$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/7F422D3A88B111F0A484102DC4F9AE02.roa File: 7F422D3A88B111F0A484102DC4F9AE02.roa (raw, json) Hash identifier: bTjFmgKITv7qetJEOlFw6c2vUxDVbfwgVjSts51pZ10= Subject key identifier: F3:24:FE:B8:4F:C1:51:97:78:AC:54:5B:D5:09:5A:22:D7:56:D4:81 Certificate issuer: /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Certificate serial: 058B Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/7F422D3A88B111F0A484102DC4F9AE02.roa Signing time: Wed 03 Sep 2025 10:33:58 +0000 ROA not before: Wed 03 Sep 2025 10:33:58 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 39600 IP address blocks: 202.170.72.0/24 maxlen: 24 202.170.74.0/24 maxlen: 24 202.170.75.0/24 maxlen: 24 202.170.76.0/24 maxlen: 24 202.170.77.0/24 maxlen: 24 202.170.78.0/24 maxlen: 24 202.170.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1419 (0x58b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B Validity Not Before: Sep 3 10:33:58 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b81995-b54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:8c:2a:17:1b:ea:94:30:fc:71:70:b9:10: 97:6d:24:e5:de:58:e1:f0:d2:96:b6:a8:0c:af:5b: f2:57:df:4d:54:3c:86:3c:ec:a0:1c:27:7c:38:12: 70:69:54:cd:4e:38:c1:d7:09:f4:b0:37:8c:65:76: 13:20:3f:90:c4:93:65:0d:17:bf:3e:59:73:af:3e: af:c1:87:ab:40:5b:61:77:51:ec:ef:68:45:0a:dd: d0:ad:60:a9:3b:87:53:85:e5:fd:f7:58:8e:c1:8c: ba:80:be:e0:2a:8b:7d:d1:e3:85:48:c5:38:d1:05: cc:54:69:44:73:b8:39:73:22:e4:0e:2e:2b:2d:1d: 7e:43:5c:f3:60:80:3b:c3:77:71:7e:c1:39:61:83: 65:a0:d0:92:88:4c:8c:c4:fa:f7:8b:08:8a:6a:60: 33:ec:52:f3:0e:73:75:92:7b:db:49:79:d1:0b:7c: e5:37:92:0b:90:9c:41:8c:51:01:07:a8:24:09:c4: 08:38:2a:cd:65:93:e4:98:cc:9e:28:46:39:89:3e: 23:19:7a:35:72:e3:57:f4:b8:63:75:da:3f:ea:53: 6f:96:f6:fb:d9:cb:94:6a:8a:8b:d1:52:94:21:6f: b1:3d:9b:eb:db:a0:f2:51:1d:70:61:44:92:54:6f: 05:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:24:FE:B8:4F:C1:51:97:78:AC:54:5B:D5:09:5A:22:D7:56:D4:81 X509v3 Authority Key Identifier: keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/7F422D3A88B111F0A484102DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.170.72.0/24 202.170.74.0-202.170.79.255 Signature Algorithm: sha256WithRSAEncryption 7d:64:c0:41:38:7c:00:8a:70:f0:dd:76:e3:2f:05:22:a2:cf: 4b:da:88:59:8f:df:f6:55:5d:3f:52:d3:c1:89:33:7e:9f:58: fa:d3:b2:38:22:bc:1e:4d:25:73:75:2b:5e:cd:5e:9c:e8:1b: 14:b1:76:44:49:f8:eb:0e:70:63:4a:38:14:93:57:40:5c:10: cf:2b:b0:13:fd:a7:f7:31:e0:8c:26:5a:e8:6f:25:ff:77:28: af:a6:cf:39:50:17:03:ab:f5:ba:bd:85:de:58:f4:01:96:42: 08:c0:6a:60:5b:0e:0a:c8:d0:87:b1:f5:bf:81:b0:a7:52:3c: 2c:ee:8d:82:e6:55:33:2f:06:b3:54:f9:04:33:f6:1a:eb:08: 2c:47:09:ec:55:84:08:38:49:f7:3f:a5:08:80:fe:1a:ae:58: 3f:f5:e2:ea:bf:10:28:42:d1:4b:7a:f4:1e:b3:c7:6e:3c:08: 2b:9a:02:3d:c9:eb:c5:0a:29:b0:f8:42:d7:1f:65:cd:2f:a1: 1a:2b:93:7a:09:15:ed:22:7a:74:5d:ee:c1:f7:11:5f:39:0c: 9a:25:3f:13:5a:31:46:26:e1:4a:90:d3:8f:d5:83:52:ef:9c: 1d:14:94:76:66:76:3d:53:38:e5:b9:fe:9f:bf:ae:dc:a7:e8: 6b:7e:f0:bd -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICBYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD MkVBMEVBNUIwHhcNMjUwOTAzMTAzMzU4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI4MTk5NS1iNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2eMKhcb6pQw/HFwuRCXbSTl3ljh8NKWtqgMr1vyV99NVDyGPOygHCd8OBJw aVTNTjjB1wn0sDeMZXYTID+QxJNlDRe/Pllzrz6vwYerQFthd1Hs72hFCt3QrWCp O4dTheX991iOwYy6gL7gKot90eOFSMU40QXMVGlEc7g5cyLkDi4rLR1+Q1zzYIA7 w3dxfsE5YYNloNCSiEyMxPr3iwiKamAz7FLzDnN1knvbSXnRC3zlN5ILkJxBjFEB B6gkCcQIOCrNZZPkmMyeKEY5iT4jGXo1cuNX9Lhjddo/6lNvlvb72cuUaoqL0VKU IW+xPZvr26DyUR1wYUSSVG8F7wIDAQABo4ICozCCAp8wHQYDVR0OBBYEFPMk/rhP wVGXeKxUW9UJWiLXVtSBMB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU5NzIvOUJGNkM0NEVGMDMxMTFFQjk1Rjc2NzQ4QzRGOUFFMDIvN0Y0MjJEM0E4 OEIxMTFGMEE0ODQxMDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBADKqkgwDAMEAcqqSgMEBMqqQDANBgkqhkiG9w0BAQsFAAOC AQEAfWTAQTh8AIpw8N124y8FIqLPS9qIWY/f9lVdP1LTwYkzfp9Y+tOyOCK8Hk0l c3UrXs1enOgbFLF2REn46w5wY0o4FJNXQFwQzyuwE/2n9zHgjCZa6G8l/3cor6bP OVAXA6v1ur2F3lj0AZZCCMBqYFsOCsjQh7H1v4Gwp1I8LO6NguZVMy8Gs1T5BDP2 GusILEcJ7FWECDhJ9z+lCID+Gq5YP/Xi6r8QKELRS3r0HrPHbjwIK5oCPcnrxQop sPhC1x9lzS+hGiuTegkV7SJ6dF3uwfcRXzkMmiU/E1oxRibhSpDTj9WDUu+cHRSU dmZ2PVM45bn+n7+u3Kfoa37wvQ== -----END CERTIFICATE-----Generated at Tue Sep 9 02:08:46 2025 by rpki-client