$ rpki-client -vvf rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/0A7E4D02D56B11EF8DC4E152C4F9AE02.roa File: 0A7E4D02D56B11EF8DC4E152C4F9AE02.roa (raw, json) Hash identifier: kqlFbGdiLITylJzEnme24j5JnutD1SpM8Rs0rr0qBXY= Subject key identifier: 0B:F0:7E:4C:B0:AD:F5:F9:6C:D2:FC:F9:4B:B9:FD:2B:5D:DF:A6:C7 Certificate issuer: /CN=A91273F9/serialNumber=749888181655242372C4E0A10E063799B870DE1B Certificate serial: 0355 Authority key identifier: 74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/0A7E4D02D56B11EF8DC4E152C4F9AE02.roa Signing time: Tue 05 Aug 2025 01:38:49 +0000 ROA not before: Tue 05 Aug 2025 01:38:49 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153494 IP address blocks: 45.123.196.0/22 maxlen: 24 103.192.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 853 (0x355) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273F9, serialNumber=749888181655242372C4E0A10E063799B870DE1B Validity Not Before: Aug 5 01:38:49 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=689160a9-cac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:ed:21:c3:b1:35:dd:ab:a2:a1:67:2c:2f: 10:2e:b4:4d:88:74:a4:fb:0d:3d:3f:b9:b8:2e:18: c1:d9:63:e9:2a:47:a9:d4:2b:c8:f0:42:d1:fa:28: b1:6b:20:02:f8:12:13:ff:5e:92:8a:5e:1a:ad:b8: 04:f4:99:df:61:b3:85:fb:23:74:97:79:e8:ae:e1: 83:2c:69:eb:0e:7f:e9:ab:e5:3f:d2:f1:b8:ef:98: a6:60:50:84:9d:3a:2a:89:df:9d:55:55:d3:31:0e: 3e:86:b2:05:ec:33:9b:cd:e4:05:35:47:7a:09:82: 48:cd:45:ac:74:af:19:db:14:eb:68:37:6f:7c:02: d3:76:e7:13:9c:ea:79:8a:c9:5c:9f:86:2b:2a:01: 5a:9e:67:28:c8:a6:bf:a4:aa:8a:bc:d4:dc:15:5e: 26:33:60:12:08:4a:09:25:53:fe:71:0d:3c:09:45: b4:16:ad:36:89:71:17:a9:d7:ac:92:c5:e6:1f:6d: c4:ea:cb:92:af:c0:9b:e5:77:ef:9a:08:2c:09:ad: 12:06:5a:26:99:1a:cd:a4:ef:74:bf:f0:c1:5b:f5: 86:06:50:a9:4b:e0:92:f8:bd:8a:11:08:79:a4:6f: 33:a5:72:e5:d7:1a:29:1f:76:aa:a8:46:a2:92:4e: cf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F0:7E:4C:B0:AD:F5:F9:6C:D2:FC:F9:4B:B9:FD:2B:5D:DF:A6:C7 X509v3 Authority Key Identifier: keyid:74:98:88:18:16:55:24:23:72:C4:E0:A1:0E:06:37:99:B8:70:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/dJiIGBZVJCNyxOChDgY3mbhw3hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dJiIGBZVJCNyxOChDgY3mbhw3hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273F9/1CF59746C6BF11EC83649420C4F9AE02/0A7E4D02D56B11EF8DC4E152C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.123.196.0/22 103.192.40.0/22 Signature