$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/825750627F6B11F09EC5790EC4F9AE02.roa File: 825750627F6B11F09EC5790EC4F9AE02.roa (raw, json) Hash identifier: LqzrBY61qq0UnE5XEpWDKW9/xxNLe5OkKnNKV4wU9Aw= Subject key identifier: 2D:4C:8C:BB:D1:9F:69:71:76:CC:4B:D2:47:F5:58:25:DA:A6:5B:31 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4C72 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/825750627F6B11F09EC5790EC4F9AE02.roa Signing time: Fri 22 Aug 2025 15:20:18 +0000 ROA not before: Fri 22 Aug 2025 15:20:18 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131435 IP address blocks: 45.119.216.0/22 maxlen: 24 103.60.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19570 (0x4c72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 22 15:20:18 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=68a88ab1-2455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b1:b2:82:18:2a:34:02:91:52:64:9a:97:e3: de:16:3d:57:80:0a:16:06:78:fb:0f:af:78:38:07: e1:17:d8:f5:84:d8:da:cf:6c:97:2e:e9:c6:52:17: 3e:60:78:61:00:95:39:e0:07:eb:9b:ee:68:dd:ec: ed:be:3e:1f:d2:07:c7:31:8c:a9:f4:5e:da:63:8f: 63:90:3b:bf:ad:e3:b0:bc:e2:61:58:cd:6c:b5:46: 01:29:7b:c4:a3:31:a2:13:be:cd:bd:a9:96:5a:45: be:fd:11:f6:a8:b1:3c:e7:87:81:8f:d2:27:09:ad: 0c:7f:3a:52:74:51:dc:f9:55:fb:10:be:2d:24:28: 16:07:14:8d:20:d0:de:2c:e4:d7:02:cd:d7:5a:f2: 40:0d:f9:50:09:03:f7:44:90:33:67:f3:ab:22:be: 74:5d:00:84:78:d6:ee:6f:7e:16:94:fd:38:85:36: 31:37:e4:77:33:97:c8:ae:54:63:2b:01:1c:75:4a: 55:45:71:8c:bd:a9:83:72:0a:1e:cd:d5:d7:37:ca: 69:86:ee:82:fe:1b:ae:6c:35:0b:54:d7:87:35:18: db:58:2a:c0:a5:d0:ea:4c:1e:13:b3:0a:08:f9:98: 49:4c:1a:16:00:f9:c9:1c:f4:35:5f:7c:bc:6c:21: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4C:8C:BB:D1:9F:69:71:76:CC:4B:D2:47:F5:58:25:DA:A6:5B:31 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/825750627F6B11F09EC5790EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.119.216.0/22 103.60.16.0/22 Signature Algorithm: sha256WithRSAEncryption 20:c1:5f:fc:0a:b7:62:da:f0:cf:5a:22:d9:69:52:9a:d0:88: 26:b5:a7:a6:d5:e8:e4:d6:43:f9:a3:44:fa:92:ef:1c:8e:c9: f3:24:26:62:fa:5a:f6:22:fe:18:a6:13:17:09:69:30:dc:b4: 35:dc:be:ca:08:52:4e:67:3b:be:2e:81:07:7c:43:2e:a4:89: 64:49:d1:b8:2d:61:c9:d6:ec:f2:1b:af:e8:c3:6e:4a:b7:8d: 16:c3:cd:35:8a:97:9c:71:29:31:95:1c:63:b1:9e:1c:71:eb: 07:4b:1a:3c:91:0f:15:3e:07:ab:48:78:24:b8:ee:2b:d6:ea: 82:9f:66:ff:1b:bb:fc:89:16:dd:52:15:dc:e9:25:58:f0:6a: 52:7b:2a:ad:5a:c8:12:76:04:87:ec:a0:0f:a0:e1:ab:00:b0: d5:44:bb:c5:e4:fa:d7:58:92:77:ca:92:df:73:ab:64:af:1b: c6:24:ea:c5:75:bd:0c:17:a7:37:6e:c8:86:b5:c3:30:82:e5: f6:e4:ad:af:e7:70:87:e8:8d:d4:fa:76:f1:bc:7e:6f:e8:a7: 37:24:cf:40:24:87:b0:d2:c3:ba:e2:8d:b9:3a:69:d0:e5:f5: 9a:a1:92:18:b6:02:14:72:8c:42:b2:ad:27:fc:00:17:5f:d3: 83:ac:f0:c4 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICTHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODIyMTUyMDE4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE4OGFiMS0yNDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7GyghgqNAKRUmSal+PeFj1XgAoWBnj7D694OAfhF9j1hNjaz2yXLunGUhc+ YHhhAJU54Afrm+5o3eztvj4f0gfHMYyp9F7aY49jkDu/reOwvOJhWM1stUYBKXvE ozGiE77NvamWWkW+/RH2qLE854eBj9InCa0MfzpSdFHc+VX7EL4tJCgWBxSNINDe LOTXAs3XWvJADflQCQP3RJAzZ/OrIr50XQCEeNbub34WlP04hTYxN+R3M5fIrlRj KwEcdUpVRXGMvamDcgoezdXXN8pphu6C/huubDULVNeHNRjbWCrApdDqTB4TswoI +ZhJTBoWAPnJHPQ1X3y8bCGhOQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFC1MjLvR n2lxdsxL0kf1WCXaplsxMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODI1NzUwNjI3 RjZCMTFGMDlFQzU3OTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItd9gDBAJnPBAwDQYJKoZIhvcNAQELBQADggEBACDBX/wK t2La8M9aItlpUprQiCa1p6bV6OTWQ/mjRPqS7xyOyfMkJmL6WvYi/himExcJaTDc tDXcvsoIUk5nO74ugQd8Qy6kiWRJ0bgtYcnW7PIbr+jDbkq3jRbDzTWKl5xxKTGV HGOxnhxx6wdLGjyRDxU+B6tIeCS47ivW6oKfZv8bu/yJFt1SFdzpJVjwalJ7Kq1a yBJ2BIfsoA+g4asAsNVEu8Xk+tdYknfKkt9zq2SvG8Yk6sV1vQwXpzduyIa1wzCC 5fbkra/ncIfojdT6dvG8fm/opzckz0Akh7DSw7rijbk6adDl9Zqhkhi2AhRyjEKy rSf8ABdf04Os8MQ= -----END CERTIFICATE-----Generated at Sat Aug 23 19:01:21 2025 by rpki-client