$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/38548A62EDC011EF82A1C85BC4F9AE02.roa File: 38548A62EDC011EF82A1C85BC4F9AE02.roa (raw, json) Hash identifier: U0zd0ajPJef71s0NXBX+K8FghsVdpyFA7/S7d/R/cG0= Subject key identifier: 4C:8A:73:2D:0E:C0:60:C4:C4:20:47:92:DD:31:1E:EF:76:69:0F:3A Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 0925 Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/38548A62EDC011EF82A1C85BC4F9AE02.roa Signing time: Thu 26 Jun 2025 11:33:57 +0000 ROA not before: Thu 26 Jun 2025 11:33:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 38138 IP address blocks: 114.129.10.0/23 maxlen: 23 114.129.10.0/24 maxlen: 24 114.129.11.0/24 maxlen: 24 114.129.12.0/24 maxlen: 24 2405:eec0::/32 maxlen: 32 2405:eec0:1::/48 maxlen: 48 2405:eec0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2341 (0x925) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: Jun 26 11:33:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=685d3025-cc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7d:75:62:40:e7:39:28:99:5a:70:81:6b:db: 42:0f:07:04:8f:6a:8d:76:f7:c7:00:35:f1:c5:27: d7:ed:00:6d:e3:04:4f:00:6d:7b:68:e2:ac:6f:d5: b0:e8:5a:3f:8c:6f:36:a5:cf:78:4b:73:ef:2d:78: c9:42:28:37:c5:61:96:19:55:92:0f:4e:84:93:0d: b3:64:4a:59:2b:da:b2:35:27:68:ac:bd:5d:7b:ae: 90:35:09:4c:f3:fa:6a:d2:c8:d5:c2:68:f1:6c:b8: d2:2b:d5:05:fa:be:e8:e5:2a:e1:f8:97:81:01:d5: 70:dc:f4:ca:cc:b9:09:e4:dd:70:30:b1:8f:55:54: 31:cf:31:e4:4f:63:b4:e6:42:f9:d4:f4:84:5b:65: da:68:ee:27:6c:f3:6e:44:ea:da:75:b8:74:96:d6: 59:ac:6f:7c:35:ec:22:d8:c4:aa:34:5a:d2:46:2a: a8:5e:d4:12:c8:49:fe:2b:8d:5d:ff:6d:18:fb:5a: 29:a8:4d:a1:a9:79:c5:d8:47:20:8b:63:a3:51:ae: 08:0d:d1:80:d8:7b:67:e4:5c:6e:14:6b:5d:f0:b9: ff:de:3c:cd:2c:34:e6:2c:d0:2a:52:65:e0:09:7a: e5:ce:48:98:71:f6:13:26:56:e5:03:71:03:9b:19: de:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8A:73:2D:0E:C0:60:C4:C4:20:47:92:DD:31:1E:EF:76:69:0F:3A X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/38548A62EDC011EF82A1C85BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.129.10.0-114.129.12.255 IPv6: 2405:eec0::/32 Signature Algorithm: sha256WithRSAEncryption 2f:63:67:da:e3:ce:7e:4b:36:b9:5b:d2:b6:f1:a6:99:10:d9: 32:d8:00:ae:9b:be:2b:72:7c:e0:6d:f4:90:58:2b:6e:e7:2d: 5a:3e:2d:68:75:b1:4b:2f:66:ba:df:53:f0:a7:c3:26:93:af: a5:2b:dc:65:c8:08:de:84:f5:71:62:af:77:98:cb:8f:7c:1e: 5e:19:d9:1f:e8:af:8d:6e:6f:69:74:22:3a:0d:fb:5f:e6:cc: 6d:68:92:ef:a5:f6:b7:a9:e3:af:fc:73:5e:51:1e:ab:87:ad: e0:22:da:38:2f:fd:81:46:0e:60:4c:d9:8d:e9:da:90:80:ac: 94:a2:bf:a3:b4:71:ad:cf:0d:db:99:5b:00:5b:c2:24:40:40: 1f:82:ac:21:36:7c:60:17:89:6f:6c:9e:11:3b:c9:96:62:af: aa:65:e6:98:1f:96:06:e8:26:f9:bc:88:f4:ff:b5:93:7a:d3: a6:c9:16:97:4d:76:87:cb:11:04:0f:a6:f9:e4:2c:cc:c3:b2: 36:1d:5c:5d:29:b5:05:07:71:1a:4a:d2:b4:de:cf:9f:ad:96: e0:cd:23:5b:29:07:dc:ec:4d:09:ee:48:07:52:f3:6f:1d:02: e3:be:87:1b:8b:7f:2e:fd:39:8b:2d:00:75:d4:a7:4c:02:85: 9f:9d:35:82 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjUwNjI2MTEzMzU3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVkMzAyNS1jYzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwX11YkDnOSiZWnCBa9tCDwcEj2qNdvfHADXxxSfX7QBt4wRPAG17aOKsb9Ww 6Fo/jG82pc94S3PvLXjJQig3xWGWGVWSD06Ekw2zZEpZK9qyNSdorL1de66QNQlM 8/pq0sjVwmjxbLjSK9UF+r7o5Srh+JeBAdVw3PTKzLkJ5N1wMLGPVVQxzzHkT2O0 5kL51PSEW2XaaO4nbPNuROradbh0ltZZrG98Newi2MSqNFrSRiqoXtQSyEn+K41d /20Y+1opqE2hqXnF2Ecgi2OjUa4IDdGA2Htn5FxuFGtd8Ln/3jzNLDTmLNAqUmXg CXrlzkiYcfYTJlblA3EDmxne9wIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFEyKcy0O wGDExCBHkt0xHu92aQ86MB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzBCREUvN0U1QUMzRTA4OTcxMTFFQTkyNDAyQTBBQzRGOUFFMDIvMzg1NDhBNjJF REMwMTFFRjgyQTFDODVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEAXKBCgMEAHKBDDANBAIAAjAHAwUAJAXuwDANBgkqhkiG 9w0BAQsFAAOCAQEAL2Nn2uPOfks2uVvStvGmmRDZMtgArpu+K3J84G30kFgrbuct Wj4taHWxSy9mut9T8KfDJpOvpSvcZcgI3oT1cWKvd5jLj3weXhnZH+ivjW5vaXQi Og37X+bMbWiS76X2t6njr/xzXlEeq4et4CLaOC/9gUYOYEzZjenakICslKK/o7Rx rc8N25lbAFvCJEBAH4KsITZ8YBeJb2yeETvJlmKvqmXmmB+WBugm+byI9P+1k3rT pskWl012h8sRBA+m+eQszMOyNh1cXSm1BQdxGkrStN7Pn62W4M0jWykH3OxNCe5I B1Lzbx0C476HG4t/Lv05iy0AddSnTAKFn501gg== -----END CERTIFICATE-----Generated at Thu Jul 3 16:53:34 2025 by rpki-client