$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/48EBC41C7E3911F0BB208C3FC4F9AE02.roa File: 48EBC41C7E3911F0BB208C3FC4F9AE02.roa (raw, json) Hash identifier: k7/BYTs5AWckPfc2XRwU2AWPU1bg1726dtxN6yLvkRk= Subject key identifier: A2:D5:3D:6F:B5:CE:75:CB:B1:81:83:F3:4B:07:4A:82:9D:97:2E:05 Certificate issuer: /CN=A91FCA1E/serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Certificate serial: 0110 Authority key identifier: 8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/48EBC41C7E3911F0BB208C3FC4F9AE02.roa Signing time: Thu 21 Aug 2025 03:10:57 +0000 ROA not before: Thu 21 Aug 2025 03:10:57 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 38445 IP address blocks: 202.9.202.0/24 maxlen: 24 202.9.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA1E, serialNumber=8E650A712DC84F22B89B8F18B864C29F9DD713C5 Validity Not Before: Aug 21 03:10:57 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68a68e41-b7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:38:ed:2e:53:e3:ae:fd:3e:cb:13:e8:59: 47:b0:c7:56:55:0e:b9:55:e9:66:32:74:bc:fd:a7: f7:ba:81:7c:4e:6b:e6:dd:70:a9:95:3f:28:b0:4a: f1:75:fe:2c:dc:7b:dd:0e:5a:99:e5:5f:a6:3b:9f: b6:1a:17:60:6a:ef:cf:92:70:8c:be:61:80:de:8a: 83:60:b9:a6:c7:ef:56:02:2a:16:e1:cd:ae:38:af: 9b:21:69:2e:17:5c:f9:3b:7d:37:c0:0d:80:f4:9d: 7a:a6:ae:79:3f:9e:c4:7f:b2:d6:71:2f:17:a7:c8: fe:12:f6:e3:a6:5b:2d:17:58:ee:b8:52:85:5a:9b: 1e:db:da:95:dc:b4:9f:0b:56:c2:14:f6:ab:6d:9f: bd:04:f6:62:44:4f:aa:cd:81:77:6e:60:5a:12:ab: de:76:72:c0:8a:e6:4b:2e:84:3d:aa:a0:e4:3c:9b: 33:b4:36:92:52:8f:52:1f:e9:60:49:31:e2:dc:39: 53:29:5b:43:18:06:2f:35:f1:8a:94:02:69:e0:7b: 71:ab:be:a3:bd:7f:72:42:86:f6:e7:98:30:b3:c5: fa:42:60:b6:29:72:03:59:5d:6a:a2:93:66:9c:11: 24:69:16:c1:fb:e8:f2:e6:fa:ba:de:81:8b:5a:ca: 34:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D5:3D:6F:B5:CE:75:CB:B1:81:83:F3:4B:07:4A:82:9D:97:2E:05 X509v3 Authority Key Identifier: keyid:8E:65:0A:71:2D:C8:4F:22:B8:9B:8F:18:B8:64:C2:9F:9D:D7:13:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/jmUKcS3ITyK4m48YuGTCn53XE8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jmUKcS3ITyK4m48YuGTCn53XE8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA1E/F0062F28F63411EE8AEAC747C4F9AE02/48EBC41C7E3911F0BB208C3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.9.202.0/24 202.9.207.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:0d:21:05:61:5d:3a:67:c9:26:48:11:e9:a0:f5:cc:81:31: 3c:60:51:bb:2b:60:f1:2d:32:82:2e:6c:fa:03:a7:5d:20:05: 0e:9d:ad:ee:0a:b0:49:d9:97:9f:fd:91:da:ab:19:dd:43:06: 22:32:0e:ed:5c:bf:eb:1c:f1:77:43:84:96:d1:be:28:4e:c9: 22:ae:6a:cd:09:98:73:63:17:1f:19:c4:79:8f:7d:19:bb:97: 33:05:9b:5f:26:d8:16:1c:ae:d9:8e:83:fd:ea:5d:d3:38:0a: aa:32:ed:0f:ff:5c:5c:22:93:03:8c:f3:a0:ff:5f:2b:23:2e: 0c:09:37:3f:91:08:33:19:54:23:1a:a1:c8:83:d1:53:d8:df: a4:0a:bb:a9:35:89:59:ab:fe:4d:82:76:23:16:d4:6b:97:c8: a8:e9:d2:49:7b:02:b3:3c:5b:ec:c4:68:c6:62:ad:d3:b3:42: 47:af:1a:58:1e:5d:05:9b:62:95:4e:ca:3a:96:46:b5:80:2b: fc:62:7b:45:72:e2:85:d0:5d:59:55:88:4f:6b:ae:6f:6a:ad: 4d:f9:9a:ee:0a:e1:9e:49:31:c1:ab:ac:66:b8:81:f6:31:bb: 9e:0f:fb:6d:3e:6c:b5:ce:82:b7:f0:87:d1:45:b5:44:85:51: 76:c1:13:16 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBMUUxMTAvBgNVBAUTKDhFNjUwQTcxMkRDODRGMjJCODlCOEYxOEI4NjRDMjlG OURENzEzQzUwHhcNMjUwODIxMDMxMDU3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2OGU0MS1iN2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/o47S5T4679PssT6FlHsMdWVQ65VelmMnS8/af3uoF8Tmvm3XCplT8osErx df4s3HvdDlqZ5V+mO5+2Ghdgau/PknCMvmGA3oqDYLmmx+9WAioW4c2uOK+bIWku F1z5O303wA2A9J16pq55P57Ef7LWcS8Xp8j+EvbjplstF1juuFKFWpse29qV3LSf C1bCFParbZ+9BPZiRE+qzYF3bmBaEqvednLAiuZLLoQ9qqDkPJsztDaSUo9SH+lg STHi3DlTKVtDGAYvNfGKlAJp4Htxq76jvX9yQob255gws8X6QmC2KXIDWV1qopNm nBEkaRbB++jy5vq63oGLWso0MwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKLVPW+1 znXLsYGD80sHSoKdly4FMB8GA1UdIwQYMBaAFI5lCnEtyE8iuJuPGLhkwp+d1xPF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0ExRS9GMDA2MkYyOEY2 MzQxMUVFOEFFQUM3NDdDNEY5QUUwMi9qbVVLY1MzSVR5SzRtNDhZdUdUQ241M1hF OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ptVUtjUzNJVHlLNG00OFl1R1RDbjUzWEU4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkNBMUUvRjAwNjJGMjhGNjM0MTFFRThBRUFDNzQ3QzRGOUFFMDIvNDhFQkM0MUM3 RTM5MTFGMEJCMjA4QzNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKCcoDBADKCc8wDQYJKoZIhvcNAQELBQADggEBAFwNIQVh XTpnySZIEemg9cyBMTxgUbsrYPEtMoIubPoDp10gBQ6dre4KsEnZl5/9kdqrGd1D BiIyDu1cv+sc8XdDhJbRvihOySKuas0JmHNjFx8ZxHmPfRm7lzMFm18m2BYcrtmO g/3qXdM4Cqoy7Q//XFwikwOM86D/XysjLgwJNz+RCDMZVCMaociD0VPY36QKu6k1 iVmr/k2CdiMW1GuXyKjp0kl7ArM8W+zEaMZirdOzQkevGlgeXQWbYpVOyjqWRrWA K/xie0Vy4oXQXVlViE9rrm9qrU35mu4K4Z5JMcGrrGa4gfYxu54P+20+bLXOgrfw h9FFtUSFUXbBExY= -----END CERTIFICATE-----Generated at Sun Aug 24 00:00:21 2025 by rpki-client