$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/DA24729489E211F0A881D77CC4F9AE02.roa File: DA24729489E211F0A881D77CC4F9AE02.roa (raw, json) Hash identifier: 0kHBpUFF6ZyHmguOh6KScXZsLawdrxsQd7HixJOrf9k= Subject key identifier: 48:14:27:6E:8B:EF:8F:D6:77:44:86:AB:EB:57:E3:2B:25:09:25:70 Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Certificate serial: 02BE Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/DA24729489E211F0A881D77CC4F9AE02.roa Signing time: Thu 04 Sep 2025 22:59:46 +0000 ROA not before: Thu 04 Sep 2025 22:59:46 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 396356 IP address blocks: 203.33.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Validity Not Before: Sep 4 22:59:46 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68ba19e2-88e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:51:d8:59:4a:a5:a7:1a:39:2b:3f:ea:f6: 5b:ab:2e:3f:85:5f:3f:cd:5b:1d:73:d1:6f:fa:2a: 45:84:63:51:06:89:1f:e4:4d:1c:c6:2c:22:99:5b: bc:09:9b:06:fa:c3:2b:aa:b8:3d:34:cc:14:a6:8f: c5:d8:76:59:f9:c8:49:74:04:e1:f2:48:20:b0:18: 2d:a2:9b:5d:98:9e:4a:b1:1a:ad:31:15:61:2a:44: 99:49:6e:01:cd:c4:6c:82:56:ab:c8:04:ee:a5:91: 13:30:a1:63:75:85:52:ab:a3:95:0d:27:d2:e2:c6: 9d:99:cc:b9:e0:af:ec:10:cf:e5:71:2f:de:70:5a: a7:86:79:4c:f1:e8:4a:34:52:7d:32:88:71:07:36: 72:3a:3e:10:35:dc:6c:7e:2f:12:fa:82:b1:57:1f: 13:6d:0d:fb:93:d7:ac:43:50:aa:f6:08:b4:77:6f: eb:7c:db:1d:75:15:72:23:63:47:de:a0:9f:d5:bd: 52:d0:32:3c:77:62:f2:b6:68:57:ff:57:a4:ce:06: 4d:2f:73:52:b1:a8:de:0d:33:9b:d4:07:1f:41:cc: 78:8b:e1:17:32:94:88:cb:b6:bb:ba:12:20:08:59: 68:ef:09:a9:cc:01:f4:a4:83:74:a0:4f:48:70:07: 7f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:14:27:6E:8B:EF:8F:D6:77:44:86:AB:EB:57:E3:2B:25:09:25:70 X509v3 Authority Key Identifier: keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/DA24729489E211F0A881D77CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.33.238.0/24 Signature Algorithm: sha256WithRSAEncryption 39:dc:1b:4f:bc:9a:6b:df:73:01:3e:8c:b7:35:9a:fc:29:a3: bc:0c:ed:86:72:1d:b3:cf:9e:0a:aa:e6:df:af:a8:0b:3c:a7: 0e:02:55:60:ce:86:60:4b:4c:73:4d:86:00:9a:42:81:ee:e6: be:32:b5:70:fd:86:4a:99:40:35:24:06:99:71:de:44:05:a9: 9c:ae:64:77:ee:dd:6f:83:8b:34:9b:83:23:34:a1:f4:5f:bd: 4d:c9:c4:79:18:4d:b4:db:d0:bc:d1:10:d3:e5:84:c8:57:bd: ac:e1:39:09:36:7b:55:30:a1:1b:c9:4b:59:01:ec:2a:92:63: b3:37:e0:5e:da:20:c5:58:b4:39:c7:d5:9c:7e:35:34:3e:1a: 0c:51:7b:70:36:37:c9:9b:7a:2d:0f:c3:ee:03:9e:91:d0:41: 43:f4:f4:7e:05:ef:da:88:79:5c:ac:f7:2b:14:2d:40:90:db: 8b:a3:55:c0:f7:6b:fa:ab:b6:81:2e:83:44:45:51:af:7d:2d: 96:fa:5d:fa:98:9b:35:37:ae:16:bf:67:3d:0f:f8:31:1a:e7: 45:3b:c4:3d:76:9a:21:87:62:00:5a:25:b9:57:20:9c:d1:30: a0:85:ca:81:cd:1a:ad:d8:2f:eb:c9:98:7f:a8:90:d3:8e:23: e2:11:c3:35 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkExMTAvBgNVBAUTKEIwNjdDNkJCNzBERjBEQzA0Q0U3N0Y3QzhENzY3MDZB NDlGNkNCODUwHhcNMjUwOTA0MjI1OTQ2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJhMTllMi04OGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRtR2FlKpacaOSs/6vZbqy4/hV8/zVsdc9Fv+ipFhGNRBokf5E0cxiwimVu8 CZsG+sMrqrg9NMwUpo/F2HZZ+chJdATh8kggsBgtoptdmJ5KsRqtMRVhKkSZSW4B zcRsglaryATupZETMKFjdYVSq6OVDSfS4sadmcy54K/sEM/lcS/ecFqnhnlM8ehK NFJ9MohxBzZyOj4QNdxsfi8S+oKxVx8TbQ37k9esQ1Cq9gi0d2/rfNsddRVyI2NH 3qCf1b1S0DI8d2LytmhX/1ekzgZNL3NSsajeDTOb1AcfQcx4i+EXMpSIy7a7uhIg CFlo7wmpzAH0pIN0oE9IcAd/UQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEgUJ26L 74/Wd0SGq+tX4yslCSVwMB8GA1UdIwQYMBaAFLBnxrtw3w3ATOd/fI12cGpJ9suF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2QS9FQzA5QUE0QTMw N0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRjQk01Mzk4alhad2FrbjJ5 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHZkd1M0RmRGNCTTUzOThqWFp3YWtuMnk0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDM2NkEvRUMwOUFBNEEzMDdEMTFFREE2QzNBMjEyQzRGOUFFMDIvREEyNDcyOTQ4 OUUyMTFGMEE4ODFENzdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLIe4wDQYJKoZIhvcNAQELBQADggEBADncG0+8mmvfcwE+ jLc1mvwpo7wM7YZyHbPPngqq5t+vqAs8pw4CVWDOhmBLTHNNhgCaQoHu5r4ytXD9 hkqZQDUkBplx3kQFqZyuZHfu3W+DizSbgyM0ofRfvU3JxHkYTbTb0LzRENPlhMhX vazhOQk2e1UwoRvJS1kB7CqSY7M34F7aIMVYtDnH1Zx+NTQ+GgxRe3A2N8mbei0P w+4DnpHQQUP09H4F79qIeVys9ysULUCQ24ujVcD3a/qrtoEug0RFUa99LZb6XfqY mzU3rha/Zz0P+DEa50U7xD12miGHYgBaJblXIJzRMKCFyoHNGq3YL+vJmH+okNOO I+IRwzU= -----END CERTIFICATE-----Generated at Tue Sep 9 00:15:06 2025 by rpki-client