$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/947AB09E459C11F0BF881335C4F9AE02.roa File: 947AB09E459C11F0BF881335C4F9AE02.roa (raw, json) Hash identifier: ZL0Aa2llI8aydVHlIy2x+gVqsBcKLbop2xFjrlC+Qtw= Subject key identifier: 6A:56:D4:D5:99:74:B3:D1:AB:6B:52:CF:D0:26:FE:26:4E:44:B2:D5 Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: 22 Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/947AB09E459C11F0BF881335C4F9AE02.roa Signing time: Tue 10 Jun 2025 01:45:26 +0000 ROA not before: Tue 10 Jun 2025 01:45:26 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 7543 IP address blocks: 202.47.192.0/24 maxlen: 24 202.47.195.0/24 maxlen: 24 202.47.196.0/24 maxlen: 24 202.47.201.0/24 maxlen: 24 202.47.202.0/24 maxlen: 24 202.47.203.0/24 maxlen: 24 210.57.8.0/22 maxlen: 24 210.176.128.0/24 maxlen: 24 210.176.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Jun 10 01:45:26 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=68478e35-84f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:73:18:d9:c3:01:fd:1e:76:0d:35:f7:aa: 33:77:09:4b:e6:33:33:a8:3d:c6:14:68:ee:f6:d8: 20:2d:50:d2:c7:f1:b0:c9:73:ef:5e:e2:86:b3:c0: cc:1e:4b:a8:87:51:e7:ca:58:cb:d8:5a:dd:a3:61: 2c:5e:a2:06:26:e6:26:a0:8d:f4:39:c9:fc:3d:72: 44:d4:1c:71:97:2a:2d:a2:13:67:73:20:f5:4e:12: ba:25:e6:bc:60:12:eb:7d:4c:b3:09:d4:ed:89:36: 3c:e6:fb:0a:cc:ab:f2:80:91:6e:0f:6f:98:17:63: 73:a6:09:27:b7:f0:39:cc:8c:ba:74:e2:0d:45:ab: 75:00:16:0f:d8:fc:16:fd:55:08:f2:be:3f:d9:ed: ff:22:e1:4b:e3:99:04:95:d0:c6:f2:b9:2c:0c:21: f0:2d:45:34:85:c1:93:48:f5:2a:2e:db:fd:38:bf: 4a:66:b0:47:df:3a:f1:b7:d6:82:73:ac:2d:21:4b: f6:a8:c0:4f:68:8c:1b:62:be:23:1c:1b:9d:d3:ac: dd:66:ef:f4:d2:e7:47:4b:ae:c6:69:9a:28:97:b0: 19:40:9f:51:81:b4:7d:06:57:ba:7c:c7:b2:8d:c8: 7f:9a:71:2c:2d:de:1f:83:ea:9a:69:cb:e5:0c:cf: 16:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:56:D4:D5:99:74:B3:D1:AB:6B:52:CF:D0:26:FE:26:4E:44:B2:D5 X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/947AB09E459C11F0BF881335C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.47.192.0/24 202.47.195.0-202.47.196.255 202.47.201.0-202.47.203.255 210.57.8.0/22 210.176.128.0/24 210.176.142.0/24 Signature Algorithm: sha256WithRSAEncryption b5:cf:bb:a1:c8:52:8e:7e:15:94:2d:63:d3:14:08:d1:4c:d4: 3a:85:da:a4:91:f9:a1:74:20:5d:ee:fd:76:23:16:57:bc:7f: 