$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/72B665EA8A0A11F0A7CDC37AC4F9AE02.roa File: 72B665EA8A0A11F0A7CDC37AC4F9AE02.roa (raw, json) Hash identifier: 7NSxNqrVVEYHrYrYicX6JKbhM5jn/JSsSk23mguh+70= Subject key identifier: 10:2C:03:CB:B3:CB:06:05:D3:2E:12:9B:8F:E7:1B:8D:C2:68:FF:F3 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 29AB Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/72B665EA8A0A11F0A7CDC37AC4F9AE02.roa Signing time: Fri 05 Sep 2025 03:43:43 +0000 ROA not before: Fri 05 Sep 2025 03:43:43 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 29802 IP address blocks: 113.203.227.0/24 maxlen: 24 115.167.116.0/24 maxlen: 24 115.167.118.0/24 maxlen: 24 115.167.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10667 (0x29ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Sep 5 03:43:43 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68ba5c6f-5ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2f:0c:8a:72:35:ec:c4:08:f4:62:ba:89:5a: e8:e6:1f:37:7a:55:11:0e:af:ab:89:98:99:69:7f: c0:94:c8:13:7f:89:6c:87:33:7b:4a:07:2d:37:78: 72:13:41:d2:b4:15:a1:82:7e:08:53:d2:bb:cb:54: 64:0c:dc:22:21:dc:c2:ab:ca:98:8e:3d:b2:8d:27: db:89:94:17:3f:f6:50:83:55:e4:a9:f7:d3:6f:21: 22:42:08:15:a5:db:0b:8c:ec:32:23:80:86:f3:ff: a5:da:38:6d:53:0f:0c:bc:57:65:91:8f:bd:af:5f: 90:8e:6d:2c:a3:a6:2c:61:db:ba:2d:c7:1b:a2:d4: 91:4b:87:df:bf:3a:f2:98:fd:8f:ed:cc:94:6f:25: 99:af:2b:6d:4f:7a:0d:56:26:3c:ab:ff:ae:2f:77: 5a:a8:40:c0:17:af:09:c1:a8:6a:8c:4b:f4:4f:12: 2f:78:2b:e5:9a:9f:8f:b8:a6:dc:d1:98:6b:75:ce: c7:25:1f:2b:68:76:00:ec:19:c6:37:a3:09:e1:d9: e2:60:3e:f4:c9:d7:a9:c6:0c:d6:b2:6e:a3:8a:6a: 4e:f1:58:f8:07:f2:38:6e:70:6b:37:31:9f:09:c5: a5:12:8f:87:8d:ce:17:d0:6e:30:14:85:27:bb:fb: d3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2C:03:CB:B3:CB:06:05:D3:2E:12:9B:8F:E7:1B:8D:C2:68:FF:F3 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/72B665EA8A0A11F0A7CDC37AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.203.227.0/24 115.167.116.0/24 115.167.118.0/23 Signature Algorithm: sha256WithRSAEncryption 98:50:ca:61:86:d7:a3:04:34:69:67:37:6a:ed:cd:9a:f0:9b: 13:1b:cf:93:91:0d:2c:94:e5:9e:78:b3:e2:92:1d:96:ff:27: a0:4f:dc:7d:f2:24:5a:b2:4a:5a:f7:9b:e1:cf:c2:db:7a:1e: 17:bc:49:19:a7:f3:13:d1:29:1b:a8:c2:69:eb:2f:c4:a4:73: 44:9c:cd:83:bb:97:6d:96:b6:c6:89:95:b5:6d:56:9c:29:a3: fb:98:fc:3b:de:8b:a3:e0:d9:18:42:d2:2b:e8:4b:11:78:36: 2e:16:0d:8a:a7:32:6e:f9:40:ba:e8:23:79:70:94:18:63:30: ee:9c:2f:d0:69:dd:44:e9:88:ba:b9:58:5d:42:36:2b:1b:3e: b2:43:54:2b:1b:7e:7a:42:1d:11:6f:31:e3:1a:40:d6:3a:1f: 08:78:60:16:64:c4:13:df:41:1f:c7:1c:8c:b5:5b:a1:6c:31: 68:e2:b1:12:6a:14:d7:5a:1b:3a:1c:cc:a0:c1:d2:fe:9a:74: f1:1b:f2:4c:d5:ee:d6:ae:07:da:d5:44:8c:33:c5:e6:07:05: fa:d5:47:66:11:71:27:2a:61:ac:ad:f8:39:63:b4:75:1a:a4: 8e:fc:70:61:fa:7f:ef:50:a4:b2:41:d3:b4:f8:a2:4b:c9:0c: a9:54:2d:c8 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICKaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjUwOTA1MDM0MzQzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJhNWM2Zi01ZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArC8MinI17MQI9GK6iVro5h83elURDq+riZiZaX/AlMgTf4lshzN7SgctN3hy E0HStBWhgn4IU9K7y1RkDNwiIdzCq8qYjj2yjSfbiZQXP/ZQg1XkqffTbyEiQggV pdsLjOwyI4CG8/+l2jhtUw8MvFdlkY+9r1+Qjm0so6YsYdu6LccbotSRS4ffvzry mP2P7cyUbyWZryttT3oNViY8q/+uL3daqEDAF68JwahqjEv0TxIveCvlmp+PuKbc 0Zhrdc7HJR8raHYA7BnGN6MJ4dniYD70ydepxgzWsm6jimpO8Vj4B/I4bnBrNzGf CcWlEo+Hjc4X0G4wFIUnu/vTLwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFBAsA8uz ywYF0y4Sm4/nG43CaP/zMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNzJCNjY1RUE4 QTBBMTFGMEE3Q0RDMzdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABxy+MDBABzp3QDBAFzp3YwDQYJKoZIhvcNAQELBQADggEB AJhQymGG16MENGlnN2rtzZrwmxMbz5ORDSyU5Z54s+KSHZb/J6BP3H3yJFqySlr3 m+HPwtt6Hhe8SRmn8xPRKRuowmnrL8Skc0SczYO7l22WtsaJlbVtVpwpo/uY/Dve i6Pg2RhC0ivoSxF4Ni4WDYqnMm75QLroI3lwlBhjMO6cL9Bp3UTpiLq5WF1CNisb PrJDVCsbfnpCHRFvMeMaQNY6Hwh4YBZkxBPfQR/HHIy1W6FsMWjisRJqFNdaGzoc zKDB0v6adPEb8kzV7tauB9rVRIwzxeYHBfrVR2YRcScqYayt+DljtHUapI78cGH6 f+9QpLJB07T4okvJDKlULcg= -----END CERTIFICATE-----Generated at Sat Sep 6 05:15:41 2025 by rpki-client