$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4D21FB36F7DB11EE92D1E11FC4F9AE02.roa File: 4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (raw, json) Hash identifier: 0A0Nhnr13g/AyJ6eZl3uyvpwaA6ghz922H++qApXnN8= Subject key identifier: D6:E0:C2:82:50:16:4D:71:2B:B4:42:58:D6:08:B5:60:5C:5D:01:37 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 35CE Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4D21FB36F7DB11EE92D1E11FC4F9AE02.roa Signing time: Thu 24 Jul 2025 14:50:26 +0000 ROA not before: Thu 24 Jul 2025 14:50:26 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 17460 IP address blocks: 203.155.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13774 (0x35ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jul 24 14:50:26 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68824832-7077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f5:22:1e:36:f8:f1:4a:19:f9:85:b6:bf:2c: 7b:00:22:b1:31:ee:85:c1:de:e8:33:96:ba:cb:a4: db:03:53:b9:2d:74:8c:c6:d9:d7:99:7f:71:13:93: dd:5b:04:f8:76:c2:ab:de:0e:ee:e6:c2:cf:b1:65: ad:2c:48:9e:6e:85:95:e9:41:0a:72:5b:02:04:e2: 9e:7f:1c:b5:71:2d:ba:d5:11:ff:5c:72:83:e2:46: 2f:66:6a:6c:fa:66:15:fd:c2:f6:ef:59:b1:f3:0e: ba:2e:d7:8a:88:22:96:dd:d4:6c:3e:9c:6f:cb:8e: a1:86:a1:2a:b3:44:55:38:81:00:6f:27:8b:38:d4: 22:c8:d3:df:05:0d:44:b9:ba:ec:84:0e:bb:69:1a: b7:02:a0:53:68:15:48:ba:20:ec:ac:dc:fd:4b:b4: 41:d2:7c:91:c8:f5:02:b5:56:05:9b:69:c1:dd:83: c7:7f:ec:a0:00:0a:77:a2:20:df:27:14:b3:db:17: d3:a1:02:03:8d:d1:f8:f8:95:5d:f2:ac:90:42:f1: da:e8:c1:bc:c9:c5:08:27:31:98:1a:2d:a4:34:4f: ed:57:42:9b:52:8c:61:64:1d:38:c7:ed:52:c3:78: 0e:fd:58:47:03:a7:62:0c:ee:18:c0:62:2a:5c:38: ea:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E0:C2:82:50:16:4D:71:2B:B4:42:58:D6:08:B5:60:5C:5D:01:37 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4D21FB36F7DB11EE92D1E11FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.155.47.0/24 Signature Algorithm: sha256WithRSAEncryption 84:e0:c7:f5:87:94:1c:c0:d5:82:c7:55:89:c3:9f:af:d5:4e: 87:73:9d:a1:25:c2:ef:d3:42:63:6d:f6:cf:07:12:d0:85:70: b3:2b:22:ff:d8:e7:36:44:fa:38:69:1d:1c:dc:b5:29:ce:dd: a0:d7:07:43:27:90:bd:9a:21:3f:72:36:69:88:a0:04:40:b5: 9a:7b:a7:91:b5:c7:56:64:67:98:bc:4d:29:d9:ab:73:3b:a5: bc:1f:2e:de:ab:c4:e3:37:93:42:50:c4:10:8a:4b:1b:54:a8: c7:03:f7:c0:f9:07:8b:c3:59:c8:1b:6e:3d:67:17:43:89:8b: 0f:68:54:cc:98:d5:d1:5a:98:8c:6a:51:56:39:ae:90:ae:11: 50:e2:32:de:1f:e6:2b:42:f3:86:68:f0:6a:02:4c:87:d8:b9: 2d:2b:f2:88:7b:bf:84:70:05:f7:45:84:8a:ab:1d:2e:6a:d5: cf:4a:d2:c7:eb:ea:67:a5:28:dd:28:61:73:b7:8a:ba:2e:03: ed:77:ff:92:30:ed:cb:9e:2e:de:3c:42:ad:9b:f4:96:e2:c4: eb:09:ce:ae:a1:78:01:99:85:2b:45:6f:88:94:9b:55:de:ce: 16:1f:9d:5f:a3:06:3d:ab:73:35:c2:b7:00:1c:d6:dc:3a:9b: ca:d8:bf:e9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjUwNzI0MTQ1MDI2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgyNDgzMi03MDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPUiHjb48UoZ+YW2vyx7ACKxMe6Fwd7oM5a6y6TbA1O5LXSMxtnXmX9xE5Pd WwT4dsKr3g7u5sLPsWWtLEieboWV6UEKclsCBOKefxy1cS261RH/XHKD4kYvZmps +mYV/cL271mx8w66LteKiCKW3dRsPpxvy46hhqEqs0RVOIEAbyeLONQiyNPfBQ1E ubrshA67aRq3AqBTaBVIuiDsrNz9S7RB0nyRyPUCtVYFm2nB3YPHf+ygAAp3oiDf JxSz2xfToQIDjdH4+JVd8qyQQvHa6MG8ycUIJzGYGi2kNE/tV0KbUoxhZB04x+1S w3gO/VhHA6diDO4YwGIqXDjqXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNbgwoJQ Fk1xK7RCWNYItWBcXQE3MB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNEQyMUZCMzZG N0RCMTFFRTkyRDFFMTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLmy8wDQYJKoZIhvcNAQELBQADggEBAITgx/WHlBzA1YLH VYnDn6/VTodznaElwu/TQmNt9s8HEtCFcLMrIv/Y5zZE+jhpHRzctSnO3aDXB0Mn kL2aIT9yNmmIoARAtZp7p5G1x1ZkZ5i8TSnZq3M7pbwfLt6rxOM3k0JQxBCKSxtU qMcD98D5B4vDWcgbbj1nF0OJiw9oVMyY1dFamIxqUVY5rpCuEVDiMt4f5itC84Zo 8GoCTIfYuS0r8oh7v4RwBfdFhIqrHS5q1c9K0sfr6melKN0oYXO3irouA+13/5Iw 7cueLt48Qq2b9JbixOsJzq6heAGZhStFb4iUm1XezhYfnV+jBj2rczXCtwAc1tw6 m8rYv+k= -----END CERTIFICATE-----Generated at Mon Aug 11 04:09:51 2025 by rpki-client