc:cc:ea:a3:62:0c:07:3f:93:18:e4: f6:e3:ba:16:76:1a:0a:3d:00:ef:9f:49:3d:38:f0: 16:7d:c9:3d:51:6e:40:78:e4:c9:c5:4e:05:df:05: a6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F6:02:80:95:B1:93:12:0C:A8:A8:68:51:8A:C5:CF:EF:22:05:85 X509v3 Authority Key Identifier: keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/6C18BEE0519811F08E123360C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.158.64.0/19 Signature Algorithm: sha256WithRSAEncryption 8d:d5:5a:f6:3c:2b:4b:27:89:67:77:de:d6:23:47:f2:07:8d: c7:0c:59:d8:42:0a:af:6e:9e:55:f1:63:15:35:dc:0d:54:74: 93:7e:15:da:6a:d2:f8:04:15:69:80:b2:f3:ea:a0:33:d3:08: 82:8b:80:5c:60:74:d9:91:bf:8e:e8:51:a9:a5:88:cb:75:b6: ef:10:73:60:5d:48:e0:6f:41:8d:ce:b8:4a:d4:d2:1a:9e:0c: b1:8e:6f:61:61:f0:19:ea:71:71:ed:59:42:b4:25:74:33:a1: ff:f8:71:cc:9b:06:35:ac:f8:43:71:1d:da:0c:3a:f4:7d:b2: 86:63:ca:fc:7d:f2:90:a5:c9:71:f3:11:a8:e6:db:6d:e2:29: 7c:96:4e:e1:04:2d:45:4d:7c:2e:97:45:81:7e:68:24:4e:ac: 6c:1d:f7:09:3e:69:1b:49:f6:96:08:12:e6:cc:bb:5e:e8:b7: 6d:e7:1c:ee:06:31:30:3c:62:f3:9d:56:49:3e:ce:5f:e6:37: 31:3e:12:19:7a:ac:22:9d:c5:b8:b0:b8:59:72:bd:f4:8d:93: 4d:7d:a2:b3:38:47:66:da:5c:05:b2:30:66:de:d3:65:ff:03: 30:94:4b:15:15:a6:7b:49:4f:5b:03:05:c6:17:4c:92:f7:35: da:cd:fe:c9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REM2ODExMC8GA1UEBRMoN0UzQUM2OTE5QzIyOEY5ODAxQUNGOTA3NUQ5MDhFNTEy REQ2REEzNDAeFw0yNTEwMDMwODA0NDNaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZGY4MzliLWQ1YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChUEWBi9gTAhdOnJXH7ZeRs0f4bpe3/Ef9uUsKah/X4VPbKhQRoWbKqKsE2nWY 0889dntcYxiiqN0Vt8EfldGdIvm7uFK1yqScW4mQ59AjtOSijSmXtl9aQJiaKxx0 /G/YiSmY0XqSRYs7addFV6hwbQ7RYIh7fKOH3BBt1VmlHCVM8MJ5qnZjDjDgQPJa vsI+OPEHyIDQLxacph1BAzLfF3h25iKwbMEPaE+L0hTHBxvh418xO3fE+D16zeEu S7IRsT9eUGVFUZciC/Ue12XaB24YOgnMzOqjYgwHP5MY5PbjuhZ2Ggo9AO+fST04 8BZ9yT1RbkB45MnFTgXfBaaPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU8PYCgJWx kxIMqKhoUYrFz+8iBYUwHwYDVR0jBBgwFoAUfjrGkZwij5gBrPkHXZCOUS3W2jQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEQzY4LzU2RkNFMDhDNTE5 NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVnQnJQa0hYWkNPVVMzVzJq US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmpyR2tad2lqNWdCclBrSFhaQ09VUzNXMmpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REM2OC81NkZDRTA4QzUxOTcxMUYwQjZFOTc4NUVDNEY5QUUwMi82QzE4QkVFMDUx OTgxMUYwOEUxMjMzNjBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBcueQDANBgkqhkiG9w0BAQsFAAOCAQEAjdVa9jwrSyeJZ3fe 1iNH8geNxwxZ2EIKr26eVfFjFTXcDVR0k34V2mrS+AQVaYCy8+qgM9MIgouAXGB0 2ZG/juhRqaWIy3W27xBzYF1I4G9Bjc64StTSGp4MsY5vYWHwGepxce1ZQrQldDOh //hxzJsGNaz4Q3Ed2gw69H2yhmPK/H3ykKXJcfMRqObbbeIpfJZO4QQtRU18LpdF gX5oJE6sbB33CT5pG0n2lggS5sy7Xui3becc7gYxMDxi851WST7OX+Y3MT4SGXqs Ip3FuLC4WXK99I2TTX2iszhHZtpcBbIwZt7TZf8DMJRLFRWme0lPWwMFxhdMkvc1 2s3+yQ== -----END CERTIFICATE-----Generated at Mon Oct 27 04:42:12 2025 by rpki-client