$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/6C18BEE0519811F08E123360C4F9AE02.roa File: 6C18BEE0519811F08E123360C4F9AE02.roa (raw, json) Hash identifier: aNXBkCTSnj9L9YAKLhVVj1WRcZCzQq19CJAT5ztk+BY= Subject key identifier: C4:5F:60:EA:E7:6E:4F:C3:E7:8C:43:CB:58:30:D7:C9:AB:54:9D:EE Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Certificate serial: 06 Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/6C18BEE0519811F08E123360C4F9AE02.roa Signing time: Wed 25 Jun 2025 07:56:58 +0000 ROA not before: Wed 25 Jun 2025 07:56:58 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 5400 IP address blocks: 203.158.64.0/23 maxlen: 23 203.158.66.0/23 maxlen: 23 203.158.68.0/23 maxlen: 23 203.158.70.0/23 maxlen: 23 203.158.72.0/23 maxlen: 23 203.158.74.0/23 maxlen: 23 203.158.76.0/23 maxlen: 23 203.158.78.0/23 maxlen: 23 203.158.80.0/23 maxlen: 23 203.158.82.0/23 maxlen: 23 203.158.84.0/23 maxlen: 23 203.158.86.0/23 maxlen: 23 203.158.88.0/24 maxlen: 24 203.158.89.0/24 maxlen: 24 203.158.90.0/23 maxlen: 23 203.158.92.0/24 maxlen: 24 203.158.93.0/24 maxlen: 24 203.158.94.0/24 maxlen: 24 203.158.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Validity Not Before: Jun 25 07:56:58 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=685babca-81d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7c:16:6f:97:7b:10:e7:6f:a5:4f:f3:bf:25: bb:c9:ca:c4:58:db:a7:c8:e0:51:9c:56:e0:b6:c5: 8e:e3:4f:bd:35:4f:f4:29:e1:6a:8b:d5:3b:d2:c1: 3a:b5:97:a2:4e:87:24:41:dd:50:44:66:c0:bc:d4: 79:05:23:92:2e:5a:15:f0:4f:54:87:57:5a:c9:4b: c4:6a:60:90:da:62:44:bd:1a:87:d7:de:7b:27:b9: 92:0e:e2:ee:1f:af:3e:3e:d9:3c:22:54:b1:aa:c6: 8f:6e:2d:cd:47:28:8b:8e:bb:bf:a0:14:5d:6d:5b: d3:5a:eb:87:e3:94:bc:bf:67:db:3f:27:21:ad:bb: cd:73:4b:5c:aa:a2:19:69:e4:c0:a6:22:51:b0:31: de:4d:bf:ef:f9:5d:61:d2:b0:48:d7:71:1e:57:fe: 27:6d:40:90:5f:4c:ea:c0:34:8d:51:d7:6a:30:24: 58:f7:29:f5:d4:2d:56:a2:ff:56:16:78:f7:96:d4: 9f:87:93:93:da:98:db:07:5c:5f:89:df:b4:c3:e5: 51:d7:69:ef:d9:f8:11:51:4c:ab:18:e7:e7:f5:14: 28:b7:ba:d4:ed:43:d3:76:b1:46:16:77:d7:eb:e6: f5:e4:e2:47:b0:90:b2:63:55:d1:a0:66:fc:d8:67: 77:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5F:60:EA:E7:6E:4F:C3:E7:8C:43:CB:58:30:D7:C9:AB:54:9D:EE X509v3 Authority Key Identifier: keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/6C18BEE0519811F08E123360C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.158.64.0/19 Signature Algorithm: