$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/20564D22DB5311EEA8BB3775C4F9AE02.roa File: 20564D22DB5311EEA8BB3775C4F9AE02.roa (raw, json) Hash identifier: pP9D2oUehQjJpztUJjNznnRNuCVy9bVGqh7L2LkBVuI= Subject key identifier: 80:F6:91:7C:D7:80:82:72:0C:99:31:4E:80:44:4D:3F:75:93:63:E6 Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB Certificate serial: 05F6 Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/20564D22DB5311EEA8BB3775C4F9AE02.roa Signing time: Sun 03 Aug 2025 00:06:24 +0000 ROA not before: Sun 03 Aug 2025 00:06:24 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 14618 IP address blocks: 1.44.96.0/24 maxlen: 24 203.17.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1526 (0x5f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB Validity Not Before: Aug 3 00:06:24 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=688ea800-7d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:40:66:6a:d5:ee:99:23:57:70:bc:38:7f:81: 17:d3:4d:91:55:ec:95:55:08:03:52:f5:85:f1:88: 7f:8a:da:aa:93:72:0a:41:b3:1e:ac:d3:ed:35:b4: 82:60:a1:f9:c1:79:8a:d8:a5:aa:cd:d1:9e:76:83: b9:01:19:50:24:76:d9:8e:a0:07:10:cb:d9:e1:a1: 59:5a:b8:68:13:0e:f0:b2:a8:87:15:06:55:21:4e: 75:f5:d2:b2:42:25:dd:54:f3:f1:fc:a8:05:3b:50: be:4a:e9:d7:9a:9a:2c:0e:4f:0c:db:96:4d:79:64: e2:69:dc:cb:e6:1d:b5:64:85:a6:bf:ed:d3:05:c2: 4f:41:25:ba:c7:19:d2:85:8e:83:24:ab:d2:ca:ad: c8:88:23:81:02:06:12:5b:48:ab:7e:75:ad:f8:35: 6f:8a:0b:1a:df:6a:8c:55:32:b2:81:f9:89:58:eb: fc:8d:f9:7c:6c:45:5c:81:a6:ab:ad:b7:ec:68:2b: 25:11:9c:9d:f2:93:d5:68:f4:d9:68:f2:a9:6c:bf: ab:fd:43:7b:45:0c:d9:85:b0:06:05:f5:03:39:0f: 6f:f3:f3:f2:ad:06:fa:b1:d5:de:5e:d2:86:15:c2: 9d:76:db:54:e0:33:78:2e:d7:ab:e3:a7:d7:3a:89: 59:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F6:91:7C:D7:80:82:72:0C:99:31:4E:80:44:4D:3F:75:93:63:E6 X509v3 Authority Key Identifier: keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/20564D22DB5311EEA8BB3775C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.44.96.0/24 203.17.138.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:6a:86:27:72:05:88:1a:bb:17:5b:34:61:0f:b2:e6:be:86: 2f:fd:ca:16:f3:e2:40:9b:12:6d:07:b3:75:b0:12:26:45:08: 61:3e:1a:83:36:11:52:f5:46:c1:86:a6:43:4a:e0:5e:97:26: 5e:12:6a:4c:c7:fa:67:ec:74:aa:7d:a8:de:12:cb:c4:02:ea: 88:e3:f9:c8:ec:0c:d3:0f:f3:44:60:9c:07:7b:96:9b:2b:c3: f6:b1:cd:f5:0d:8a:3d:c0:2c:7b:0c:bb:c4:93:23:24:87:34: 8c:70:0c:97:e0:72:25:5f:40:e5:43:cd:3a:34:c7:e0:24:83: d5:7b:da:58:bb:99:d6:ec:3f:f5:b9:64:a1:2f:0f:9e:e1:a1: d0:6b:cf:37:83:e9:57:2e:7a:bd:52:fe:5c:63:d5:20:c5:64: 2f:a5:3a:89:8b:c6:45:ee:49:36:22:50:37:d0:6d:90:43:ac: 0b:ce:48:0b:77:2c:81:99:ed:38:d9:e1:9f:ca:57:b4:c4:e9: ee:5f:e9:af:a6:a2:f8:56:ff:8b:2b:3a:82:9b:05:f3:55:8f: 15:5a:0e:19:93:b1:b3:96:d4:1f:ae:b8:fe:cb:3a:0e:e5:ab: a0:77:2d:0a:b7:e9:90:6e:56:e7:bc:11:5e:d0:71:73:07:a7: 15:18:3b:b9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDYxNzE0MzJENTU5NENCM0Y2MDhEM0JFMEY1MjYwMEJC RUM0NkU1RkIwHhcNMjUwODAzMDAwNjI0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlYTgwMC03ZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kBmatXumSNXcLw4f4EX002RVeyVVQgDUvWF8Yh/itqqk3IKQbMerNPtNbSC YKH5wXmK2KWqzdGedoO5ARlQJHbZjqAHEMvZ4aFZWrhoEw7wsqiHFQZVIU519dKy QiXdVPPx/KgFO1C+SunXmposDk8M25ZNeWTiadzL5h21ZIWmv+3TBcJPQSW6xxnS hY6DJKvSyq3IiCOBAgYSW0irfnWt+DVvigsa32qMVTKygfmJWOv8jfl8bEVcgaar rbfsaCslEZyd8pPVaPTZaPKpbL+r/UN7RQzZhbAGBfUDOQ9v8/PyrQb6sdXeXtKG FcKddttU4DN4Lter46fXOolZRwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFID2kXzX gIJyDJkxToBETT91k2PmMB8GA1UdIwQYMBaAFGFxQy1VlMs/YI074PUmALvsRuX7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS84NDE4OTIyNkZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6OWdqVHZnOVNZQXUteEc1 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lYRkRMVldVeXo5Z2pUdmc5U1lBdS14RzVmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE0QjEvODQxODkyMjZGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvMjA1NjREMjJE QjUzMTFFRUE4QkIzNzc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAABLGADBADLEYowDQYJKoZIhvcNAQELBQADggEBAHpqhidy BYgauxdbNGEPsua+hi/9yhbz4kCbEm0Hs3WwEiZFCGE+GoM2EVL1RsGGpkNK4F6X Jl4SakzH+mfsdKp9qN4Sy8QC6ojj+cjsDNMP80RgnAd7lpsrw/axzfUNij3ALHsM u8STIySHNIxwDJfgciVfQOVDzTo0x+Akg9V72li7mdbsP/W5ZKEvD57hodBrzzeD 6Vcuer1S/lxj1SDFZC+lOomLxkXuSTYiUDfQbZBDrAvOSAt3LIGZ7TjZ4Z/KV7TE 6e5f6a+movhW/4srOoKbBfNVjxVaDhmTsbOW1B+uuP7LOg7lq6B3LQq36ZBuVue8 EV7QcXMHpxUYO7k= -----END CERTIFICATE-----Generated at Sun Aug 10 16:00:06 2025 by rpki-client