$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/79395BE68EB311EF9A8DFC3CC4F9AE02.roa File: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (raw, json) Hash identifier: RU2Bp78eGDXSscZxxDiygRwZ64V3JmS10+rUng9roo8= Subject key identifier: F0:3B:48:90:66:38:31:E7:02:01:32:44:45:B2:FA:2E:68:AE:9E:FF Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Certificate serial: 0E77 Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/79395BE68EB311EF9A8DFC3CC4F9AE02.roa Signing time: Mon 18 Aug 2025 18:27:17 +0000 ROA not before: Mon 18 Aug 2025 18:27:17 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 64513 IP address blocks: 43.231.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3703 (0xe77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54 Validity Not Before: Aug 18 18:27:17 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68a37085-e60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:60:39:8b:38:28:2c:d4:34:d3:73:5d:b0:a3: d2:fa:a2:f5:24:8c:19:fb:95:95:90:32:bd:e9:1a: db:25:b2:d0:2f:08:51:9e:82:02:80:0e:49:32:5e: 9a:71:df:1f:ff:0c:85:6c:e3:71:1f:8f:ef:26:30: 49:62:76:46:80:bc:ae:37:84:9c:62:f4:c1:97:1f: 06:e1:f7:80:0f:8f:d8:28:5a:19:35:bd:10:be:1b: 25:35:c6:c1:11:72:32:92:46:d7:84:a8:76:23:2e: 7d:53:f5:cf:d9:8a:db:c9:25:d5:33:6a:5e:03:86: 02:03:56:84:34:0a:3a:57:4d:2c:58:d6:de:35:98: e8:b4:f0:3a:d8:0f:2e:2d:35:13:2c:7a:9a:57:7b: 02:79:fe:42:86:2f:8a:71:ee:2b:06:ba:ca:d7:1b: 3a:fd:1e:53:f3:43:27:40:72:8e:8c:62:d1:d7:a6: a4:2f:16:4f:c7:8c:90:35:56:7b:44:2d:0d:91:dd: 5b:17:ae:b0:00:d5:bd:51:c9:01:ad:af:06:65:2f: 81:48:da:7f:4c:ee:b9:74:2a:62:05:d6:78:7d:68: c1:f4:68:ed:b5:95:46:0d:4d:92:58:7f:88:09:35: 2a:0f:2a:d4:cc:c3:2d:92:af:57:5d:95:66:0c:5a: 0b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3B:48:90:66:38:31:E7:02:01:32:44:45:B2:FA:2E:68:AE:9E:FF X509v3 Authority Key Identifier: keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/79395BE68EB311EF9A8DFC3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.31.0/24 Signature Algorithm: sha256WithRSAEncryption 69:6f:5c:2a:90:87:e8:91:08:d1:86:40:46:b5:54:d8:36:30: 88:bd:67:94:e8:ef:75:7f:55:5c:8f:52:e6:43:94:cd:88:36: 57:5f:6b:f9:63:27:44:84:76:8d:cf:e2:08:ff:c8:e2:1e:73: 63:1b:4a:41:c3:2b:18:4a:44:31:b6:5f:98:2f:e3:a5:22:b1: d9:5c:a7:04:5a:5a:f6:da:03:dc:60:9a:84:fb:c9:55:ff:71: 13:d7:70:6a:f6:d2:2a:f4:23:04:94:dd:2a:20:7b:a9:67:1a: 0f:76:49:66:39:7d:38:db:81:64:98:8c:27:94:dc:fd:2a:fc: a2:4c:47:f0:9f:1a:13:f3:e6:ce:74:27:59:bb:1d:46:f7:19: a3:81:79:68:38:09:1e:49:9b:ea:6d:ad:28:62:f3:e2:60:e1: 72:15:ca:f7:d2:76:ec:79:25:42:dd:01:25:df:2c:64:c0:c6: 0b:5b:ab:65:14:fa:8d:ed:14:51:28:9d:86:f4:28:f3:a2:e4: d2:a0:fd:6b:64:0a:a4:74:ee:15:f7:9d:fd:68:a8:56:3a:0f: eb:65:09:a4:f7:5c:4a:a8:af:60:09:47:3a:de:84:8a:d8:ee: 42:cc:45:b3:78:c8:5f:d4:7c:7e:5a:79:ba:74:02:e9:95:0b: e5:1c:d9:0c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5RjIxMTAvBgNVBAUTKEM4NzNCQjYxMEI5MTNDM0VDREM3MDhBMjY1QTc0QjEx NDFBNzZGNTQwHhcNMjUwODE4MTgyNzE3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzNzA4NS1lNjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+2A5izgoLNQ003NdsKPS+qL1JIwZ+5WVkDK96RrbJbLQLwhRnoICgA5JMl6a cd8f/wyFbONxH4/vJjBJYnZGgLyuN4ScYvTBlx8G4feAD4/YKFoZNb0QvhslNcbB EXIykkbXhKh2Iy59U/XP2YrbySXVM2peA4YCA1aENAo6V00sWNbeNZjotPA62A8u LTUTLHqaV3sCef5Chi+Kce4rBrrK1xs6/R5T80MnQHKOjGLR16akLxZPx4yQNVZ7 RC0Nkd1bF66wANW9UckBra8GZS+BSNp/TO65dCpiBdZ4fWjB9GjttZVGDU2SWH+I CTUqDyrUzMMtkq9XXZVmDFoLfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPA7SJBm ODHnAgEyREWy+i5orp7/MB8GA1UdIwQYMBaAFMhzu2ELkTw+zccIomWnSxFBp29U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlGMi84MkU0QzJBMEE2 RUUxMUU5ODVGM0IwMTFDNEY5QUUwMi95SE83WVF1UlBEN054d2lpWmFkTEVVR25i MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lITzdZUXVSUEQ3Tnh3aWlaYWRMRVVHbmIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjQ5RjIvODJFNEMyQTBBNkVFMTFFOTg1RjNCMDExQzRGOUFFMDIvNzkzOTVCRTY4 RUIzMTFFRjlBOERGQzNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr5x8wDQYJKoZIhvcNAQELBQADggEBAGlvXCqQh+iRCNGG QEa1VNg2MIi9Z5To73V/VVyPUuZDlM2INldfa/ljJ0SEdo3P4gj/yOIec2MbSkHD KxhKRDG2X5gv46UisdlcpwRaWvbaA9xgmoT7yVX/cRPXcGr20ir0IwSU3Soge6ln Gg92SWY5fTjbgWSYjCeU3P0q/KJMR/CfGhPz5s50J1m7HUb3GaOBeWg4CR5Jm+pt rShi8+Jg4XIVyvfSdux5JULdASXfLGTAxgtbq2UU+o3tFFEonYb0KPOi5NKg/Wtk CqR07hX3nf1oqFY6D+tlCaT3XEqor2AJRzrehIrY7kLMRbN4yF/UfH5aebp0AumV C+Uc2Qw= -----END CERTIFICATE-----Generated at Sun Aug 24 04:55:52 2025 by rpki-client