$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa File: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (raw, json) Hash identifier: 0EFgLjyojEn+oExrioyWCuc3c6/85UK37c3kRT/1o4k= Subject key identifier: C9:EE:6A:B9:75:E8:32:17:AD:14:1D:D5:0B:5B:1C:E1:2D:3B:D0:84 Certificate issuer: /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Certificate serial: 0529 Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa Signing time: Wed 25 Jun 2025 00:04:12 +0000 ROA not before: Wed 25 Jun 2025 00:04:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 203.20.192.0/24 maxlen: 24 203.20.193.0/24 maxlen: 24 203.20.194.0/24 maxlen: 24 203.20.195.0/24 maxlen: 24 203.20.196.0/24 maxlen: 24 203.20.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1321 (0x529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Validity Not Before: Jun 25 00:04:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=685b3cfc-1a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:ec:6e:bf:f0:60:18:68:dc:3a:11:68:b6: 6f:d9:bc:31:47:5e:e6:ae:8b:14:4f:dc:c8:76:1c: 44:e9:b9:c4:69:bd:39:6c:df:43:cf:48:30:63:6d: a4:b8:0a:4a:af:3e:4d:e1:b4:b1:37:23:e2:d6:02: 03:fe:f4:26:05:c5:48:0a:23:c7:0f:ca:73:c2:15: 44:8b:80:2f:13:0e:77:9b:ac:c1:1f:69:f1:df:ac: 03:d1:12:81:9e:04:80:b7:df:cb:16:df:b7:3f:87: 35:c9:ca:4b:c1:b6:84:5a:fd:6d:93:80:23:4d:86: 92:28:05:be:31:6b:76:52:fe:8f:4b:e0:e0:49:d5: d5:2c:bf:c8:eb:50:89:c8:b7:f7:42:ed:43:92:3b: fc:a7:12:24:10:2f:b9:0b:a3:71:db:d3:bb:06:bb: bd:01:0a:15:8c:05:ef:0b:dc:07:60:67:58:a3:8f: f3:1b:29:72:94:37:c4:36:96:1b:43:9c:5b:74:22: 23:e4:41:37:50:f1:03:20:cd:00:fe:02:7b:78:96: f2:8e:15:80:ab:f9:b7:5c:f3:60:33:68:84:39:26: a7:ad:6c:71:99:27:c0:f7:d7:bf:fb:7c:78:8e:64: d1:5a:89:d6:2c:dd:a1:6b:ed:79:77:c2:13:c8:75: 23:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EE:6A:B9:75:E8:32:17:AD:14:1D:D5:0B:5B:1C:E1:2D:3B:D0:84 X509v3 Authority Key Identifier: keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.192.0-203.20.196.255 203.20.198.0/24 Signature Algorithm: sha256WithRSAEncryption 63:43:f4:8e:36:d6:50:eb:1e:dc:1a:ba:4e:2f:7e:b6:b1:90: 08:b8:1b:a5:43:c4:f8:c4:3e:7f:0d:a3:cc:31:d5:a8:aa:d6: eb:cc:ef:ba:5b:d1:ec:ab:4a:94:2f:1e:71:c4:ca:7b:65:bd: 09:08:2a:b6:ca:60:39:b5:a5:f0:5a:13:45:5c:87:1d:9b:1a: 3a:b8:1d:c4:d5:81:cf:24:45:b2:c1:07:37:49:12:80:56:73: 01:1f:ca:61:ac:f6:a5:ea:e9:02:b9:c2:0b:b0:21:69:f3:ff: 7d:7c:a4:64:da:f4:7c:fb:c2:01:cf:ff:dd:25:7f:1b:d7:c2: a7:0c:ac:ca:50:92:79:ae:5d:a3:5b:cd:b1:bd:3f:50:cc:9d: e0:e9:f2:7c:e1:79:bf:20:e0:67:05:80:6e:f5:13:92:34:8f: 3b:59:f1:f3:d7:13:55:82:18:5e:19:d1:34:f4:b0:29:5a:ae: 16:76:26:fe:67:6c:00:de:eb:e0:bc:20:d1:05:35:72:7d:c9: 05:17:fd:04:b5:9a:dc:2b:01:ef:99:35:15:da:e7:db:1d:44: 71:7a:bd:82:68:09:b9:ab:a4:34:47:03:4e:4e:4c:39:4f:6e: 9b:65:6b:c6:14:66:f7:48:73:3b:74:50:75:b7:a0:4d:71:5f: ef:54:1d:e1 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICBSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkIxMTAvBgNVBAUTKDJDQ0ExMzU0MEYwMTNCOTNCMjNDOURGMTREOTYxN0RB NDBDQjI2NzcwHhcNMjUwNjI1MDAwNDEyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODViM2NmYy0xYTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3Psbr/wYBho3DoRaLZv2bwxR17mrosUT9zIdhxE6bnEab05bN9Dz0gwY22k uApKrz5N4bSxNyPi1gID/vQmBcVICiPHD8pzwhVEi4AvEw53m6zBH2nx36wD0RKB ngSAt9/LFt+3P4c1ycpLwbaEWv1tk4AjTYaSKAW+MWt2Uv6PS+DgSdXVLL/I61CJ yLf3Qu1Dkjv8pxIkEC+5C6Nx29O7Bru9AQoVjAXvC9wHYGdYo4/zGylylDfENpYb Q5xbdCIj5EE3UPEDIM0A/gJ7eJbyjhWAq/m3XPNgM2iEOSanrWxxmSfA99e/+3x4 jmTRWonWLN2ha+15d8ITyHUjSwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFMnuarl1 6DIXrRQd1QtbHOEtO9CEMB8GA1UdIwQYMBaAFCzKE1QPATuTsjyd8U2WF9pAyyZ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQi81Q0VBNTQ5NDE2 RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81T3lQSjN4VFpZWDJrRExK bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNb1RWQThCTzVPeVBKM3hUWllYMmtETEpuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzU2QkIvNUNFQTU0OTQxNkQ1MTFFQ0E3RjNGNDZBQzRGOUFFMDIvRDhDQTVCRjBE OTE4MTFFRkE0RjAyRjRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQwDAMEBssUwAMEAMsUxAMEAMsUxjANBgkqhkiG9w0BAQsFAAOC AQEAY0P0jjbWUOse3Bq6Ti9+trGQCLgbpUPE+MQ+fw2jzDHVqKrW68zvulvR7KtK lC8eccTKe2W9CQgqtspgObWl8FoTRVyHHZsaOrgdxNWBzyRFssEHN0kSgFZzAR/K Yaz2perpArnCC7AhafP/fXykZNr0fPvCAc//3SV/G9fCpwysylCSea5do1vNsb0/ UMyd4OnyfOF5vyDgZwWAbvUTkjSPO1nx89cTVYIYXhnRNPSwKVquFnYm/mdsAN7r 4Lwg0QU1cn3JBRf9BLWa3CsB75k1Fdrn2x1EcXq9gmgJuaukNEcDTk5MOU9um2Vr xhRm90hzO3RQdbegTXFf71Qd4Q== -----END CERTIFICATE-----Generated at Thu Jul 3 01:14:26 2025 by rpki-client