sha256WithRSAEncryption 60:0b:98:6f:07:8e:1a:03:9f:81:56:a1:75:5e:bb:ed:33:64: 98:a5:23:f9:2e:79:82:be:61:4b:70:62:c4:9b:3f:2a:2e:3f: 2d:e8:f7:f4:ea:d1:a4:ba:a8:fb:d2:46:fa:3a:20:2e:77:5b: 7b:e7:9f:94:6a:0a:3f:7f:59:a7:0c:3f:f6:4d:73:5a:41:1e: 52:a8:6c:eb:3c:fb:5c:a9:62:7d:e5:bb:cc:0e:1b:8f:1a:17: b2:05:80:43:de:d8:e1:28:be:8d:46:5c:f6:79:71:34:23:0a: 7c:b3:b8:0a:2b:b9:ab:9c:2a:4f:82:cf:85:db:e7:89:e2:76: 0e:97:b4:48:37:6a:3e:65:bb:06:ec:db:30:0b:12:a0:f4:22: 17:c0:09:e4:40:8f:e9:2b:20:49:ce:26:ba:64:bf:1d:f8:c0: ac:bb:b3:c0:e5:19:e1:ec:42:cc:b8:40:10:8f:5a:7e:46:fe: 56:78:86:eb:69:01:d0:fa:aa:f6:78:78:e0:b4:4b:69:19:9f: 6a:93:b4:79:59:8f:9c:9a:1f:83:b2:c4:1f:3a:a4:68:b3:0f: 17:c7:20:20:43:6c:49:c2:64:cf:f7:57:d1:9a:44:a2:4a:8f: 3f:16:68:b3:13:1c:3d:c9:ad:f0:75:de:d6:e3:5d:de:8f:d7: 9a:07:dc:d8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REM2ODExMC8GA1UEBRMoN0UzQUM2OTE5QzIyOEY5ODAxQUNGOTA3NUQ5MDhFNTEy REQ2REEzNDAeFw0yNTA2MjUwNzU2NThaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NWJhYmNhLTgxZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcfBZvl3sQ52+lT/O/JbvJysRY26fI4FGcVuC2xY7jT701T/Qp4WqL1TvSwTq1 l6JOhyRB3VBEZsC81HkFI5IuWhXwT1SHV1rJS8RqYJDaYkS9GofX3nsnuZIO4u4f rz4+2TwiVLGqxo9uLc1HKIuOu7+gFF1tW9Na64fjlLy/Z9s/JyGtu81zS1yqohlp 5MCmIlGwMd5Nv+/5XWHSsEjXcR5X/idtQJBfTOrANI1R12owJFj3KfXULVai/1YW ePeW1J+Hk5PamNsHXF+J37TD5VHXae/Z+BFRTKsY5+f1FCi3utTtQ9N2sUYWd9fr 5vXk4kewkLJjVdGgZvzYZ3eDAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUxF9g6udu T8PnjEPLWDDXyatUne4wHwYDVR0jBBgwFoAUfjrGkZwij5gBrPkHXZCOUS3W2jQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEQzY4LzU2RkNFMDhDNTE5 NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVnQnJQa0hYWkNPVVMzVzJq US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmpyR2tad2lqNWdCclBrSFhaQ09VUzNXMmpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REM2OC81NkZDRTA4QzUxOTcxMUYwQjZFOTc4NUVDNEY5QUUwMi82QzE4QkVFMDUx OTgxMUYwOEUxMjMzNjBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBcueQDANBgkqhkiG9w0BAQsFAAOCAQEAYAuYbweOGgOfgVah dV677TNkmKUj+S55gr5hS3BixJs/Ki4/Lej39OrRpLqo+9JG+jogLndbe+eflGoK P39Zpww/9k1zWkEeUqhs6zz7XKlifeW7zA4bjxoXsgWAQ97Y4Si+jUZc9nlxNCMK fLO4Ciu5q5wqT4LPhdvnieJ2Dpe0SDdqPmW7BuzbMAsSoPQiF8AJ5ECP6SsgSc4m umS/HfjArLuzwOUZ4exCzLhAEI9afkb+VniG62kB0Pqq9nh44LRLaRmfapO0eVmP nJofg7LEHzqkaLMPF8cgIENsScJkz/dX0ZpEokqPPxZosxMcPcmt8HXe1uNd3o/X mgfc2A== -----END CERTIFICATE-----Generated at Thu Jul 3 02:16:08 2025 by rpki-client