$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/82003A8A5FA911EFA257682FC4F9AE02.roa File: 82003A8A5FA911EFA257682FC4F9AE02.roa (raw, json) Hash identifier: 4/WhuZDl8eZTh0oM7NGjgI7GN0YwdB8SmHl3txrOyms= Subject key identifier: A9:A1:15:44:DD:59:C6:72:0C:0C:F9:DD:74:25:97:5C:65:7F:8A:52 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4E13 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/82003A8A5FA911EFA257682FC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:57:14 +0000 ROA not before: Thu 28 Aug 2025 14:57:14 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45542 IP address blocks: 112.137.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19987 (0x4e13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:57:14 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e4a-0760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:25:39:01:97:b5:ed:b7:32:66:a5:07:59:0c: 6f:95:1d:e2:aa:d2:a1:c8:4b:5d:9b:ce:c4:d6:86: 19:64:b7:09:ee:3a:af:1c:fd:fe:73:c0:5b:49:d3: 79:d8:13:bc:cc:cf:3a:cb:1b:7c:63:b7:c4:be:ef: 6f:eb:1c:59:1e:c2:9c:f0:8e:ba:85:69:ca:f1:ba: a9:af:ef:34:07:99:fd:fd:64:68:71:4f:d2:91:fd: 51:dd:2f:a9:ac:68:59:37:8e:de:5d:ff:ca:c7:3c: a1:f8:5d:eb:e3:42:04:4e:0a:55:b0:e3:2c:11:e7: 60:7c:39:70:a6:c6:3a:e1:58:5f:8d:7f:6d:0b:10: 60:79:1c:af:ae:2f:d2:e3:45:57:49:b1:5b:57:50: a2:2f:c2:d0:69:62:d0:02:bc:d6:98:ad:fa:f2:9b: f7:57:7e:07:86:fe:53:89:2a:ae:5e:48:4e:bb:8d: c2:fb:3b:8e:2c:1a:06:7b:c0:3b:fa:df:8f:80:a9: 45:ad:64:a6:97:11:1c:cf:f7:7f:41:c6:41:a8:45: 61:cc:cd:ba:2b:03:d0:9a:f4:fb:77:87:bb:76:50: 8a:3c:7a:42:98:61:43:20:0c:e8:50:bb:5c:23:8b: 31:b8:fc:52:bc:03:0c:0e:3f:0f:9c:9f:44:60:fb: 8e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A1:15:44:DD:59:C6:72:0C:0C:F9:DD:74:25:97:5C:65:7F:8A:52 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/82003A8A5FA911EFA257682FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.137.128.0/20 Signature Algorithm: sha256WithRSAEncryption 7c:7f:45:e9:a4:79:2b:6f:ca:c4:8f:1b:90:9d:8f:46:ef:d0: 1c:a5:8c:50:a7:a5:72:b4:8f:55:db:8a:b6:41:cc:48:61:29: 9f:c3:5f:75:1f:75:7d:74:7a:c4:06:ed:8b:d0:1c:ed:17:6b: df:2a:0d:37:27:b5:b6:b2:a3:f5:e0:67:88:5a:26:47:4c:9f: 5f:b1:d1:46:e8:f9:1f:a1:1f:41:d2:ef:43:da:e2:04:8e:70: 6b:11:72:77:6c:5c:44:c8:ac:5a:72:b4:cb:35:c4:4d:8d:92: b5:dc:f1:53:e4:1a:09:33:55:be:96:fa:5d:80:66:2e:63:66: a7:c8:ba:88:7d:5e:d0:0f:2e:54:1c:e5:15:e2:f1:40:e3:61: c9:cd:64:e8:36:c0:47:c0:81:f4:4c:66:55:8c:c9:f0:05:cd: 22:04:69:28:32:2e:73:07:e5:cd:e1:9f:ab:e9:f3:a8:b9:82: d3:21:1e:b0:29:73:94:c5:4d:1e:26:bd:1e:3c:7a:73:f3:df: 0e:0c:86:ad:45:e7:de:bf:e6:e5:e1:02:04:d1:f9:73:ab:7a: 0a:37:74:32:56:cc:12:05:3c:c7:c0:87:6d:e8:d7:16:be:d4: b1:4d:17:98:7f:59:18:17:c6:ff:b3:31:a2:16:6f:62:c8:07: 97:12:2c:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICThMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzE0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmU0YS0wNzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiU5AZe17bcyZqUHWQxvlR3iqtKhyEtdm87E1oYZZLcJ7jqvHP3+c8BbSdN5 2BO8zM86yxt8Y7fEvu9v6xxZHsKc8I66hWnK8bqpr+80B5n9/WRocU/Skf1R3S+p rGhZN47eXf/Kxzyh+F3r40IETgpVsOMsEedgfDlwpsY64VhfjX9tCxBgeRyvri/S 40VXSbFbV1CiL8LQaWLQArzWmK368pv3V34Hhv5TiSquXkhOu43C+zuOLBoGe8A7 +t+PgKlFrWSmlxEcz/d/QcZBqEVhzM26KwPQmvT7d4e7dlCKPHpCmGFDIAzoULtc I4sxuPxSvAMMDj8PnJ9EYPuO9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFKmhFUTd WcZyDAz53XQll1xlf4pSMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODIwMDNBOEE1 RkE5MTFFRkEyNTc2ODJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBARwiYAwDQYJKoZIhvcNAQELBQADggEBAHx/RemkeStvysSP G5Cdj0bv0ByljFCnpXK0j1XbirZBzEhhKZ/DX3UfdX10esQG7YvQHO0Xa98qDTcn tbayo/XgZ4haJkdMn1+x0Ubo+R+hH0HS70Pa4gSOcGsRcndsXETIrFpytMs1xE2N krXc8VPkGgkzVb6W+l2AZi5jZqfIuoh9XtAPLlQc5RXi8UDjYcnNZOg2wEfAgfRM ZlWMyfAFzSIEaSgyLnMH5c3hn6vp86i5gtMhHrApc5TFTR4mvR48enPz3w4Mhq1F 596/5uXhAgTR+XOrego3dDJWzBIFPMfAh23o1xa+1LFNF5h/WRgXxv+zMaIWb2LI B5cSLDk= -----END CERTIFICATE-----Generated at Mon Oct 20 17:00:07 2025 by rpki-client