$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/CE99A9F2D33811EDAAE97C1BC4F9AE02.roa File: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (raw, json) Hash identifier: PtfkQkDsmXl3jve8vW5Bkmjd/2ESa8IcHz8xM5qInPk= Subject key identifier: 6A:D0:CC:52:3A:39:0A:DD:E7:E2:6F:99:54:BA:E2:3E:65:68:0A:DB Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 055E Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/CE99A9F2D33811EDAAE97C1BC4F9AE02.roa Signing time: Mon 22 Sep 2025 16:35:21 +0000 ROA not before: Mon 22 Sep 2025 16:35:21 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 14618 IP address blocks: 213.170.156.0/24 maxlen: 24 213.170.157.0/24 maxlen: 24 213.170.158.0/24 maxlen: 24 213.170.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1374 (0x55e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Sep 22 16:35:21 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d17ac9-a222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c3:43:f5:46:6a:ed:5d:f3:2c:03:3b:96:fd: c6:da:d0:d9:24:6e:16:11:cd:5e:2e:40:e1:b9:89: a7:2e:58:97:3a:34:82:3c:8d:65:4d:87:88:69:27: 20:3b:db:ff:cc:f5:2e:31:57:7b:1f:76:6b:91:46: a6:72:40:ff:2b:ff:1c:23:75:a1:ed:fe:76:2e:1f: b8:d3:50:03:b1:8e:b2:10:8b:ca:25:57:ec:f2:b9: e1:2e:6f:29:f2:6d:45:17:af:8c:17:4a:53:a2:5d: 09:b2:dc:df:93:49:61:8c:d8:90:19:7b:c4:7c:34: a0:46:d6:dc:70:53:57:44:76:ba:bc:5c:8f:88:dc: 5c:59:bb:02:6d:ba:cf:77:e3:71:34:59:09:57:97: fd:a9:ba:6e:24:bf:73:35:02:5d:a6:4d:f3:1d:0f: 25:3e:30:02:20:8c:8b:80:63:6d:df:ae:f5:8f:21: 41:fb:ff:a6:68:f5:79:e6:02:b6:97:dd:02:79:e7: 1d:65:d3:4d:81:1c:8c:f5:52:73:80:07:92:36:22: a0:4e:b1:4f:cd:c1:69:bb:f7:20:33:71:7a:92:6f: 50:47:1e:31:6c:95:35:0b:0b:f4:1a:35:94:c2:ba: ee:1f:44:ca:a8:c6:1a:6b:91:d3:79:73:ed:b5:b6: 1b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D0:CC:52:3A:39:0A:DD:E7:E2:6F:99:54:BA:E2:3E:65:68:0A:DB X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/CE99A9F2D33811EDAAE97C1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 213.170.156.0/22 Signature Algorithm: sha256WithRSAEncryption 47:56:e0:93:08:3a:4e:c6:f0:3c:67:37:1d:82:cb:3e:33:bb: 3e:bf:fa:52:62:bb:db:17:40:28:6e:bc:f6:38:8b:f6:aa:d5: ea:d3:3f:46:b1:0b:33:cb:da:c4:af:86:45:6b:8d:f4:9b:64: c6:42:f3:c5:bc:2b:0b:a3:b2:b8:a5:1c:a9:e9:71:3e:47:eb: 61:c1:80:97:5b:de:e4:f0:59:bc:00:0f:31:bd:b3:9d:c5:b9: 42:f9:d7:f6:7d:d8:bb:a4:6a:b6:4f:08:ff:4b:18:13:c1:f3: f0:3c:81:49:00:5a:83:7b:7e:23:03:4f:ec:41:8b:ee:1d:db: e7:19:c2:19:f5:67:ab:16:85:50:63:28:16:31:49:b6:4f:58: 81:c2:9d:73:0a:62:0f:57:9a:e9:2f:3b:57:4c:81:77:ba:7e: 6f:70:ee:a4:5b:fa:13:15:26:6d:1c:da:37:64:de:4a:62:09: 1d:22:20:ad:80:d0:71:a5:b1:74:c4:81:a4:7d:e0:c0:dc:2d: 3c:e3:b2:b9:67:30:25:d6:cd:7d:a0:5c:bc:e5:b4:94:2a:b7: 5c:d8:45:12:d9:fd:94:61:9f:01:d0:e4:ad:2d:63:7f:44:e0: 0f:8b:8f:32:82:9d:57:ad:9f:31:d2:7c:d5:ec:70:53:e7:b9: b1:1e:d4:aa -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjUwOTIyMTYzNTIxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQxN2FjOS1hMjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMND9UZq7V3zLAM7lv3G2tDZJG4WEc1eLkDhuYmnLliXOjSCPI1lTYeIaScg O9v/zPUuMVd7H3ZrkUamckD/K/8cI3Wh7f52Lh+401ADsY6yEIvKJVfs8rnhLm8p 8m1FF6+MF0pTol0Jstzfk0lhjNiQGXvEfDSgRtbccFNXRHa6vFyPiNxcWbsCbbrP d+NxNFkJV5f9qbpuJL9zNQJdpk3zHQ8lPjACIIyLgGNt3671jyFB+/+maPV55gK2 l90CeecdZdNNgRyM9VJzgAeSNiKgTrFPzcFpu/cgM3F6km9QRx4xbJU1Cwv0GjWU wrruH0TKqMYaa5HTeXPttbYbOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGrQzFI6 OQrd5+JvmVS64j5laArbMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvRUFDN0VFQTAxMTJEMTFFQzhEODcwNTdEQzRGOUFFMDIvQ0U5OUE5RjJE MzM4MTFFREFBRTk3QzFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALVqpwwDQYJKoZIhvcNAQELBQADggEBAEdW4JMIOk7G8Dxn Nx2Cyz4zuz6/+lJiu9sXQChuvPY4i/aq1erTP0axCzPL2sSvhkVrjfSbZMZC88W8 KwujsrilHKnpcT5H62HBgJdb3uTwWbwADzG9s53FuUL51/Z92LukarZPCP9LGBPB 8/A8gUkAWoN7fiMDT+xBi+4d2+cZwhn1Z6sWhVBjKBYxSbZPWIHCnXMKYg9Xmukv O1dMgXe6fm9w7qRb+hMVJm0c2jdk3kpiCR0iIK2A0HGlsXTEgaR94MDcLTzjsrln MCXWzX2gXLzltJQqt1zYRRLZ/ZRhnwHQ5K0tY39E4A+LjzKCnVetnzHSfNXscFPn ubEe1Ko= -----END CERTIFICATE-----Generated at Sun Oct 19 23:29:13 2025 by rpki-client