$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/1348519E9C1211EBA38A7C4CC4F9AE02.roa File: 1348519E9C1211EBA38A7C4CC4F9AE02.roa (raw, json) Hash identifier: jmj2Qf4qhtOu5u36GPmwSsc+P3+wO6jacfxys+6pyWY= Subject key identifier: 4F:29:4F:52:97:3F:F2:DE:E3:92:9B:9A:E2:DA:31:53:F3:68:D3:AA Certificate issuer: /CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5 Certificate serial: 0656 Authority key identifier: 60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/1348519E9C1211EBA38A7C4CC4F9AE02.roa Signing time: Tue 12 Aug 2025 23:04:50 +0000 ROA not before: Tue 12 Aug 2025 23:04:50 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 137406 IP address blocks: 115.42.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59DF, serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5 Validity Not Before: Aug 12 23:04:50 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=689bc892-5aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f5:c4:12:e3:b2:d8:9f:ff:45:38:13:e7:ba: 14:90:c6:83:6a:05:aa:39:3b:bb:85:a0:f2:82:15: c3:6e:da:7d:14:b5:d1:9f:e8:2b:9c:6b:2a:b6:a7: e5:b4:ce:c3:3c:20:b4:77:94:8b:a1:8a:e8:17:73: 93:fb:41:13:cb:c4:6a:83:17:b8:61:da:83:ef:8f: 08:e9:f2:ac:e9:d2:e3:34:2f:73:57:17:ff:ae:1b: 9c:f7:05:6b:ed:9a:ba:d6:5f:f4:4c:a5:ea:bb:df: 3e:93:23:ab:12:6d:29:ec:5f:8a:34:8a:7d:e2:6e: cb:0f:3d:b4:a3:d5:c1:f3:91:22:8c:d6:b8:a5:cd: aa:fc:56:53:6b:78:2f:e0:29:fa:41:40:a7:1a:0f: 01:19:ab:87:a8:f7:4d:8b:a0:30:0f:05:2d:95:8b: 40:53:cd:07:4c:d8:5f:93:6d:c1:50:bf:7b:54:17: ce:bc:4c:05:bc:4b:09:e1:8d:f1:ec:4e:f3:b4:41: 8d:7a:5c:05:fb:e7:16:85:5c:21:58:db:6e:a3:aa: e0:e4:41:a4:29:90:53:91:f9:97:9b:ff:06:a9:ed: cb:02:b5:75:2a:4a:03:bf:16:02:44:93:84:5f:7e: 8c:59:a8:e1:78:61:b4:82:8c:b2:a3:1f:08:80:95: 41:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:29:4F:52:97:3F:F2:DE:E3:92:9B:9A:E2:DA:31:53:F3:68:D3:AA X509v3 Authority Key Identifier: keyid:60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/1348519E9C1211EBA38A7C4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.42.124.0/24 Signature Algorithm: sha256WithRSAEncryption 89:7a:60:f7:ae:9a:37:7b:ff:5e:78:e6:cc:3b:f8:63:6a:3b: 14:68:fd:f0:8f:fa:c2:dc:89:50:8f:5e:c9:54:f7:59:89:2f: 4b:c7:d4:30:d2:37:f9:98:70:d1:a9:68:21:34:2c:0f:be:84: a6:e6:78:ee:d5:17:9d:ad:c4:2c:20:ad:ee:79:a4:91:ac:80: 90:59:df:8a:f7:ff:e5:4f:b5:2b:b8:70:43:99:1e:cc:12:dc: d6:5a:10:3d:06:16:e2:2c:33:00:39:70:31:0a:2d:04:68:c7: a0:95:db:91:d8:3e:e7:05:84:d7:8e:dd:f4:7b:cb:5a:44:6d: 95:81:07:45:05:27:61:0b:8c:65:8c:75:6b:d9:87:20:d2:a4: a6:91:07:b0:3e:23:0f:b4:0a:7e:96:37:27:f2:a8:85:95:89: 77:d7:db:f2:75:aa:79:dc:6c:ce:4a:43:76:88:c1:d4:7e:39: e6:d1:61:24:7b:60:37:a5:48:be:13:8a:b6:ae:4f:94:9d:ab: 51:11:77:a5:c6:77:5c:ad:76:b7:bb:05:e6:9c:f7:36:0d:07: d6:a2:10:e0:dc:1c:ce:2b:31:9f:63:17:a3:c0:b7:c4:33:fe: a7:7b:ce:38:92:bb:5d:97:6a:89:25:36:04:8e:1b:be:ce:f8: 3f:73:b8:1d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5REYxMTAvBgNVBAUTKDYwOUEzMTI2RTIzNjlBOTdENDdGRDY0NDk4RDgxNjVF MjFFNTI1QzUwHhcNMjUwODEyMjMwNDUwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODliYzg5Mi01YWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/XEEuOy2J//RTgT57oUkMaDagWqOTu7haDyghXDbtp9FLXRn+grnGsqtqfl tM7DPCC0d5SLoYroF3OT+0ETy8Rqgxe4YdqD748I6fKs6dLjNC9zVxf/rhuc9wVr 7Zq61l/0TKXqu98+kyOrEm0p7F+KNIp94m7LDz20o9XB85EijNa4pc2q/FZTa3gv 4Cn6QUCnGg8BGauHqPdNi6AwDwUtlYtAU80HTNhfk23BUL97VBfOvEwFvEsJ4Y3x 7E7ztEGNelwF++cWhVwhWNtuo6rg5EGkKZBTkfmXm/8Gqe3LArV1KkoDvxYCRJOE X36MWajheGG0goyyox8IgJVBaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFE8pT1KX P/Le45KbmuLaMVPzaNOqMB8GA1UdIwQYMBaAFGCaMSbiNpqX1H/WRJjYFl4h5SXF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlERi9CQjUyRjRBQzlD MEQxMUVCQUVEODRCMjRDNEY5QUUwMi9ZSm94SnVJMm1wZlVmOVpFbU5nV1hpSGxK Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lKb3hKdUkybXBmVWY5WkVtTmdXWGlIbEpjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU5REYvQkI1MkY0QUM5QzBEMTFFQkFFRDg0QjI0QzRGOUFFMDIvMTM0ODUxOUU5 QzEyMTFFQkEzOEE3QzRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABzKnwwDQYJKoZIhvcNAQELBQADggEBAIl6YPeumjd7/154 5sw7+GNqOxRo/fCP+sLciVCPXslU91mJL0vH1DDSN/mYcNGpaCE0LA++hKbmeO7V F52txCwgre55pJGsgJBZ34r3/+VPtSu4cEOZHswS3NZaED0GFuIsMwA5cDEKLQRo x6CV25HYPucFhNeO3fR7y1pEbZWBB0UFJ2ELjGWMdWvZhyDSpKaRB7A+Iw+0Cn6W NyfyqIWViXfX2/J1qnncbM5KQ3aIwdR+OebRYSR7YDelSL4TirauT5Sdq1ERd6XG d1ytdre7Beac9zYNB9aiEODcHM4rMZ9jF6PAt8Qz/qd7zjiSu12XaoklNgSOG77O +D9zuB0= -----END CERTIFICATE-----Generated at Sat Aug 23 19:41:11 2025 by rpki-client