$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/7CAFA5C44CA711EC9D22716BC4F9AE02.roa File: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (raw, json) Hash identifier: aRUayRfr0vMR7tS5Y4z3m5ZDFVHmg6WwIEoeJRznQ08= Subject key identifier: 91:51:F8:CE:CB:A2:C8:F8:DF:51:34:89:27:1F:92:84:12:93:77:13 Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Certificate serial: 0485 Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/7CAFA5C44CA711EC9D22716BC4F9AE02.roa Signing time: Fri 25 Jul 2025 00:36:40 +0000 ROA not before: Fri 25 Jul 2025 00:36:40 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 22552 IP address blocks: 45.121.136.0/22 maxlen: 24 103.61.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1157 (0x485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188F4, serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Validity Not Before: Jul 25 00:36:40 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6882d197-95b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:ed:6c:0b:18:93:b9:58:59:47:69:b8:c3: 35:33:86:32:77:34:4d:d4:75:7f:5b:99:4b:f7:64: 6e:da:1e:b3:eb:9c:79:e1:a8:4b:36:b8:04:bc:08: 71:53:d2:97:8c:cd:e4:a3:61:90:33:a1:58:ea:ac: 26:5c:f9:58:f0:24:f7:40:72:4f:11:fe:72:c0:03: 47:6e:16:42:56:f5:57:a3:a8:cc:e5:39:50:ec:03: 32:d3:84:41:bd:3c:4b:45:51:4b:32:03:b6:ae:12: 41:2f:cd:e0:8d:77:a4:05:2e:2e:b6:ac:3f:e8:19: d2:6b:f4:9e:96:ed:43:bc:dd:f4:59:72:ee:71:ad: ea:25:78:7d:33:7a:30:44:e7:c8:0b:f8:32:74:10: ca:24:fe:ad:09:a9:f0:d8:b8:a1:1a:05:19:df:96: 57:98:40:20:4d:42:ad:99:12:d7:f3:b8:05:a1:5b: 76:4a:fe:29:52:e6:b3:50:92:27:70:aa:66:ed:19: c3:52:61:ef:0b:4d:c0:d1:8c:ab:1f:ee:5b:7b:0a: 61:85:87:d6:8f:c3:21:35:41:ad:3a:ee:29:7d:6e: c5:5b:1e:65:80:53:99:ea:ac:f3:ff:d9:bc:13:06: 8a:4c:4e:03:f9:31:72:c0:3d:a0:09:a3:b1:8d:ce: 55:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:51:F8:CE:CB:A2:C8:F8:DF:51:34:89:27:1F:92:84:12:93:77:13 X509v3 Authority Key Identifier: keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/7CAFA5C44CA711EC9D22716BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.136.0/22 103.61.236.0/22 Signature Algorithm: sha256WithRSAEncryption 40:3c:28:78:41:94:18:bd:c1:76:b9:10:27:52:2b:d3:c9:40: cc:df:5c:c4:4b:97:0b:23:d7:77:2d:c6:1e:3f:03:5d:6c:dc: 74:5f:06:66:0c:ba:55:a4:6c:f7:db:57:cf:4c:63:86:fd:57: e3:b1:f5:77:51:fb:a1:b8:68:21:1d:d3:af:52:9c:7d:0e:97: 3b:1d:9b:b3:e9:e3:91:ad:58:8f:17:07:9f:01:29:2a:a6:6b: fd:66:ff:08:5f:19:22:96:09:60:f0:01:86:28:9e:c4:19:35: 1b:4e:f0:0b:12:2b:f2:9e:c9:8c:3a:5c:58:a4:e2:39:3c:9d: 3b:35:84:bc:35:bf:6f:52:b4:c9:bb:8b:db:16:d5:fd:7d:60: 21:f9:51:3d:1a:89:a3:f5:a3:8e:0c:03:f5:e2:f1:aa:a1:4f: b0:5e:86:58:21:2a:b3:37:d7:3b:c5:aa:d8:ea:69:06:d6:8d: ed:03:fd:be:2e:11:a1:43:8d:07:60:e1:ee:e0:b0:c3:6c:54: 69:a3:f2:f1:3a:48:0d:2b:95:bb:e9:e8:ae:16:7e:1e:f1:33: 59:4b:6b:1e:d6:ef:7e:2f:08:48:dd:1f:4f:83:98:f7:a1:18: 9c:59:8b:d4:6a:69:e5:4e:d9:cd:46:f4:f2:52:53:36:74:78: 08:52:e8:7c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RjQxMTAvBgNVBAUTKEM5NjJBMUVGQjFENjg1RUE5RjBFODVCNDE3NjY4MjhG NkExM0VGRTUwHhcNMjUwNzI1MDAzNjQwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgyZDE5Ny05NWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApv/tbAsYk7lYWUdpuMM1M4YydzRN1HV/W5lL92Ru2h6z65x54ahLNrgEvAhx U9KXjM3ko2GQM6FY6qwmXPlY8CT3QHJPEf5ywANHbhZCVvVXo6jM5TlQ7AMy04RB vTxLRVFLMgO2rhJBL83gjXekBS4utqw/6BnSa/Selu1DvN30WXLuca3qJXh9M3ow ROfIC/gydBDKJP6tCanw2LihGgUZ35ZXmEAgTUKtmRLX87gFoVt2Sv4pUuazUJIn cKpm7RnDUmHvC03A0YyrH+5bewphhYfWj8MhNUGtOu4pfW7FWx5lgFOZ6qzz/9m8 EwaKTE4D+TFywD2gCaOxjc5VQQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJFR+M7L osj431E0iScfkoQSk3cTMB8GA1UdIwQYMBaAFMlioe+x1oXqnw6FtBdmgo9qE+/l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhGNC85MjhEQjBGNjRD QTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hlcWZEb1cwRjJhQ2oyb1Q3 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXS2g3N0hXaGVxZkRvVzBGMmFDajJvVDctVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTg4RjQvOTI4REIwRjY0Q0EzMTFFQzgyM0E4OTY1QzRGOUFFMDIvN0NBRkE1QzQ0 Q0E3MTFFQzlEMjI3MTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIteYgDBAJnPewwDQYJKoZIhvcNAQELBQADggEBAEA8KHhB lBi9wXa5ECdSK9PJQMzfXMRLlwsj13ctxh4/A11s3HRfBmYMulWkbPfbV89MY4b9 V+Ox9XdR+6G4aCEd069SnH0Olzsdm7Pp45GtWI8XB58BKSqma/1m/whfGSKWCWDw AYYonsQZNRtO8AsSK/KeyYw6XFik4jk8nTs1hLw1v29StMm7i9sW1f19YCH5UT0a iaP1o44MA/Xi8aqhT7BehlghKrM31zvFqtjqaQbWje0D/b4uEaFDjQdg4e7gsMNs VGmj8vE6SA0rlbvp6K4Wfh7xM1lLax7W734vCEjdH0+DmPehGJxZi9RqaeVO2c1G 9PJSUzZ0eAhS6Hw= -----END CERTIFICATE-----Generated at Mon Aug 11 04:19:53 2025 by rpki-client