$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/3785190EF0FE11EEA034D07EC4F9AE02.roa File: 3785190EF0FE11EEA034D07EC4F9AE02.roa (raw, json) Hash identifier: AfzhqDwLeStHXJxpgyc+yEacR03mjMokZpSrDW27t/A= Subject key identifier: E8:2B:29:B8:A5:60:69:FE:32:A4:BC:79:0E:29:20:0A:94:4E:AE:9D Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Certificate serial: 2A42 Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/3785190EF0FE11EEA034D07EC4F9AE02.roa Signing time: Wed 02 Jul 2025 15:52:41 +0000 ROA not before: Wed 02 Jul 2025 15:52:41 +0000 ROA not after: Thu 30 Oct 2025 00:00:00 +0000 asID: 24323 IP address blocks: 43.245.192.0/22 maxlen: 22 43.245.192.0/24 maxlen: 24 43.245.193.0/24 maxlen: 24 43.245.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10818 (0x2a42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Validity Not Before: Jul 2 15:52:41 2025 GMT Not After : Oct 30 00:00:00 2025 GMT Subject: CN=686555c8-7d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:93:4f:6a:bc:f4:3c:55:71:8f:01:19:60:51: 2e:0e:d7:37:f1:8f:c7:f6:3d:91:eb:4a:b3:04:1f: 4e:fe:76:3f:81:c0:96:84:e5:21:8b:7e:c8:2f:52: 32:10:d2:66:f1:c0:14:73:c1:dc:0e:e8:8c:17:b9: 90:b3:98:20:75:81:59:22:c8:ff:55:96:c0:5c:fd: 02:fb:63:ba:b7:f8:8d:b5:bf:3d:ae:ac:f9:bb:38: 00:25:58:ec:7a:bc:1b:88:7d:67:74:db:d0:96:98: 6b:b1:c6:a1:60:fe:c1:d2:b3:66:66:23:64:47:ac: 12:37:29:bf:61:5c:5f:a3:61:2f:5b:82:85:ff:f7: 16:c6:c3:77:65:ee:6f:7c:53:25:21:1b:9b:aa:7c: 1c:3d:3d:8d:fa:ce:90:11:93:c0:c6:61:99:10:5e: 41:6e:45:fc:73:87:0c:5d:ab:00:88:59:ed:ce:9e: a3:7f:12:36:2c:03:8d:6f:a6:76:7b:a5:af:1d:ab: e1:84:51:2a:7b:9a:82:9f:31:e0:a5:a6:c0:ab:11: bb:54:22:8b:e8:8f:a1:47:bc:8f:f3:b9:32:81:19: 52:bc:09:f4:27:ce:21:1c:ee:2c:42:0d:0a:0f:ab: 2c:25:14:65:c2:3d:6e:5d:ce:83:50:54:d1:91:b4: 77:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2B:29:B8:A5:60:69:FE:32:A4:BC:79:0E:29:20:0A:94:4E:AE:9D X509v3 Authority Key Identifier: keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/3785190EF0FE11EEA034D07EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.192.0/22 Signature Algorithm: sha256WithRSAEncryption 31:48:c1:d8:6d:f1:47:cd:c5:66:bf:07:2e:a9:6e:5c:fc:02: 8f:b0:cb:4c:10:75:d5:e6:6d:ff:a2:76:90:19:85:a4:ab:cf: 25:21:60:0f:22:48:f1:e9:fb:ab:0d:dd:53:81:f8:99:97:17: bb:3e:ca:cb:60:4f:b0:26:71:bd:46:a8:f7:e0:b1:6e:88:76: 25:4d:e5:0b:0e:1f:51:06:fb:1e:22:be:4a:47:d3:51:f9:fe: c9:bc:19:c9:fc:28:30:26:a1:15:19:f6:5f:10:92:47:22:04: 17:42:83:20:ea:06:f9:ae:f6:32:9a:22:d3:7a:3f:74:93:24: 92:01:8b:49:3d:a1:f0:a8:03:a4:89:1d:1b:69:d4:80:93:5f: 4a:57:e8:39:0d:b2:ba:94:15:0f:05:05:9d:d6:3b:44:bf:76: f1:11:e4:18:99:b4:3e:0f:f0:80:d4:03:ad:8a:42:5d:b7:cc: b4:d9:b7:97:22:cc:50:c0:ce:f3:ea:3e:2d:14:1c:5e:a4:88: 60:37:13:6c:d4:8e:1e:28:6b:d5:07:ed:d6:42:9b:f1:46:07: d8:ae:41:13:a5:1c:be:cf:73:b4:a8:11:bd:55:e6:1f:9c:95: 86:4e:99:f1:0f:87:58:5b:b3:6b:90:af:b2:b6:ff:15:e2:d6: 68:16:4b:13 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxQzcxMTAvBgNVBAUTKEU4REY4RDVFNEM4NERBODdENzI5QTczQzFDNEU4NjEx MzgxQUIyQzEwHhcNMjUwNzAyMTU1MjQxWhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1NTVjOC03ZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5NParz0PFVxjwEZYFEuDtc38Y/H9j2R60qzBB9O/nY/gcCWhOUhi37IL1Iy ENJm8cAUc8HcDuiMF7mQs5ggdYFZIsj/VZbAXP0C+2O6t/iNtb89rqz5uzgAJVjs erwbiH1ndNvQlphrscahYP7B0rNmZiNkR6wSNym/YVxfo2EvW4KF//cWxsN3Ze5v fFMlIRubqnwcPT2N+s6QEZPAxmGZEF5BbkX8c4cMXasAiFntzp6jfxI2LAONb6Z2 e6WvHavhhFEqe5qCnzHgpabAqxG7VCKL6I+hR7yP87kygRlSvAn0J84hHO4sQg0K D6ssJRRlwj1uXc6DUFTRkbR36QIDAQABo4IClTCCApEwHQYDVR0OBBYEFOgrKbil YGn+MqS8eQ4pIAqUTq6dMB8GA1UdIwQYMBaAFOjfjV5MhNqH1ymnPBxOhhE4GrLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFDNy85N0NGMjBGQTMz MjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJvZlhLYWM4SEU2R0VUZ2Fz c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOLU5Ya3lFMm9mWEthYzhIRTZHRVRnYXNzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjAxQzcvOTdDRjIwRkEzMzIzMTFFNEE2RTc0OTExQzRGOUFFMDIvMzc4NTE5MEVG MEZFMTFFRUEwMzREMDdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr9cAwDQYJKoZIhvcNAQELBQADggEBADFIwdht8UfNxWa/ By6pblz8Ao+wy0wQddXmbf+idpAZhaSrzyUhYA8iSPHp+6sN3VOB+JmXF7s+ystg T7Amcb1GqPfgsW6IdiVN5QsOH1EG+x4ivkpH01H5/sm8Gcn8KDAmoRUZ9l8Qkkci BBdCgyDqBvmu9jKaItN6P3STJJIBi0k9ofCoA6SJHRtp1ICTX0pX6DkNsrqUFQ8F BZ3WO0S/dvER5BiZtD4P8IDUA62KQl23zLTZt5cizFDAzvPqPi0UHF6kiGA3E2zU jh4oa9UH7dZCm/FGB9iuQROlHL7Pc7SoEb1V5h+clYZOmfEPh1hbs2uQr7K2/xXi 1mgWSxM= -----END CERTIFICATE-----Generated at Thu Jul 3 13:30:10 2025 by rpki-client