$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/E6B3F23C041E11EA8A736F7EC4F9AE02.roa File: E6B3F23C041E11EA8A736F7EC4F9AE02.roa (raw, json) Hash identifier: jaKd9YmNH2ThL3gQ5R9WUaO7/+PuHPSBitTnvOMLiws= Subject key identifier: CB:48:22:2E:45:EE:47:3E:25:CD:3F:9A:59:2E:80:25:7D:41:C3:2C Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653 Certificate serial: 1364 Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/E6B3F23C041E11EA8A736F7EC4F9AE02.roa Signing time: Mon 15 Sep 2025 02:16:09 +0000 ROA not before: Mon 15 Sep 2025 02:16:09 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 19551 IP address blocks: 122.11.196.0/24 maxlen: 24 203.117.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4964 (0x1364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653 Validity Not Before: Sep 15 02:16:09 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68c776e8-27f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:df:41:71:73:fb:11:43:7b:19:c5:3b:16: 87:3c:ce:d1:30:d0:1c:7f:42:6b:f9:e4:23:d1:47: 69:ed:86:13:e2:ae:72:65:ae:eb:49:a7:99:ce:52: 1b:52:fd:a5:4d:91:d7:dc:fb:eb:22:02:19:06:ad: 18:81:f8:fa:8c:23:2b:c2:c6:79:d4:39:59:b5:88: f5:8f:f1:a6:ce:fb:68:aa:56:2f:c0:5d:24:d2:37: b9:76:55:90:52:35:14:26:5d:26:b9:0e:aa:a7:04: e9:55:3a:18:b5:83:25:f4:25:ea:24:ed:6a:16:93: 2a:28:1f:56:ae:69:3b:b0:bb:10:af:7c:69:e1:52: 08:ae:aa:81:4c:84:77:c1:f1:a0:96:6c:00:f0:6d: 84:72:e4:48:8c:a1:d7:f3:a8:e5:c1:8d:0d:56:bd: 81:5b:5b:7b:32:40:08:12:bc:7b:35:39:59:b0:be: df:fa:db:bb:ed:23:61:0d:a4:4c:b1:42:1a:0f:85: 0f:26:16:4d:e4:d6:03:fa:d0:39:2c:e6:ae:87:8e: ae:69:24:73:62:75:2a:29:64:f6:05:ff:12:73:0d: 62:dc:fb:4a:79:96:dc:99:a0:b6:b3:e0:cb:17:5f: a2:91:9d:a9:d4:37:99:b7:e8:57:73:43:23:cb:8e: 8e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:48:22:2E:45:EE:47:3E:25:CD:3F:9A:59:2E:80:25:7D:41:C3:2C X509v3 Authority Key Identifier: keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/E6B3F23C041E11EA8A736F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.11.196.0/24 203.117.53.0/24 Signature Algorithm: sha256WithRSAEncryption 23:a6:8c:d8:a4:6c:93:92:4d:c6:2f:76:8a:c5:db:79:0b:33: 19:2c:aa:46:46:3c:31:87:2a:43:5f:4a:72:49:2c:e9:2f:66: 3e:da:04:da:4e:d0:8d:0f:d2:07:d2:96:ae:e6:ce:76:4b:80: 51:81:6f:69:60:7b:44:3c:cf:3e:e6:fc:a7:e8:96:63:17:ae: 8b:8a:d9:57:60:44:a9:38:38:17:15:4c:24:0f:a5:cb:9f:ee: cc:a7:ae:3a:93:ed:04:2f:9e:ad:f3:3c:15:f7:99:5c:02:3d: f9:a5:6c:46:f3:2a:1b:cf:fb:38:8e:c5:21:be:73:98:f5:40: 31:4e:b0:ad:38:49:f4:6b:5c:41:89:56:79:3d:06:00:32:b7: 61:e7:2f:72:b5:7f:d8:23:a0:fd:81:a2:0d:eb:9e:86:c4:aa: 3e:b7:28:82:29:14:3f:fa:53:ea:da:85:55:2c:ce:18:da:17: de:2a:60:35:44:1a:e4:ea:fd:f2:37:ff:b5:fa:a2:2e:3c:47: 04:cc:aa:41:6d:d6:34:26:34:2d:b3:85:2f:05:08:d6:2f:f8: 58:ff:38:1f:bb:be:0a:64:d9:44:12:d3:b0:43:52:1c:63:30: b3:fe:35:dd:6c:27:05:ff:1f:ce:04:77:f9:b7:d8:e0:2e:06: 1f:ff:4f:fc -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICE2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyREMxMTAvBgNVBAUTKEMyQjlGNUYzQzY4QzU3NjcyNzIzOUI5MkE5M0IzNjI5 N0QxQjE2NTMwHhcNMjUwOTE1MDIxNjA5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM3NzZlOC0yN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmXfQXFz+xFDexnFOxaHPM7RMNAcf0Jr+eQj0Udp7YYT4q5yZa7rSaeZzlIb Uv2lTZHX3PvrIgIZBq0Ygfj6jCMrwsZ51DlZtYj1j/GmzvtoqlYvwF0k0je5dlWQ UjUUJl0muQ6qpwTpVToYtYMl9CXqJO1qFpMqKB9Wrmk7sLsQr3xp4VIIrqqBTIR3 wfGglmwA8G2EcuRIjKHX86jlwY0NVr2BW1t7MkAIErx7NTlZsL7f+tu77SNhDaRM sUIaD4UPJhZN5NYD+tA5LOauh46uaSRzYnUqKWT2Bf8Scw1i3PtKeZbcmaC2s+DL F1+ikZ2p1DeZt+hXc0Mjy46O6QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMtIIi5F 7kc+Jc0/mlkugCV9QcMsMB8GA1UdIwQYMBaAFMK59fPGjFdnJyObkqk7Nil9GxZT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJEQy8yRDUxQUY0MkZE M0UxMUU4ODhDNTM5NDRDNEY5QUUwMi93cm4xODhhTVYyY25JNXVTcVRzMktYMGJG bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dybjE4OGFNVjJjbkk1dVNxVHMyS1gwYkZsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDAyREMvMkQ1MUFGNDJGRDNFMTFFODg4QzUzOTQ0QzRGOUFFMDIvRTZCM0YyM0Mw NDFFMTFFQThBNzM2RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB6C8QDBADLdTUwDQYJKoZIhvcNAQELBQADggEBACOmjNik bJOSTcYvdorF23kLMxksqkZGPDGHKkNfSnJJLOkvZj7aBNpO0I0P0gfSlq7mznZL gFGBb2lge0Q8zz7m/KfolmMXrouK2VdgRKk4OBcVTCQPpcuf7synrjqT7QQvnq3z PBX3mVwCPfmlbEbzKhvP+ziOxSG+c5j1QDFOsK04SfRrXEGJVnk9BgAyt2HnL3K1 f9gjoP2Bog3rnobEqj63KIIpFD/6U+rahVUszhjaF94qYDVEGuTq/fI3/7X6oi48 RwTMqkFt1jQmNC2zhS8FCNYv+Fj/OB+7vgpk2UQS07BDUhxjMLP+Nd1sJwX/H84E d/m32OAuBh//T/w= -----END CERTIFICATE-----Generated at Mon Oct 20 04:26:38 2025 by rpki-client