$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/E518ECC6D52A11ED99D55E2EC4F9AE02.roa File: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (raw, json) Hash identifier: 8ZNPpyzaCSOR7XArDiXTgpwOZdqi5o9nlzrrurZ8f2Q= Subject key identifier: D6:9C:0E:B0:19:8A:7A:9C:00:B6:F8:29:AB:16:95:13:00:1C:17:FB Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 08BD Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/E518ECC6D52A11ED99D55E2EC4F9AE02.roa Signing time: Wed 18 Jun 2025 21:07:57 +0000 ROA not before: Wed 18 Jun 2025 21:07:57 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 212879 IP address blocks: 202.168.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2237 (0x8bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: Jun 18 21:07:57 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68532aad-0bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:79:c8:0f:bd:69:03:fe:38:7f:06:b6:a4: c6:95:fb:5f:f4:f7:8f:d4:80:7c:3a:6d:a5:fb:09: 5a:7a:4b:b3:2f:9a:ed:28:6a:af:95:69:75:e5:9a: 01:d0:a4:0e:a0:00:8d:cb:ac:9a:8e:71:70:48:9a: 03:f3:8a:e6:f5:f8:22:95:4f:68:f2:09:29:e0:31: 40:fe:4f:6b:a8:9f:b4:a3:eb:7c:dd:33:17:7a:96: 78:97:f1:e2:76:af:b3:22:7f:5e:a2:51:42:ad:f1: 3d:7d:78:df:12:b9:65:5d:68:e1:e3:bf:7a:e2:49: bb:6f:f9:07:47:6e:73:ed:12:1e:41:fa:c2:11:1b: f2:99:35:a6:b6:05:b8:88:7c:ae:16:66:61:36:8b: 89:26:e6:26:3d:f5:9b:c8:15:e2:f5:24:34:d7:99: 5a:d2:ef:87:4e:eb:41:5c:e6:4f:7d:a6:02:be:95: 3f:f0:0c:1b:42:ec:a1:1b:b9:28:10:52:7e:fb:df: e3:e4:84:c2:b1:b4:aa:87:3b:43:98:61:9c:85:3f: 5a:da:98:e9:4d:8b:06:a0:b2:94:7d:6d:55:32:32: 32:2e:71:9d:fc:2f:dd:2a:c2:00:cd:97:30:c8:cf: f2:af:6e:90:70:46:99:9a:ca:7b:7e:9c:53:92:a6: d9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9C:0E:B0:19:8A:7A:9C:00:B6:F8:29:AB:16:95:13:00:1C:17:FB X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/E518ECC6D52A11ED99D55E2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.168.98.0/24 Signature Algorithm: sha256WithRSAEncryption 13:a5:d3:de:35:12:55:7c:d8:d2:6a:68:cf:c2:14:3f:e2:2b: cf:41:52:73:d4:65:d6:f1:37:c3:84:a2:14:d7:3a:66:5b:5a: c6:7c:04:37:9a:c9:94:c2:2c:16:c0:e9:11:7a:6f:fd:cf:07: 94:ea:12:b6:3a:1d:1d:79:ef:85:c8:dc:32:6b:a5:bd:40:08: cf:e7:78:7c:b4:9c:df:4b:48:ec:78:dd:4e:23:04:13:74:c3: 79:00:66:1c:94:ce:f6:a7:56:b7:c1:5a:dd:63:d3:bb:89:c0: 4e:88:cc:61:45:c2:e0:77:8c:e5:8a:e4:4e:ae:0d:84:96:a9: cb:97:01:16:08:6e:73:b3:5c:b8:44:48:06:04:13:cb:7d:47: 49:ea:95:36:3f:3a:5d:be:30:0c:1e:6e:ce:1d:4d:13:5d:d1: c9:c1:ff:7b:87:95:8e:94:95:5b:3f:10:47:91:77:f9:33:86: d5:40:27:74:7e:53:03:82:d6:ca:ad:5a:ae:8e:5a:f6:4c:46: 0f:5a:04:69:28:9b:79:ac:84:8b:38:72:c7:15:40:2e:75:46: 17:10:21:5d:d7:bc:c5:7d:5e:e0:11:3f:58:86:1b:35:59:ef: 8d:6f:74:96:7c:bd:aa:f1:b4:5c:9e:45:08:7f:b8:4c:66:0c: c1:a4:45:a0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjUwNjE4MjEwNzU3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUzMmFhZC0wYmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvch5yA+9aQP+OH8GtqTGlftf9PeP1IB8Om2l+wlaekuzL5rtKGqvlWl15ZoB 0KQOoACNy6yajnFwSJoD84rm9fgilU9o8gkp4DFA/k9rqJ+0o+t83TMXepZ4l/Hi dq+zIn9eolFCrfE9fXjfErllXWjh47964km7b/kHR25z7RIeQfrCERvymTWmtgW4 iHyuFmZhNouJJuYmPfWbyBXi9SQ015la0u+HTutBXOZPfaYCvpU/8AwbQuyhG7ko EFJ++9/j5ITCsbSqhztDmGGchT9a2pjpTYsGoLKUfW1VMjIyLnGd/C/dKsIAzZcw yM/yr26QcEaZmsp7fpxTkqbZjwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNacDrAZ inqcALb4KasWlRMAHBf7MB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY5M0EvRkY1MUU1OUVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvRTUxOEVDQzZE NTJBMTFFRDk5RDU1RTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKqGIwDQYJKoZIhvcNAQELBQADggEBABOl0941ElV82NJq aM/CFD/iK89BUnPUZdbxN8OEohTXOmZbWsZ8BDeayZTCLBbA6RF6b/3PB5TqErY6 HR1574XI3DJrpb1ACM/neHy0nN9LSOx43U4jBBN0w3kAZhyUzvanVrfBWt1j07uJ wE6IzGFFwuB3jOWK5E6uDYSWqcuXARYIbnOzXLhESAYEE8t9R0nqlTY/Ol2+MAwe bs4dTRNd0cnB/3uHlY6UlVs/EEeRd/kzhtVAJ3R+UwOC1sqtWq6OWvZMRg9aBGko m3mshIs4cscVQC51RhcQIV3XvMV9XuARP1iGGzVZ741vdJZ8varxtFyeRQh/uExm DMGkRaA= -----END CERTIFICATE-----Generated at Tue Jul 1 16:06:41 2025 by rpki-client