$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/395D655C7E7D11F09D59515FC4F9AE02.roa File: 395D655C7E7D11F09D59515FC4F9AE02.roa (raw, json) Hash identifier: q3qkTVXAhBDxYYpGzlM+4J7n3gj+B0YTBPs+/cwOXVw= Subject key identifier: CD:2D:95:2E:A0:8A:49:BD:7F:69:DB:4A:09:26:BF:60:ED:00:04:78 Certificate issuer: /CN=A91F3CB1/serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B Certificate serial: 60 Authority key identifier: 7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/395D655C7E7D11F09D59515FC4F9AE02.roa Signing time: Thu 21 Aug 2025 11:06:10 +0000 ROA not before: Thu 21 Aug 2025 11:06:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136501 IP address blocks: 202.60.228.0/22 maxlen: 22 202.60.228.0/24 maxlen: 24 202.60.229.0/24 maxlen: 24 202.60.230.0/24 maxlen: 24 202.60.231.0/24 maxlen: 24 202.60.232.0/22 maxlen: 22 202.60.232.0/24 maxlen: 24 202.60.233.0/24 maxlen: 24 202.60.234.0/24 maxlen: 24 202.60.235.0/24 maxlen: 24 202.60.236.0/23 maxlen: 23 202.60.236.0/24 maxlen: 24 202.60.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3CB1, serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B Validity Not Before: Aug 21 11:06:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68a6fda2-aa02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6a:28:42:8b:05:75:d8:5c:b2:54:64:6a:d0: a9:a8:74:43:b9:c8:02:b7:ac:97:84:9f:a4:09:45: ca:95:4e:74:05:2d:bb:79:d3:ad:bd:a6:c7:a2:08: 8c:d5:9f:2c:31:01:7d:63:4f:2b:0c:96:fd:af:f4: 20:0a:d1:77:b8:89:54:66:ff:7c:41:08:43:af:b2: 2d:b8:12:cf:85:e2:7a:e4:01:10:c3:29:b0:56:b4: 93:e2:db:f3:99:ac:7f:a3:4c:c3:5f:ae:4c:a8:47: 9b:f4:06:08:fa:d9:4d:26:5b:b2:75:1d:73:56:81: 8c:4d:25:f3:46:02:ad:92:50:a2:74:c6:c7:a2:b2: 9c:56:1e:c7:0f:89:49:3a:18:a7:14:6d:46:43:58: fe:fa:37:27:20:b9:9a:fb:8a:92:79:4c:1d:77:67: 21:e5:fc:9e:eb:60:b8:95:6e:15:22:de:64:05:19: d6:4e:c1:74:dc:f7:5f:87:c2:e5:c6:4e:6c:98:04: b6:c4:11:a7:ba:6f:06:18:ef:b7:89:17:ee:77:fc: 78:cd:10:68:fa:ae:02:47:a2:6d:0a:a5:03:e5:c6: 55:a5:c1:f4:35:8d:b5:21:5f:29:6f:72:cf:b5:b0: 39:06:6c:39:49:6f:e2:de:68:ed:d9:d1:74:7d:60: b8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2D:95:2E:A0:8A:49:BD:7F:69:DB:4A:09:26:BF:60:ED:00:04:78 X509v3 Authority Key Identifier: keyid:7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/395D655C7E7D11F09D59515FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.60.228.0-202.60.237.255 Signature Algorithm: sha256WithRSAEncryption 