$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa File: 4034878C531411F0B5969F4DC4F9AE02.roa (raw, json) Hash identifier: MTnkpsJbkcK1viFplq5fY1GvpgMvuAacCfa5pSMUU+M= Subject key identifier: 57:A7:DC:A5:3A:6F:B5:7A:F2:29:83:C0:76:E6:8A:DF:EE:05:57:1B Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 010C Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa Signing time: Sat 09 Aug 2025 05:42:45 +0000 ROA not before: Sat 09 Aug 2025 05:42:45 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 9734 IP address blocks: 203.20.114.0/24 maxlen: 24 2001:df3:b540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Aug 9 05:42:45 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6896dfd5-aad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0d:5c:85:6e:e1:e4:35:19:bb:40:3f:d1:95: 6a:82:b5:cd:83:42:90:6a:8a:14:19:d2:b5:2c:ca: 4c:12:91:fa:88:af:84:51:8c:e9:73:b6:01:6c:56: 00:ac:28:07:8f:17:34:25:93:37:52:63:9c:97:ab: e1:ae:b1:a9:4b:03:23:13:01:a1:6b:4a:51:e8:38: 01:c2:55:46:ff:fd:9b:af:1a:17:02:9e:41:93:fd: 44:1b:32:ac:94:68:1d:c5:6a:8b:42:91:ce:46:8a: ac:f3:fe:05:96:41:90:c1:0c:fc:88:78:05:bb:07: d2:ea:70:7e:e1:5a:8d:79:4f:a9:b5:1a:31:67:30: 7d:8e:d2:67:e6:79:7f:cf:af:ec:e5:19:b4:54:86: 65:7e:7d:df:13:28:68:1c:35:18:1e:79:ae:5b:f1: c7:b0:64:52:2a:40:2a:62:e1:5d:72:5a:2a:9a:22: 2f:9e:e6:17:2d:a7:99:3b:2f:09:aa:da:1d:f3:9d: 5d:22:9e:52:a8:ea:1e:a8:ad:e7:de:fd:72:1a:c2: 11:5d:fe:43:d6:6c:99:a7:da:0c:d9:3d:e3:fa:46: e9:25:44:23:b3:1f:6d:e3:0d:4a:44:a9:e1:06:09: b0:1b:41:1e:21:79:6f:92:21:4e:01:ba:16:97:ba: 28:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A7:DC:A5:3A:6F:B5:7A:F2:29:83:C0:76:E6:8A:DF:EE:05:57:1B X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.114.0/24 IPv6: 2001:df3:b540::/48 Signature Algorithm: sha256WithRSAEncryption 3d:f4:fd:a8:2f:03:f9:e8:b2:bb:e1:0b:b5:32:91:d5:c5:b6: 3a:f6:a6:b6:84:8e:42:de:11:4b:c9:7a:7c:6d:c9:d8:ca:67: 3b:f2:47:a2:54:00:75:12:38:ee:51:97:9e:1e:fe:08:37:d3: 06:7c:32:2e:8d:fa:11:75:9e:ef:f9:ba:0a:dc:db:a6:42:e9: 5d:ab:a8:a9:04:2a:b4:44:a7:84:b4:de:a0:a5:93:31:3c:29: 96:38:2d:8d:ba:39:9d:bf:0a:2e:37:88:fb:20:6c:59:32:c8: 73:c1:93:f8:bd:3f:19:f0:5c:f3:b4:5e:b5:73:f0:65:22:26: f5:26:d1:1c:3f:50:44:b6:a7:46:48:b4:bf:5a:a3:a9:e5:11: 3f:de:83:9d:da:f5:28:6d:e6:b4:9d:d5:59:1c:b3:8f:21:4c: a9:19:2d:a6:51:f2:45:78:83:96:ac:b9:ab:ba:a5:eb:01:dd: 63:e0:79:ba:af:ed:f2:c0:79:0a:03:71:53:25:ea:28:0f:34: db:ae:d8:4a:41:cb:2d:16:d5:be:cc:39:d6:73:e9:bf:c9:6b: c3:1c:60:e1:6b:9f:9a:37:f7:ae:01:a9:b3:60:14:f2:ac:c2: c3:7c:81:4c:47:cc:bb:74:9a:9f:c6:a7:3c:c3:34:85:23:8f: df:18:6a:9a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjUwODA5MDU0MjQ1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk2ZGZkNS1hYWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqg1chW7h5DUZu0A/0ZVqgrXNg0KQaooUGdK1LMpMEpH6iK+EUYzpc7YBbFYA rCgHjxc0JZM3UmOcl6vhrrGpSwMjEwGha0pR6DgBwlVG//2brxoXAp5Bk/1EGzKs lGgdxWqLQpHORoqs8/4FlkGQwQz8iHgFuwfS6nB+4VqNeU+ptRoxZzB9jtJn5nl/ z6/s5Rm0VIZlfn3fEyhoHDUYHnmuW/HHsGRSKkAqYuFdcloqmiIvnuYXLaeZOy8J qtod851dIp5SqOoeqK3n3v1yGsIRXf5D1myZp9oM2T3j+kbpJUQjsx9t4w1KRKnh BgmwG0EeIXlvkiFOAboWl7ooFQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFen3KU6 b7V68imDwHbmit/uBVcbMB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU0RkUvRDYxMTdERjZGNkU5MTFFRUFEQkZGQjUyQzRGOUFFMDIvNDAzNDg3OEM1 MzE0MTFGMEI1OTY5RjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADLFHIwDwQCAAIwCQMHACABDfO1QDANBgkqhkiG9w0BAQsF AAOCAQEAPfT9qC8D+eiyu+ELtTKR1cW2OvamtoSOQt4RS8l6fG3J2MpnO/JHolQA dRI47lGXnh7+CDfTBnwyLo36EXWe7/m6CtzbpkLpXauoqQQqtESnhLTeoKWTMTwp ljgtjbo5nb8KLjeI+yBsWTLIc8GT+L0/GfBc87RetXPwZSIm9SbRHD9QRLanRki0 v1qjqeURP96Dndr1KG3mtJ3VWRyzjyFMqRktplHyRXiDlqy5q7ql6wHdY+B5uq/t 8sB5CgNxUyXqKA80267YSkHLLRbVvsw51nPpv8lrwxxg4Wufmjf3rgGps2AU8qzC w3yBTEfMu3San8anPMM0hSOP3xhqmg== -----END CERTIFICATE-----Generated at Mon Aug 11 04:17:37 2025 by rpki-client