$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/95EE2A18A8C511EC8F560C42C4F9AE02.roa File: 95EE2A18A8C511EC8F560C42C4F9AE02.roa (raw, json) Hash identifier: 9bIT9Wti4Q16RNara0yjrmc8CnpGQxIQgk88L2RqepI= Subject key identifier: 32:35:59:56:74:28:1B:11:35:46:E8:6F:5B:A7:71:FD:AA:8A:A7:AE Certificate issuer: /CN=A91A7D50/serialNumber=7FA83F6204045A795622F3EDFE0715CC9158948C Certificate serial: 03EC Authority key identifier: 7F:A8:3F:62:04:04:5A:79:56:22:F3:ED:FE:07:15:CC:91:58:94:8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/95EE2A18A8C511EC8F560C42C4F9AE02.roa Signing time: Tue 01 Jul 2025 01:36:32 +0000 ROA not before: Tue 01 Jul 2025 01:36:32 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45768 IP address blocks: 203.33.180.0/24 maxlen: 24 203.33.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1004 (0x3ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7D50, serialNumber=7FA83F6204045A795622F3EDFE0715CC9158948C Validity Not Before: Jul 1 01:36:32 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68633ba0-20f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a2:07:ed:c4:c9:32:a1:0e:94:b2:88:60:d2: 01:75:01:ef:c5:5a:9c:7f:8b:2e:0a:1f:f9:8b:f5: 7e:f1:5f:09:a9:71:3e:5a:61:5d:d3:6e:1a:59:d7: 6c:c4:11:46:8b:60:58:dc:8c:46:6a:49:4e:f7:34: 82:63:ce:59:8d:a8:84:41:1e:20:6e:f3:03:b5:44: fe:47:b2:d2:59:f4:5c:72:80:4a:d2:4d:d2:6f:b8: 7b:92:b6:95:80:e5:3b:69:64:61:e7:17:b3:bf:e8: 92:19:11:ae:45:d4:b1:9d:c3:bf:dd:3c:5a:62:ab: 2a:c4:8b:cb:32:ba:3f:6a:4a:2d:d9:4d:74:08:de: be:3b:18:27:bf:c1:ad:b6:8d:5a:8c:bf:6a:c5:2b: f3:dd:5c:e4:d0:3a:4d:7f:74:ea:46:9f:70:35:62: 72:16:df:eb:90:15:2b:b7:87:6f:64:2b:78:c1:1b: 05:7a:6f:b6:15:b6:fd:3f:1a:cb:97:fb:ca:c0:d6: c2:c8:85:87:6b:cf:8e:c4:4f:9d:19:72:d1:a9:dc: 34:64:51:cc:1f:08:0a:37:f3:1e:0e:f3:0d:14:bd: 8d:5b:1d:53:34:38:1b:17:ec:17:61:56:a7:ed:79: 87:88:e6:c5:c1:0e:7e:ef:18:70:3c:a1:82:e8:b7: 44:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:35:59:56:74:28:1B:11:35:46:E8:6F:5B:A7:71:FD:AA:8A:A7:AE X509v3 Authority Key Identifier: keyid:7F:A8:3F:62:04:04:5A:79:56:22:F3:ED:FE:07:15:CC:91:58:94:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/f6g_YgQEWnlWIvPt_gcVzJFYlIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f6g_YgQEWnlWIvPt_gcVzJFYlIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D50/6CD5259884A611EC92F89D44C4F9AE02/95EE2A18A8C511EC8F560C42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.33.180.0/23 