$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/D4A8FF0273ED11F08E63C02DC4F9AE02.roa File: D4A8FF0273ED11F08E63C02DC4F9AE02.roa (raw, json) Hash identifier: ApP9kmn+5JHiG5SuT5S92MP3i+OCCKbJEPxMhqV6acY= Subject key identifier: 8A:9D:01:86:BE:4F:4A:EF:63:19:06:EC:77:53:48:ED:4B:02:BF:C4 Certificate issuer: /CN=A91A9EE2/serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC Certificate serial: 34D7 Authority key identifier: BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/D4A8FF0273ED11F08E63C02DC4F9AE02.roa Signing time: Sun 17 Aug 2025 23:28:58 +0000 ROA not before: Sun 17 Aug 2025 23:28:58 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 131248 IP address blocks: 203.20.74.0/23 maxlen: 23 2401:c01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13527 (0x34d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9EE2, serialNumber=BA9D2BADA8268784F00AE858702EF8E29E72B4BC Validity Not Before: Aug 17 23:28:58 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68a265ba-f0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:a5:32:ea:c5:e4:e6:c6:64:a3:94:09:0b: ba:50:45:1a:ce:54:a1:f0:e2:42:b6:f2:13:92:5f: 40:1c:de:1c:e8:72:01:12:6e:60:61:9f:c8:61:4a: d4:d6:3b:5e:64:5b:66:d5:be:99:cb:18:2f:b5:6f: 0e:15:63:e0:e5:a8:b9:1e:b9:04:22:b0:3c:b3:5d: e4:a6:da:cf:27:f1:64:f5:27:c3:62:21:d2:68:12: 77:b7:1d:12:d2:db:b7:3a:7f:80:85:ee:40:f7:a2: 4c:75:cb:36:e7:77:19:f0:d3:6c:32:ec:c8:5e:19: 5b:6a:29:e9:c7:ca:47:c3:0d:a8:df:fb:ad:84:b1: b3:25:dd:5a:40:8d:37:46:3b:5c:ae:44:d6:8c:1b: e7:fd:c4:d2:60:3e:da:9c:46:ba:01:ea:5f:b7:51: ec:41:a3:dd:09:f4:e9:0a:ea:66:67:2e:87:fe:4a: 7b:f0:d7:ab:ca:e8:6a:e6:60:11:53:87:1c:61:37: f5:bf:2a:43:14:ea:c7:9a:23:08:0a:50:58:5d:b8: 69:09:43:9b:2e:c3:32:07:d9:61:10:02:ad:dd:32: 8c:a2:6c:ab:ce:81:3f:d2:3c:4e:eb:07:59:b4:01: 41:18:b1:8d:a7:90:87:f8:7b:0e:36:b7:0c:fc:3f: 0a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9D:01:86:BE:4F:4A:EF:63:19:06:EC:77:53:48:ED:4B:02:BF:C4 X509v3 Authority Key Identifier: keyid:BA:9D:2B:AD:A8:26:87:84:F0:0A:E8:58:70:2E:F8:E2:9E:72:B4:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/up0rragmh4TwCuhYcC744p5ytLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0rragmh4TwCuhYcC744p5ytLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9EE2/64324DD81D8811E2BDEF14E108B02CD2/D4A8FF0273ED11F08E63C02DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.74.0/23 IPv6: 2401:c01::/32 Signature Algorithm: