$ rpki-client -vvf rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/1A824A0E993511EF9BB0A677C4F9AE02.roa File: 1A824A0E993511EF9BB0A677C4F9AE02.roa (raw, json) Hash identifier: NNRqGSmWdoe7pDPxn2mpdNUa0PJKi1Ydbw5oFhxloG4= Subject key identifier: 49:FE:0D:60:B0:42:89:D5:EF:C5:2D:63:87:22:F5:04:AF:75:15:5F Certificate issuer: /CN=A91338F0/serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Certificate serial: A0 Authority key identifier: 83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/1A824A0E993511EF9BB0A677C4F9AE02.roa Signing time: Tue 19 Aug 2025 07:14:59 +0000 ROA not before: Tue 19 Aug 2025 07:14:59 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45327 IP address blocks: 116.90.64.0/21 maxlen: 21 116.90.64.0/24 maxlen: 24 116.90.65.0/24 maxlen: 24 116.90.66.0/24 maxlen: 24 116.90.67.0/24 maxlen: 24 116.90.70.0/24 maxlen: 24 116.90.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91338F0, serialNumber=8317FC7A82B0EE86520DF18FFD57295116DA5DF2 Validity Not Before: Aug 19 07:14:59 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a42472-8df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3f:d2:30:df:01:3f:ba:31:a2:aa:19:c1:96: 5a:55:9f:cd:89:c6:5e:52:f3:a2:85:87:5e:07:7b: 05:4a:f1:d3:32:35:71:fb:72:cc:a1:d2:78:b1:e0: 1c:d7:59:d7:6c:cd:67:4f:ce:58:be:10:58:2f:e4: bf:aa:1e:f6:f3:a5:aa:dc:8c:7c:75:31:8f:61:1a: 70:42:d9:6a:2d:e1:36:ef:11:79:40:19:2d:01:55: 9c:33:43:b8:4d:7e:43:f5:99:11:11:3c:5f:6c:30: d4:ea:8e:e1:e0:a7:39:49:5e:46:e2:27:17:d9:e9: 41:d6:f8:51:0c:6c:bc:02:9e:b4:7b:71:be:62:14: 46:16:b4:1f:4e:cd:53:76:3e:2b:4b:aa:1c:ce:d2: 29:33:34:87:48:2c:4f:47:8a:92:68:da:e9:27:b3: c6:01:e9:cf:a4:47:7e:1f:84:2a:c6:c0:3b:74:09: e4:a5:52:d6:3b:7e:83:5d:37:84:53:6f:eb:f1:1b: 78:c1:96:e9:52:79:e6:16:20:96:c2:62:d7:08:77: 7b:d9:3c:e0:fd:51:2d:2e:93:b7:19:58:09:f5:c7: fa:41:c1:8e:1d:0b:5b:d9:7d:44:0c:70:13:43:14: 43:09:16:c2:e7:19:2b:84:bf:ee:ab:d2:16:a2:03: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FE:0D:60:B0:42:89:D5:EF:C5:2D:63:87:22:F5:04:AF:75:15:5F X509v3 Authority Key Identifier: keyid:83:17:FC:7A:82:B0:EE:86:52:0D:F1:8F:FD:57:29:51:16:DA:5D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/gxf8eoKw7oZSDfGP_VcpURbaXfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxf8eoKw7oZSDfGP_VcpURbaXfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91338F0/0A771A3693AE11EF8F48AB43C4F9AE02/1A824A0E993511EF9BB0A677C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.90.64.0/21 