$ rpki-client -vvf rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa File: 6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa (raw, json) Hash identifier: qBQp3vvSD9elb8dQbwCPuGirBXWWVwR3GT0tS3LqEZA= Subject key identifier: 4E:E0:13:D5:09:BF:20:E0:D7:7E:D5:73:28:25:F5:BE:E7:BB:17:0C Certificate issuer: /CN=A91754C0/serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4 Certificate serial: D1 Authority key identifier: D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa Signing time: Fri 21 Mar 2025 05:11:27 +0000 ROA not before: Fri 21 Mar 2025 05:11:27 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152481 IP address blocks: 157.20.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91754C0, serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4 Validity Not Before: Mar 21 05:11:27 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67dcf4fe-e6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8b:95:5f:f9:ad:2b:f8:05:ec:d6:23:1a:cf: ce:e7:bb:1b:0f:94:15:53:6a:b3:9e:53:35:8a:be: 4f:7a:e7:db:0d:42:2b:55:7a:33:2a:8b:a1:bb:61: ab:bc:27:b3:5e:1e:32:f5:fe:47:c9:3c:06:68:10: de:d6:53:04:33:7d:4d:c9:2a:f8:42:ce:47:9d:73: 42:30:4b:9b:79:d8:b3:e3:f9:bc:59:08:5e:a8:52: 86:bc:9f:90:91:b3:5e:7e:89:69:0b:32:01:78:3d: da:61:10:b9:8d:01:c0:25:4e:37:30:3b:d0:c0:8f: 58:1a:b9:ac:b0:32:9f:33:f6:24:96:ab:1b:d9:a4: b1:93:97:80:9e:24:5b:41:ac:82:ec:e6:e9:a0:4b: e8:0a:de:7e:db:c3:b0:b0:23:00:09:6b:3a:48:27: 7d:ee:a9:4e:07:85:9d:04:37:a6:dc:e2:f2:f7:5d: ea:bb:06:73:a9:9b:28:45:12:af:65:a2:f8:29:85: 3d:41:ec:05:ad:f8:81:d0:13:5c:df:56:67:06:eb: b7:b0:c9:8b:47:86:e7:87:15:3d:f9:8c:2a:f9:c9: d5:eb:82:6a:ca:e1:a9:a6:1a:eb:48:a2:12:ea:21: fb:07:20:e0:27:d8:01:23:a6:e0:88:c5:c9:dd:cd: bc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E0:13:D5:09:BF:20:E0:D7:7E:D5:73:28:25:F5:BE:E7:BB:17:0C X509v3 Authority Key Identifier: keyid:D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.56.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:e6:0c:b2:be:db:0b:52:7f:f1:25:a5:8a:11:39:a2:f4:48: 15:de:10:8d:54:bf:4d:ce:c7:50:c9:e7:37:3e:7e:34:7a:cc: 29:bc:a4:51:9a:9a:6e:2c:14:ff:2d:2f:ce:40:5a:3a:df:85: 75:2b:6c:c7:fb:f6:da:33:40:7f:5e:d5:dd:45:fc:6b:07:56: e3:0e:4f:f0:aa:c0:c1:15:63:78:1f:46:a4:e5:39:c6:47:93: 10:13:49:73:70:e5:bb:98:c2:f3:6c:7b:e1:bc:74:56:9f:18: b5:5f:61:bd:93:04:20:81:4d:cd:d9:6c:7f:05:b8:b7:b1:c4: 95:77:58:e4:d1:d5:67:71:d8:02:49:89:f0:fb:15:c6:75:c9: 6a:ed:e0:9d:c9:5c:47:1e:d1:a8:e2:85:4e:53:ca:2c:72:8a: e3:65:0a:3f:b8:5a:94:3a:1d:ad:8f:5c:ed:32:9a:c7:8d:20: 89:e5:86:43:8d:68:61:ca:cf:db:47:1d:0e:49:41:e6:ca:b1: 92:50:94:fa:08:7e:78:aa:34:08:4a:1e:09:b3:50:14:60:d8: 12:3b:f4:77:3f:b7:4c:24:ba:aa:c5:8d:c6:0f:ec:6f:16:3a: bd:f1:d6:80:3d:6e:67:e4:de:11:97:35:0a:94:17:74:c5:d1: 62:3e:e6:1e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0QzAxMTAvBgNVBAUTKEQwRjhCMDA2NTk2QzdDMDM3Q0I1NDkzMDVCMzk2OTAw MDBBQUU4QTQwHhcNMjUwMzIxMDUxMTI3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RjZjRmZS1lNmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYuVX/mtK/gF7NYjGs/O57sbD5QVU2qznlM1ir5PeufbDUIrVXozKouhu2Gr vCezXh4y9f5HyTwGaBDe1lMEM31NySr4Qs5HnXNCMEubediz4/m8WQheqFKGvJ+Q kbNefolpCzIBeD3aYRC5jQHAJU43MDvQwI9YGrmssDKfM/Yklqsb2aSxk5eAniRb QayC7ObpoEvoCt5+28OwsCMACWs6SCd97qlOB4WdBDem3OLy913quwZzqZsoRRKv ZaL4KYU9QewFrfiB0BNc31ZnBuu3sMmLR4bnhxU9+Ywq+cnV64JqyuGpphrrSKIS 6iH7ByDgJ9gBI6bgiMXJ3c28zQIDAQABo4IClTCCApEwHQYDVR0OBBYEFE7gE9UJ vyDg137Vcygl9b7nuxcMMB8GA1UdIwQYMBaAFND4sAZZbHwDfLVJMFs5aQAAquik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTRDMC9GRURGNTcyRUND QkIxMUVFOEEwRjc3NDhDNEY5QUUwMi8wUGl3Qmxsc2ZBTjh0VWt3V3pscEFBQ3E2 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBQaXdCbGxzZkFOOHRVa3dXemxwQUFDcTZLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU0QzAvRkVERjU3MkVDQ0JCMTFFRThBMEY3NzQ4QzRGOUFFMDIvNkJBM0ZFQTRD Q0JEMTFFRUJBRERGQzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACdFDgwDQYJKoZIhvcNAQELBQADggEBAGvmDLK+2wtSf/El pYoROaL0SBXeEI1Uv03Ox1DJ5zc+fjR6zCm8pFGamm4sFP8tL85AWjrfhXUrbMf7 9tozQH9e1d1F/GsHVuMOT/CqwMEVY3gfRqTlOcZHkxATSXNw5buYwvNse+G8dFaf GLVfYb2TBCCBTc3ZbH8FuLexxJV3WOTR1Wdx2AJJifD7FcZ1yWrt4J3JXEce0aji hU5TyixyiuNlCj+4WpQ6Ha2PXO0ymseNIInlhkONaGHKz9tHHQ5JQebKsZJQlPoI fniqNAhKHgmzUBRg2BI79Hc/t0wkuqrFjcYP7G8WOr3x1oA9bmfk3hGXNQqUF3TF 0WI+5h4= -----END CERTIFICATE-----Generated at Wed Nov 5 18:19:29 2025 by rpki-client