$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/1A0B540E3AA711EA83682876C4F9AE02.roa File: 1A0B540E3AA711EA83682876C4F9AE02.roa (raw, json) Hash identifier: aPhIlaax2BlOuwZfkwHVyHDwMsLRzjqBCMCDNEm2/F8= Subject key identifier: 22:AF:20:38:E6:DB:E7:93:03:A2:23:79:58:9E:81:C2:3B:C0:9B:31 Certificate issuer: /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Certificate serial: 0B68 Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/1A0B540E3AA711EA83682876C4F9AE02.roa Signing time: Thu 28 Aug 2025 19:40:22 +0000 ROA not before: Thu 28 Aug 2025 19:40:22 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38210 IP address blocks: 202.72.232.0/22 maxlen: 22 202.72.232.0/24 maxlen: 24 202.72.233.0/24 maxlen: 24 202.72.234.0/24 maxlen: 24 202.72.235.0/24 maxlen: 24 202.72.236.0/22 maxlen: 22 202.72.236.0/24 maxlen: 24 202.72.237.0/24 maxlen: 24 202.72.238.0/24 maxlen: 24 202.72.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2920 (0xb68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Validity Not Before: Aug 28 19:40:22 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68b0b0a5-df7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:63:81:fb:0d:ce:dd:dd:e4:65:c7:a0:39:6e: 08:8d:ca:ab:dd:b7:0b:d9:df:a1:a9:ed:c2:82:a0: 98:db:23:c4:0c:14:37:ee:87:9a:d5:d5:59:fc:10: 6b:21:ab:6a:a2:f3:3a:0c:cf:ed:e3:47:09:33:23: ca:6e:89:65:bc:a5:5c:7a:49:99:e9:df:11:17:ea: 22:32:fd:e4:8d:f5:16:9b:14:2f:4e:f5:03:53:2c: 1a:ec:9a:2f:6f:2b:c6:1d:32:69:97:b7:c4:b4:1b: 40:05:6f:d9:f7:73:d9:4d:8a:92:ce:a1:ce:e9:fb: 49:a9:ac:b6:40:82:4d:85:a4:8a:80:f2:f6:b9:6e: 4e:09:31:45:a5:ac:74:3a:ef:ce:ea:67:26:18:02: 1e:97:3b:55:00:f8:41:5b:c3:8d:fd:be:b5:ff:14: 5d:26:8f:62:cb:09:92:ad:89:0b:5f:05:31:1f:f4: 2e:10:bf:6d:42:1a:84:ee:b5:e4:4c:28:cc:c1:93: 04:69:61:11:a7:c0:3f:fc:cd:6c:f8:83:dc:55:d1: fb:cb:8b:14:c0:14:5c:5e:5d:40:65:8f:7c:b1:c9: 76:5d:01:d6:10:b5:50:73:a3:25:cd:15:2e:b0:e1: 17:46:75:d5:a8:d9:71:c8:64:8b:89:9c:72:22:83: 35:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AF:20:38:E6:DB:E7:93:03:A2:23:79:58:9E:81:C2:3B:C0:9B:31 X509v3 Authority Key Identifier: keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/1A0B540E3AA711EA83682876C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.72.232.0/21 Signature Algorithm: sha256WithRSAEncryption 51:9b:08:a7:d7:c5:02:6a:5f:2f:61:70:64:0f:44:d0:b3:ec: c5:00:12:a8:ef:c4:5c:a6:ae:d8:58:ea:ae:aa:a9:43:ec:c7: 9f:0f:96:ca:bf:18:de:0e:dc:6a:ac:47:43:04:2e:94:91:f5: ee:4b:38:a8:d4:35:da:3f:28:aa:f9:76:bc:cf:1c:15:61:a0: 07:5a:2c:96:26:5f:91:1f:40:bd:f7:1d:48:4a:07:fa:ed:23: 44:df:73:14:a0:80:bc:27:d0:94:f8:2a:e6:5e:26:69:e6:d5: 9d:2b:97:82:ee:5b:0b:bd:72:2a:ce:d4:43:27:40:b2:48:84: 9e:ac:bf:50:6f:dc:b9:3b:a5:60:bb:76:7c:6e:4c:51:fd:10: 82:82:91:01:b3:c8:59:89:9b:df:ff:df:ed:07:ec:7e:02:43: 9a:18:b1:09:25:f2:f0:a0:fe:56:65:63:42:7c:60:26:89:13: 7b:fd:d5:22:cf:62:a2:18:12:75:16:97:41:9b:b4:1f:52:05: 74:2f:13:35:ab:ef:32:2c:0b:e2:19:25:12:cb:6a:43:50:8b: ff:41:1e:49:67:f8:3c:8a:f9:0a:ab:71:5e:ba:9b:1c:85:b1: 2b:4c:75:6b:c3:68:3d:f8:23:9c:a9:2b:53:98:78:d0:7d:8a: b6:f9:bd:9d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QzIxMTAvBgNVBAUTKDZGOUFDMDRDRTVBQzcxQTdDMkI3QUZCMUE1NTcyN0Ex MEU1QjA2RUUwHhcNMjUwODI4MTk0MDIyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwYjBhNS1kZjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmOB+w3O3d3kZcegOW4Ijcqr3bcL2d+hqe3CgqCY2yPEDBQ37oea1dVZ/BBr IatqovM6DM/t40cJMyPKbollvKVcekmZ6d8RF+oiMv3kjfUWmxQvTvUDUywa7Jov byvGHTJpl7fEtBtABW/Z93PZTYqSzqHO6ftJqay2QIJNhaSKgPL2uW5OCTFFpax0 Ou/O6mcmGAIelztVAPhBW8ON/b61/xRdJo9iywmSrYkLXwUxH/QuEL9tQhqE7rXk TCjMwZMEaWERp8A//M1s+IPcVdH7y4sUwBRcXl1AZY98scl2XQHWELVQc6MlzRUu sOEXRnXVqNlxyGSLiZxyIoM1kwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCKvIDjm 2+eTA6IjeViegcI7wJsxMB8GA1UdIwQYMBaAFG+awEzlrHGnwrevsaVXJ6EOWwbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlDMi9BQjBERjRGMjNB QTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2NhZkN0Ni14cFZjbm9RNWJC dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I1ckFUT1dzY2FmQ3Q2LXhwVmNub1E1YkJ1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkQ5QzIvQUIwREY0RjIzQUEyMTFFQUE3OUU2QTY5QzRGOUFFMDIvMUEwQjU0MEUz QUE3MTFFQTgzNjgyODc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAPKSOgwDQYJKoZIhvcNAQELBQADggEBAFGbCKfXxQJqXy9h cGQPRNCz7MUAEqjvxFymrthY6q6qqUPsx58Plsq/GN4O3GqsR0MELpSR9e5LOKjU Ndo/KKr5drzPHBVhoAdaLJYmX5EfQL33HUhKB/rtI0TfcxSggLwn0JT4KuZeJmnm 1Z0rl4LuWwu9cirO1EMnQLJIhJ6sv1Bv3Lk7pWC7dnxuTFH9EIKCkQGzyFmJm9// 3+0H7H4CQ5oYsQkl8vCg/lZlY0J8YCaJE3v91SLPYqIYEnUWl0GbtB9SBXQvEzWr 7zIsC+IZJRLLakNQi/9BHkln+DyK+QqrcV66mxyFsStMdWvDaD34I5ypK1OYeNB9 irb5vZ0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:43:51 2025 by rpki-client