$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/AE8BB766178911EC876F5F50C4F9AE02.roa File: AE8BB766178911EC876F5F50C4F9AE02.roa (raw, json) Hash identifier: 9Xivq6s93mksbhu2p/H/z3gtS9/XmhNf3IMjTVy5pWY= Subject key identifier: 53:9F:D9:48:90:14:0E:29:79:52:84:F3:13:3D:70:80:74:3A:60:AB Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Certificate serial: 057B Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/AE8BB766178911EC876F5F50C4F9AE02.roa Signing time: Fri 01 Aug 2025 00:36:02 +0000 ROA not before: Fri 01 Aug 2025 00:36:02 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 58780 IP address blocks: 161.43.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1403 (0x57b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Validity Not Before: Aug 1 00:36:02 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=688c0bf1-1e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b5:8c:b1:f0:70:c7:65:2c:b3:6f:dc:24:f2: fc:5c:57:ee:ab:51:13:0c:3d:65:ec:c4:70:d6:b2: 3f:7d:88:22:63:c6:a6:00:f1:7e:3d:37:d8:53:7a: 1e:ce:7c:18:24:7a:d6:fe:da:d2:c7:20:21:32:45: 92:80:a5:32:f4:e9:e9:79:a9:41:76:50:e8:e5:c2: c5:8f:df:e0:41:a3:42:22:21:b4:1f:cc:93:71:08: f9:a9:5b:e3:c7:00:57:3e:e1:25:ae:d8:79:80:ec: 06:30:8f:e9:39:b7:28:2b:bd:ba:f1:db:eb:f4:a4: c5:90:cd:4e:af:44:68:9c:9c:e8:5f:59:cf:c7:dc: 81:be:9c:c5:d5:7f:77:db:80:53:38:30:82:02:36: 96:46:2c:1d:46:88:13:de:98:99:ed:68:a8:a4:61: b7:23:80:6a:37:11:be:2d:79:59:1a:f4:a1:eb:fd: 99:14:61:c3:6b:01:b5:b6:1b:8c:db:e5:2b:b4:2b: c5:d7:c0:22:d5:af:89:d3:37:8a:1d:80:38:b0:32: dd:aa:68:5f:e7:f0:f6:71:25:1b:09:70:f6:8b:18: dc:f0:be:7a:95:fd:43:2d:03:28:5a:be:34:a0:c2: 30:5e:38:c9:48:c0:4c:d9:63:1b:f4:85:c8:92:3f: ec:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9F:D9:48:90:14:0E:29:79:52:84:F3:13:3D:70:80:74:3A:60:AB X509v3 Authority Key Identifier: keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/AE8BB766178911EC876F5F50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.43.223.0/24 Signature Algorithm: sha256WithRSAEncryption a9:35:fa:6d:06:17:48:a2:e0:0d:a0:76:f9:66:b6:a7:42:3f: b7:8a:91:81:6b:80:d0:5c:ae:c1:89:ac:74:c8:ff:12:0c:a6: de:ae:5a:81:de:c7:21:d2:15:3e:3b:c3:67:af:34:d5:08:f5: 46:07:ce:47:70:00:e1:22:0a:ea:75:33:32:01:f5:24:bb:8f: 2e:85:81:c3:87:7a:c7:06:f2:f5:1e:e1:84:08:31:fe:2a:60: 5f:e0:83:de:27:32:75:16:5c:56:c4:f4:a3:7a:67:ff:84:e9: 95:fd:7f:ac:25:90:72:1d:c8:61:48:bf:f9:05:d7:f2:6d:2c: e6:57:7c:07:45:1f:2b:52:ef:fb:f9:2f:74:ff:e6:49:90:fa: f0:4f:b0:84:c1:59:20:f4:f6:54:d2:4b:84:8d:d9:9b:3d:1a: e8:3c:07:7c:4b:1d:a7:1a:b2:05:80:8d:6e:34:58:ae:81:a1: a6:0e:c5:bb:c4:68:bc:47:d5:22:e1:e8:b3:5b:01:86:a1:7a: c8:44:4c:3c:a3:49:c2:fb:39:e1:00:41:e6:50:b9:db:6e:7e: be:e6:b8:b8:dc:5f:a9:20:af:04:75:89:80:c3:68:6b:b4:c4: ea:16:2d:62:3e:f8:6e:ac:1a:d3:0f:88:99:bb:c5:70:87:80: b7:e9:19:3c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDk2ODJDMkFCRTI1MzIzNTgwNzc2QjFEMEUyNzVEMkZE MkQ2OTdFQjYwHhcNMjUwODAxMDAzNjAyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhjMGJmMS0xZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rWMsfBwx2Uss2/cJPL8XFfuq1ETDD1l7MRw1rI/fYgiY8amAPF+PTfYU3oe znwYJHrW/trSxyAhMkWSgKUy9OnpealBdlDo5cLFj9/gQaNCIiG0H8yTcQj5qVvj xwBXPuElrth5gOwGMI/pObcoK7268dvr9KTFkM1Or0RonJzoX1nPx9yBvpzF1X93 24BTODCCAjaWRiwdRogT3piZ7WiopGG3I4BqNxG+LXlZGvSh6/2ZFGHDawG1thuM 2+UrtCvF18Ai1a+J0zeKHYA4sDLdqmhf5/D2cSUbCXD2ixjc8L56lf1DLQMoWr40 oMIwXjjJSMBM2WMb9IXIkj/slwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFOf2UiQ FA4peVKE8xM9cIB0OmCrMB8GA1UdIwQYMBaAFJaCwqviUyNYB3ax0OJ10v0taX62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS83QTg4NjRBQ0ZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkxZ0hkckhRNG5YU19TMXBm clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xvTENxLUpUSTFnSGRySFE0blhTX1MxcGZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE0QjEvN0E4ODY0QUNGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvQUU4QkI3NjYx Nzg5MTFFQzg3NkY1RjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAChK98wDQYJKoZIhvcNAQELBQADggEBAKk1+m0GF0ii4A2g dvlmtqdCP7eKkYFrgNBcrsGJrHTI/xIMpt6uWoHexyHSFT47w2evNNUI9UYHzkdw AOEiCup1MzIB9SS7jy6FgcOHescG8vUe4YQIMf4qYF/gg94nMnUWXFbE9KN6Z/+E 6ZX9f6wlkHIdyGFIv/kF1/JtLOZXfAdFHytS7/v5L3T/5kmQ+vBPsITBWSD09lTS S4SN2Zs9Gug8B3xLHacasgWAjW40WK6BoaYOxbvEaLxH1SLh6LNbAYaheshETDyj ScL7OeEAQeZQudtufr7muLjcX6kgrwR1iYDDaGu0xOoWLWI++G6sGtMPiJm7xXCH gLfpGTw= -----END CERTIFICATE-----Generated at Mon Aug 11 04:22:19 2025 by rpki-client