$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/41E32C9852E411EC9E19AA2FC4F9AE02.roa File: 41E32C9852E411EC9E19AA2FC4F9AE02.roa (raw, json) Hash identifier: i1mD+r6XwMu6On3/bUlN+PaLdP6khHenZ0Z0HUab9AI= Subject key identifier: 5A:53:AD:69:BE:2C:3E:4A:CC:91:69:8B:7C:E0:E7:08:A1:B1:B8:45 Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Certificate serial: 04B0 Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/41E32C9852E411EC9E19AA2FC4F9AE02.roa Signing time: Sat 19 Jul 2025 00:37:24 +0000 ROA not before: Sat 19 Jul 2025 00:37:24 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 16509 IP address blocks: 202.92.192.0/24 maxlen: 24 202.92.193.0/24 maxlen: 24 202.92.196.0/24 maxlen: 24 202.92.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1200 (0x4b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Validity Not Before: Jul 19 00:37:24 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=687ae8c4-a5bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:63:bd:47:b9:12:5e:ab:14:1e:05:30:36: 5c:b5:32:78:8e:04:f1:bf:c3:4c:0c:ae:8b:2f:bc: f9:ce:30:93:3b:c0:19:4d:38:df:a0:f4:53:4d:40: d3:18:c9:1b:0b:ae:fe:67:bb:03:d8:88:b6:66:f1: 78:77:be:26:0e:2a:f1:47:17:b6:97:7e:2a:0d:75: ca:bc:68:18:95:12:52:6f:5b:d9:59:9b:71:8f:19: 71:97:9c:a1:69:3f:fe:60:0c:9e:e5:a2:56:93:58: 19:ca:87:a7:71:ae:c4:26:dd:b6:27:72:d9:b5:b1: 9b:4a:e7:ac:3f:c0:a6:f9:dd:5a:75:f6:53:cc:61: f2:fc:b6:f1:93:4b:9b:9a:1f:61:7a:d9:6b:3b:a5: 3c:ba:04:91:3a:aa:88:b5:42:b1:16:bf:23:1a:a5: c3:7e:46:47:a7:c1:d9:25:e4:45:12:8a:ca:ef:6b: 48:51:57:e9:79:21:12:d3:d5:b8:70:e4:c1:93:20: 67:f9:16:98:1e:88:77:dc:23:a8:af:52:bb:74:4f: cc:35:c4:e1:67:5f:94:70:e0:dd:1f:bb:9c:b5:ab: 36:23:80:a4:f3:74:e1:3e:fa:d5:90:b0:b5:8d:34: 7e:ae:0a:02:32:f9:9c:2e:a0:43:1c:f1:6b:49:56: e3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:53:AD:69:BE:2C:3E:4A:CC:91:69:8B:7C:E0:E7:08:A1:B1:B8:45 X509v3 Authority Key Identifier: keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/41E32C9852E411EC9E19AA2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.92.192.0/23 202.92.196.0/23 Signature Algorithm: sha256WithRSAEncryption a6:db:61:ee:4b:55:17:70:63:37:76:18:b7:59:64:53:9c:d8: 7c:e9:e3:22:34:4d:6b:7d:93:ba:c3:bd:21:b4:89:c2:64:ae: ae:17:8c:01:ed:36:58:69:b7:00:bd:fe:72:74:a4:4e:48:56: 89:63:58:7b:41:86:5a:5a:df:c8:1a:c0:48:71:af:7b:67:46: 41:1d:f1:e1:e5:52:c5:51:cd:25:8e:26:5e:1d:a3:03:50:92: 9e:1d:37:dd:5a:69:49:cf:66:f7:bb:24:43:88:94:3f:f3:58: d4:09:6f:c2:95:ad:00:44:05:1b:21:fa:67:79:33:1d:75:0b: 78:f8:a2:08:74:b5:30:fa:d8:57:99:1e:75:0b:17:b4:a2:75: c0:6f:8d:28:4d:b0:e7:4a:a3:53:e9:6e:cd:62:30:3a:ea:56: 49:60:70:80:3e:ab:fc:69:a5:5d:45:78:a6:6b:ae:bc:79:b4: df:22:5d:02:46:1d:c7:24:f3:d3:2d:a8:7b:96:13:40:4b:20: 47:c2:d7:a6:dd:6f:cc:58:dc:f5:d1:19:af:ea:06:78:a5:b8: 2b:48:70:b2:c9:d7:f0:7d:00:e7:0d:18:10:31:30:7f:08:b3: 30:05:39:63:96:2c:ee:db:12:be:24:17:d5:25:6f:2f:f2:b4: b7:ae:86:6f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNDRkYxMTAvBgNVBAUTKDA4MDM2NjJDNTcxMzI1NzI4RjI0RkFBRDhDQjFBNUYx OTAwNzE1RUQwHhcNMjUwNzE5MDAzNzI0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdhZThjNC1hNWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvxjvUe5El6rFB4FMDZctTJ4jgTxv8NMDK6LL7z5zjCTO8AZTTjfoPRTTUDT GMkbC67+Z7sD2Ii2ZvF4d74mDirxRxe2l34qDXXKvGgYlRJSb1vZWZtxjxlxl5yh aT/+YAye5aJWk1gZyoenca7EJt22J3LZtbGbSuesP8Cm+d1adfZTzGHy/Lbxk0ub mh9hetlrO6U8ugSROqqItUKxFr8jGqXDfkZHp8HZJeRFEorK72tIUVfpeSES09W4 cOTBkyBn+RaYHoh33COor1K7dE/MNcThZ1+UcODdH7uctas2I4Ck83ThPvrVkLC1 jTR+rgoCMvmcLqBDHPFrSVbjiQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFpTrWm+ LD5KzJFpi3zg5wihsbhFMB8GA1UdIwQYMBaAFAgDZixXEyVyjyT6rYyxpfGQBxXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0NGRi85QTVFQzE2QzQ2 RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpYS1BKUHF0akxHbDhaQUhG ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBTm1MRmNUSlhLUEpQcXRqTEdsOFpBSEZlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkNDRkYvOUE1RUMxNkM0NkZFMTFFQzk0RTNEMjRBQzRGOUFFMDIvNDFFMzJDOTg1 MkU0MTFFQzlFMTlBQTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAHKXMADBAHKXMQwDQYJKoZIhvcNAQELBQADggEBAKbbYe5L VRdwYzd2GLdZZFOc2Hzp4yI0TWt9k7rDvSG0icJkrq4XjAHtNlhptwC9/nJ0pE5I VoljWHtBhlpa38gawEhxr3tnRkEd8eHlUsVRzSWOJl4dowNQkp4dN91aaUnPZve7 JEOIlD/zWNQJb8KVrQBEBRsh+md5Mx11C3j4ogh0tTD62FeZHnULF7SidcBvjShN sOdKo1Ppbs1iMDrqVklgcIA+q/xppV1FeKZrrrx5tN8iXQJGHcck89MtqHuWE0BL IEfC16bdb8xY3PXRGa/qBniluCtIcLLJ1/B9AOcNGBAxMH8IszAFOWOWLO7bEr4k F9Ulby/ytLeuhm8= -----END CERTIFICATE-----Generated at Fri Aug 8 19:21:39 2025 by rpki-client