$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/7B2649225FE211EB9C1A7864C4F9AE02.roa File: 7B2649225FE211EB9C1A7864C4F9AE02.roa (raw, json) Hash identifier: bG1CPCZHlQw0haejcYIgqU237lgngpKLBdJOI7duxPA= Subject key identifier: 7A:2F:66:FA:13:65:42:BF:9E:6B:54:C2:EF:2C:2B:87:F5:1F:19:90 Certificate issuer: /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Certificate serial: 083A Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/7B2649225FE211EB9C1A7864C4F9AE02.roa Signing time: Mon 04 Aug 2025 21:32:40 +0000 ROA not before: Mon 04 Aug 2025 21:32:40 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 137445 IP address blocks: 123.253.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 21:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2106 (0x83a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Validity Not Before: Aug 4 21:32:40 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=689126f8-7f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:f6:b4:03:eb:67:a1:be:a6:4a:eb:bb:13: 97:46:d2:50:9b:7d:2d:81:c0:78:c5:e5:c9:03:34: 3b:a7:99:7e:d1:21:62:a2:b4:07:f1:02:cb:3e:74: bd:1d:52:65:15:a8:08:55:15:6b:c4:5d:26:1a:e6: b4:a9:a2:32:e2:e6:71:b1:57:2e:da:83:2e:16:dd: 6d:d1:b2:c8:98:ca:48:d7:62:ab:90:55:cf:fe:1b: b2:eb:e9:d5:e5:ae:6b:61:ea:b8:12:1e:46:0d:65: fb:ff:71:fb:36:42:05:7d:7a:b2:ff:d4:7d:8f:2d: 20:87:72:20:9d:4a:39:43:a5:44:96:c3:5e:9e:1e: ad:b1:68:88:5c:9b:bc:5b:88:46:0f:87:0a:f6:09: 62:be:52:cc:74:11:0b:bf:eb:7c:8f:68:52:f5:3b: ef:e8:34:73:61:bb:0b:ec:11:b4:4e:c9:39:f3:ad: 5f:e9:2c:2b:0f:dc:1d:66:44:2f:6b:8c:65:22:a4: cc:25:59:46:cc:3f:7c:e7:a5:0f:2d:18:40:2f:bd: d1:bb:01:79:dc:f5:0c:6f:68:b8:a3:4d:90:53:94: 08:bd:db:c4:3b:33:e8:63:c8:27:d7:a7:07:98:f6: 65:bb:08:f8:1b:6e:a1:ed:32:76:c7:b3:df:6c:af: 9a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2F:66:FA:13:65:42:BF:9E:6B:54:C2:EF:2C:2B:87:F5:1F:19:90 X509v3 Authority Key Identifier: keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/7B2649225FE211EB9C1A7864C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.253.218.0/24 Signature Algorithm: sha256WithRSAEncryption d7:b4:c5:98:af:e2:cb:95:9a:79:f6:b2:99:0a:b3:fc:4d:79: b8:ae:a7:b1:06:a9:76:b0:15:79:c3:8f:ec:82:47:14:a2:b7: 00:4c:07:39:ad:d2:ef:0e:ae:f4:84:d7:f9:18:2b:d8:75:5e: 9e:a4:1f:30:76:2a:52:03:62:12:ef:51:b0:30:43:95:a8:ba: e1:f0:2d:6b:ca:88:2b:f3:e0:8d:cb:f6:0c:3b:bd:26:d2:fd: ad:8f:e1:e7:f6:58:48:ed:3e:da:45:a2:59:b3:c6:57:a6:97: 55:97:a3:2e:aa:07:a6:ad:63:e9:8e:b2:cc:ac:4b:b9:01:32: d4:44:a0:40:a0:20:0c:89:8c:74:7f:c2:9e:7a:65:ad:ac:9b: 8f:e8:04:e7:5a:45:fd:e6:d3:3d:1a:38:0c:5a:40:e5:c3:f7: 6a:17:bf:d4:31:1e:02:4e:cd:b5:5b:bf:bd:8c:27:34:0e:09: 7c:8a:e8:80:62:47:85:f0:18:e7:46:f4:e3:4b:31:b7:ca:36: 78:f2:63:dc:f3:d1:5e:6b:7b:0c:99:62:57:a8:0d:da:7d:4e: a5:14:bd:b4:76:a0:f4:af:fe:9a:d7:aa:72:fa:f1:a5:3b:c3: f0:56:b4:d5:c6:b0:52:2c:1d:c9:77:e7:d7:33:82:08:9b:6a: 33:9c:a4:1b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3MkMxMTAvBgNVBAUTKDQwNjA2QTVCNUQyOUJCRjQyMTY3RkE2OEIzMjY4NjdF RjkwRTgyNkYwHhcNMjUwODA0MjEzMjQwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkxMjZmOC03ZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kb2tAPrZ6G+pkrruxOXRtJQm30tgcB4xeXJAzQ7p5l+0SFiorQH8QLLPnS9 HVJlFagIVRVrxF0mGua0qaIy4uZxsVcu2oMuFt1t0bLImMpI12KrkFXP/huy6+nV 5a5rYeq4Eh5GDWX7/3H7NkIFfXqy/9R9jy0gh3IgnUo5Q6VElsNenh6tsWiIXJu8 W4hGD4cK9glivlLMdBELv+t8j2hS9Tvv6DRzYbsL7BG0Tsk5861f6SwrD9wdZkQv a4xlIqTMJVlGzD9856UPLRhAL73RuwF53PUMb2i4o02QU5QIvdvEOzPoY8gn16cH mPZluwj4G26h7TJ2x7PfbK+akQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHovZvoT ZUK/nmtUwu8sK4f1HxmQMB8GA1UdIwQYMBaAFEBgaltdKbv0IWf6aLMmhn75DoJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODcyQy9GMjBFNTU5NkRC REMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVfUWhaX3Bvc3lhR2Z2a09n bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FHQnFXMTBwdV9RaFpfcG9zeWFHZnZrT2dtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjg3MkMvRjIwRTU1OTZEQkRDMTFFQTkzRkY3RDQ0QzRGOUFFMDIvN0IyNjQ5MjI1 RkUyMTFFQjlDMUE3ODY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB7/dowDQYJKoZIhvcNAQELBQADggEBANe0xZiv4suVmnn2 spkKs/xNebiup7EGqXawFXnDj+yCRxSitwBMBzmt0u8OrvSE1/kYK9h1Xp6kHzB2 KlIDYhLvUbAwQ5WouuHwLWvKiCvz4I3L9gw7vSbS/a2P4ef2WEjtPtpFolmzxlem l1WXoy6qB6atY+mOssysS7kBMtREoECgIAyJjHR/wp56Za2sm4/oBOdaRf3m0z0a OAxaQOXD92oXv9QxHgJOzbVbv72MJzQOCXyK6IBiR4XwGOdG9ONLMbfKNnjyY9zz 0V5rewyZYleoDdp9TqUUvbR2oPSv/prXqnL68aU7w/BWtNXGsFIsHcl359czggib ajOcpBs= -----END CERTIFICATE-----Generated at Wed Aug 13 19:05:44 2025 by rpki-client