$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/5B47C2265D8411F0BBB04858C4F9AE02.roa File: 5B47C2265D8411F0BBB04858C4F9AE02.roa (raw, json) Hash identifier: Uur2jCKI44RTppdHPrBOV4rDdME7NfVW8X3JWQwRDe0= Subject key identifier: 6E:EB:72:58:73:FD:29:2B:A7:5E:87:1F:FE:53:67:68:FE:9B:B8:82 Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Certificate serial: 0CA4 Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/5B47C2265D8411F0BBB04858C4F9AE02.roa Signing time: Thu 10 Jul 2025 11:52:30 +0000 ROA not before: Thu 10 Jul 2025 11:52:30 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 151638 IP address blocks: 115.127.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 18:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3236 (0xca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37E3, serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Validity Not Before: Jul 10 11:52:30 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=686fa97d-d87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a6:a8:2d:63:89:c8:c0:02:e2:1b:01:a3:fc: 93:dd:1c:e8:03:75:64:ad:70:23:df:88:f8:34:f9: 02:96:77:0e:c0:8b:8d:c8:da:cb:59:ad:83:01:61: ea:79:37:7b:e8:60:5f:64:43:1a:6c:c8:f6:71:df: 00:70:7f:46:9a:d6:5b:e7:e0:ee:e4:2a:05:21:70: 35:55:08:29:2a:2f:f9:17:e2:bb:18:77:2e:dd:ea: 80:fb:b5:b5:c1:4c:28:8e:54:49:36:7e:ae:8a:76: 9e:37:2e:fe:31:39:c9:7e:a7:a0:44:9c:8e:09:18: b8:76:bd:81:4c:b7:3b:cc:06:11:fe:5c:a0:1c:e5: 58:e9:4d:78:d4:b0:45:3e:c4:24:00:37:75:22:a3: 0f:43:0a:ca:2d:3e:b8:cf:ad:69:ca:e8:a0:e9:30: 7e:77:6b:cb:f6:e0:e8:d7:ac:18:78:8b:c9:c7:6a: 66:db:cf:cf:38:fc:59:8e:79:38:3f:d8:ff:59:74: 33:21:1a:e1:30:7f:67:00:fe:1f:20:af:24:26:40: f1:1d:da:46:eb:28:5c:77:57:23:1f:1b:bd:9b:8d: c9:64:5e:4c:41:1f:2c:57:80:b9:ca:d6:d7:00:03: bb:e6:dc:c6:2e:10:23:0a:d7:62:1b:19:23:ed:22: 2a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:EB:72:58:73:FD:29:2B:A7:5E:87:1F:FE:53:67:68:FE:9B:B8:82 X509v3 Authority Key Identifier: keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/5B47C2265D8411F0BBB04858C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.127.222.0/23 Signature Algorithm: sha256WithRSAEncryption 56:31:6f:8f:83:36:bd:25:08:b7:87:da:1d:a3:ae:93:97:c4: c6:c2:b6:c2:63:c0:a1:9c:7d:7d:a5:97:39:11:07:c5:8b:81: a4:ca:a7:61:56:05:14:86:c7:7c:f8:98:b5:a2:35:e3:0b:f3: f9:03:cc:9b:51:bb:91:17:e8:f4:37:43:b0:32:5a:e3:5f:ef: 0b:69:d6:1b:00:55:22:b1:e3:35:7c:80:fd:3a:32:e7:bc:d8: 42:52:d9:b6:86:ae:99:54:5e:a5:b3:a0:1c:49:8b:6c:9a:79: 77:42:f8:e7:75:ea:fa:49:6d:f0:57:a8:cc:5c:69:28:f4:6b: d5:89:a6:ab:71:c9:95:61:bd:63:ec:63:d6:c3:3d:90:d1:fb: 16:0f:0c:fe:c2:a1:b5:36:8a:ed:85:27:da:99:cc:41:ce:1d: 4e:15:a3:f5:b5:0e:42:ab:d9:d3:26:15:63:8a:a2:3f:86:6a: 9d:ed:0c:26:45:24:55:e3:af:72:1e:b2:0f:d7:d5:de:3e:7b: 7a:1f:4d:9e:37:b0:2e:e5:66:63:fe:31:17:a8:03:12:8d:bc: a0:e3:95:d9:da:09:af:b4:71:44:ba:4a:f8:ec:af:2c:2e:47: 81:9e:62:7a:7e:30:54:32:4e:d3:c0:c6:1c:86:01:47:b2:01: 7a:1e:b2:9f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3RTMxMTAvBgNVBAUTKEE3NTcwRENGMzcyMEE4RDVBODg1NkE0QkI2NTgzRjFC QUVBRTAwOTMwHhcNMjUwNzEwMTE1MjMwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZmYTk3ZC1kODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6aoLWOJyMAC4hsBo/yT3RzoA3VkrXAj34j4NPkClncOwIuNyNrLWa2DAWHq eTd76GBfZEMabMj2cd8AcH9GmtZb5+Du5CoFIXA1VQgpKi/5F+K7GHcu3eqA+7W1 wUwojlRJNn6uinaeNy7+MTnJfqegRJyOCRi4dr2BTLc7zAYR/lygHOVY6U141LBF PsQkADd1IqMPQwrKLT64z61pyuig6TB+d2vL9uDo16wYeIvJx2pm28/POPxZjnk4 P9j/WXQzIRrhMH9nAP4fIK8kJkDxHdpG6yhcd1cjHxu9m43JZF5MQR8sV4C5ytbX AAO75tzGLhAjCtdiGxkj7SIqYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG7rclhz /Skrp16HH/5TZ2j+m7iCMB8GA1UdIwQYMBaAFKdXDc83IKjVqIVqS7ZYPxuurgCT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdFMy8wQUZFQTdDRTAz QTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FOV29oV3BMdGxnX0c2NnVB Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AxY056emNncU5Xb2hXcEx0bGdfRzY2dUFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjM3RTMvMEFGRUE3Q0UwM0EwMTFFQUI0QzVEMjdDQzRGOUFFMDIvNUI0N0MyMjY1 RDg0MTFGMEJCQjA0ODU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFzf94wDQYJKoZIhvcNAQELBQADggEBAFYxb4+DNr0lCLeH 2h2jrpOXxMbCtsJjwKGcfX2llzkRB8WLgaTKp2FWBRSGx3z4mLWiNeML8/kDzJtR u5EX6PQ3Q7AyWuNf7wtp1hsAVSKx4zV8gP06Mue82EJS2baGrplUXqWzoBxJi2ya eXdC+Od16vpJbfBXqMxcaSj0a9WJpqtxyZVhvWPsY9bDPZDR+xYPDP7CobU2iu2F J9qZzEHOHU4Vo/W1DkKr2dMmFWOKoj+Gap3tDCZFJFXjr3Iesg/X1d4+e3ofTZ43 sC7lZmP+MReoAxKNvKDjldnaCa+0cUS6SvjsrywuR4GeYnp+MFQyTtPAxhyGAUey AXoesp8= -----END CERTIFICATE-----Generated at Wed Aug 13 20:20:20 2025 by rpki-client