$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/964EB3D49A5F11EC9124627BC4F9AE02.roa File: 964EB3D49A5F11EC9124627BC4F9AE02.roa (raw, json) Hash identifier: 8YnQugqr595jhqZisXArYlRiOGH/9vz6hBQ33+FTmLg= Subject key identifier: 38:5A:27:6F:67:6B:4F:4B:23:CC:AA:70:31:FD:C9:07:14:4F:CF:70 Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 03D3 Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/964EB3D49A5F11EC9124627BC4F9AE02.roa Signing time: Sat 23 Aug 2025 01:05:35 +0000 ROA not before: Sat 23 Aug 2025 01:05:35 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 4049 IP address blocks: 202.37.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 979 (0x3d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: Aug 23 01:05:35 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a913de-094a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1d:b4:4a:d3:e9:99:e1:95:e2:71:e2:8a:82: 4f:ed:d3:a0:d9:e8:54:a6:2b:fc:c0:80:63:3b:9c: f3:81:c4:65:f0:b6:64:c8:55:63:be:a1:ec:72:a2: b0:c2:ab:5b:88:5d:80:d3:4c:57:cb:75:e7:e8:6f: 71:9d:f0:72:6e:ee:fd:f0:d7:af:46:d7:10:17:f8: 7d:94:53:25:49:f7:e9:c9:07:b6:9d:90:4c:66:9e: ff:26:69:55:4e:5e:82:e7:4a:19:35:71:86:c9:d2: f2:98:70:29:b1:7c:e9:0a:ef:01:91:60:ab:ac:aa: 48:d7:ba:4b:1f:58:9b:39:bd:7b:28:f5:34:8a:90: 53:3a:83:b7:95:4d:21:0e:72:73:00:53:27:3d:74: d5:12:56:ba:d5:9c:28:5a:b4:64:33:e1:f7:5d:51: 01:4b:d3:d5:8d:8b:21:46:84:88:72:a5:9b:62:f9: 24:4d:5f:b7:d1:e6:9b:ea:9c:5b:a3:17:f8:ae:5c: 7b:08:49:1a:3a:60:7d:52:75:1c:0c:d1:c0:c1:da: 13:91:9a:80:36:82:bd:41:c4:ca:18:39:1e:72:ff: 1c:5c:d6:43:d6:7c:78:e1:ea:ff:42:bc:88:68:16: 20:d0:13:09:c9:ef:3a:a3:20:d6:02:eb:4f:09:e6: 1d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5A:27:6F:67:6B:4F:4B:23:CC:AA:70:31:FD:C9:07:14:4F:CF:70 X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/964EB3D49A5F11EC9124627BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.37.54.0/24 Signature Algorithm: sha256WithRSAEncryption 99:3d:04:aa:11:0f:62:83:47:a2:f9:ea:f5:b5:b7:7a:1f:36: 3c:13:63:27:0b:e3:7c:ec:6d:22:2e:12:d5:3b:d4:f5:ef:5c: 3c:d3:22:7b:03:16:f6:94:84:78:cd:3a:0f:c4:d2:60:b9:9b: 88:07:b5:5a:38:79:d9:7a:c9:32:70:7e:27:7f:2e:b7:cb:b8: 57:9c:78:02:97:ac:81:af:75:c5:bc:ab:01:e2:42:f6:1a:ad: 66:40:1c:97:e4:d7:e3:9f:a6:11:ee:f8:4e:e2:51:93:46:91: 2c:d8:85:52:d1:5b:f8:87:01:ef:5a:37:8e:2d:0f:3c:62:ae: 74:ca:62:39:e9:eb:96:3d:b6:67:da:f7:d9:0f:cb:34:53:7a: 4d:a3:82:89:10:fb:2b:20:b9:ca:30:da:bf:b6:00:9c:3d:f9: 3a:71:4f:63:5c:a1:c8:9f:a0:76:4f:09:6c:a3:62:84:f8:03: 5c:dd:a4:d5:24:af:7d:c5:7d:8d:77:c2:e8:a5:64:6c:fb:ac: e5:a4:64:55:ef:27:9a:a0:55:d7:7c:e2:2d:61:c6:55:05:76: d8:a8:61:77:ba:db:89:54:1b:d3:18:9d:c5:e7:f6:05:85:64: 12:c8:03:d1:74:cd:4c:51:fd:82:71:86:7d:0d:98:5f:f4:f9: 45:34:8a:ac -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjUwODIzMDEwNTM1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE5MTNkZS0wOTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzh20StPpmeGV4nHiioJP7dOg2ehUpiv8wIBjO5zzgcRl8LZkyFVjvqHscqKw wqtbiF2A00xXy3Xn6G9xnfBybu798NevRtcQF/h9lFMlSffpyQe2nZBMZp7/JmlV Tl6C50oZNXGGydLymHApsXzpCu8BkWCrrKpI17pLH1ibOb17KPU0ipBTOoO3lU0h DnJzAFMnPXTVEla61ZwoWrRkM+H3XVEBS9PVjYshRoSIcqWbYvkkTV+30eab6pxb oxf4rlx7CEkaOmB9UnUcDNHAwdoTkZqANoK9QcTKGDkecv8cXNZD1nx44er/QryI aBYg0BMJye86oyDWAutPCeYdBwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDhaJ29n a09LI8yqcDH9yQcUT89wMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDFDMDIvQkQ3RjJGNTY5QTAwMTFFQzgzNkJDOTU4QzRGOUFFMDIvOTY0RUIzRDQ5 QTVGMTFFQzkxMjQ2MjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKJTYwDQYJKoZIhvcNAQELBQADggEBAJk9BKoRD2KDR6L5 6vW1t3ofNjwTYycL43zsbSIuEtU71PXvXDzTInsDFvaUhHjNOg/E0mC5m4gHtVo4 edl6yTJwfid/LrfLuFeceAKXrIGvdcW8qwHiQvYarWZAHJfk1+OfphHu+E7iUZNG kSzYhVLRW/iHAe9aN44tDzxirnTKYjnp65Y9tmfa99kPyzRTek2jgokQ+ysgucow 2r+2AJw9+TpxT2NcocifoHZPCWyjYoT4A1zdpNUkr33FfY13wuilZGz7rOWkZFXv J5qgVdd84i1hxlUFdtioYXe624lUG9MYncXn9gWFZBLIA9F0zUxR/YJxhn0NmF/0 +UU0iqw= -----END CERTIFICATE-----Generated at Sun Aug 24 03:10:59 2025 by rpki-client