$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F3F10BE8767711F0B3CA7E1CC4F9AE02.roa File: F3F10BE8767711F0B3CA7E1CC4F9AE02.roa (raw, json) Hash identifier: qOBYxDID3pCH31TzqlvzUFauVEmYX3l9PjwKGiTupWU= Subject key identifier: 8C:97:F6:78:23:48:8C:74:7E:7C:24:9A:A9:54:E9:1A:95:D9:E3:6A Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 294D Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F3F10BE8767711F0B3CA7E1CC4F9AE02.roa Signing time: Mon 11 Aug 2025 05:56:42 +0000 ROA not before: Mon 11 Aug 2025 05:56:42 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 7029 IP address blocks: 43.254.12.0/22 maxlen: 24 115.167.108.0/22 maxlen: 24 115.167.126.0/24 maxlen: 24 115.167.127.0/24 maxlen: 24 175.110.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10573 (0x294d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Aug 11 05:56:42 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68998619-0118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:94:87:c4:d1:b1:f1:d3:75:00:a4:0a:82: ee:d6:af:93:50:d4:51:72:40:83:fc:8b:60:48:37: 72:97:02:b0:26:f8:4a:1d:fc:71:89:16:b4:79:29: 4e:9b:7f:fc:0e:c4:06:e2:ea:19:05:51:4e:df:bf: 01:ed:1f:5e:11:27:0a:ba:e6:f4:00:3d:f8:c5:88: a3:cd:25:ca:1b:3f:c4:fc:c8:06:e4:c4:cf:8d:09: 58:72:83:1b:3d:6d:75:94:e1:be:ac:a3:12:ec:6d: 5a:09:c1:86:7e:f4:df:24:b2:ba:50:86:98:47:05: 80:b2:60:8e:9f:27:87:3c:f9:d7:f0:35:86:91:4c: f4:b3:47:09:29:6a:56:09:7e:cd:74:4b:e9:1f:a6: fd:6b:9d:99:b9:d9:38:2f:de:6d:1d:d7:d4:8d:ab: 25:25:67:62:73:57:4c:9a:9e:ab:5d:e4:68:05:99: c1:58:3d:b9:81:81:47:1a:ad:07:2f:b2:d0:4a:9e: 42:b7:92:eb:0f:29:d3:77:9e:b8:db:12:ee:39:a9: a6:80:fa:89:90:2b:1c:e4:f0:af:72:16:98:93:e6: 07:9d:7a:4a:97:ea:b0:2a:ea:09:f1:f8:59:97:7a: 23:60:b4:0e:76:78:56:8f:9a:b8:64:0a:8f:f4:a8: b1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:97:F6:78:23:48:8C:74:7E:7C:24:9A:A9:54:E9:1A:95:D9:E3:6A X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F3F10BE8767711F0B3CA7E1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.254.12.0/22 115.167.108.0/22 115.167.126.0/23 175.110.68.0/22 Signature Algorithm: sha256WithRSAEncryption 35:61:a5:1a:16:6e:77:b9:ba:16:3e:03:6c:0a:d4:22:bb:a1: bf:bc:3b:47:80:b5:db:e2:dc:e6:db:27:d3:0f:8c:61:20:c5: 45:45:50:6b:83:b8:fe:cf:48:0b:8a:3a:db:cf:af:92:97:2b: 4a:52:53:1d:e6:4c:7c:a3:f3:f0:b9:2a:02:3f:bc:fa:a9:91: 75:27:5a:e9:d9:d9:3b:b8:54:b2:68:d4:3b:e2:44:43:90:c7: 45:7e:e2:5e:93:f3:72:9f:d7:1a:75:2a:f2:d2:01:d8:c2:31: 7b:9b:48:df:bb:12:1a:fa:30:5d:36:86:e3:7e:3f:59:7c:61: f7:f7:e5:de:d6:a3:8a:da:bf:e7:eb:1e:7d:04:60:32:93:5a: ed:2c:16:40:19:49:b2:20:09:95:de:19:d2:45:f1:0a:b5:31: 13:29:1b:09:74:22:6e:4e:4f:e9:54:24:89:0a:6c:57:9e:88: d8:34:ef:5c:83:32:0a:d0:43:5d:14:93:b8:63:e4:6a:44:2a: 23:91:83:86:ec:ef:af:28:fe:2f:84:a3:4f:0f:5e:06:a7:c1: ac:5e:20:ca:e3:43:01:b4:22:d1:08:df:19:c9:f7:c2:83:9c: 19:f9:08:c1:33:00:55:3e:30:8d:b6:a0:e5:f9:cf:cf:cf:aa: f0:b6:fb:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICKU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjUwODExMDU1NjQyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk5ODYxOS0wMTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuueUh8TRsfHTdQCkCoLu1q+TUNRRckCD/ItgSDdylwKwJvhKHfxxiRa0eSlO m3/8DsQG4uoZBVFO378B7R9eEScKuub0AD34xYijzSXKGz/E/MgG5MTPjQlYcoMb PW11lOG+rKMS7G1aCcGGfvTfJLK6UIaYRwWAsmCOnyeHPPnX8DWGkUz0s0cJKWpW CX7NdEvpH6b9a52Zudk4L95tHdfUjaslJWdic1dMmp6rXeRoBZnBWD25gYFHGq0H L7LQSp5Ct5LrDynTd5642xLuOammgPqJkCsc5PCvchaYk+YHnXpKl+qwKuoJ8fhZ l3ojYLQOdnhWj5q4ZAqP9Kix0QIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFIyX9ngj SIx0fnwkmqlU6RqV2eNqMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRjNGMTBCRTg3 Njc3MTFGMEIzQ0E3RTFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAIr/gwDBAJzp2wDBAFzp34DBAKvbkQwDQYJKoZIhvcNAQEL BQADggEBADVhpRoWbne5uhY+A2wK1CK7ob+8O0eAtdvi3ObbJ9MPjGEgxUVFUGuD uP7PSAuKOtvPr5KXK0pSUx3mTHyj8/C5KgI/vPqpkXUnWunZ2Tu4VLJo1DviREOQ x0V+4l6T83Kf1xp1KvLSAdjCMXubSN+7Ehr6MF02huN+P1l8Yff35d7Wo4rav+fr Hn0EYDKTWu0sFkAZSbIgCZXeGdJF8Qq1MRMpGwl0Im5OT+lUJIkKbFeeiNg071yD MgrQQ10Uk7hj5GpEKiORg4bs768o/i+Eo08PXganwaxeIMrjQwG0ItEI3xnJ98KD nBn5CMEzAFU+MI22oOX5z8/PqvC2+0Y= -----END CERTIFICATE-----Generated at Sun Aug 24 00:15:57 2025 by rpki-client