$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/A701BE7E922211F088E40182C4F9AE02.roa File: A701BE7E922211F088E40182C4F9AE02.roa (raw, json) Hash identifier: NKtMcJjNVWgt8h7QpGkdA7ys2mlhYZI5ulqxva1trTw= Subject key identifier: 45:B9:20:87:F2:C1:21:82:52:D9:04:30:68:98:70:24:43:DB:85:7C Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 2259 Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/A701BE7E922211F088E40182C4F9AE02.roa Signing time: Mon 15 Sep 2025 10:56:38 +0000 ROA not before: Mon 15 Sep 2025 10:56:38 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 834 IP address blocks: 180.210.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 15:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8793 (0x2259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Sep 15 10:56:38 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68c7f0e5-bd44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a0:79:84:bf:7e:4f:66:07:0f:a3:c6:89:10: e1:76:e8:62:6b:42:96:80:97:d1:7d:b7:d3:d1:7a: 76:52:0e:16:77:6b:56:3a:95:a0:4c:c2:f4:05:c5: 51:eb:ad:ff:07:03:8d:02:0d:f9:60:db:1e:d6:22: 12:e4:5c:15:46:a5:8a:a2:5c:c2:6a:da:03:03:00: fb:41:7a:03:b9:3c:68:7a:95:af:ef:ca:f5:00:2c: 5c:1c:45:44:2a:9f:23:ca:bc:8e:f1:4d:f2:2a:ee: 95:c6:34:7c:72:4a:47:7d:e3:e3:52:d0:f9:8b:1d: 33:54:de:57:8a:58:b6:fa:6d:5e:4b:5e:f8:e4:cb: fb:5a:29:8c:06:93:5e:d1:76:64:ff:f9:ce:9f:e6: 27:23:8b:79:f4:70:69:e7:7f:00:b8:5a:da:22:4a: c7:cc:35:f0:5f:f6:e1:1c:ae:55:e0:f3:04:59:b3: 06:12:19:67:97:fb:68:85:1c:40:c9:56:4e:7a:a2: c4:f3:28:c1:3f:55:69:41:f6:f8:ed:ad:a4:eb:f3: 8e:74:34:5e:9a:b6:52:80:9a:45:1c:12:19:0c:a7: 63:44:fe:05:6a:ca:90:06:4b:c5:28:c4:e6:f3:21: 63:b1:d8:58:eb:27:79:5c:c2:12:22:af:59:78:91: be:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B9:20:87:F2:C1:21:82:52:D9:04:30:68:98:70:24:43:DB:85:7C X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/A701BE7E922211F088E40182C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.210.223.0/24 Signature Algorithm: sha256WithRSAEncryption 22:b5:79:f7:8e:b9:1b:68:78:1f:db:8c:55:6e:40:a1:4b:e6: bf:ad:b8:82:37:a3:50:31:03:1c:38:59:4b:e7:7a:42:fe:96: dc:56:0b:ca:57:37:8a:5e:ed:81:74:69:0b:d2:05:bb:4c:da: bb:49:03:3e:08:73:b2:dd:92:e4:28:b6:bb:00:de:2e:fe:93: 04:5d:df:71:1c:73:69:21:e8:f0:97:d1:b1:7d:d4:fc:26:70: 6f:b1:cf:0c:1c:46:de:2e:de:9a:f8:9a:17:c2:69:13:be:47: 08:9f:4e:80:6c:f7:cd:ca:f5:fd:ee:d1:f9:02:fd:e6:3d:35: 0b:ca:90:ae:e2:fc:c1:02:f5:70:ed:1c:45:ae:a0:9d:5c:18: 3a:09:d7:1e:cd:81:3c:60:28:4a:f0:21:2d:a2:d3:48:35:fb: 06:7c:2c:79:e7:c7:31:db:57:7e:79:1a:d4:28:53:17:b3:b0: 06:d7:e6:4f:01:a0:33:6a:90:20:ac:b8:03:f4:35:ef:f0:9e: fa:80:88:b1:42:95:a8:35:26:24:ec:54:fc:34:70:01:46:58: 9e:bc:a2:83:03:31:80:60:76:63:ec:27:c2:62:39:04:6f:16: ec:a7:b7:4b:51:97:e6:ea:23:4d:88:04:dd:11:7d:87:41:e5: f6:db:07:bb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjUwOTE1MTA1NjM4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM3ZjBlNS1iZDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KB5hL9+T2YHD6PGiRDhduhia0KWgJfRfbfT0Xp2Ug4Wd2tWOpWgTML0BcVR 663/BwONAg35YNse1iIS5FwVRqWKolzCatoDAwD7QXoDuTxoepWv78r1ACxcHEVE Kp8jyryO8U3yKu6VxjR8ckpHfePjUtD5ix0zVN5Xili2+m1eS1745Mv7WimMBpNe 0XZk//nOn+YnI4t59HBp538AuFraIkrHzDXwX/bhHK5V4PMEWbMGEhlnl/tohRxA yVZOeqLE8yjBP1VpQfb47a2k6/OOdDRemrZSgJpFHBIZDKdjRP4FasqQBkvFKMTm 8yFjsdhY6yd5XMISIq9ZeJG+VwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEW5IIfy wSGCUtkEMGiYcCRD24V8MB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ4NDUvNDAwMTUzQjZEMkVCMTFFNUI0RDE1QTRFQzRGOUFFMDIvQTcwMUJFN0U5 MjIyMTFGMDg4RTQwMTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAC00t8wDQYJKoZIhvcNAQELBQADggEBACK1efeOuRtoeB/b jFVuQKFL5r+tuII3o1AxAxw4WUvnekL+ltxWC8pXN4pe7YF0aQvSBbtM2rtJAz4I c7LdkuQotrsA3i7+kwRd33Ecc2kh6PCX0bF91PwmcG+xzwwcRt4u3pr4mhfCaRO+ RwifToBs983K9f3u0fkC/eY9NQvKkK7i/MEC9XDtHEWuoJ1cGDoJ1x7NgTxgKErw IS2i00g1+wZ8LHnnxzHbV355GtQoUxezsAbX5k8BoDNqkCCsuAP0Ne/wnvqAiLFC lag1JiTsVPw0cAFGWJ68ooMDMYBgdmPsJ8JiOQRvFuynt0tRl+bqI02IBN0RfYdB 5fbbB7s= -----END CERTIFICATE-----Generated at Thu Sep 18 03:39:03 2025 by rpki-client