$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/18272628C30B11E8A6851824C4F9AE02.roa File: 18272628C30B11E8A6851824C4F9AE02.roa (raw, json) Hash identifier: zpfEObk6bGVxgP9cE546XnlUvOzTcNHctZB0k7/qSd0= Subject key identifier: BD:AE:93:F0:45:EF:E2:93:DE:EE:CA:F7:37:D0:D3:AD:C1:5C:1F:DB Certificate issuer: /CN=A91C40D1/serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94 Certificate serial: 12EB Authority key identifier: 6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/18272628C30B11E8A6851824C4F9AE02.roa Signing time: Tue 26 Aug 2025 17:26:29 +0000 ROA not before: Tue 26 Aug 2025 17:26:29 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 137991 IP address blocks: 45.121.188.0/22 maxlen: 22 45.121.188.0/24 maxlen: 24 45.121.189.0/24 maxlen: 24 45.121.190.0/24 maxlen: 24 45.121.191.0/24 maxlen: 24 103.119.148.0/22 maxlen: 22 103.119.148.0/24 maxlen: 24 103.119.149.0/24 maxlen: 24 103.119.150.0/24 maxlen: 24 103.119.151.0/24 maxlen: 24 203.1.22.0/23 maxlen: 23 203.1.22.0/24 maxlen: 24 203.1.23.0/24 maxlen: 24 203.10.100.0/23 maxlen: 23 203.10.100.0/24 maxlen: 24 203.10.101.0/24 maxlen: 24 2403:4540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4843 (0x12eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D1, serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94 Validity Not Before: Aug 26 17:26:29 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68adee45-f659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0b:ce:19:43:7c:ca:db:1e:fd:fa:93:f5:f6: 1f:18:1a:5e:7c:9b:b6:6d:4b:0f:52:99:13:5c:98: 20:6c:f6:da:d7:1c:8d:c2:8e:34:6b:82:40:a3:39: b1:db:2d:d3:57:78:63:63:4b:bc:31:ea:d8:1b:f9: c3:ee:86:50:7a:24:40:31:c7:7f:3f:88:41:01:d0: 75:4b:25:80:e1:28:f4:3b:3c:a4:7b:17:59:8c:10: c5:c4:62:fc:2d:06:4b:bd:d1:cd:da:da:04:a3:10: 6b:09:37:8e:fb:76:66:04:3c:49:f6:4e:98:ab:0d: fb:3f:02:5e:33:5e:ab:18:56:3a:8c:d5:38:9b:72: 14:7c:a2:63:bc:ac:24:53:ac:63:83:bb:b2:14:c7: 7e:e9:2a:a4:f9:6e:60:84:0c:e6:fc:7f:b3:54:a4: 17:4f:a2:c0:b8:c2:3f:9c:4f:85:c5:be:3d:20:ad: f2:90:71:a6:8d:90:ad:cf:83:33:ef:d7:56:10:63: ee:ca:f8:fd:b7:0f:96:2e:ff:16:77:e8:11:bb:25: 22:b7:06:fa:03:c3:bb:9f:7f:a6:ff:e8:85:3a:8f: 6c:70:0a:6e:fe:c6:58:25:ea:f9:b3:51:f1:1c:c5: b6:ef:32:c1:92:c5:bd:45:46:32:e6:1f:19:57:55: 11:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AE:93:F0:45:EF:E2:93:DE:EE:CA:F7:37:D0:D3:AD:C1:5C:1F:DB X509v3 Authority Key Identifier: keyid:6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/18272628C30B11E8A6851824C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.188.0/22 103.119.148.0/22 203.1.22.0/23 