Signature Algorithm: sha256WithRSAEncryption 34:ed:54:da:4a:8b:23:bd:8f:94:64:e6:ed:b8:b6:a9:a2:5e: e1:45:2d:60:5e:94:14:74:7c:2c:c5:e1:ed:3e:db:99:1c:f2: e0:7d:f7:73:9c:9e:7d:73:90:93:e7:c7:da:c1:38:e6:e6:d1: a5:f5:49:86:09:94:93:e7:74:80:5d:f1:8f:a8:65:29:e3:5e: 6c:82:b2:23:2a:f9:2e:7c:8b:3a:e2:a8:7b:3e:8f:0e:3c:94: c0:ab:63:c0:50:71:57:7e:4d:af:ec:87:10:7a:7a:67:21:21: ff:23:e9:7d:cb:fd:a1:ca:60:a8:9a:74:7d:f2:17:ad:88:f1: 93:70:3c:cf:e3:e6:03:b0:9e:e0:79:6c:92:4d:6a:c2:10:34: fc:1c:8e:ea:14:81:28:aa:92:92:8e:2c:84:64:f5:d2:96:07: a5:d7:ee:99:c7:55:71:49:81:fa:73:62:70:cd:d9:ea:4b:cd: 05:d3:fd:75:c2:5d:18:d3:0f:53:a0:44:9e:5c:51:c8:3d:a0: 45:82:50:95:9d:cb:b7:20:67:f0:0e:89:69:68:79:d1:84:bd: 66:58:1a:09:a5:84:3c:0a:5d:b5:41:2d:51:6f:7a:03:16:47: 41:00:73:5d:3b:47:ab:87:f2:04:b7:12:4c:54:62:e5:f5:47: 51:fa:24:f4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4RjAxMTAvBgNVBAUTKDgzMTdGQzdBODJCMEVFODY1MjBERjE4RkZENTcyOTUx MTZEQTVERjIwHhcNMjUwODE5MDcxNDU5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE0MjQ3Mi04ZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzz/SMN8BP7oxoqoZwZZaVZ/NicZeUvOihYdeB3sFSvHTMjVx+3LModJ4seAc 11nXbM1nT85YvhBYL+S/qh7286Wq3Ix8dTGPYRpwQtlqLeE27xF5QBktAVWcM0O4 TX5D9ZkRETxfbDDU6o7h4Kc5SV5G4icX2elB1vhRDGy8Ap60e3G+YhRGFrQfTs1T dj4rS6ocztIpMzSHSCxPR4qSaNrpJ7PGAenPpEd+H4QqxsA7dAnkpVLWO36DXTeE U2/r8Rt4wZbpUnnmFiCWwmLXCHd72Tzg/VEtLpO3GVgJ9cf6QcGOHQtb2X1EDHAT QxRDCRbC5xkrhL/uq9IWogM3zwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEn+DWCw QonV78UtY4ci9QSvdRVfMB8GA1UdIwQYMBaAFIMX/HqCsO6GUg3xj/1XKVEW2l3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzhGMC8wQTc3MUEzNjkz QUUxMUVGOEY0OEFCNDNDNEY5QUUwMi9neGY4ZW9LdzdvWlNEZkdQX1ZjcFVSYmFY ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d4Zjhlb0t3N29aU0RmR1BfVmNwVVJiYVhmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzM4RjAvMEE3NzFBMzY5M0FFMTFFRjhGNDhBQjQzQzRGOUFFMDIvMUE4MjRBMEU5 OTM1MTFFRjlCQjBBNjc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAN0WkAwDQYJKoZIhvcNAQELBQADggEBADTtVNpKiyO9j5Rk 5u24tqmiXuFFLWBelBR0fCzF4e0+25kc8uB993Ocnn1zkJPnx9rBOObm0aX1SYYJ lJPndIBd8Y+oZSnjXmyCsiMq+S58izriqHs+jw48lMCrY8BQcVd+Ta/shxB6emch If8j6X3L/aHKYKiadH3yF62I8ZNwPM/j5gOwnuB5bJJNasIQNPwcjuoUgSiqkpKO LIRk9dKWB6XX7pnHVXFJgfpzYnDN2epLzQXT/XXCXRjTD1OgRJ5cUcg9oEWCUJWd y7cgZ/AOiWloedGEvWZYGgmlhDwKXbVBLVFvegMWR0EAc107R6uH8gS3EkxUYuX1 R1H6JPQ= -----END CERTIFICATE-----Generated at Sun Aug 24 00:43:18 2025 by rpki-client