$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/471E9C908DB811E98ACC9F7EC4F9AE02.roa File: 471E9C908DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: 1cfJQS5ACrYfLQAyh5Ja07hoswmqC8p/ibeUwb6rjOE= Subject key identifier: AB:88:CB:19:C4:D5:E4:58:4F:73:32:DB:65:C7:65:CC:0D:CA:93:70 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 35D8 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/471E9C908DB811E98ACC9F7EC4F9AE02.roa Signing time: Thu 24 Jul 2025 14:50:34 +0000 ROA not before: Thu 24 Jul 2025 14:50:34 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45471 IP address blocks: 58.181.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13784 (0x35d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jul 24 14:50:34 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6882483a-982a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1b:9a:43:dc:6c:7b:23:41:53:3a:72:58:f8: 25:5e:89:fa:83:01:4c:9f:10:e8:b8:96:f7:5e:72: 91:32:31:8e:33:b5:ed:a2:7d:ff:8a:3f:c6:8f:e7: a3:66:87:22:fa:a7:64:13:23:27:5e:dd:54:3b:e3: 23:36:1c:6e:c6:27:62:6d:3f:a9:fd:bd:fb:9f:4a: 75:40:63:e9:d9:7c:02:14:64:e4:36:c4:92:5c:5d: 70:25:8c:c1:33:90:b9:76:92:e4:59:f9:8e:ff:0e: 8f:c7:9b:e8:de:c9:89:66:6e:a0:aa:12:d3:72:b3: 99:6b:f0:22:f5:b3:3b:f7:ad:be:43:0e:2e:4b:b8: 6c:12:39:26:35:a3:69:35:e3:7f:58:ee:7e:0f:f3: 61:40:ef:51:2c:72:4b:a0:95:fa:f6:1b:bc:e7:29: 6d:b6:f4:72:65:cf:48:55:a6:0c:ae:6a:00:95:c8: ee:8d:55:dc:f7:9a:7c:d5:3e:31:d9:6b:cc:f8:db: e3:f6:dd:c6:65:fd:cd:d8:e1:fd:02:ae:c9:46:3b: c5:f8:95:35:92:f5:fa:a4:39:44:8b:2a:5d:d7:b4: 34:37:c7:fb:54:d5:22:d7:f4:c1:2c:da:bc:1f:c7: dd:96:2d:be:fd:96:ef:b2:fa:74:93:53:38:c7:e4: 76:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:88:CB:19:C4:D5:E4:58:4F:73:32:DB:65:C7:65:CC:0D:CA:93:70 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/471E9C908DB811E98ACC9F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.181.178.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:84:c9:57:72:ce:4e:a0:cc:fe:a0:6e:8e:e9:50:94:75:f4: c8:6b:1f:94:33:77:9f:14:bc:a8:49:be:4b:aa:69:a6:fb:ce: e8:84:b7:be:b8:00:7d:94:5a:4b:3e:ea:cb:80:81:4e:17:e5: 1f:16:ec:3b:7b:e4:0e:40:de:66:11:7a:d0:c2:1f:99:ed:7a: f8:7e:21:ea:79:01:a0:43:d5:cb:df:8f:8f:64:55:59:4b:d3: d6:12:2c:3c:8b:2a:2f:ce:77:8d:00:41:e3:5f:81:6d:ed:28: a8:e7:db:d2:a1:22:d1:81:b7:2b:5a:4b:ee:6e:00:ae:08:9d: 92:12:62:6a:4a:4e:74:58:6a:fa:44:1e:7a:49:17:1b:e7:80: 05:e5:4d:15:e2:b3:4a:93:5a:8a:79:4a:8d:f2:1a:b8:19:b9: fc:39:e5:0b:e3:21:b0:f3:6f:af:9b:08:86:9e:8b:55:ba:1c: 25:29:0d:64:2d:8f:09:75:3a:11:c6:00:34:c1:15:7f:22:7b: 6f:2d:dc:5a:3f:98:fb:5f:1a:ae:f3:4f:f9:2b:33:6a:c1:f7: d3:90:db:30:3e:dd:e8:4e:8f:77:08:ff:c1:85:12:0f:2f:42: 2f:6b:7d:e3:a8:bc:41:b3:d7:71:6e:be:62:a6:96:09:f8:94: 65:c4:0a:2a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjUwNzI0MTQ1MDM0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgyNDgzYS05ODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BuaQ9xseyNBUzpyWPglXon6gwFMnxDouJb3XnKRMjGOM7Xton3/ij/Gj+ej Zoci+qdkEyMnXt1UO+MjNhxuxidibT+p/b37n0p1QGPp2XwCFGTkNsSSXF1wJYzB M5C5dpLkWfmO/w6Px5vo3smJZm6gqhLTcrOZa/Ai9bM7962+Qw4uS7hsEjkmNaNp NeN/WO5+D/NhQO9RLHJLoJX69hu85ylttvRyZc9IVaYMrmoAlcjujVXc95p81T4x 2WvM+Nvj9t3GZf3N2OH9Aq7JRjvF+JU1kvX6pDlEiypd17Q0N8f7VNUi1/TBLNq8 H8fdli2+/Zbvsvp0k1M4x+R2ZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKuIyxnE 1eRYT3My22XHZcwNypNwMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNDcxRTlDOTA4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6tbIwDQYJKoZIhvcNAQELBQADggEBAI2EyVdyzk6gzP6g bo7pUJR19MhrH5Qzd58UvKhJvkuqaab7zuiEt764AH2UWks+6suAgU4X5R8W7Dt7 5A5A3mYRetDCH5ntevh+Iep5AaBD1cvfj49kVVlL09YSLDyLKi/Od40AQeNfgW3t KKjn29KhItGBtytaS+5uAK4InZISYmpKTnRYavpEHnpJFxvngAXlTRXis0qTWop5 So3yGrgZufw55QvjIbDzb6+bCIaei1W6HCUpDWQtjwl1OhHGADTBFX8ie28t3Fo/ mPtfGq7zT/krM2rB99OQ2zA+3ehOj3cI/8GFEg8vQi9rfeOovEGz13FuvmKmlgn4 lGXECio= -----END CERTIFICATE-----Generated at Mon Aug 11 04:09:46 2025 by rpki-client