$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/32751AAE67B811F0962F0730C4F9AE02.roa File: 32751AAE67B811F0962F0730C4F9AE02.roa (raw, json) Hash identifier: kJ2W8ZtT3EcqQ65yuXA6cG7VqVTYhapLGWIeTZI80LI= Subject key identifier: FE:31:7C:F6:74:EE:80:D5:C6:67:AC:AA:68:EF:48:50:38:C9:81:57 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 0938 Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/32751AAE67B811F0962F0730C4F9AE02.roa Signing time: Wed 23 Jul 2025 11:28:47 +0000 ROA not before: Wed 23 Jul 2025 11:28:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134734 IP address blocks: 114.129.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2360 (0x938) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: Jul 23 11:28:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6880c76e-7f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:13:c6:aa:b4:8f:44:37:c1:36:56:45:c5: ca:80:ef:18:1c:09:76:2f:a3:89:06:7c:bd:bb:58: cc:df:31:3b:b6:37:b2:02:99:62:52:94:60:60:bf: 4b:05:e6:6e:09:d7:94:27:3d:f2:58:d2:26:8b:06: e9:59:7c:a0:37:6d:b1:6e:0b:c7:1b:3b:42:71:c5: 91:a3:31:db:96:65:6a:1a:b8:0c:65:c7:45:2f:90: 21:94:d9:2c:c1:7e:5b:dc:dd:e5:a9:14:a0:31:aa: d0:75:06:d8:bf:89:57:7a:f2:c9:4b:24:37:95:40: 78:44:a5:5a:4c:b4:93:f0:ec:1b:5a:de:13:70:98: c4:67:51:9d:a5:db:3c:90:a9:f5:6e:10:86:e4:c4: 92:e1:3e:5c:a2:b8:57:ae:08:0b:e4:77:e2:38:3c: 32:cb:fb:7e:92:e6:34:7f:5b:31:5c:77:b6:57:8a: 42:2d:23:44:6e:c2:ee:7e:8b:c2:79:38:60:45:2d: 9a:c4:0b:4f:53:bc:7f:8b:d0:75:3a:8f:6b:5e:ac: 46:c3:c5:9c:d8:ed:c2:44:28:92:ea:84:92:b6:2c: 3a:f9:4d:1c:a9:32:75:01:11:63:c2:bb:1e:7c:bd: 69:8b:bc:36:bc:da:01:21:0d:05:60:b2:69:44:0f: aa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:31:7C:F6:74:EE:80:D5:C6:67:AC:AA:68:EF:48:50:38:C9:81:57 X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/32751AAE67B811F0962F0730C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.129.13.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:41:87:75:28:0d:5a:0c:f6:e3:03:3c:c6:57:3b:d0:a0:62: 0b:79:e0:b7:76:73:eb:10:78:a3:a0:7b:8a:87:9d:e7:25:d8: dd:8c:59:6b:ef:da:4f:85:1e:0e:28:97:66:6c:62:d0:ca:92: 91:f5:2e:84:7d:08:95:11:52:43:e4:00:35:1a:a1:3c:e1:e1: e6:76:72:af:eb:46:3d:2f:5a:54:75:a0:b2:b6:c3:0b:4e:c1: fb:f8:d5:2d:70:1a:4d:a4:c3:06:95:3f:fa:cc:dc:cd:ad:0d: 03:f8:ca:3e:26:2c:c8:79:bc:a3:c6:4b:6f:de:b0:74:32:93: 8d:57:99:37:cb:10:2d:30:4a:34:e4:15:d5:11:6e:26:7b:55: 9c:de:76:d4:7f:86:b9:de:14:ea:0e:85:98:52:31:b9:35:8d: 5f:32:ef:82:79:8b:22:82:16:84:2e:d7:47:b6:53:cb:eb:c4: 29:71:dd:c6:ff:e0:d8:9c:43:d6:63:ef:6d:a6:d9:db:4a:13: 7e:f5:11:e7:f9:70:20:7c:f4:70:0a:dd:87:8f:cc:3f:79:88: 23:4b:b8:ce:be:9d:72:07:83:30:c6:84:99:33:7c:0b:1a:70: 90:35:61:cc:d7:fe:67:84:0e:fc:68:c5:ea:d6:d3:07:77:ce: 40:f9:cd:09 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjUwNzIzMTEyODQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgwYzc2ZS03ZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTgTxqq0j0Q3wTZWRcXKgO8YHAl2L6OJBny9u1jM3zE7tjeyApliUpRgYL9L BeZuCdeUJz3yWNImiwbpWXygN22xbgvHGztCccWRozHblmVqGrgMZcdFL5AhlNks wX5b3N3lqRSgMarQdQbYv4lXevLJSyQ3lUB4RKVaTLST8OwbWt4TcJjEZ1Gdpds8 kKn1bhCG5MSS4T5corhXrggL5HfiODwyy/t+kuY0f1sxXHe2V4pCLSNEbsLufovC eThgRS2axAtPU7x/i9B1Oo9rXqxGw8Wc2O3CRCiS6oSStiw6+U0cqTJ1ARFjwrse fL1pi7w2vNoBIQ0FYLJpRA+q9QIDAQABo4IClTCCApEwHQYDVR0OBBYEFP4xfPZ0 7oDVxmesqmjvSFA4yYFXMB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzBCREUvN0U1QUMzRTA4OTcxMTFFQTkyNDAyQTBBQzRGOUFFMDIvMzI3NTFBQUU2 N0I4MTFGMDk2MkYwNzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABygQ0wDQYJKoZIhvcNAQELBQADggEBAGpBh3UoDVoM9uMD PMZXO9CgYgt54Ld2c+sQeKOge4qHnecl2N2MWWvv2k+FHg4ol2ZsYtDKkpH1LoR9 CJURUkPkADUaoTzh4eZ2cq/rRj0vWlR1oLK2wwtOwfv41S1wGk2kwwaVP/rM3M2t DQP4yj4mLMh5vKPGS2/esHQyk41XmTfLEC0wSjTkFdURbiZ7VZzedtR/hrneFOoO hZhSMbk1jV8y74J5iyKCFoQu10e2U8vrxClx3cb/4NicQ9Zj722m2dtKE371Eef5 cCB89HAK3YePzD95iCNLuM6+nXIHgzDGhJkzfAsacJA1YczX/meEDvxoxerW0wd3 zkD5zQk= -----END CERTIFICATE-----Generated at Sat Aug 9 10:43:54 2025 by rpki-client