$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/796CD35A5B5511EE8E4D2A39C4F9AE02.roa File: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (raw, json) Hash identifier: 5Y7qsAaq9WIcozANz4ZXMikS+vaHk2RGINX/W4ZA3l4= Subject key identifier: 4C:3C:FB:FF:14:C0:F7:CE:2D:0D:DF:F2:45:D9:93:E2:8F:CD:14:54 Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Certificate serial: 0145 Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/796CD35A5B5511EE8E4D2A39C4F9AE02.roa Signing time: Sun 15 Jun 2025 03:32:25 +0000 ROA not before: Sun 15 Jun 2025 03:32:25 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 8075 IP address blocks: 203.23.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Validity Not Before: Jun 15 03:32:25 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684e3ec9-324d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c4:06:b7:c3:26:f5:41:ad:9e:bc:10:4c:23: b9:bb:0f:61:64:99:76:5c:28:95:a5:06:e0:59:15: 96:29:c4:6d:ed:7c:b9:8a:8a:54:64:dd:7f:5c:39: de:74:f4:de:59:43:7d:05:a4:fd:1d:4c:7e:2e:51: 6b:82:25:5c:be:29:fb:19:50:af:8d:02:5b:49:d5: b1:43:a7:08:e3:72:92:f6:d9:29:59:45:83:6f:3b: 2d:48:ff:0e:a2:3b:ce:9a:32:b1:2f:2e:b1:eb:4f: 25:30:c7:cb:14:70:01:02:a6:73:c0:96:a4:f4:b8: fd:25:b8:20:03:aa:05:42:fc:d4:3d:95:16:4d:a5: ee:f6:01:68:c9:66:2b:0f:63:d6:2d:e0:06:4a:ab: fe:3b:a2:8a:a1:8c:70:56:9f:95:d9:2d:2f:56:01: 70:79:b0:32:ff:f4:df:93:8b:0c:fa:66:69:f0:1e: a3:53:57:a5:11:4d:27:8f:63:53:50:9a:d4:b3:8d: 76:70:ce:77:39:a1:2e:bf:a2:dd:ba:06:a7:73:d6: 11:5b:a5:5d:b8:b9:eb:8c:da:d7:96:16:37:3f:9e: fe:21:22:bf:8d:72:76:1d:6f:0b:7c:11:7b:dc:fa: 55:86:42:51:92:bd:03:a7:7a:20:dc:27:82:5b:42: 2b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3C:FB:FF:14:C0:F7:CE:2D:0D:DF:F2:45:D9:93:E2:8F:CD:14:54 X509v3 Authority Key Identifier: keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/796CD35A5B5511EE8E4D2A39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.23.232.0/24 Signature Algorithm: sha256WithRSAEncryption 23:cb:0a:71:78:8b:1c:5f:3c:67:c7:05:1b:75:68:b9:49:d6: 4e:dc:d8:6b:e8:04:1e:9d:4e:7b:28:20:10:36:14:cf:91:bc: 87:af:b8:e7:6d:88:4f:3e:80:2d:00:5f:dc:0d:df:c7:cc:dd: 35:14:b9:50:97:5f:ee:ac:ed:5d:08:58:43:e9:46:0c:b0:1c: b7:e7:d6:b0:5c:f3:0e:7a:33:18:2b:25:95:cf:2d:2d:b4:90: 34:95:81:16:20:62:af:8f:85:b3:8c:3c:11:87:c0:b0:16:6a: ce:17:c6:75:c9:da:7b:c3:07:7f:4b:de:e0:7e:6b:ab:bd:ca: e8:a6:23:f8:3b:36:05:c7:4e:67:de:85:27:a3:33:db:42:83: ac:18:a0:22:03:0f:07:7e:c3:31:6b:be:c7:95:d4:4a:c7:dd: ee:bc:e7:03:2f:31:8e:d7:d5:d0:66:8f:43:f0:d1:39:75:1e: 87:66:2c:51:b7:b6:7d:19:b4:d1:ad:9e:2e:e2:7b:c6:e0:3f: b2:0b:5c:2e:3f:64:f2:19:1b:76:d1:4e:9a:9b:f6:ff:8e:82: eb:1e:1d:6a:8d:6c:e5:e7:82:8f:30:b1:c1:e7:8f:e2:57:a8: 0c:89:8f:54:7b:9c:23:45:10:3f:93:b5:03:59:17:44:c6:37: e3:64:2a:24 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5MkExMTAvBgNVBAUTKDM3OUI5MUM5MzBFMEEyQUY4QjgyMkFEOUE5NTlCQURG NURERDYwOUYwHhcNMjUwNjE1MDMzMjI1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRlM2VjOS0zMjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28QGt8Mm9UGtnrwQTCO5uw9hZJl2XCiVpQbgWRWWKcRt7Xy5iopUZN1/XDne dPTeWUN9BaT9HUx+LlFrgiVcvin7GVCvjQJbSdWxQ6cI43KS9tkpWUWDbzstSP8O ojvOmjKxLy6x608lMMfLFHABAqZzwJak9Lj9JbggA6oFQvzUPZUWTaXu9gFoyWYr D2PWLeAGSqv+O6KKoYxwVp+V2S0vVgFwebAy//Tfk4sM+mZp8B6jU1elEU0nj2NT UJrUs412cM53OaEuv6Lduganc9YRW6VduLnrjNrXlhY3P57+ISK/jXJ2HW8LfBF7 3PpVhkJRkr0Dp3og3CeCW0Ir2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFEw8+/8U wPfOLQ3f8kXZk+KPzRRUMB8GA1UdIwQYMBaAFDebkckw4KKvi4Iq2alZut9d3WCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDkyQS8zQ0U1NzdEQTVC NTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29xLUxnaXJacVZtNjMxM2RZ SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUQ5MkEvM0NFNTc3REE1QjU0MTFFRTgwODZGNDMyQzRGOUFFMDIvNzk2Q0QzNUE1 QjU1MTFFRThFNEQyQTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLF+gwDQYJKoZIhvcNAQELBQADggEBACPLCnF4ixxfPGfH BRt1aLlJ1k7c2GvoBB6dTnsoIBA2FM+RvIevuOdtiE8+gC0AX9wN38fM3TUUuVCX X+6s7V0IWEPpRgywHLfn1rBc8w56MxgrJZXPLS20kDSVgRYgYq+PhbOMPBGHwLAW as4XxnXJ2nvDB39L3uB+a6u9yuimI/g7NgXHTmfehSejM9tCg6wYoCIDDwd+wzFr vseV1ErH3e685wMvMY7X1dBmj0Pw0Tl1HodmLFG3tn0ZtNGtni7ie8bgP7ILXC4/ ZPIZG3bRTpqb9v+OguseHWqNbOXngo8wscHnj+JXqAyJj1R7nCNFED+TtQNZF0TG N+NkKiQ= -----END CERTIFICATE-----Generated at Fri Jul 4 04:04:48 2025 by rpki-client