$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/BA8A5FBEA61911EFAD319873C4F9AE02.roa File: BA8A5FBEA61911EFAD319873C4F9AE02.roa (raw, json) Hash identifier: GxG7PljqaIsL4NG1p4pqVTS9JJNKWXLA96c3vNu2FFU= Subject key identifier: C1:14:78:F0:0E:73:E4:A5:48:6F:C2:36:76:8F:12:EE:4B:A9:98:DB Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Certificate serial: CA Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/BA8A5FBEA61911EFAD319873C4F9AE02.roa Signing time: Mon 03 Mar 2025 07:29:28 +0000 ROA not before: Mon 03 Mar 2025 07:29:28 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 16509 IP address blocks: 203.3.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Validity Not Before: Mar 3 07:29:28 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c55a57-4a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:af:76:48:08:da:cc:7e:3f:b1:1f:27:82:d2: 3b:77:05:74:c7:bd:b2:85:71:01:3a:93:df:04:f3: 3f:ed:32:c0:61:fc:9c:ea:36:84:6a:f9:6f:71:ff: 7b:5c:a9:f0:00:a5:20:ba:82:fe:70:7c:0d:8d:45: 41:5b:76:85:a5:1c:45:9d:2c:13:3e:08:2b:20:5b: 83:c3:96:e8:31:76:63:b1:ed:0d:e6:be:ea:9f:fd: e7:cf:c1:32:c2:2f:f9:8e:9c:fe:09:60:26:dd:e7: 96:b3:fc:e0:af:45:33:0a:24:e3:4c:e5:52:be:7b: 0c:f9:00:31:f0:91:b4:5f:2b:12:20:30:a1:26:80: a0:a3:77:b7:7f:49:4a:f3:c8:51:be:da:4b:2b:8f: 03:ae:83:d7:9d:b8:51:c4:64:67:57:52:8c:31:17: 5c:85:f7:4a:b2:b8:04:42:bf:f2:3b:3c:44:9e:80: 00:f7:62:2c:67:ae:6e:5c:f1:b3:fe:24:af:fd:e4: a6:bc:fb:65:54:be:e7:6a:41:b4:2e:5e:41:3a:0c: fd:e4:91:15:b3:b1:6d:12:8f:00:74:d6:39:f8:e8: 5a:4f:d3:ca:56:3f:35:34:ce:49:04:15:b2:1a:03: 39:62:6a:2d:a5:6b:33:01:74:ea:20:98:ea:e6:68: a3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:14:78:F0:0E:73:E4:A5:48:6F:C2:36:76:8F:12:EE:4B:A9:98:DB X509v3 Authority Key Identifier: keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/BA8A5FBEA61911EFAD319873C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.3.236.0/24 Signature Algorithm: sha256WithRSAEncryption aa:f0:93:7a:2d:d3:9e:1e:94:f0:08:af:0b:c1:bf:ce:b2:26: 75:f4:2e:1b:19:82:b9:bb:f6:27:85:c3:5d:a8:96:89:d1:ce: 99:65:64:d3:53:10:2c:97:77:19:73:ab:16:7c:be:f0:24:a3: 57:7e:85:8c:b2:e0:7c:07:4b:9d:16:3a:37:8a:a2:bb:09:0c: d3:88:89:b8:df:a1:3f:7e:d5:55:44:e9:b2:90:51:4f:3d:2b: fa:d8:e6:fa:1f:d3:4d:e1:60:40:c6:2e:2c:2f:bc:7c:2e:d5: 0e:27:ff:f7:9e:e0:65:66:d9:e6:89:eb:45:6d:c6:3f:fa:dd: 50:11:60:94:6c:21:2a:30:6c:51:52:29:88:82:88:51:4f:c5: df:70:c8:44:71:76:79:b3:c5:c8:46:2a:c7:bd:7a:d0:b0:a6: ca:d8:4c:ce:88:dc:48:da:4d:0e:d3:28:58:d3:1b:d0:58:d0: 3f:c0:af:1d:38:03:25:79:72:07:68:49:15:1d:9c:e4:8e:9b: 1f:6a:b9:dc:f9:42:e2:49:b6:a9:44:13:24:f4:ce:b7:9b:3c: 9f:38:6a:b5:0b:a5:2a:20:c2:25:77:1e:2c:af:73:42:74:15: 29:a7:3d:31:de:d4:9d:1e:f7:46:86:1d:fb:7d:e9:41:f9:42: 83:83:94:e4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKDc4MzlBMUZDMDE3NDAyNEJDQkE4NEQwMTJEM0VDNENB NDY3OUFDNzEwHhcNMjUwMzAzMDcyOTI4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2M1NWE1Ny00YTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0q92SAjazH4/sR8ngtI7dwV0x72yhXEBOpPfBPM/7TLAYfyc6jaEavlvcf97 XKnwAKUguoL+cHwNjUVBW3aFpRxFnSwTPggrIFuDw5boMXZjse0N5r7qn/3nz8Ey wi/5jpz+CWAm3eeWs/zgr0UzCiTjTOVSvnsM+QAx8JG0XysSIDChJoCgo3e3f0lK 88hRvtpLK48DroPXnbhRxGRnV1KMMRdchfdKsrgEQr/yOzxEnoAA92IsZ65uXPGz /iSv/eSmvPtlVL7nakG0Ll5BOgz95JEVs7FtEo8AdNY5+OhaT9PKVj81NM5JBBWy GgM5YmotpWszAXTqIJjq5mijLwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMEUePAO c+SlSG/CNnaPEu5LqZjbMB8GA1UdIwQYMBaAFHg5ofwBdAJLy6hNAS0+xMpGeaxx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS84ODJGMjMyMEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFrdkxxRTBCTFQ3RXlrWjVy SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VEbWhfQUYwQWt2THFFMEJMVDdFeWtaNXJIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU1QzkvODgyRjIzMjBDOUVCMTFFRThCODU3QjBDQzRGOUFFMDIvQkE4QTVGQkVB NjE5MTFFRkFEMzE5ODczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLA+wwDQYJKoZIhvcNAQELBQADggEBAKrwk3ot054elPAI rwvBv86yJnX0LhsZgrm79ieFw12olonRzpllZNNTECyXdxlzqxZ8vvAko1d+hYyy 4HwHS50WOjeKorsJDNOIibjfoT9+1VVE6bKQUU89K/rY5vof003hYEDGLiwvvHwu 1Q4n//ee4GVm2eaJ60Vtxj/63VARYJRsISowbFFSKYiCiFFPxd9wyERxdnmzxchG Kse9etCwpsrYTM6I3EjaTQ7TKFjTG9BY0D/Arx04AyV5cgdoSRUdnOSOmx9qudz5 QuJJtqlEEyT0zrebPJ84arULpSogwiV3Hiyvc0J0FSmnPTHe1J0e90aGHft96UH5 QoODlOQ= -----END CERTIFICATE-----Generated at Mon Oct 20 19:12:17 2025 by rpki-client