Signature Algorithm: sha256WithRSAEncryption ab:df:9a:7a:80:3f:3f:f8:dc:fc:df:a8:b8:f6:c9:83:73:f4: 62:d6:79:74:20:d1:0a:de:82:17:bf:2e:e1:85:a8:a7:27:07: 53:2f:ea:da:d7:fd:aa:77:99:b6:74:4d:6a:80:1e:a4:b2:de: 4a:97:59:9b:e8:96:f2:a5:f1:7f:9e:da:01:10:c5:98:70:25: 0a:36:e9:5e:a1:21:cd:92:fe:14:49:e0:73:16:2e:a1:4f:a3: 95:e1:4a:07:d7:db:ea:dc:a2:28:1c:2a:79:8b:8c:96:c8:40: d3:ed:7e:b8:2e:15:a9:6c:28:4d:e3:5e:ce:0f:e0:8b:c5:55: 58:ea:2a:fa:f1:dc:15:55:5b:9f:08:73:7f:d2:8f:fe:fe:b4: 55:c1:58:69:58:7e:80:b5:b4:7e:2f:dc:4c:ae:0a:34:94:f6: 28:8e:a2:e5:05:b1:91:30:5f:4e:0e:b5:5e:d7:37:a5:a1:f1: 18:65:18:58:a5:24:3d:68:4e:35:8c:d1:31:db:34:45:dd:ca: 39:eb:71:f1:cf:94:f4:98:7e:17:ea:f1:58:f1:84:2b:7e:a2: 7c:bf:62:2d:f4:39:36:25:a7:67:c2:4a:4b:43:de:f0:b9:0f: ab:e0:d0:cf:6c:6f:ff:1f:fd:cf:ab:07:b2:95:dc:2f:88:bc: 78:60:2f:1f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdENTAxMTAvBgNVBAUTKDdGQTgzRjYyMDQwNDVBNzk1NjIyRjNFREZFMDcxNUND OTE1ODk0OEMwHhcNMjUwNzAxMDEzNjMyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzM2JhMC0yMGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqIH7cTJMqEOlLKIYNIBdQHvxVqcf4suCh/5i/V+8V8JqXE+WmFd024aWdds xBFGi2BY3IxGaklO9zSCY85ZjaiEQR4gbvMDtUT+R7LSWfRccoBK0k3Sb7h7kraV gOU7aWRh5xezv+iSGRGuRdSxncO/3TxaYqsqxIvLMro/akot2U10CN6+Oxgnv8Gt to1ajL9qxSvz3Vzk0DpNf3TqRp9wNWJyFt/rkBUrt4dvZCt4wRsFem+2Fbb9PxrL l/vKwNbCyIWHa8+OxE+dGXLRqdw0ZFHMHwgKN/MeDvMNFL2NWx1TNDgbF+wXYVan 7XmHiObFwQ5+7xhwPKGC6LdElwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDI1WVZ0 KBsRNUbob1uncf2qiqeuMB8GA1UdIwQYMBaAFH+oP2IEBFp5ViLz7f4HFcyRWJSM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Q1MC82Q0Q1MjU5ODg0 QTYxMUVDOTJGODlENDRDNEY5QUUwMi9mNmdfWWdRRVdubFdJdlB0X2djVnpKRlls SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y2Z19ZZ1FFV25sV0l2UHRfZ2NWekpGWWxJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTdENTAvNkNENTI1OTg4NEE2MTFFQzkyRjg5RDQ0QzRGOUFFMDIvOTVFRTJBMThB OEM1MTFFQzhGNTYwQzQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHLIbQwDQYJKoZIhvcNAQELBQADggEBAKvfmnqAPz/43Pzf qLj2yYNz9GLWeXQg0Qreghe/LuGFqKcnB1Mv6trX/ap3mbZ0TWqAHqSy3kqXWZvo lvKl8X+e2gEQxZhwJQo26V6hIc2S/hRJ4HMWLqFPo5XhSgfX2+rcoigcKnmLjJbI QNPtfrguFalsKE3jXs4P4IvFVVjqKvrx3BVVW58Ic3/Sj/7+tFXBWGlYfoC1tH4v 3EyuCjSU9iiOouUFsZEwX04OtV7XN6Wh8RhlGFilJD1oTjWM0THbNEXdyjnrcfHP lPSYfhfq8VjxhCt+ony/Yi30OTYlp2fCSktD3vC5D6vg0M9sb/8f/c+rB7KV3C+I vHhgLx8= -----END CERTIFICATE-----Generated at Wed Jul 2 15:35:23 2025 by rpki-client