$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/119B023E80A111EFAC559545C4F9AE02.roa File: 119B023E80A111EFAC559545C4F9AE02.roa (raw, json) Hash identifier: zYkOqurzCzToKjFWw1JFREq9sP5L0Ox+j8SjAIM1s0g= Subject key identifier: 74:B6:AF:00:CF:FC:12:B6:1A:19:E3:60:BE:67:AD:26:83:25:8F:F8 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 3668 Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/119B023E80A111EFAC559545C4F9AE02.roa Signing time: Tue 30 Sep 2025 14:40:17 +0000 ROA not before: Tue 30 Sep 2025 14:40:17 +0000 ROA not after: Fri 30 Jan 2026 00:00:00 +0000 asID: 4608 IP address blocks: 203.30.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13928 (0x3668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Sep 30 14:40:17 2025 GMT Not After : Jan 30 00:00:00 2026 GMT Subject: CN=68dbebd0-823c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:8b:b7:b7:41:01:fc:2c:a2:b8:1b:da:0a: 95:6e:c3:f3:90:ca:ba:b0:84:ff:ca:be:1d:1d:fc: 82:95:e0:59:2c:44:d8:37:2f:92:da:a9:7d:42:de: 67:7b:59:18:9d:d7:06:86:e3:18:53:20:ae:75:1c: 42:00:64:08:08:cd:02:b0:e7:f4:0f:d9:f7:d2:bf: 85:e0:29:64:27:63:9e:b6:00:8c:e2:1d:9a:a3:4f: 0e:2c:e4:85:e1:17:b0:4d:8c:ae:aa:ac:a1:e1:0a: 21:d5:0c:03:66:6d:14:91:23:c5:16:1a:f5:54:de: 09:8f:b6:63:b2:d8:2b:ad:50:5f:3b:cb:81:cc:72: 7d:f1:16:b7:fc:bd:30:4a:6a:70:04:1d:4f:1d:b0: 55:bd:49:7c:f1:81:14:34:c8:22:b1:9f:c9:6d:95: e6:e8:94:fd:17:7d:a0:0f:75:c1:30:c6:e8:5a:10: ff:4f:37:e8:17:df:0c:44:db:e6:99:a9:79:71:fd: 66:28:39:1f:47:1f:06:fc:7b:ed:fa:5f:4e:a8:c8: 3b:af:be:b1:ea:22:b7:46:a7:8a:24:c5:a6:6a:ed: 12:fb:7d:2a:97:4e:92:9f:37:6a:58:6e:62:0a:bb: af:1d:93:fe:f1:da:bb:23:d7:0a:7e:18:f3:ed:83: 71:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B6:AF:00:CF:FC:12:B6:1A:19:E3:60:BE:67:AD:26:83:25:8F:F8 X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/119B023E80A111EFAC559545C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.30.127.0/24 Signature Algorithm: sha256WithRSAEncryption 52:4c:8a:a0:ca:36:3b:ef:12:c9:40:f5:5c:1e:96:a2:43:02: f2:2c:18:ec:75:2e:cb:d8:78:53:b6:f6:5f:1e:51:e2:aa:74: 47:2b:23:ac:6c:d6:20:c5:f1:d2:e0:fc:e4:7b:2a:7c:e3:74: 4c:e4:46:f4:cc:8e:ae:da:e2:d0:7a:23:bb:5c:e7:93:9a:44: 06:3c:e3:d3:dc:2f:8b:bb:cc:bb:c3:fa:96:67:45:a5:b9:70: f9:09:66:4f:d6:e1:40:62:20:85:ec:01:4c:67:c1:9c:cd:36: 1f:f6:97:b6:fe:0f:9d:9a:85:e3:af:b4:75:c6:92:a8:a5:9d: cd:f2:10:42:9e:0e:36:62:3a:c0:42:92:72:3d:30:04:30:04: 30:f8:24:55:9c:fa:be:e7:d0:95:c9:ed:c7:e5:e5:b2:1f:62: 8c:14:79:93:24:50:e5:da:93:16:4c:7d:9f:8f:47:dc:cc:c6: 16:84:29:a9:29:de:49:b7:00:c9:6f:67:cc:c8:02:35:a6:46: 15:70:93:5f:12:dc:c8:f8:08:b2:29:51:1e:5e:de:e4:3b:6f: d6:54:9f:a0:4b:c4:b5:58:5b:99:e7:55:ab:40:7e:76:5b:f9: 09:18:db:cc:94:0e:07:16:f2:dc:fd:26:d8:eb:6c:37:02:4a: e6:33:1f:58 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjUwOTMwMTQ0MDE3WhcNMjYwMTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRiZWJkMC04MjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGeLt7dBAfwsorgb2gqVbsPzkMq6sIT/yr4dHfyCleBZLETYNy+S2ql9Qt5n e1kYndcGhuMYUyCudRxCAGQICM0CsOf0D9n30r+F4ClkJ2OetgCM4h2ao08OLOSF 4RewTYyuqqyh4Qoh1QwDZm0UkSPFFhr1VN4Jj7ZjstgrrVBfO8uBzHJ98Ra3/L0w SmpwBB1PHbBVvUl88YEUNMgisZ/JbZXm6JT9F32gD3XBMMboWhD/TzfoF98MRNvm mal5cf1mKDkfRx8G/Hvt+l9OqMg7r76x6iK3RqeKJMWmau0S+30ql06SnzdqWG5i CruvHZP+8dq7I9cKfhjz7YNx7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHS2rwDP /BK2GhnjYL5nrSaDJY/4MB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE3MEIvOTdBRjZERjAxRDZEMTFFMkExMkQ5RUFFMDhCMDJDRDIvMTE5QjAyM0U4 MEExMTFFRkFDNTU5NTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLHn8wDQYJKoZIhvcNAQELBQADggEBAFJMiqDKNjvvEslA 9VwelqJDAvIsGOx1LsvYeFO29l8eUeKqdEcrI6xs1iDF8dLg/OR7KnzjdEzkRvTM jq7a4tB6I7tc55OaRAY849PcL4u7zLvD+pZnRaW5cPkJZk/W4UBiIIXsAUxnwZzN Nh/2l7b+D52aheOvtHXGkqilnc3yEEKeDjZiOsBCknI9MAQwBDD4JFWc+r7n0JXJ 7cfl5bIfYowUeZMkUOXakxZMfZ+PR9zMxhaEKakp3km3AMlvZ8zIAjWmRhVwk18S 3Mj4CLIpUR5e3uQ7b9ZUn6BLxLVYW5nnVatAfnZb+QkY28yUDgcW8tz9JtjrbDcC SuYzH1g= -----END CERTIFICATE-----Generated at Mon Oct 20 16:07:03 2025 by rpki-client