$ rpki-client -vvf rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa File: 9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa (raw, json) Hash identifier: jZ8rK9Cjwbx5cGtSyivoYRd59H87vJYDWLCVXZK0EWU= Subject key identifier: A3:B2:32:BD:73:75:40:7E:E8:B0:2D:C8:BF:73:6B:E8:FC:5D:09:CD Certificate issuer: /CN=A91116E6/serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A Certificate serial: D2 Authority key identifier: 32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa Signing time: Tue 29 Jul 2025 06:11:59 +0000 ROA not before: Tue 29 Jul 2025 06:11:59 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55422 IP address blocks: 182.23.212.0/24 maxlen: 24 182.23.213.0/24 maxlen: 24 182.23.214.0/24 maxlen: 24 182.23.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 06:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91116E6, serialNumber=324CC87BCC84C68151CC3733A508C78A5C5B498A Validity Not Before: Jul 29 06:11:59 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6888662f-b3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cf:cd:1c:e4:c3:f3:f6:e0:8d:1a:8f:9f:bc: b2:b9:99:1b:62:ac:6f:8b:f4:16:a1:fa:c7:78:83: a8:b3:ed:97:97:68:8b:9b:d3:27:51:23:29:f0:cb: ee:cd:e5:1f:0d:47:4f:1e:14:17:94:b5:15:b0:e1: 31:e1:7b:2b:ab:e7:88:70:0b:b2:d9:2e:a3:3e:1c: bf:88:d0:90:27:94:75:47:d1:fb:b0:86:95:a9:1a: 15:7d:03:c2:06:a5:88:c9:60:40:0d:c3:68:74:6e: b1:78:f9:d3:2c:11:65:3b:e3:07:de:14:89:0d:02: b5:78:e5:ea:d4:34:d2:cf:6c:52:81:6c:25:c2:53: d2:9b:be:41:f2:35:d6:49:e8:c8:77:de:37:07:66: c4:70:27:09:f1:bc:f3:1a:e4:a6:db:5f:73:b8:3f: 22:38:ec:18:1d:0c:17:dc:bd:a9:5f:bb:b0:87:a8: 92:5c:79:d8:43:1c:26:ff:0a:40:99:00:62:62:a2: bc:43:04:f5:4a:5e:cf:96:e5:98:24:79:d5:97:7c: 11:24:6b:a5:11:3c:1e:79:c1:69:f5:ca:d9:7b:0b: ce:ea:b5:34:20:e1:d6:21:24:5d:bf:7f:2b:85:6e: 76:26:9c:fe:68:13:55:71:8a:21:0e:fe:80:90:a8: d8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B2:32:BD:73:75:40:7E:E8:B0:2D:C8:BF:73:6B:E8:FC:5D:09:CD X509v3 Authority Key Identifier: keyid:32:4C:C8:7B:CC:84:C6:81:51:CC:37:33:A5:08:C7:8A:5C:5B:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/MkzIe8yExoFRzDczpQjHilxbSYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkzIe8yExoFRzDczpQjHilxbSYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116E6/D7D3623831F611EF92AD8D10C4F9AE02/9CE0AEFA31F711EFA9A9A54AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.23.212.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:85:38:96:29:34:7a:c2:68:a2:5f:e8:83:27:18:db:b2:fb: 6b:de:14:93:b7:95:64:5b:7a:d6:07:a0:3d:43:a3:ce:fb:15: 67:26:8c:92:5a:ef:23:0c:0e:d9:d3:08:ec:00:00:93:4f:da: ac:f0:42:4b:48:fb:ba:3b:f3:77:a5:63:6b:c7:76:2f:af:04: b1:8a:d6:7c:ba:0f:e8:87:2f:80:72:98:b4:6d:e3:be:70:b4: 3b:79:59:85:64:54:ad:11:de:5d:b0:e7:67:81:a3:0e:ce:01: bb:96:01:f3:71:b7:95:1f:fe:f4:eb:ff:1b:9a:23:6a:e3:24: 25:e3:e8:4d:dd:78:0e:63:67:4d:06:4c:50:44:d7:00:66:cf: f3:d8:34:3a:98:ff:ed:73:fb:11:0e:8a:07:a7:af:f7:b8:96: 0f:46:23:6d:3d:82:05:2f:dc:ce:fd:ae:40:af:85:ba:bf:04: 42:e1:69:5a:cc:3c:89:d1:5d:e7:43:cd:07:43:3f:e2:e2:11: 41:4a:30:ea:4a:64:4c:02:85:98:ca:54:72:ef:ae:c1:8a:26: eb:13:da:76:50:55:a6:07:9e:b7:1b:d8:3e:e6:a9:ca:cf:52: 10:dd:fe:1f:d2:39:5b:dd:9a:87:32:be:4d:9f:11:2e:89:6c: 03:e6:75:c8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE2RTYxMTAvBgNVBAUTKDMyNENDODdCQ0M4NEM2ODE1MUNDMzczM0E1MDhDNzhB NUM1QjQ5OEEwHhcNMjUwNzI5MDYxMTU5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg4NjYyZi1iM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzM/NHOTD8/bgjRqPn7yyuZkbYqxvi/QWofrHeIOos+2Xl2iLm9MnUSMp8Mvu zeUfDUdPHhQXlLUVsOEx4Xsrq+eIcAuy2S6jPhy/iNCQJ5R1R9H7sIaVqRoVfQPC BqWIyWBADcNodG6xePnTLBFlO+MH3hSJDQK1eOXq1DTSz2xSgWwlwlPSm75B8jXW SejId943B2bEcCcJ8bzzGuSm219zuD8iOOwYHQwX3L2pX7uwh6iSXHnYQxwm/wpA mQBiYqK8QwT1Sl7PluWYJHnVl3wRJGulETweecFp9crZewvO6rU0IOHWISRdv38r hW52Jpz+aBNVcYohDv6AkKjYKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKOyMr1z dUB+6LAtyL9za+j8XQnNMB8GA1UdIwQYMBaAFDJMyHvMhMaBUcw3M6UIx4pcW0mK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZFNi9EN0QzNjIzODMx RjYxMUVGOTJBRDhEMTBDNEY5QUUwMi9Na3pJZTh5RXhvRlJ6RGN6cFFqSGlseGJT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01rekllOHlFeG9GUnpEY3pwUWpIaWx4YlNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTE2RTYvRDdEMzYyMzgzMUY2MTFFRjkyQUQ4RDEwQzRGOUFFMDIvOUNFMEFFRkEz MUY3MTFFRkE5QTlBNTRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAK2F9QwDQYJKoZIhvcNAQELBQADggEBAIuFOJYpNHrCaKJf 6IMnGNuy+2veFJO3lWRbetYHoD1Do877FWcmjJJa7yMMDtnTCOwAAJNP2qzwQktI +7o783elY2vHdi+vBLGK1ny6D+iHL4BymLRt475wtDt5WYVkVK0R3l2w52eBow7O AbuWAfNxt5Uf/vTr/xuaI2rjJCXj6E3deA5jZ00GTFBE1wBmz/PYNDqY/+1z+xEO igenr/e4lg9GI209ggUv3M79rkCvhbq/BELhaVrMPInRXedDzQdDP+LiEUFKMOpK ZEwChZjKVHLvrsGKJusT2nZQVaYHnrcb2D7mqcrPUhDd/h/SOVvdmocyvk2fES6J bAPmdcg= -----END CERTIFICATE-----Generated at Wed Aug 13 19:53:10 2025 by rpki-client