$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/453686A272BA11F09A607433C4F9AE02.roa File: 453686A272BA11F09A607433C4F9AE02.roa (raw, json) Hash identifier: q2MSp4Q8sWvUE8k/uBLa7fJOiAjxmo9DC7/S2PYD4Tw= Subject key identifier: 56:C2:15:97:F8:3B:52:E0:91:57:6B:38:47:93:D6:05:79:A7:8A:B1 Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Certificate serial: 014C Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/453686A272BA11F09A607433C4F9AE02.roa Signing time: Wed 06 Aug 2025 11:41:20 +0000 ROA not before: Wed 06 Aug 2025 11:41:20 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 152094 IP address blocks: 116.199.202.0/23 maxlen: 24 2401:4d60::/32 maxlen: 32 2401:4d60:11::/48 maxlen: 48 2401:4d60:12::/48 maxlen: 48 2401:4d60:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Validity Not Before: Aug 6 11:41:20 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68933f60-b8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:f8:3f:28:5c:34:de:99:80:38:62:dd:07: be:14:9a:e2:0e:aa:af:36:1a:d5:cb:db:8c:c4:83: ba:41:a2:37:58:21:16:da:92:b6:63:26:db:b3:de: ed:03:fd:95:25:7b:af:0f:26:41:d5:b2:54:ef:a5: ff:b8:34:df:7f:ef:d8:20:a1:07:21:26:94:95:b8: ea:99:b7:17:b1:27:f4:d9:62:dc:b2:49:45:e2:17: 22:a1:60:fd:e8:40:a4:02:4e:43:2b:a3:7b:5f:04: 8e:a2:46:32:e5:18:e5:ab:c9:32:65:bc:36:29:83: 7c:46:14:b0:d8:e8:54:d6:ad:8c:01:69:57:2e:62: 5b:c3:1f:2b:33:0f:76:30:97:f5:a5:c4:39:ff:cf: 8e:20:88:99:d2:b8:13:5a:4f:af:25:69:b9:5a:61: 34:87:a0:0a:45:4c:4c:2f:9c:e2:a6:37:19:f8:5c: 18:8d:68:3c:4f:dd:ca:54:d0:66:aa:05:67:37:a2: 47:b3:87:76:9c:a7:bd:7b:45:c3:3a:7c:4a:00:77: 6c:b6:1a:e6:2a:03:70:3f:0e:fe:d3:67:34:25:e3: 25:a4:5d:69:82:de:4c:30:c6:2d:2e:40:0f:28:88: e8:81:ee:9e:12:b4:b3:d4:03:52:45:e2:fe:0c:7f: 19:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C2:15:97:F8:3B:52:E0:91:57:6B:38:47:93:D6:05:79:A7:8A:B1 X509v3 Authority Key Identifier: keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/453686A272BA11F09A607433C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.199.202.0/23 IPv6: 2401:4d60::/32 Signature Algorithm: sha256WithRSAEncryption 41:49:b4:7d:09:a2:95:4e:d6:77:5d:b3:06:a2:99:fe:91:17: 1d:db:bf:89:77:bc:b0:00:72:6e:48:ee:c2:cf:77:60:06:e2: 30:e6:6c:23:3f:0d:8d:c0:30:65:ff:96:56:38:f8:06:6b:c7: 7c:b4:83:01:69:ef:6f:d0:f1:dd:26:36:e6:bc:c5:8d:13:84: 47:2f:a6:cd:99:0f:5e:80:a3:bf:96:b4:c6:9a:3b:f7:96:f9: a7:b8:da:3d:f8:fd:d3:e0:90:27:1e:b3:4c:c4:6a:e3:0a:d3: 16:31:3b:c9:af:b6:52:49:c9:39:c4:96:3c:50:19:14:42:05: 4b:f5:ed:9c:f7:83:ab:b1:d4:70:33:c2:d3:bc:14:49:b5:bd: 1e:e2:e2:a5:6c:70:23:28:68:b4:b4:94:53:cd:6f:89:63:24: 58:2a:1e:12:6a:00:57:db:51:c0:fb:88:68:5c:08:e5:6f:41: b9:f0:a3:e5:06:f4:86:8e:c7:76:75:d3:ba:b6:3c:8c:52:8b: ff:66:9b:44:ac:17:85:24:52:32:5e:dc:a9:06:16:dc:2b:ea: f1:be:df:b8:83:05:e1:31:6a:8c:aa:4f:ee:59:82:32:3e:5c: ed:cf:fe:75:43:cc:7c:a3:f3:a6:47:95:e4:37:61:2d:28:44: c7:d0:4a:a0 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFOUQxMTAvBgNVBAUTKEJFMDE5MTM3QTgxRDdFOUNEOUFGNTZDRDkxQzU4N0My RUYwNkU5M0IwHhcNMjUwODA2MTE0MTIwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkzM2Y2MC1iOGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw34PyhcNN6ZgDhi3Qe+FJriDqqvNhrVy9uMxIO6QaI3WCEW2pK2Yybbs97t A/2VJXuvDyZB1bJU76X/uDTff+/YIKEHISaUlbjqmbcXsSf02WLcsklF4hcioWD9 6ECkAk5DK6N7XwSOokYy5Rjlq8kyZbw2KYN8RhSw2OhU1q2MAWlXLmJbwx8rMw92 MJf1pcQ5/8+OIIiZ0rgTWk+vJWm5WmE0h6AKRUxML5zipjcZ+FwYjWg8T93KVNBm qgVnN6JHs4d2nKe9e0XDOnxKAHdsthrmKgNwPw7+02c0JeMlpF1pgt5MMMYtLkAP KIjoge6eErSz1ANSReL+DH8Z5wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFbCFZf4 O1LgkVdrOEeT1gV5p4qxMB8GA1UdIwQYMBaAFL4BkTeoHX6c2a9WzZHFh8LvBuk7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUU5RC81MjgyOEIyQTdC ODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZwelpyMWJOa2NXSHd1OEc2 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjlFOUQvNTI4MjhCMkE3Qjg3MTFFRUE4NDBGMjFFQzRGOUFFMDIvNDUzNjg2QTI3 MkJBMTFGMDlBNjA3NDMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAF0x8owDQQCAAIwBwMFACQBTWAwDQYJKoZIhvcNAQELBQAD ggEBAEFJtH0JopVO1nddswaimf6RFx3bv4l3vLAAcm5I7sLPd2AG4jDmbCM/DY3A MGX/llY4+AZrx3y0gwFp72/Q8d0mNua8xY0ThEcvps2ZD16Ao7+WtMaaO/eW+ae4 2j34/dPgkCces0zEauMK0xYxO8mvtlJJyTnEljxQGRRCBUv17Zz3g6ux1HAzwtO8 FEm1vR7i4qVscCMoaLS0lFPNb4ljJFgqHhJqAFfbUcD7iGhcCOVvQbnwo+UG9IaO x3Z107q2PIxSi/9mm0SsF4UkUjJe3KkGFtwr6vG+37iDBeExaoyqT+5ZgjI+XO3P /nVDzHyj86ZHleQ3YS0oRMfQSqA= -----END CERTIFICATE-----Generated at Sun Aug 24 04:48:11 2025 by rpki-client