$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A3FED87EFC7C11EF9988DB39C4F9AE02.roa File: A3FED87EFC7C11EF9988DB39C4F9AE02.roa (raw, json) Hash identifier: laLFcBmbFwmD2PnEjBKcOthi3uDf8cYrHsVa3rkcOTI= Subject key identifier: 1F:05:7A:02:C1:C8:82:21:5F:80:C2:3E:70:01:15:36:09:F7:A3:F8 Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857 Certificate serial: 605E Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A3FED87EFC7C11EF9988DB39C4F9AE02.roa Signing time: Sat 17 May 2025 20:12:13 +0000 ROA not before: Sat 17 May 2025 20:12:13 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 133929 IP address blocks: 118.143.36.0/24 maxlen: 24 210.0.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24670 (0x605e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857 Validity Not Before: May 17 20:12:13 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6828ed9c-2966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5c:ec:a1:47:d3:d4:e1:ea:d1:8e:0d:9d:48: 28:fe:f3:f8:41:d2:ab:f4:6c:e3:69:64:be:a4:06: ed:f7:02:f5:85:81:8b:97:58:5c:a8:78:47:9c:0c: 6d:3a:38:0b:66:8b:37:f1:af:4e:2d:02:2f:08:0f: 18:37:63:f0:c1:82:7c:36:d9:1d:d2:4f:65:27:98: 5d:69:f9:48:e7:08:d7:05:71:c7:33:15:43:ef:ec: 79:0e:84:a0:eb:01:09:27:8c:86:44:61:21:9e:93: d6:94:b5:93:27:3d:5d:30:93:f7:8a:f5:32:1b:a3: 82:95:23:3c:52:6a:27:11:d9:0b:cb:23:76:a5:be: 8f:bb:ab:f6:e3:5b:92:fb:1b:86:cf:60:9f:ac:d1: 3e:a0:ea:2b:b3:5d:79:7b:66:d3:f2:ad:f9:9f:7d: 86:2d:79:6b:8f:e7:46:54:4c:4e:5f:7c:fc:24:55: 4c:01:c1:c3:33:c9:b5:7f:6d:c6:05:ce:09:e4:4b: dc:64:e5:7b:0f:84:4a:62:25:e7:1e:6c:05:42:ce: cc:2a:bb:53:97:cc:7c:e8:44:4a:66:55:4c:1a:5f: 87:3f:eb:c9:35:b3:cf:75:bb:94:e8:3d:3b:d5:73: 04:51:0a:e5:64:45:7d:56:75:92:54:f9:fc:db:ca: 48:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:05:7A:02:C1:C8:82:21:5F:80:C2:3E:70:01:15:36:09:F7:A3:F8 X509v3 Authority Key Identifier: keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A3FED87EFC7C11EF9988DB39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.143.36.0/24 210.0.225.0/24 Signature Algorithm: sha256WithRSAEncryption 08:4d:0a:53:70:bd:05:bf:e1:cc:5c:33:59:ff:f0:05:42:19: 66:a1:9e:8e:4d:09:da:05:c0:f2:07:fd:26:0f:c8:89:7c:3b: 28:78:8a:fd:65:82:3f:1e:43:09:1f:cf:17:54:73:9a:04:96: a9:d4:b5:b1:ec:d2:8a:e1:6e:63:eb:30:69:1a:d1:9b:02:48: ca:c7:b6:e9:e2:fb:93:fe:89:e8:c4:0b:2c:c6:f0:6c:45:61: f8:63:49:74:10:94:8e:b2:b7:99:0b:73:34:fc:ac:bd:c1:06: 07:23:c0:f6:b9:34:e3:84:6b:67:db:ba:79:bf:b0:4e:bc:db: cb:aa:4f:2b:33:36:9f:d8:8b:15:b4:99:54:00:f2:8d:0c:a0: f6:34:7e:4a:e7:93:ac:a1:b3:77:c9:e8:ef:28:e8:62:34:12: 30:f2:3c:e6:fd:32:1f:83:b5:4a:94:b5:43:2b:73:30:a8:cd: ff:b0:01:2d:54:b6:da:d3:d6:bc:d4:c1:50:ca:d2:ac:82:ba: bc:c8:65:01:b0:93:94:85:87:70:90:40:92:e8:df:f5:f1:58: 0a:50:84:d3:c4:b9:c4:5c:02:71:02:f6:b3:09:50:90:3e:2f: e5:21:a8:44:78:ee:66:47:36:3c:44:d8:7b:71:4d:fb:da:14: 89:50:cc:23 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICYF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEzMjMxMTAvBgNVBAUTKDQxMkE2NTExQ0ZFRENGRUNCNTU5MEM5NkM4QzM2MUUy RkVENDQ4NTcwHhcNMjUwNTE3MjAxMjEzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI4ZWQ5Yy0yOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6FzsoUfT1OHq0Y4NnUgo/vP4QdKr9GzjaWS+pAbt9wL1hYGLl1hcqHhHnAxt OjgLZos38a9OLQIvCA8YN2PwwYJ8Ntkd0k9lJ5hdaflI5wjXBXHHMxVD7+x5DoSg 6wEJJ4yGRGEhnpPWlLWTJz1dMJP3ivUyG6OClSM8UmonEdkLyyN2pb6Pu6v241uS +xuGz2CfrNE+oOors115e2bT8q35n32GLXlrj+dGVExOX3z8JFVMAcHDM8m1f23G Bc4J5EvcZOV7D4RKYiXnHmwFQs7MKrtTl8x86ERKZlVMGl+HP+vJNbPPdbuU6D07 1XMEUQrlZEV9VnWSVPn828pI5wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFB8FegLB yIIhX4DCPnABFTYJ96P4MB8GA1UdIwQYMBaAFEEqZRHP7c/stVkMlsjDYeL+1EhX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTMyMy8wODREODhENDk1 QjcxMUVBQkI4MjRGMUJDNEY5QUUwMi9RU3BsRWNfdHoteTFXUXlXeU1OaDR2N1VT RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTcGxFY190ei15MVdReVd5TU5oNHY3VVNGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzEzMjMvMDg0RDg4RDQ5NUI3MTFFQUJCODI0RjFCQzRGOUFFMDIvQTNGRUQ4N0VG QzdDMTFFRjk5ODhEQjM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB2jyQDBADSAOEwDQYJKoZIhvcNAQELBQADggEBAAhNClNw vQW/4cxcM1n/8AVCGWahno5NCdoFwPIH/SYPyIl8Oyh4iv1lgj8eQwkfzxdUc5oE lqnUtbHs0orhbmPrMGka0ZsCSMrHtuni+5P+iejECyzG8GxFYfhjSXQQlI6yt5kL czT8rL3BBgcjwPa5NOOEa2fbunm/sE6828uqTyszNp/YixW0mVQA8o0MoPY0fkrn k6yhs3fJ6O8o6GI0EjDyPOb9Mh+DtUqUtUMrczCozf+wAS1UttrT1rzUwVDK0qyC urzIZQGwk5SFh3CQQJLo3/XxWApQhNPEucRcAnEC9rMJUJA+L+UhqER47mZHNjxE 2HtxTfvaFIlQzCM= -----END CERTIFICATE-----Generated at Fri Oct 24 07:09:10 2025 by rpki-client