sha256WithRSAEncryption 5c:dc:48:e6:38:2a:16:6f:1d:af:72:b8:f2:85:2c:e5:46:79: 73:54:1b:3e:fb:23:f9:a4:a6:e5:8f:71:f5:95:8e:46:da:5c: 86:bd:d9:45:a3:f4:7b:c1:d7:11:65:38:4f:e6:93:e1:3a:e5: 65:97:09:40:68:a2:d2:a7:bc:d6:64:95:d7:6f:c0:d2:ed:41: 11:47:37:91:31:18:cb:5a:9d:3d:b7:25:72:fa:83:8a:57:53: 83:da:91:b2:a8:6d:9a:ac:0f:b9:57:bc:7f:ee:a4:48:52:ba: 8a:8f:dc:65:74:30:92:a4:45:f2:fa:5b:9a:fb:e7:eb:f9:0f: ba:ee:c2:13:e2:4a:42:ec:b8:2d:f8:b0:5d:fa:c2:13:fe:90: 47:a3:f7:ff:00:8f:a6:a5:b3:b1:80:09:3e:2c:65:50:03:1a: 38:67:66:f4:96:86:7a:fb:5a:a8:33:f1:ce:c4:da:f3:d9:43: 9b:ff:09:5d:a4:f8:5a:b6:ea:38:4f:47:9a:0e:8f:06:d3:78: 5f:f5:68:cf:b4:71:7e:38:c0:a4:91:db:c1:f9:5a:6b:22:93: 1a:09:69:f2:0e:6f:d2:67:76:34:05:cb:c1:65:d2:ef:26:0d: 34:f8:93:c3:35:d5:61:e5:8a:78:a0:38:24:c2:bd:82:0f:28: b1:4e:06:68 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFRTIxMTAvBgNVBAUTKEJBOUQyQkFEQTgyNjg3ODRGMDBBRTg1ODcwMkVGOEUy OUU3MkI0QkMwHhcNMjUwODE3MjMyODU4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEyNjViYS1mMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfClMurF5ObGZKOUCQu6UEUazlSh8OJCtvITkl9AHN4c6HIBEm5gYZ/IYUrU 1jteZFtm1b6ZyxgvtW8OFWPg5ai5HrkEIrA8s13kptrPJ/Fk9SfDYiHSaBJ3tx0S 0tu3On+Ahe5A96JMdcs253cZ8NNsMuzIXhlbainpx8pHww2o3/uthLGzJd1aQI03 RjtcrkTWjBvn/cTSYD7anEa6Aepft1HsQaPdCfTpCupmZy6H/kp78Neryuhq5mAR U4ccYTf1vypDFOrHmiMIClBYXbhpCUObLsMyB9lhEAKt3TKMomyrzoE/0jxO6wdZ tAFBGLGNp5CH+HsONrcM/D8KiwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIqdAYa+ T0rvYxkG7HdTSO1LAr/EMB8GA1UdIwQYMBaAFLqdK62oJoeE8AroWHAu+OKecrS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUVFMi82NDMyNEREODFE ODgxMUUyQkRFRjE0RTEwOEIwMkNEMi91cDBycmFnbWg0VHdDdWhZY0M3NDRwNXl0 THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VwMHJyYWdtaDRUd0N1aFljQzc0NHA1eXRMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTlFRTIvNjQzMjRERDgxRDg4MTFFMkJERUYxNEUxMDhCMDJDRDIvRDRBOEZGMDI3 M0VEMTFGMDhFNjNDMDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAHLFEowDQQCAAIwBwMFACQBDAEwDQYJKoZIhvcNAQELBQAD ggEBAFzcSOY4KhZvHa9yuPKFLOVGeXNUGz77I/mkpuWPcfWVjkbaXIa92UWj9HvB 1xFlOE/mk+E65WWXCUBootKnvNZklddvwNLtQRFHN5ExGMtanT23JXL6g4pXU4Pa kbKobZqsD7lXvH/upEhSuoqP3GV0MJKkRfL6W5r75+v5D7ruwhPiSkLsuC34sF36 whP+kEej9/8Aj6als7GACT4sZVADGjhnZvSWhnr7Wqgz8c7E2vPZQ5v/CV2k+Fq2 6jhPR5oOjwbTeF/1aM+0cX44wKSR28H5WmsikxoJafIOb9JndjQFy8Fl0u8mDTT4 k8M11WHlinigOCTCvYIPKLFOBmg= -----END CERTIFICATE-----Generated at Sun Aug 24 10:59:12 2025 by rpki-client