04:d1:71:43:4f:80:70:d2:9b:b1:f6:78:6e:00:73:73:28:11: 0b:e8:f4:de:f4:24:2d:b5:4d:33:f2:39:f1:18:b9:fc:2c:6c: 0f:1d:ce:bd:a8:b8:ca:0b:e0:fb:38:f7:6b:a8:4a:e6:7f:f3: f8:e6:c7:ce:84:2f:d6:41:5b:51:63:0c:95:71:cc:df:3e:d2: 3e:90:4d:d2:ba:98:f3:42:35:f8:63:61:be:0d:9e:03:ed:78: 90:09:4c:35:b7:23:5b:4a:7f:9f:0f:04:3e:77:d9:7f:d3:10: fc:d5:fe:9c:ed:98:b4:6b:29:5c:48:ca:4d:9b:de:7d:0d:58: 5e:1b:95:d4:35:8c:2c:b9:d0:5d:8b:b0:07:6e:69:b7:0e:48: 1c:2b:61:5b:2b:1f:08:62:1e:3b:19:7f:a7:46:a8:4a:48:2e: e1:14:88:22:2f:1c:01:eb:83:84:f8:6f:54:c6:1f:13:d0:d2: cb:8c:ba:64:55:7a:56:1f:52:9b:7b:e0:80:6c:d5:1d:92:43: 7c:5d:88:2c:42:22:03:48:ad:58:95:6a:90:64:07:9f:4b:fe: ed:c7:ec:21:6e:ae:82:f5:e0:b9:15:c4:64:c8:46:57:49:d8: 5d:3c:ca:a7:fd:16:1a:50:a2:bc:28:78:4e:18:3c:14:3e:cd: 6d:ba:f5:0a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0NCMTExMC8GA1UEBRMoN0FENzlFRUIzQjkyODM1NEQ5NTBEQzZFNEY4QkVDQ0Iy NUMyRkM0QjAeFw0yNTA4MjExMTA2MTBaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YTZmZGEyLWFhMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgaihCiwV12FyyVGRq0KmodEO5yAK3rJeEn6QJRcqVTnQFLbt50629pseiCIzV nywxAX1jTysMlv2v9CAK0Xe4iVRm/3xBCEOvsi24Es+F4nrkARDDKbBWtJPi2/OZ rH+jTMNfrkyoR5v0Bgj62U0mW7J1HXNWgYxNJfNGAq2SUKJ0xseispxWHscPiUk6 GKcUbUZDWP76NycguZr7ipJ5TB13ZyHl/J7rYLiVbhUi3mQFGdZOwXTc91+HwuXG TmyYBLbEEae6bwYY77eJF+53/HjNEGj6rgJHom0KpQPlxlWlwfQ1jbUhXylvcs+1 sDkGbDlJb+LeaO3Z0XR9YLjjAgMBAAGjggKdMIICmTAdBgNVHQ4EFgQUzS2VLqCK Sb1/adtKCSa/YO0ABHgwHwYDVR0jBBgwFoAUetee6zuSg1TZUNxuT4vsyyXC/Esw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQ0IxLzJEODQzNjk4MTY4 NjExRjA4OTE2OTg1QkM0RjlBRTAyL2V0ZWU2enVTZzFUWlVOeHVUNHZzeXlYQ19F cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZXRlZTZ6dVNnMVRaVU54dVQ0dnN5eVhDX0VzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0NCMS8yRDg0MzY5ODE2ODYxMUYwODkxNjk4NUJDNEY5QUUwMi8zOTVENjU1QzdF N0QxMUYwOUQ1OTUxNUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQY MBYwFAQCAAEwDjAMAwQCyjzkAwQByjzsMA0GCSqGSIb3DQEBCwUAA4IBAQAE0XFD T4Bw0pux9nhuAHNzKBEL6PTe9CQttU0z8jnxGLn8LGwPHc69qLjKC+D7OPdrqErm f/P45sfOhC/WQVtRYwyVcczfPtI+kE3SupjzQjX4Y2G+DZ4D7XiQCUw1tyNbSn+f DwQ+d9l/0xD81f6c7Zi0aylcSMpNm959DVheG5XUNYwsudBdi7AHbmm3DkgcK2Fb Kx8IYh47GX+nRqhKSC7hFIgiLxwB64OE+G9Uxh8T0NLLjLpkVXpWH1Kbe+CAbNUd kkN8XYgsQiIDSK1YlWqQZAefS/7tx+whbq6C9eC5FcRkyEZXSdhdPMqn/RYaUKK8 KHhOGDwUPs1tuvUK -----END CERTIFICATE-----Generated at Sat Aug 23 14:26:29 2025 by rpki-client