$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/FCD162AE508511EEBA4C0E2BC4F9AE02.roa File: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (raw, json) Hash identifier: 1HOv65dUJu9o7mPWP7pn54wayqG8zRXC99rSkS0sL90= Subject key identifier: 96:EA:27:12:6D:B2:57:5A:CA:6E:A9:10:98:36:A1:46:39:F2:39:9F Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Certificate serial: 0167 Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/FCD162AE508511EEBA4C0E2BC4F9AE02.roa Signing time: Thu 31 Jul 2025 04:42:00 +0000 ROA not before: Thu 31 Jul 2025 04:42:00 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 32613 IP address blocks: 203.167.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Validity Not Before: Jul 31 04:42:00 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688af417-75ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:96:3e:47:c2:46:ce:dc:09:9b:d5:d6:5f:75: c4:65:d5:9f:3d:80:ea:bd:9f:1f:20:27:6e:77:9a: a6:76:0c:ca:20:1a:1b:53:a5:3c:1b:45:9e:4f:37: ff:d8:3c:98:50:88:46:7c:07:01:4b:14:9a:ad:57: be:b4:81:96:ae:79:9b:d8:a9:7f:13:21:b6:a1:ec: dc:10:ff:0d:5b:de:69:9e:aa:34:a9:a5:87:16:a0: 3a:88:8a:ea:c3:5f:30:90:b9:fd:3b:8e:97:bb:69: 7d:28:8b:37:86:cc:e7:0b:b7:39:73:a7:21:64:05: 7f:73:26:b1:c6:ab:17:1f:69:66:2b:47:9d:31:2f: 93:69:af:bf:fa:b9:d6:fb:f7:00:94:55:86:ee:54: 8e:fa:a9:2f:27:41:de:55:b8:2f:ab:05:13:91:53: 13:e2:dd:f7:c0:01:56:f5:c5:c9:0c:94:70:e0:70: 46:6e:79:c9:15:b9:6c:2c:cb:5a:e1:d5:b4:28:10: 44:a5:1d:04:79:65:bd:cd:34:7b:9a:b8:04:5b:da: 22:78:da:5a:ca:1e:26:58:27:90:f2:6e:5e:77:54: 95:52:c0:98:f8:83:c1:df:25:f1:9b:70:83:f6:b9: 3e:25:71:6d:23:12:62:2a:dd:ba:f0:54:06:fe:35: d7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EA:27:12:6D:B2:57:5A:CA:6E:A9:10:98:36:A1:46:39:F2:39:9F X509v3 Authority Key Identifier: keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/FCD162AE508511EEBA4C0E2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.167.7.0/24 Signature Algorithm: sha256WithRSAEncryption bf:92:42:38:85:28:83:ad:44:59:77:19:d4:e7:63:0d:aa:9b: 54:a9:55:ee:ff:8c:81:33:15:53:c3:8b:63:c4:61:ce:26:a0: 14:2b:05:74:43:20:6c:7e:cd:ac:54:43:71:fd:9f:7a:1d:75: de:ff:33:1f:2f:d3:07:2e:fd:94:05:a4:ec:77:e9:48:ac:80: 26:3f:f2:6b:91:1d:a2:86:0d:0c:12:74:fb:db:2b:97:0b:2d: 95:57:67:08:70:b2:73:1d:4a:96:63:fe:7d:b8:7d:36:86:fb: d7:a0:aa:8b:f9:82:c6:a6:ad:09:a9:1e:58:75:86:b8:81:0a: 0e:91:2f:9c:a8:b9:b9:23:fe:94:0f:34:47:52:92:f8:44:ec: 8a:7a:69:1b:5a:13:fe:b1:6a:ce:bc:6c:77:ab:c4:ed:ce:f6: 1a:be:52:34:12:00:52:ce:e0:d5:17:36:62:e2:97:1e:57:c4: b9:0b:ed:1d:b1:c6:c4:87:69:49:50:b8:14:09:ca:44:1c:58: 32:e0:fd:be:fd:c5:3c:5a:ca:fd:9f:b7:7a:8d:f6:17:7c:d9: 52:9e:16:47:1e:fc:e2:3a:a2:b5:b3:e5:44:06:d0:b7:ea:c7: 88:d9:f2:7b:79:01:f2:f3:8e:68:ea:23:ec:dc:bb:8f:58:2c: 10:b4:41:24 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIyNjUxMTAvBgNVBAUTKEJCRUMyMTBFNzUyOUZEMzk3RjEzMzhGRkFDMURERDc4 M0MwRkFBMzIwHhcNMjUwNzMxMDQ0MjAwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhZjQxNy03NWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9JY+R8JGztwJm9XWX3XEZdWfPYDqvZ8fICdud5qmdgzKIBobU6U8G0WeTzf/ 2DyYUIhGfAcBSxSarVe+tIGWrnmb2Kl/EyG2oezcEP8NW95pnqo0qaWHFqA6iIrq w18wkLn9O46Xu2l9KIs3hsznC7c5c6chZAV/cyaxxqsXH2lmK0edMS+Taa+/+rnW +/cAlFWG7lSO+qkvJ0HeVbgvqwUTkVMT4t33wAFW9cXJDJRw4HBGbnnJFblsLMta 4dW0KBBEpR0EeWW9zTR7mrgEW9oieNpayh4mWCeQ8m5ed1SVUsCY+IPB3yXxm3CD 9rk+JXFtIxJiKt268FQG/jXXZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJbqJxJt sldaym6pEJg2oUY58jmfMB8GA1UdIwQYMBaAFLvsIQ51Kf05fxM4/6wd3Xg8D6oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjI2NS85QTY2QUFERTUw ODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9UbF9FempfckIzZGVEd1Bx akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Utd2hEblVwX1RsX0V6al9yQjNkZUR3UHFqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTIyNjUvOUE2NkFBREU1MDg1MTFFRUJBM0VGQzExQzRGOUFFMDIvRkNEMTYyQUU1 MDg1MTFFRUJBNEMwRTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLpwcwDQYJKoZIhvcNAQELBQADggEBAL+SQjiFKIOtRFl3 GdTnYw2qm1SpVe7/jIEzFVPDi2PEYc4moBQrBXRDIGx+zaxUQ3H9n3oddd7/Mx8v 0wcu/ZQFpOx36UisgCY/8muRHaKGDQwSdPvbK5cLLZVXZwhwsnMdSpZj/n24fTaG +9egqov5gsamrQmpHlh1hriBCg6RL5youbkj/pQPNEdSkvhE7Ip6aRtaE/6xas68 bHerxO3O9hq+UjQSAFLO4NUXNmLilx5XxLkL7R2xxsSHaUlQuBQJykQcWDLg/b79 xTxayv2ft3qN9hd82VKeFkce/OI6orWz5UQG0Lfqx4jZ8nt5AfLzjmjqI+zcu49Y LBC0QSQ= -----END CERTIFICATE-----Generated at Wed Aug 6 12:36:01 2025 by rpki-client