$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4107DF748DB811E98ACC9F7EC4F9AE02.roa File: 4107DF748DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: t33tjefPncP8dR8GX15pU981pTfbTiVj5ryxyONgq7A= Subject key identifier: 79:72:7F:2F:4D:DE:CE:E6:8B:DD:89:62:5C:28:52:FD:53:F0:A1:67 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 35CD Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4107DF748DB811E98ACC9F7EC4F9AE02.roa Signing time: Thu 24 Jul 2025 14:50:26 +0000 ROA not before: Thu 24 Jul 2025 14:50:26 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 17427 IP address blocks: 58.181.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13773 (0x35cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jul 24 14:50:26 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68824831-9bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:d8:77:05:31:27:d8:a7:6b:42:9e:7b:83: a1:4f:ac:48:ec:3a:81:91:d9:20:af:f4:25:40:ac: 4c:9f:62:17:41:59:ab:3e:d1:9c:e2:cc:ed:dd:e2: 83:f8:a0:24:8b:80:6c:96:19:17:54:03:83:b3:6e: be:57:78:a1:44:32:7a:b7:62:6f:d9:3a:f9:b7:57: bb:63:a1:c6:c1:5b:41:39:db:49:e6:f9:04:62:3b: b7:5d:65:6d:d8:d4:07:2a:8b:c6:d5:7a:65:56:f4: a4:95:3c:bd:6b:bb:4d:0b:55:d2:97:b7:c3:22:bc: a9:da:91:50:fd:57:96:15:0d:c5:f0:12:80:d8:c6: ae:e5:16:24:da:00:90:5d:2a:e8:c3:3c:99:3b:30: 00:e1:6d:1c:ed:14:42:40:b8:e3:73:26:ab:ec:2c: d3:4f:0b:ee:38:77:26:11:83:4e:30:d5:7e:43:b2: e0:b9:a2:04:83:54:e4:e4:f3:5d:11:bd:1b:be:cc: d6:6c:5a:14:9d:13:4f:4c:21:69:ed:69:8b:80:b9: 85:4a:2a:9e:32:b3:82:33:41:31:78:83:8e:51:7b: b5:a2:52:25:d0:0d:e4:04:4e:56:dc:a7:1a:34:25: 5c:fb:64:70:15:a5:af:2c:f3:f5:ca:c6:80:b6:b0: 7a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:72:7F:2F:4D:DE:CE:E6:8B:DD:89:62:5C:28:52:FD:53:F0:A1:67 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4107DF748DB811E98ACC9F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.181.141.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:31:2a:80:4b:32:ef:72:ee:e7:0a:8a:af:55:30:e6:4b:fb: 4f:a9:90:87:2d:38:02:b5:c2:55:95:93:e5:8b:48:53:5e:d9: 42:33:2c:94:7d:55:51:d6:78:12:86:a4:cf:99:e1:c1:64:ea: 97:e2:a8:3e:e6:0f:e8:01:d8:7b:86:0b:d2:51:60:46:88:b0: 11:b2:ea:66:2a:dc:4c:db:28:f0:a3:07:4f:4e:ce:4f:86:9d: d4:ef:3f:04:d1:76:db:49:75:de:d4:6e:02:4f:45:06:8a:b7: c1:00:80:de:e9:5e:76:63:3b:4e:9b:ec:b7:1d:cb:bf:d8:a0: b4:4a:ae:48:ed:88:a6:4e:0c:0e:42:23:a5:d1:be:50:73:67: 81:89:fc:17:ac:0b:72:6d:7c:b4:24:fa:01:5a:93:3b:66:aa: 31:6d:61:38:a3:b8:64:55:38:b5:fc:f9:36:cb:f9:1f:24:75: 24:e2:34:ca:31:20:06:a4:cf:e9:8f:d2:8c:63:39:a7:8d:ef: 36:42:44:89:7c:60:13:e4:40:10:42:73:e3:cd:ed:56:21:94: 63:7b:27:d6:67:26:49:d5:56:30:29:a9:c1:12:2c:dd:9f:50: bf:35:07:14:34:1a:2e:6d:4d:a8:09:80:83:18:64:92:72:48: d9:92:3a:57 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjUwNzI0MTQ1MDI2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgyNDgzMS05YmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDLYdwUxJ9ina0Kee4OhT6xI7DqBkdkgr/QlQKxMn2IXQVmrPtGc4szt3eKD +KAki4BslhkXVAODs26+V3ihRDJ6t2Jv2Tr5t1e7Y6HGwVtBOdtJ5vkEYju3XWVt 2NQHKovG1XplVvSklTy9a7tNC1XSl7fDIryp2pFQ/VeWFQ3F8BKA2Mau5RYk2gCQ XSrowzyZOzAA4W0c7RRCQLjjcyar7CzTTwvuOHcmEYNOMNV+Q7LguaIEg1Tk5PNd Eb0bvszWbFoUnRNPTCFp7WmLgLmFSiqeMrOCM0ExeIOOUXu1olIl0A3kBE5W3Kca NCVc+2RwFaWvLPP1ysaAtrB6CQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHlyfy9N 3s7mi92JYlwoUv1T8KFnMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNDEwN0RGNzQ4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6tY0wDQYJKoZIhvcNAQELBQADggEBAH0xKoBLMu9y7ucK iq9VMOZL+0+pkIctOAK1wlWVk+WLSFNe2UIzLJR9VVHWeBKGpM+Z4cFk6pfiqD7m D+gB2HuGC9JRYEaIsBGy6mYq3EzbKPCjB09Ozk+GndTvPwTRdttJdd7UbgJPRQaK t8EAgN7pXnZjO06b7Lcdy7/YoLRKrkjtiKZODA5CI6XRvlBzZ4GJ/BesC3JtfLQk +gFakztmqjFtYTijuGRVOLX8+TbL+R8kdSTiNMoxIAakz+mP0oxjOaeN7zZCRIl8 YBPkQBBCc+PN7VYhlGN7J9ZnJknVVjApqcESLN2fUL81BxQ0Gi5tTagJgIMYZJJy SNmSOlc= -----END CERTIFICATE-----Generated at Mon Aug 11 04:09:21 2025 by rpki-client