$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/7273624619B511EC98D2A883C4F9AE02.roa File: 7273624619B511EC98D2A883C4F9AE02.roa (raw, json) Hash identifier: OaMRZtEEghIeGGNT69I9tMZLlMSo5v9QyUCM19iOO3c= Subject key identifier: ED:DD:43:BA:D2:79:6D:6F:5D:89:E3:42:51:9D:2A:0A:03:FE:A3:DD Certificate issuer: /CN=A91ED931/serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059 Certificate serial: 052E Authority key identifier: C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/7273624619B511EC98D2A883C4F9AE02.roa Signing time: Sun 07 Sep 2025 21:10:16 +0000 ROA not before: Sun 07 Sep 2025 21:10:16 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 19905 IP address blocks: 202.49.96.0/21 maxlen: 23 202.49.96.0/24 maxlen: 24 202.49.97.0/24 maxlen: 24 202.49.98.0/24 maxlen: 24 202.49.99.0/24 maxlen: 24 202.49.100.0/24 maxlen: 24 202.49.101.0/24 maxlen: 24 202.49.102.0/24 maxlen: 24 202.49.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1326 (0x52e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED931, serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059 Validity Not Before: Sep 7 21:10:16 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68bdf4b8-dc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ca:86:2c:f1:bd:6d:64:c6:00:c0:10:c3:4d: 8e:dd:6f:60:9b:d1:0b:c7:f3:9e:c8:d9:f2:17:18: 7e:e1:e3:f2:9c:6a:84:c1:37:5e:0f:50:43:ba:0c: 21:7e:d8:b4:25:1c:cf:7d:e3:eb:fb:b7:3e:50:48: 01:06:33:ed:e2:ec:9d:61:f0:27:8f:12:c8:f0:0d: 84:2c:fe:a2:f7:c1:81:7c:55:d5:fd:e6:e2:1c:99: bc:5a:0c:01:e5:1c:2d:4c:a8:67:84:ec:ef:2e:ae: 72:1b:56:97:83:76:e1:d5:a1:b9:2e:74:ce:c0:04: f8:c6:20:15:c8:f5:00:85:19:b4:c3:24:df:f6:f2: f5:29:fc:4b:2e:31:a2:69:bf:b8:a1:37:0e:40:f8: 4e:e1:ae:6e:9b:dd:e3:61:d6:ed:2f:4c:d0:9e:13: de:76:a7:ea:89:e4:cd:98:fe:5b:a9:19:b2:15:b2: 90:ec:ba:d2:40:fe:fc:1b:ce:0e:0e:9d:df:3c:d8: 04:ca:ca:da:c9:14:0f:67:2e:6b:f3:05:96:f4:c8: 73:e0:e0:84:51:bc:85:57:95:2e:37:99:76:63:47: 5a:47:31:c7:0a:ef:42:e7:e0:e3:7d:88:b0:a7:c5: 7a:69:30:d4:29:b6:de:a5:25:92:7c:ae:e6:77:46: d5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DD:43:BA:D2:79:6D:6F:5D:89:E3:42:51:9D:2A:0A:03:FE:A3:DD X509v3 Authority Key Identifier: keyid:C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/7273624619B511EC98D2A883C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.49.96.0/21 Signature Algorithm: sha256WithRSAEncryption 7b:8e:ea:43:92:c9:f1:42:e3:54:66:34:3e:45:a7:d3:19:8d: e1:ae:00:14:10:93:da:0b:51:65:85:6c:c4:82:1e:07:50:66: 70:47:5b:a6:5b:e8:ab:fb:c8:60:d1:ad:79:23:61:13:fe:88: b9:c9:59:84:61:42:7e:10:58:68:fa:26:90:38:ee:53:e8:d6: 98:40:d7:b2:6f:64:0e:7b:66:38:e5:95:10:14:50:7b:b8:46: 29:47:d7:17:8b:dd:33:60:93:31:d7:e9:87:3b:de:ba:20:3e: dc:c0:47:ba:82:a9:7a:e3:e8:6d:ed:60:02:c1:7e:ec:98:c0: 64:c0:f4:1b:29:1f:31:ab:88:15:e7:bd:37:ff:e3:bb:b7:c9: 02:6c:1a:90:e4:83:6b:d8:4a:09:42:4b:a2:60:8f:30:46:7f: ce:75:b5:83:68:83:be:a8:5c:63:8c:f6:35:2c:97:5c:ec:19: 15:85:a3:b2:34:a6:88:81:dc:80:69:a5:83:8f:e5:e0:a5:3f: 17:fc:d1:66:9d:82:e9:8d:b6:79:b6:ea:aa:ad:42:d5:be:05: ef:2e:35:48:30:57:83:bb:aa:f4:5d:e1:71:e6:14:53:b1:07: 70:e4:f8:73:72:38:8a:ba:f5:de:db:d9:d6:de:5f:be:bd:e9: 1a:4d:62:d6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5MzExMTAvBgNVBAUTKEMwMzU0NTBCRDFBMkQ0NEIxNTFFRTM4QzA4OTg4OEE1 QUY0QjgwNTkwHhcNMjUwOTA3MjExMDE2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJkZjRiOC1kYzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8qGLPG9bWTGAMAQw02O3W9gm9ELx/OeyNnyFxh+4ePynGqEwTdeD1BDugwh fti0JRzPfePr+7c+UEgBBjPt4uydYfAnjxLI8A2ELP6i98GBfFXV/ebiHJm8WgwB 5RwtTKhnhOzvLq5yG1aXg3bh1aG5LnTOwAT4xiAVyPUAhRm0wyTf9vL1KfxLLjGi ab+4oTcOQPhO4a5um93jYdbtL0zQnhPedqfqieTNmP5bqRmyFbKQ7LrSQP78G84O Dp3fPNgEysrayRQPZy5r8wWW9Mhz4OCEUbyFV5UuN5l2Y0daRzHHCu9C5+DjfYiw p8V6aTDUKbbepSWSfK7md0bVAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO3dQ7rS eW1vXYnjQlGdKgoD/qPdMB8GA1UdIwQYMBaAFMA1RQvRotRLFR7jjAiYiKWvS4BZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDkzMS9EMUQzMkI2RTE5 QUYxMUVDQUY4NENENzZDNEY5QUUwMi93RFZGQzlHaTFFc1ZIdU9NQ0ppSXBhOUxn RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEVkZDOUdpMUVzVkh1T01DSmlJcGE5TGdGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUQ5MzEvRDFEMzJCNkUxOUFGMTFFQ0FGODRDRDc2QzRGOUFFMDIvNzI3MzYyNDYx OUI1MTFFQzk4RDJBODgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAPKMWAwDQYJKoZIhvcNAQELBQADggEBAHuO6kOSyfFC41Rm ND5Fp9MZjeGuABQQk9oLUWWFbMSCHgdQZnBHW6Zb6Kv7yGDRrXkjYRP+iLnJWYRh Qn4QWGj6JpA47lPo1phA17JvZA57ZjjllRAUUHu4RilH1xeL3TNgkzHX6Yc73rog PtzAR7qCqXrj6G3tYALBfuyYwGTA9BspHzGriBXnvTf/47u3yQJsGpDkg2vYSglC S6JgjzBGf851tYNog76oXGOM9jUsl1zsGRWFo7I0poiB3IBppYOP5eClPxf80Wad gumNtnm26qqtQtW+Be8uNUgwV4O7qvRd4XHmFFOxB3Dk+HNyOIq69d7b2dbeX769 6RpNYtY= -----END CERTIFICATE-----Generated at Sun Oct 19 23:27:09 2025 by rpki-client