$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/0A2186867CD111F0B302D85AC4F9AE02.roa File: 0A2186867CD111F0B302D85AC4F9AE02.roa (raw, json) Hash identifier: nhRwGjDx0Fm5UM7mImMZBw38WV939OfcRi7SwP7Yv4I= Subject key identifier: AD:45:72:B3:A5:B8:2F:00:02:48:26:F8:68:9F:30:D3:65:46:81:0D Certificate issuer: /CN=A91D8806/serialNumber=F926E8AEA464B3A58906C09BAC46DE31D7409F64 Certificate serial: 02 Authority key identifier: F9:26:E8:AE:A4:64:B3:A5:89:06:C0:9B:AC:46:DE:31:D7:40:9F:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SborqRks6WJBsCbrEbeMddAn2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/0A2186867CD111F0B302D85AC4F9AE02.roa Signing time: Tue 19 Aug 2025 07:49:31 +0000 ROA not before: Tue 19 Aug 2025 07:49:31 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 153603 IP address blocks: 163.61.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.crl rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SborqRks6WJBsCbrEbeMddAn2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8806, serialNumber=F926E8AEA464B3A58906C09BAC46DE31D7409F64 Validity Not Before: Aug 19 07:49:31 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68a42c8b-2ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:e1:ac:dd:53:46:62:01:45:d4:6d:b3:95: f6:1f:59:1c:82:29:fc:f2:68:d7:69:1d:45:32:88: cc:ef:58:a8:5b:5b:66:22:df:e9:0d:b1:92:bc:8e: c4:cc:1c:5e:07:2d:6e:24:88:c5:1e:ff:35:e4:46: bb:6c:aa:05:06:48:d6:c3:81:29:9a:49:0e:01:21: 9e:2d:70:80:6e:b7:57:40:3f:65:f2:64:11:c0:4f: 44:1d:be:e7:d7:a5:eb:85:cd:61:ff:ea:3c:9a:2c: a9:f2:a4:80:e3:c6:0d:1d:88:18:e9:45:35:06:f8: cf:26:a1:d0:f1:be:4f:8a:d3:85:89:98:a5:9a:21: e5:0a:bb:73:2a:e4:48:f8:eb:53:a3:e3:c7:3f:e1: 65:da:ae:be:9f:82:11:38:11:d1:78:85:a4:9b:a8: 01:b8:4f:0c:20:05:aa:7a:e2:ef:bf:51:a8:d3:f3: f3:5d:e2:c3:0f:09:49:85:71:d8:bc:49:f4:93:51: 62:c2:4a:b8:54:58:25:5b:0f:4f:d4:2e:81:f2:56: c0:77:ef:7e:a6:0a:cb:19:4b:4c:db:3a:ad:91:68: e3:4d:20:f6:2b:3b:63:27:fa:81:a1:2c:e9:d1:e6: 22:a1:73:54:07:e5:96:f6:b5:eb:c3:1e:ce:61:55: bc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:45:72:B3:A5:B8:2F:00:02:48:26:F8:68:9F:30:D3:65:46:81:0D X509v3 Authority Key Identifier: keyid:F9:26:E8:AE:A4:64:B3:A5:89:06:C0:9B:AC:46:DE:31:D7:40:9F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/-SborqRks6WJBsCbrEbeMddAn2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SborqRks6WJBsCbrEbeMddAn2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8806/E008CF547CCF11F0AE165957C4F9AE02/0A2186867CD111F0B302D85AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 