$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/B512A570109211ECA693D74EC4F9AE02.roa File: B512A570109211ECA693D74EC4F9AE02.roa (raw, json) Hash identifier: x6M8DR+ao43yWMJcYfflaCD3HANg4LUaSOgGurV26Rc= Subject key identifier: 84:1F:E0:F2:3A:8E:0B:31:B2:B9:4F:1B:01:FA:FD:32:13:BE:99:38 Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 081A Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/B512A570109211ECA693D74EC4F9AE02.roa Signing time: Tue 02 Sep 2025 21:42:11 +0000 ROA not before: Tue 02 Sep 2025 21:42:11 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 15347 IP address blocks: 221.132.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2074 (0x81a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Validity Not Before: Sep 2 21:42:11 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b764b3-034b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:7e:5a:25:23:2d:8f:79:a8:ec:fc:46:6c: 3e:81:ca:6f:f5:ec:5c:1c:20:8a:13:d4:31:7a:e8: 47:2a:99:0e:45:78:dc:f7:28:ab:c9:6c:64:44:e1: 07:b6:26:45:4c:7f:b5:38:3e:ca:6e:54:84:0a:d8: e4:ac:b8:cc:86:3b:3a:43:57:c3:46:d5:88:93:3b: 93:28:22:4c:2f:a6:76:60:10:17:34:f3:aa:29:30: dc:a4:88:b9:09:4a:71:86:df:8a:ab:79:e1:06:96: 4c:d0:db:09:c0:62:a3:60:60:97:a3:ac:56:7e:a2: ca:3a:ce:5b:b2:1a:94:f0:cd:5d:fa:95:94:88:fb: 4d:fa:1b:29:f5:b0:26:fa:2c:33:4e:b3:f8:b9:25: c1:76:20:ff:54:e1:36:71:49:c1:be:cc:f1:64:0b: 8a:64:fe:dc:e1:08:75:0e:34:2c:96:c4:7c:71:41: 64:8f:14:2f:79:e3:dc:1c:6b:cc:59:3b:03:f9:08: 90:7d:9d:e6:49:52:bc:44:3f:c8:34:5d:ac:5c:91: 07:14:b1:26:a3:4c:de:9e:f9:31:c0:19:5e:ec:ac: e6:20:f3:e8:b8:f0:51:55:11:94:e1:58:8d:4e:45: b8:f4:0b:a9:00:cd:43:cd:4c:f5:a0:01:06:98:f4: e2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1F:E0:F2:3A:8E:0B:31:B2:B9:4F:1B:01:FA:FD:32:13:BE:99:38 X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/B512A570109211ECA693D74EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 221.132.119.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:1a:c4:15:ad:b4:00:40:2b:6f:8c:8e:30:44:ec:bc:1a:6a: 1a:94:93:71:ec:85:88:d5:af:c8:b4:7a:47:6e:f1:f7:25:a3: 99:f1:c1:6c:28:7f:b0:30:e3:4f:33:8c:e1:bb:33:d7:62:c4: 71:8b:35:34:ef:44:9d:89:ab:88:09:46:e4:26:6b:9f:8f:79: 03:02:fb:10:2b:c8:fe:ed:63:b9:31:c1:cf:9f:97:43:7c:a1: 09:e0:ae:69:4a:40:68:12:15:47:88:2f:4d:e5:d8:7a:fe:6e: d3:9d:34:b8:07:56:e5:43:ce:71:7f:a8:39:16:13:d3:25:1a: 61:77:1e:6f:aa:b0:59:9b:ab:9d:0b:1c:cf:95:64:3a:e4:de: 94:33:25:f2:31:ce:0f:72:9b:cc:05:55:67:60:f0:4b:f1:c6: cb:17:03:36:05:72:92:66:57:ee:78:a5:dd:a8:5f:53:fa:54: 55:e6:d9:d8:2c:86:aa:e4:20:fa:6b:a0:0a:d7:55:ea:a1:b3: e3:0e:a6:46:67:30:39:04:06:74:91:1a:6c:2e:3b:66:20:87: 27:e6:44:f8:91:f1:66:83:1e:00:0c:43:9c:6d:0f:92:f2:1b: ba:94:50:0d:a2:ef:03:82:2b:68:18:94:fd:97:d6:8d:73:d9: 49:1b:66:d8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjUwOTAyMjE0MjExWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3NjRiMy0wMzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzY1+WiUjLY95qOz8Rmw+gcpv9excHCCKE9QxeuhHKpkORXjc9yiryWxkROEH tiZFTH+1OD7KblSECtjkrLjMhjs6Q1fDRtWIkzuTKCJML6Z2YBAXNPOqKTDcpIi5 CUpxht+Kq3nhBpZM0NsJwGKjYGCXo6xWfqLKOs5bshqU8M1d+pWUiPtN+hsp9bAm +iwzTrP4uSXBdiD/VOE2cUnBvszxZAuKZP7c4Qh1DjQslsR8cUFkjxQveePcHGvM WTsD+QiQfZ3mSVK8RD/INF2sXJEHFLEmo0zenvkxwBle7KzmIPPouPBRVRGU4ViN TkW49AupAM1DzUz1oAEGmPTikQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIQf4PI6 jgsxsrlPGwH6/TITvpk4MB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIyMEIvQkE3MUI2NDgxMjAzMTFFQkJBQTE5NDE0QzRGOUFFMDIvQjUxMkE1NzAx MDkyMTFFQ0E2OTNENzRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADdhHcwDQYJKoZIhvcNAQELBQADggEBAHsaxBWttABAK2+M jjBE7LwaahqUk3HshYjVr8i0ekdu8fclo5nxwWwof7Aw408zjOG7M9dixHGLNTTv RJ2Jq4gJRuQma5+PeQMC+xAryP7tY7kxwc+fl0N8oQngrmlKQGgSFUeIL03l2Hr+ btOdNLgHVuVDznF/qDkWE9MlGmF3Hm+qsFmbq50LHM+VZDrk3pQzJfIxzg9ym8wF VWdg8EvxxssXAzYFcpJmV+54pd2oX1P6VFXm2dgshqrkIPproArXVeqhs+MOpkZn MDkEBnSRGmwuO2YghyfmRPiR8WaDHgAMQ5xtD5LyG7qUUA2i7wOCK2gYlP2X1o1z 2UkbZtg= -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:50 2025 by rpki-client