$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9670DC6E86F811F095FE0F79C4F9AE02.roa File: 9670DC6E86F811F095FE0F79C4F9AE02.roa (raw, json) Hash identifier: GzIGurm2f+RVLT6UfDtQUvEpiSYmGG9mwXTJhgBROf4= Subject key identifier: B5:18:62:A4:17:C9:75:D0:B0:BB:6C:BA:9D:5C:1F:03:B1:6E:01:E4 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 299E Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9670DC6E86F811F095FE0F79C4F9AE02.roa Signing time: Mon 01 Sep 2025 05:57:48 +0000 ROA not before: Mon 01 Sep 2025 05:57:48 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 10753 IP address blocks: 115.167.100.0/24 maxlen: 24 175.110.72.0/22 maxlen: 24 175.110.84.0/22 maxlen: 24 223.29.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10654 (0x299e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Sep 1 05:57:48 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68b535dc-3168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:e2:5b:98:fc:5e:ea:f6:9b:a1:5e:ab:80: 28:84:19:d9:21:65:b9:a8:92:25:bf:24:29:f7:e2: 1a:7a:0c:ab:d2:40:3c:da:5c:c5:e4:64:d4:86:9d: ce:22:56:81:18:37:21:6d:fe:5f:a5:da:43:aa:1e: c0:f6:d4:5b:cf:98:ab:b5:76:4c:67:2d:2f:95:80: ef:46:07:31:71:04:26:92:9d:5e:13:7f:1b:eb:10: 49:b0:60:7d:51:c8:35:7d:43:e1:00:37:f6:92:33: ec:a0:44:44:01:74:25:95:ad:a2:ee:2c:60:ab:ab: 11:d2:ff:3c:0b:e6:04:ce:0e:19:e4:b6:59:96:59: 9a:cc:2a:2b:ab:6d:40:dd:2e:d7:e8:58:ac:9e:01: cc:88:de:ab:21:7b:61:0a:10:ce:4c:f0:d5:df:40: 82:ef:ae:ec:c5:ee:20:61:0a:d5:ae:46:ba:17:ba: 97:5b:58:25:19:81:f9:f5:77:40:cf:d8:50:07:dc: 70:e4:b5:8a:10:3f:df:0d:47:64:0d:59:57:70:9d: 89:10:7b:3b:b5:10:8b:5d:e8:15:f8:db:e3:87:6d: c6:c6:8a:1c:67:3e:f6:2f:8b:6b:a0:1a:48:76:15: ed:24:ee:20:1a:9d:7f:25:f3:2c:b0:59:82:9c:bf: d1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:18:62:A4:17:C9:75:D0:B0:BB:6C:BA:9D:5C:1F:03:B1:6E:01:E4 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9670DC6E86F811F095FE0F79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.167.100.0/24 175.110.72.0/22 175.110.84.0/22 223.29.227.0/24 Signature Algorithm: sha256WithRSAEncryption 88:77:2c:a1:87:1a:67:0e:65:cd:41:28:7c:0e:e0:62:20:bf: db:b2:ae:18:a0:eb:50:17:56:28:b7:2b:d4:e1:19:e0:48:18: fc:2e:31:0f:5c:8c:d7:2a:35:c1:c4:8a:eb:58:87:7f:9d:bc: 33:db:54:bf:ec:4d:b4:da:b1:9e:b9:41:4c:30:da:bf:bf:b4: 95:4e:98:6c:6e:61:63:6d:f9:ab:0f:4e:af:d9:f9:77:c5:33: 7d:99:f3:b3:3b:8b:4f:ec:b1:78:b4:68:52:25:fe:68:a0:ff: 28:4a:2a:43:bd:49:c7:7b:f4:a1:ca:62:5c:f0:13:85:0e:fa: ac:f1:be:46:bf:d4:ec:1b:79:ce:02:bf:1b:51:2f:48:31:1b: 72:94:3d:eb:cf:f8:4e:6f:3b:ad:4f:65:61:29:55:a6:51:0c: d1:a2:cc:cd:01:6c:37:fb:60:c0:ef:8a:89:a7:82:95:a0:1b: c9:c1:2b:45:69:18:df:e8:13:53:48:35:40:70:40:f4:44:a5: b6:9e:e6:bc:9b:3c:b5:24:c1:86:13:b5:89:80:29:db:5a:a3: 69:ba:be:43:33:fd:16:9f:f8:79:b5:5b:43:e1:10:b5:47:d1: 65:af:d6:1c:07:9a:77:80:00:87:94:c3:d4:b8:77:8d:e8:38: 9c:f3:76:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICKZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjUwOTAxMDU1NzQ4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI1MzVkYy0zMTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAriW5j8Xur2m6Feq4AohBnZIWW5qJIlvyQp9+Iaegyr0kA82lzF5GTUhp3O IlaBGDchbf5fpdpDqh7A9tRbz5irtXZMZy0vlYDvRgcxcQQmkp1eE38b6xBJsGB9 Ucg1fUPhADf2kjPsoEREAXQlla2i7ixgq6sR0v88C+YEzg4Z5LZZllmazCorq21A 3S7X6FisngHMiN6rIXthChDOTPDV30CC767sxe4gYQrVrka6F7qXW1glGYH59XdA z9hQB9xw5LWKED/fDUdkDVlXcJ2JEHs7tRCLXegV+Nvjh23GxoocZz72L4troBpI dhXtJO4gGp1/JfMssFmCnL/RFQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFLUYYqQX yXXQsLtsup1cHwOxbgHkMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvOTY3MERDNkU4 NkY4MTFGMDk1RkUwRjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABzp2QDBAKvbkgDBAKvblQDBADfHeMwDQYJKoZIhvcNAQEL BQADggEBAIh3LKGHGmcOZc1BKHwO4GIgv9uyrhig61AXVii3K9ThGeBIGPwuMQ9c jNcqNcHEiutYh3+dvDPbVL/sTbTasZ65QUww2r+/tJVOmGxuYWNt+asPTq/Z+XfF M32Z87M7i0/ssXi0aFIl/mig/yhKKkO9Scd79KHKYlzwE4UO+qzxvka/1Owbec4C vxtRL0gxG3KUPevP+E5vO61PZWEpVaZRDNGizM0BbDf7YMDviomngpWgG8nBK0Vp GN/oE1NINUBwQPREpbae5rybPLUkwYYTtYmAKdtao2m6vkMz/Raf+Hm1W0PhELVH 0WWv1hwHmneAAIeUw9S4d43oOJzzdp0= -----END CERTIFICATE-----Generated at Sat Sep 6 05:15:47 2025 by rpki-client