163.61.140.0/23 Signature Algorithm: sha256WithRSAEncryption 67:43:39:5c:e0:4f:2d:5f:69:a3:c4:e6:9b:ab:7e:89:b0:81: 3b:99:02:04:e7:15:46:50:9f:e5:7e:a4:ca:52:c9:79:78:af: e1:f9:42:72:ee:df:8e:64:d9:b8:51:7e:29:b4:55:4b:c5:80: 4c:db:b0:72:06:aa:ce:da:01:f7:7e:6b:c4:10:43:b0:1f:86: 4b:19:ef:3a:53:35:b0:f9:03:8e:0b:54:36:9e:eb:21:6b:02: 41:81:30:1c:10:64:11:61:68:86:8f:f2:47:92:e8:47:a3:a4: f0:42:30:33:dc:dd:39:f6:97:74:a4:3a:ef:eb:a2:93:b2:57: c5:a1:2b:79:f7:22:d7:fc:26:28:a8:a4:f4:60:e2:6b:70:49: 62:80:c7:7f:cd:84:05:d6:5b:fd:cd:d1:f7:78:4b:2d:81:f0: f9:f8:3f:65:ba:8b:10:7b:3c:67:6e:7c:11:76:1c:81:35:ae: b6:75:bc:f0:cf:1a:72:ab:b3:74:b6:96:a7:0f:da:88:0c:76: 1d:c3:ba:09:e0:6c:fd:e6:1a:c3:bd:44:98:ae:e7:85:36:44: 44:18:ed:78:23:1e:f8:f0:7a:ff:24:1d:c2:07:2d:05:a2:c5: 5f:a4:3b:3c:57:a1:05:cc:3d:70:63:f1:96:7b:7e:e6:ef:2f: 9b:7b:39:cd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODgwNjExMC8GA1UEBRMoRjkyNkU4QUVBNDY0QjNBNTg5MDZDMDlCQUM0NkRFMzFE NzQwOUY2NDAeFw0yNTA4MTkwNzQ5MzFaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YTQyYzhiLTJjZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDtuGs3VNGYgFF1G2zlfYfWRyCKfzyaNdpHUUyiMzvWKhbW2Yi3+kNsZK8jsTM HF4HLW4kiMUe/zXkRrtsqgUGSNbDgSmaSQ4BIZ4tcIBut1dAP2XyZBHAT0QdvufX peuFzWH/6jyaLKnypIDjxg0diBjpRTUG+M8modDxvk+K04WJmKWaIeUKu3Mq5Ej4 61Oj48c/4WXarr6fghE4EdF4haSbqAG4TwwgBap64u+/UajT8/Nd4sMPCUmFcdi8 SfSTUWLCSrhUWCVbD0/ULoHyVsB3736mCssZS0zbOq2RaONNIPYrO2Mn+oGhLOnR 5iKhc1QH5Zb2tevDHs5hVbxxAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUrUVys6W4 LwACSCb4aJ8w02VGgQ0wHwYDVR0jBBgwFoAU+SborqRks6WJBsCbrEbeMddAn2Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4ODA2L0UwMDhDRjU0N0ND RjExRjBBRTE2NTk1N0M0RjlBRTAyLy1TYm9ycVJrczZXSkJzQ2JyRWJlTWRkQW4y US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLVNib3JxUmtzNldKQnNDYnJFYmVNZGRBbjJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODgwNi9FMDA4Q0Y1NDdDQ0YxMUYwQUUxNjU5NTdDNEY5QUUwMi8wQTIxODY4NjdD RDExMUYwQjMwMkQ4NUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaM9jDANBgkqhkiG9w0BAQsFAAOCAQEAZ0M5XOBPLV9po8Tm m6t+ibCBO5kCBOcVRlCf5X6kylLJeXiv4flCcu7fjmTZuFF+KbRVS8WATNuwcgaq ztoB935rxBBDsB+GSxnvOlM1sPkDjgtUNp7rIWsCQYEwHBBkEWFoho/yR5LoR6Ok 8EIwM9zdOfaXdKQ67+uik7JXxaErefci1/wmKKik9GDia3BJYoDHf82EBdZb/c3R 93hLLYHw+fg/ZbqLEHs8Z258EXYcgTWutnW88M8acquzdLaWpw/aiAx2HcO6CeBs /eYaw71EmK7nhTZERBjteCMe+PB6/yQdwgctBaLFX6Q7PFehBcw9cGPxlnt+5u8v m3s5zQ== -----END CERTIFICATE-----Generated at Sun Aug 24 09:00:31 2025 by rpki-client