$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa File: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (raw, json) Hash identifier: g6s+BNZQJQ8eLNLhvPLgACbzK2XG9M1Q2Nm7UCMcOkM= Subject key identifier: 8F:9D:08:07:28:EC:8E:0A:B3:6F:EB:B6:E9:E8:89:BC:38:88:8D:4D Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Certificate serial: 17EC Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa Signing time: Sat 14 Jun 2025 17:06:56 +0000 ROA not before: Sat 14 Jun 2025 17:06:56 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 131310 IP address blocks: 143.192.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6124 (0x17ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Validity Not Before: Jun 14 17:06:56 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684dac30-398d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:44:db:78:e2:06:c8:f9:50:21:44:16:cc:cc: cf:20:09:3e:6b:30:4e:45:8e:2d:ee:c5:8c:61:1b: 46:02:39:56:eb:fb:40:ce:ff:dd:5f:74:92:8a:b9: 7b:7b:bb:f4:19:54:9e:a8:13:8d:21:ee:de:b5:7d: c1:d7:f3:15:74:97:f0:3c:db:ab:cf:41:51:86:47: 75:44:2b:58:33:14:61:11:5f:1b:f6:62:97:f5:85: 72:78:df:b5:2e:cc:0b:51:97:09:86:3d:90:a4:c1: a5:90:03:c0:f5:8b:93:79:51:cb:7d:50:6a:65:a0: d5:68:90:ec:f8:e5:e9:35:b7:4e:87:40:37:d7:41: 72:b0:be:30:d7:89:12:dd:e5:54:98:35:13:dc:c3: 8d:89:cf:dc:a9:76:05:d6:56:75:f0:05:1d:06:6e: c2:03:a2:39:76:c2:67:8e:73:c1:3a:3b:22:78:2e: 83:a0:78:40:63:a8:cb:ca:43:cf:38:c3:7e:fd:25: 18:b2:c8:91:b1:78:b8:78:55:25:74:95:c6:6c:26: 8a:96:f7:80:df:44:51:2c:18:57:fd:e8:9c:b7:f4: 59:c0:80:9f:7d:e2:4e:88:4e:15:6e:f8:c4:ce:19: 0f:67:7f:15:d4:20:58:c0:ed:58:9b:e8:25:b0:24: 97:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9D:08:07:28:EC:8E:0A:B3:6F:EB:B6:E9:E8:89:BC:38:88:8D:4D X509v3 Authority Key Identifier: keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 143.192.96.0/20 Signature Algorithm: sha256WithRSAEncryption 5c:06:80:99:5a:9d:a9:ce:3b:0a:7d:05:89:92:e1:70:05:64: d9:08:e3:be:9a:b6:32:f8:78:eb:71:18:8f:d4:83:8a:77:ff: 48:63:37:ba:4b:05:db:50:82:ba:a8:18:38:f2:73:b5:da:1b: 99:08:f7:09:94:8f:a1:73:1e:e4:87:58:fe:1c:41:c2:17:37: 40:4f:7e:81:30:68:94:b5:ac:48:99:0c:82:a0:b2:8e:c4:9b: 1a:fb:63:25:f4:15:ce:d5:a5:b7:57:bd:b4:73:ec:ed:3b:3e: 77:27:67:f8:53:cc:65:a0:9f:ef:c5:77:3b:d0:c5:fb:2b:55: 62:f1:4f:87:86:a0:d3:e1:b9:95:b2:ce:3b:2a:d1:f6:56:3d: e2:44:75:99:41:4e:64:57:3d:fe:5e:ed:fd:83:a1:10:3c:81: 79:6f:e7:48:bf:72:d3:38:e7:10:8c:b2:b9:c3:80:14:e8:26: 95:42:1f:99:ef:bb:dd:24:d8:51:49:53:52:f8:9b:5e:e6:31: e9:82:4c:d2:e3:92:bb:1a:1f:9c:77:58:cd:cd:d7:c4:3a:6f: 2a:16:43:c4:62:16:cc:63:ef:6c:9d:60:30:70:32:14:07:5f: 79:31:d4:81:bb:be:f0:98:67:89:ff:79:0f:35:fe:de:ab:63: d2:72:4a:1f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICF+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0 QzAyNDIwOTEwHhcNMjUwNjE0MTcwNjU2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRkYWMzMC0zOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ETbeOIGyPlQIUQWzMzPIAk+azBORY4t7sWMYRtGAjlW6/tAzv/dX3SSirl7 e7v0GVSeqBONIe7etX3B1/MVdJfwPNurz0FRhkd1RCtYMxRhEV8b9mKX9YVyeN+1 LswLUZcJhj2QpMGlkAPA9YuTeVHLfVBqZaDVaJDs+OXpNbdOh0A310FysL4w14kS 3eVUmDUT3MONic/cqXYF1lZ18AUdBm7CA6I5dsJnjnPBOjsieC6DoHhAY6jLykPP OMN+/SUYssiRsXi4eFUldJXGbCaKlveA30RRLBhX/eict/RZwICffeJOiE4VbvjE zhkPZ38V1CBYwO1Ym+glsCSX9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFI+dCAco 7I4Ks2/rtunoibw4iI1NMB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTg5RTcvRUZBNDc2NzBCREZCMTFFN0I4NzNGRTI3QzRGOUFFMDIvQ0E0RUM1RDZD MjlGMTFFQkJFMEIxOTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBASPwGAwDQYJKoZIhvcNAQELBQADggEBAFwGgJlananOOwp9 BYmS4XAFZNkI476atjL4eOtxGI/Ug4p3/0hjN7pLBdtQgrqoGDjyc7XaG5kI9wmU j6FzHuSHWP4cQcIXN0BPfoEwaJS1rEiZDIKgso7Emxr7YyX0Fc7VpbdXvbRz7O07 PncnZ/hTzGWgn+/FdzvQxfsrVWLxT4eGoNPhuZWyzjsq0fZWPeJEdZlBTmRXPf5e 7f2DoRA8gXlv50i/ctM45xCMsrnDgBToJpVCH5nvu90k2FFJU1L4m17mMemCTNLj krsaH5x3WM3N18Q6byoWQ8RiFsxj72ydYDBwMhQHX3kx1IG7vvCYZ4n/eQ81/t6r Y9JySh8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:30:57 2025 by rpki-client