$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/C86D4880DBDE11EAB7E6495DC4F9AE02.roa File: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (raw, json) Hash identifier: rI+OmwliYI4AIuxYGKkkX7tZiKeGui6vIR2hfPTKsLk= Subject key identifier: 18:EA:09:D1:43:5C:85:B7:88:60:A4:7D:0B:29:EC:B1:BD:E4:96:D1 Certificate issuer: /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Certificate serial: 0839 Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/C86D4880DBDE11EAB7E6495DC4F9AE02.roa Signing time: Mon 04 Aug 2025 21:32:40 +0000 ROA not before: Mon 04 Aug 2025 21:32:40 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 137386 IP address blocks: 123.253.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 21:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F Validity Not Before: Aug 4 21:32:40 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=689126f7-0473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:57:da:9d:1e:e0:04:4e:c0:3f:8f:d2:1a: 5c:74:d2:17:e1:9a:c0:32:b8:a0:21:7a:3f:fb:d1: c1:b7:54:49:c1:59:cf:78:62:7d:a2:b1:5f:66:67: 61:cb:6b:1c:d9:a3:81:1e:46:25:32:3f:46:eb:3a: 30:b2:6a:12:37:d5:5d:9f:1f:1a:66:d6:d5:e0:d4: 41:af:ca:3e:60:11:0d:4a:ef:9c:87:c7:3e:a8:4e: 58:7b:34:e5:16:26:1b:d9:6f:28:c8:81:e6:94:fb: c4:ba:f0:0c:f6:69:20:bc:e5:51:59:15:e3:c9:ce: a4:c0:59:78:7a:5e:d9:77:ac:38:6a:26:16:d0:ba: dc:84:f5:ff:25:b4:10:00:9b:04:2e:c9:65:75:f8: a5:f1:1d:7e:fb:bb:8f:f3:f0:c9:54:bf:9f:67:da: ad:a9:1e:ca:f3:bd:21:49:9f:a7:ad:40:84:d9:50: 6b:73:54:d4:e0:1a:8d:90:f0:cc:a6:a3:aa:94:e0: 2f:e3:6d:45:52:e0:25:b1:15:66:41:d5:84:13:f1: e0:a8:07:19:a4:51:ee:83:48:1d:35:86:a7:ca:97: b6:95:68:a2:91:6b:e2:0b:8f:78:e2:f1:e5:1a:5f: 9b:7c:7a:d7:3d:28:55:a0:0c:f3:83:09:5a:b5:d4: 4e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EA:09:D1:43:5C:85:B7:88:60:A4:7D:0B:29:EC:B1:BD:E4:96:D1 X509v3 Authority Key Identifier: keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/C86D4880DBDE11EAB7E6495DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.253.219.0/24 Signature Algorithm: sha256WithRSAEncryption ce:42:a5:eb:52:04:e6:52:4e:72:62:7d:9f:9d:96:60:fd:c9: c1:be:7e:1e:0a:f6:f9:a0:85:0a:3e:4e:22:e1:01:f6:16:60: 41:5a:35:8f:ed:f9:b7:07:5e:46:25:b7:2b:42:fd:d9:6d:87: a0:27:99:9b:7e:cf:2c:4b:33:6b:37:b2:34:e7:32:c4:b6:a1: 59:22:cf:3a:d2:83:57:7a:03:9c:10:dd:2f:9d:23:fd:a2:ab: 9c:c1:e4:47:6f:e9:d4:9a:d2:7c:d6:54:d0:8d:26:ab:32:ee: f4:25:75:ab:47:b7:9e:ff:f2:f8:c2:a0:7a:cf:73:7f:ea:f6: 6d:08:34:02:83:4d:8d:6e:c5:0e:fb:1b:ab:1b:a8:c1:a9:b8: 24:90:28:fe:7e:5d:cb:e9:13:19:02:8d:b2:7d:39:70:43:17: 75:d1:e5:3c:6b:c4:01:97:ff:e0:4e:f0:eb:b4:1f:b0:77:16: d5:6c:d9:b3:55:66:74:cb:21:ed:d0:d6:6d:8d:82:28:65:c8: a0:18:94:8e:dd:db:a5:f4:54:09:d7:75:9c:6f:dd:8e:f1:00: 7d:64:fe:16:81:9b:84:02:11:b4:78:c0:f3:85:80:98:7a:d8: 4e:e3:8c:65:1d:85:d9:cb:51:fc:c5:42:9c:47:a1:52:71:6f: 2e:78:54:6f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg3MkMxMTAvBgNVBAUTKDQwNjA2QTVCNUQyOUJCRjQyMTY3RkE2OEIzMjY4NjdF RjkwRTgyNkYwHhcNMjUwODA0MjEzMjQwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkxMjZmNy0wNDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvxX2p0e4AROwD+P0hpcdNIX4ZrAMrigIXo/+9HBt1RJwVnPeGJ9orFfZmdh y2sc2aOBHkYlMj9G6zowsmoSN9Vdnx8aZtbV4NRBr8o+YBENSu+ch8c+qE5YezTl FiYb2W8oyIHmlPvEuvAM9mkgvOVRWRXjyc6kwFl4el7Zd6w4aiYW0LrchPX/JbQQ AJsELslldfil8R1++7uP8/DJVL+fZ9qtqR7K870hSZ+nrUCE2VBrc1TU4BqNkPDM pqOqlOAv421FUuAlsRVmQdWEE/HgqAcZpFHug0gdNYanype2lWiikWviC4944vHl Gl+bfHrXPShVoAzzgwlatdROHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBjqCdFD XIW3iGCkfQsp7LG95JbRMB8GA1UdIwQYMBaAFEBgaltdKbv0IWf6aLMmhn75DoJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODcyQy9GMjBFNTU5NkRC REMxMUVBOTNGRjdENDRDNEY5QUUwMi9RR0JxVzEwcHVfUWhaX3Bvc3lhR2Z2a09n bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FHQnFXMTBwdV9RaFpfcG9zeWFHZnZrT2dtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjg3MkMvRjIwRTU1OTZEQkRDMTFFQTkzRkY3RDQ0QzRGOUFFMDIvQzg2RDQ4ODBE QkRFMTFFQUI3RTY0OTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB7/dswDQYJKoZIhvcNAQELBQADggEBAM5CpetSBOZSTnJi fZ+dlmD9ycG+fh4K9vmghQo+TiLhAfYWYEFaNY/t+bcHXkYltytC/dlth6AnmZt+ zyxLM2s3sjTnMsS2oVkizzrSg1d6A5wQ3S+dI/2iq5zB5Edv6dSa0nzWVNCNJqsy 7vQldatHt57/8vjCoHrPc3/q9m0INAKDTY1uxQ77G6sbqMGpuCSQKP5+XcvpExkC jbJ9OXBDF3XR5TxrxAGX/+BO8Ou0H7B3FtVs2bNVZnTLIe3Q1m2NgihlyKAYlI7d 26X0VAnXdZxv3Y7xAH1k/haBm4QCEbR4wPOFgJh62E7jjGUdhdnLUfzFQpxHoVJx by54VG8= -----END CERTIFICATE-----Generated at Wed Aug 13 19:04:22 2025 by rpki-client