02:84:b1:d7:29:cb:4f:f6:69:50:92:b7:98:8b:19:39:0a:4b: 1a:46:63:38:37:ad:b1:35:28:45:6c:f8:a3:7a:fd:64:90:bf: 19:03:75:31:0f:69:3e:a4:a8:63:18:39:be:60:df:84:21:77: 7e:d6:ef:e9:19:b0:59:51:c7:3d:20:85:df:30:28:ad:e8:20: 3a:bc:13:1e:1a:69:bf:ca:f4:17:6f:52:64:ac:94:ea:3e:9b: 58:88:0c:df:34:d4:c2:57:57:40:49:1f:45:f2:6b:3d:11:19: a4:2d:71:7c:07:2c:d8:13:13:0d:ff:37:e7:08:9d:5c:dd:66: c6:cf:17:d6:b0:65:aa:4b:38:11:09:11:e2:9a:2b:24:13:08: 0a:6d:d3:52:f8:1c:c1:2c:c0:ae:1d:61:d3:51:cb:c6:58:e3: 3d:26:57:69:b0:19:b8:27:14:0b:c6:0b:2f:68:5e:3e:21:5e: 0c:3f:fa:25:5e:8f:3c:88:a9:f4:c0:b3:3b:96:a7:6a:d5:83: 31:91:ce:7e:5c:80:61:86:10:50:ce:50:96:23:fa:39:81:15: 69:36:3a:ac -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNCQjExMC8GA1UEBRMoRkMyNEY1MzkwNzQ3ODdFQ0VBQjAwQzI0MjYwNkMyQkQ2 ODgxOUEwRDAeFw0yNTA2MTAwMTQ1MjZaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NDc4ZTM1LTg0ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3H3MY2cMB/R52DTX3qjN3CUvmMzOoPcYUaO722CAtUNLH8bDJc+9e4oazwMwe S6iHUefKWMvYWt2jYSxeogYm5iagjfQ5yfw9ckTUHHGXKi2iE2dzIPVOErol5rxg Eut9TLMJ1O2JNjzm+wrMq/KAkW4Pb5gXY3OmCSe38DnMjLp04g1Fq3UAFg/Y/Bb9 VQjyvj/Z7f8i4UvjmQSV0MbyuSwMIfAtRTSFwZNI9Sou2/04v0pmsEffOvG31oJz rC0hS/aowE9ojBtiviMcG53TrN1m7/TS50dLrsZpmiiXsBlAn1GBtH0GV7p8x7KN yH+acSwt3h+D6pppy+UMzxatAgMBAAGjggLDMIICvzAdBgNVHQ4EFgQUalbU1Zl0 s9Gra1LP0Cb+Jk5EstUwHwYDVR0jBBgwFoAU/CT1OQdHh+zqsAwkJgbCvWiBmg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0JCL0Q1M0JEMTQ2MTVC MTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1n MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0NUMU9RZEhoLXpxc0F3a0pnYkN2V2lCbWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNCQi9ENTNCRDE0NjE1QjExMUYwQTI3NzRBMDlDNEY5QUUwMi85NDdBQjA5RTQ1 OUMxMUYwQkY4ODEzMzVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBNBggrBgEFBQcBBwEB/wQ+ MDwwOgQCAAEwNAMEAMovwDAMAwQAyi/DAwQAyi/EMAwDBADKL8kDBALKL8gDBALS OQgDBADSsIADBADSsI4wDQYJKoZIhvcNAQELBQADggEBALXPu6HIUo5+FZQtY9MU CNFM1DqF2qSR+aF0IF3u/XYjFle8fwKEsdcpy0/2aVCSt5iLGTkKSxpGYzg3rbE1 KEVs+KN6/WSQvxkDdTEPaT6kqGMYOb5g34Qhd37W7+kZsFlRxz0ghd8wKK3oIDq8 Ex4aab/K9BdvUmSslOo+m1iIDN801MJXV0BJH0Xyaz0RGaQtcXwHLNgTEw3/N+cI nVzdZsbPF9awZapLOBEJEeKaKyQTCApt01L4HMEswK4dYdNRy8ZY4z0mV2mwGbgn FAvGCy9oXj4hXgw/+iVejzyIqfTAszuWp2rVgzGRzn5cgGGGEFDOUJYj+jmBFWk2 Oqw= -----END CERTIFICATE-----Generated at Wed Nov 5 13:33:37 2025 by rpki-client