$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/5C2EA0E477D111F0940AFF7AC4F9AE02.roa File: 5C2EA0E477D111F0940AFF7AC4F9AE02.roa (raw, json) Hash identifier: 6XTjIZuui64Zt7h8q158hY/yPZ00zRaoK7PVf/jp3D4= Subject key identifier: 85:BB:53:62:91:7C:CD:7E:B1:CD:DA:41:AD:F9:30:96:FC:E4:14:B3 Certificate issuer: /CN=A91B8CE1/serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6 Certificate serial: 02 Authority key identifier: F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/5C2EA0E477D111F0940AFF7AC4F9AE02.roa Signing time: Tue 12 Aug 2025 23:09:13 +0000 ROA not before: Tue 12 Aug 2025 23:09:13 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 1221 IP address blocks: 203.34.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CE1, serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6 Validity Not Before: Aug 12 23:09:13 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=689bc998-d756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:68:e1:30:8a:1e:ac:32:15:b5:09:c2:cd:8b: 69:2c:50:3c:b3:a1:5e:66:26:1a:ec:9d:28:7a:79: bd:6b:d1:fd:3c:b5:88:b3:1a:5d:2d:a9:a8:e7:e6: 02:47:84:35:3f:44:2f:e4:7a:b3:8b:06:76:3c:c1: 2c:50:a5:bc:67:e6:00:58:bb:94:97:e5:38:1f:e0: 0e:d0:9f:0f:15:9f:38:ec:03:bf:6d:46:4d:28:02: 73:b2:1e:00:0d:a3:73:4b:09:13:c7:09:1a:27:c8: b2:eb:b3:34:95:78:fe:1c:bb:c2:06:97:98:fb:5d: df:8c:ac:a2:47:0d:ff:f4:95:dc:f3:77:cc:cb:34: ee:dc:7e:da:57:06:2d:ef:4d:08:2d:90:fb:88:64: 43:b0:9b:03:dd:4e:68:6b:77:c5:4f:cc:6d:70:34: 78:38:89:ff:0e:b8:12:5c:25:5d:f5:fc:b4:8f:a9: 82:05:9a:d4:26:4d:04:7a:38:09:fd:c3:d0:6e:e0: 73:28:ee:5a:b9:38:b4:c6:27:85:ef:9d:eb:65:c2: 0d:4b:7d:f7:cc:d4:7a:08:e4:03:df:73:b2:28:88: 09:93:bb:93:48:57:1c:0d:6e:6e:45:a0:59:40:3f: de:06:4d:1c:27:f8:0f:75:ad:95:57:a6:6c:b6:c1: 01:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BB:53:62:91:7C:CD:7E:B1:CD:DA:41:AD:F9:30:96:FC:E4:14:B3 X509v3 Authority Key Identifier: keyid:F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/5C2EA0E477D111F0940AFF7AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.34.41.0/24 Signature Algorithm: sha256WithRSAEncryption 84:85:e7:11:5c:7c:d2:b5:f2:b0:37:20:bf:39:9e:eb:87:ab: d2:5f:78:9e:a0:93:06:c7:51:56:1b:a8:ee:8b:77:79:f4:26: 89:05:f9:19:c9:75:39:fa:02:86:a0:15:bb:bb:be:5a:4f:8c: cd:87:4a:7e:b2:d3:c2:8e:a3:1b:cd:65:11:f2:30:be:1f:40: f1:ed:cf:e2:62:f4:cb:04:f5:d0:4d:01:11:97:df:66:e6:dd: 52:6d:a4:13:fa:37:a2:e7:e9:85:d5:95:bb:61:87:ab:66:34: d9:58:84:b4:ee:8a:25:9a:dc:42:94:80:cc:9b:c5:9d:87:8f: a8:50:31:97:93:0c:21:bb:b6:a2:ce:2a:8c:ad:33:f6:f2:b0: d4:83:ad:aa:12:65:ae:99:10:89:99:05:d5:88:97:a0:d5:1b: 3e:1f:de:a9:5d:30:56:18:e6:de:3a:52:a4:a4:93:24:d0:2a: 8e:8d:c8:61:e8:ad:79:f9:74:b1:3a:d8:cb:2a:9f:7e:a2:80: 2e:32:35:24:a5:fd:78:59:02:c2:39:5e:7f:00:f2:8b:ac:87: 55:c9:4c:29:fd:60:66:5b:b4:a7:69:94:e8:db:89:21:8d:16: 03:60:ba:44:9f:11:85:e3:2d:64:5b:c0:4f:dd:40:20:74:38: b2:b7:83:10 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OENFMTExMC8GA1UEBRMoRjM0QzUyMTU5MUZCMkNEMDJEQzY3QkRENzJEQ0YyOEIw N0E0MkZGNjAeFw0yNTA4MTIyMzA5MTNaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY4OWJjOTk4LWQ3NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfaOEwih6sMhW1CcLNi2ksUDyzoV5mJhrsnSh6eb1r0f08tYizGl0tqajn5gJH hDU/RC/kerOLBnY8wSxQpbxn5gBYu5SX5Tgf4A7Qnw8VnzjsA79tRk0oAnOyHgAN o3NLCRPHCRonyLLrszSVeP4cu8IGl5j7Xd+MrKJHDf/0ldzzd8zLNO7cftpXBi3v TQgtkPuIZEOwmwPdTmhrd8VPzG1wNHg4if8OuBJcJV31/LSPqYIFmtQmTQR6OAn9 w9Bu4HMo7lq5OLTGJ4Xvnetlwg1LfffM1HoI5APfc7IoiAmTu5NIVxwNbm5FoFlA P94GTRwn+A91rZVXpmy2wQFNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUhbtTYpF8 zX6xzdpBrfkwlvzkFLMwHwYDVR0jBBgwFoAU80xSFZH7LNAtxnvdctzyiwekL/Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4Q0UxLzY3OTBCRTVDNzdD RTExRjBCNTU3NDA0Q0M0RjlBRTAyLzgweFNGWkg3TE5BdHhudmRjdHp5aXdla0xf WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODB4U0ZaSDdMTkF0eG52ZGN0enlpd2VrTF9ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENFMS82NzkwQkU1Qzc3Q0UxMUYwQjU1NzQwNENDNEY5QUUwMi81QzJFQTBFNDc3 RDExMUYwOTQwQUZGN0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsiKTANBgkqhkiG9w0BAQsFAAOCAQEAhIXnEVx80rXysDcg vzme64er0l94nqCTBsdRVhuo7ot3efQmiQX5Gcl1OfoChqAVu7u+Wk+MzYdKfrLT wo6jG81lEfIwvh9A8e3P4mL0ywT10E0BEZffZubdUm2kE/o3oufphdWVu2GHq2Y0 2ViEtO6KJZrcQpSAzJvFnYePqFAxl5MMIbu2os4qjK0z9vKw1IOtqhJlrpkQiZkF 1YiXoNUbPh/eqV0wVhjm3jpSpKSTJNAqjo3IYeitefl0sTrYyyqffqKALjI1JKX9 eFkCwjlefwDyi6yHVclMKf1gZlu0p2mU6NuJIY0WA2C6RJ8RheMtZFvAT91AIHQ4 sreDEA== -----END CERTIFICATE-----Generated at Sun Aug 24 06:36:58 2025 by rpki-client