Algorithm: sha256WithRSAEncryption 90:7d:58:33:95:5a:64:46:eb:f8:45:45:bb:ce:e4:f4:8d:60: d7:aa:4c:21:bf:4b:d5:a5:87:ad:a1:af:4e:f9:25:5e:1b:76: 9b:fe:51:66:b9:51:64:51:43:3b:a6:b7:ee:85:bb:46:15:04: 7a:21:bb:31:31:a0:6c:86:c9:6d:4d:25:77:67:58:69:0c:a1: 0b:60:b7:29:b2:05:b3:1d:96:1a:70:67:57:04:b5:df:51:7d: 31:43:82:3f:9b:9a:8a:c9:56:82:1c:0e:82:22:02:f2:ba:e5: 25:e9:c8:b8:de:c1:f2:53:47:47:15:9b:0b:6c:35:ff:4b:b8: 15:c4:62:d4:df:86:c5:d3:ab:31:4b:85:c4:2e:c0:2e:9d:38: fe:d2:0b:b0:55:f5:e0:dd:3c:7d:cd:6c:0d:00:2d:a6:02:bf: c4:3a:76:f7:a7:23:ba:5d:47:64:57:31:e0:fd:3d:1f:74:01: d2:77:56:9e:11:b5:c2:3e:85:9a:99:df:77:fa:22:91:54:4c: 6f:95:7b:b4:b6:fd:93:80:28:41:0e:87:2b:62:66:37:6e:cc: d6:07:ab:49:16:07:e0:58:1d:91:aa:26:47:d0:8a:e5:8f:50: 8d:11:23:f3:ef:37:3e:0c:cf:68:e3:44:56:45:04:d5:5b:f8: 58:71:e5:f6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRjkxMTAvBgNVBAUTKDc0OTg4ODE4MTY1NTI0MjM3MkM0RTBBMTBFMDYzNzk5 Qjg3MERFMUIwHhcNMjUwODA1MDEzODQ5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkxNjBhOS1jYWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfntIcOxNd2roqFnLC8QLrRNiHSk+w09P7m4LhjB2WPpKkep1CvI8ELR+iix ayAC+BIT/16Sil4arbgE9JnfYbOF+yN0l3noruGDLGnrDn/pq+U/0vG475imYFCE nToqid+dVVXTMQ4+hrIF7DObzeQFNUd6CYJIzUWsdK8Z2xTraDdvfALTducTnOp5 islcn4YrKgFanmcoyKa/pKqKvNTcFV4mM2ASCEoJJVP+cQ08CUW0Fq02iXEXqdes ksXmH23E6suSr8Cb5XfvmggsCa0SBlommRrNpO90v/DBW/WGBlCpS+CS+L2KEQh5 pG8zpXLl1xopH3aqqEaikk7PawIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAvwfkyw rfX5bNL8+Uu5/Std36bHMB8GA1UdIwQYMBaAFHSYiBgWVSQjcsTgoQ4GN5m4cN4b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNGOS8xQ0Y1OTc0NkM2 QkYxMUVDODM2NDk0MjBDNEY5QUUwMi9kSmlJR0JaVkpDTnl4T0NoRGdZM21iaHcz aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RKaUlHQlpWSkNOeXhPQ2hEZ1kzbWJodzNocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjczRjkvMUNGNTk3NDZDNkJGMTFFQzgzNjQ5NDIwQzRGOUFFMDIvMEE3RTREMDJE NTZCMTFFRjhEQzRFMTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIte8QDBAJnwCgwDQYJKoZIhvcNAQELBQADggEBAJB9WDOV WmRG6/hFRbvO5PSNYNeqTCG/S9Wlh62hr075JV4bdpv+UWa5UWRRQzumt+6Fu0YV BHohuzExoGyGyW1NJXdnWGkMoQtgtymyBbMdlhpwZ1cEtd9RfTFDgj+bmorJVoIc DoIiAvK65SXpyLjewfJTR0cVmwtsNf9LuBXEYtTfhsXTqzFLhcQuwC6dOP7SC7BV 9eDdPH3NbA0ALaYCv8Q6dvenI7pdR2RXMeD9PR90AdJ3Vp4RtcI+hZqZ33f6IpFU TG+Ve7S2/ZOAKEEOhytiZjduzNYHq0kWB+BYHZGqJkfQiuWPUI0RI/PvNz4Mz2jj RFZFBNVb+Fhx5fY= -----END CERTIFICATE-----Generated at Sun Aug 10 21:06:06 2025 by rpki-client