203.10.100.0/23 IPv6: 2403:4540::/32 Signature Algorithm: sha256WithRSAEncryption 4a:e8:c1:4b:e0:47:41:a9:d2:2b:f1:4a:f0:93:72:5d:d4:94: 62:93:4d:44:30:d6:4b:6e:bd:06:17:17:fc:b4:83:b6:17:a8: f6:df:ea:cc:d1:91:6b:f3:f8:1f:eb:eb:5f:9b:60:41:b0:fa: 09:bc:44:22:2f:d8:93:68:0c:8e:0e:fb:84:2c:8f:84:0c:04: bd:6b:06:4e:8d:0d:a3:19:fe:d3:ea:22:62:80:be:2d:80:82: 76:08:6a:ce:b7:0c:a2:84:d0:90:f6:6a:4e:c2:c4:ee:0e:f5: e1:47:39:05:0b:0f:8c:30:43:33:92:fd:48:90:9b:d8:69:34: 52:e8:38:42:da:93:d1:8c:df:2d:5e:24:dd:65:70:71:0c:dd: f8:81:5b:5f:71:e0:3c:05:e8:12:28:95:b5:01:a3:eb:67:c2: ad:2c:a1:6e:6a:04:0b:54:40:6d:44:4c:37:59:74:c4:3e:8b: b1:b9:4e:be:d3:f9:3e:3a:ed:97:37:c9:02:f2:8c:a9:69:4d: 2d:b6:fd:04:b0:a6:22:85:5f:15:bf:32:9f:84:04:a2:ed:02: d8:dd:71:aa:63:a2:9d:ec:9f:e3:1c:01:f0:37:fc:7c:0f:89: ec:57:62:f1:af:9c:af:55:f7:2a:b1:8a:f9:2c:5c:b3:81:da: d5:d5:0b:a4 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICEuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDExMTAvBgNVBAUTKDZDQjMwREMwOEVGMjk3MzBFOURGMDQ5QzU0RjM5NTgy QUI4NUJFOTQwHhcNMjUwODI2MTcyNjI5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFkZWU0NS1mNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7wvOGUN8ytse/fqT9fYfGBpefJu2bUsPUpkTXJggbPba1xyNwo40a4JAozmx 2y3TV3hjY0u8MerYG/nD7oZQeiRAMcd/P4hBAdB1SyWA4Sj0OzykexdZjBDFxGL8 LQZLvdHN2toEoxBrCTeO+3ZmBDxJ9k6Yqw37PwJeM16rGFY6jNU4m3IUfKJjvKwk U6xjg7uyFMd+6Sqk+W5ghAzm/H+zVKQXT6LAuMI/nE+Fxb49IK3ykHGmjZCtz4Mz 79dWEGPuyvj9tw+WLv8Wd+gRuyUitwb6A8O7n3+m/+iFOo9scApu/sZYJer5s1Hx HMW27zLBksW9RUYy5h8ZV1URDwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFL2uk/BF 7+KT3u7K9zfQ063BXB/bMB8GA1UdIwQYMBaAFGyzDcCO8pcw6d8EnFTzlYKrhb6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBEMS9DQzc4MzBCMEMz MDkxMUU4OTAwRTVGMjFDNEY5QUUwMi9iTE1Od0k3eWx6RHAzd1NjVlBPVmdxdUZ2 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMTU53STd5bHpEcDN3U2NWUE9WZ3F1RnZwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQwRDEvQ0M3ODMwQjBDMzA5MTFFODkwMEU1RjIxQzRGOUFFMDIvMTgyNzI2MjhD MzBCMTFFOEE2ODUxODI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAItebwDBAJnd5QDBAHLARYDBAHLCmQwDQQCAAIwBwMFACQD RUAwDQYJKoZIhvcNAQELBQADggEBAErowUvgR0Gp0ivxSvCTcl3UlGKTTUQw1ktu vQYXF/y0g7YXqPbf6szRkWvz+B/r61+bYEGw+gm8RCIv2JNoDI4O+4Qsj4QMBL1r Bk6NDaMZ/tPqImKAvi2AgnYIas63DKKE0JD2ak7CxO4O9eFHOQULD4wwQzOS/UiQ m9hpNFLoOELak9GM3y1eJN1lcHEM3fiBW19x4DwF6BIolbUBo+tnwq0soW5qBAtU QG1ETDdZdMQ+i7G5Tr7T+T467Zc3yQLyjKlpTS22/QSwpiKFXxW/Mp+EBKLtAtjd capjop3sn+McAfA3/HwPiexXYvGvnK9V9yqxivksXLOB2tXVC6Q= -----END CERTIFICATE-----Generated at Mon Oct 20 19:35:01 2025 by rpki-client