$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/6D858A8C465911F0A2BAF60EC4F9AE02.roa File: 6D858A8C465911F0A2BAF60EC4F9AE02.roa (raw, json) Hash identifier: BHEfL3iXw2jMRRXyxJSj6VjQ0DGjrH1T8VUlRLEsT2A= Subject key identifier: 1C:2B:E9:1A:AE:87:A5:7B:C8:DB:B5:36:F8:02:88:DF:01:AC:90:4C Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305 Certificate serial: 0268 Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/6D858A8C465911F0A2BAF60EC4F9AE02.roa Signing time: Wed 11 Jun 2025 00:17:15 +0000 ROA not before: Wed 11 Jun 2025 00:17:15 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 202.134.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305 Validity Not Before: Jun 11 00:17:15 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6848cb0b-4f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:7d:0b:d6:59:a7:36:b0:08:e1:38:1c:02: f3:d0:f6:e0:06:69:3e:0e:f6:30:a7:b7:c7:d6:a2: 75:b6:6e:fc:00:08:fb:e6:dc:3e:e3:43:1a:dc:1f: 25:b5:32:16:6f:df:ba:f6:84:35:93:31:e5:07:54: 01:2a:09:c0:c4:d9:0c:04:cd:31:ff:70:99:c4:2b: 34:dd:28:30:6e:f7:d4:f1:02:82:6e:d2:3f:76:ed: ab:5f:83:8a:af:9f:02:15:32:2c:73:be:4f:19:3e: 75:dc:af:36:49:62:9c:52:01:42:23:ef:f6:2f:fb: b8:e7:09:34:7d:1e:c6:a9:cc:d6:90:5f:0b:c4:98: 1e:b8:16:74:3c:4f:ff:ea:0e:69:58:5a:72:de:ec: 1f:c3:d7:f8:83:bb:09:0c:5f:8b:b7:9d:7a:bc:f3: ea:59:e1:64:a2:bc:9d:f8:ea:54:f3:61:53:0c:20: 93:78:68:91:3c:92:31:67:70:2b:6c:1f:66:91:1a: 6a:a5:fe:4e:39:bd:45:7e:28:2a:d1:c3:c9:d1:8e: 4b:22:0d:5a:db:71:06:c7:95:49:00:21:63:12:2c: f9:f6:42:1a:19:68:a8:68:66:26:1e:41:ab:03:11: b3:57:0f:dd:19:23:bc:d4:26:31:62:ea:08:c1:c8: b6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2B:E9:1A:AE:87:A5:7B:C8:DB:B5:36:F8:02:88:DF:01:AC:90:4C X509v3 Authority Key Identifier: keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/6D858A8C465911F0A2BAF60EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.134.249.0/24 Signature Algorithm: sha256WithRSAEncryption a9:b7:d9:38:26:df:44:ac:c5:4f:e4:ba:75:05:a4:e1:ab:0d: 6d:50:be:32:6c:cc:cc:2c:91:e3:1a:49:a9:09:b3:ba:df:d6: 34:f1:26:fc:83:3d:92:3d:c8:18:45:a5:fe:e7:5a:d4:37:9d: 1f:31:31:e6:9d:87:7d:ea:af:fa:59:3d:23:e1:a8:d7:39:f9: 85:99:a5:1b:78:e8:26:ab:86:bd:28:3f:5b:9b:8e:b6:59:a1: 82:b1:07:69:c1:ec:bd:f0:e7:9f:ff:4c:03:1b:82:45:11:b6: fb:d4:05:67:f5:dc:0c:81:fb:41:e3:96:40:5f:c0:94:53:c8: 61:8a:4b:f5:1e:0c:51:96:da:e0:5c:a1:d1:4c:8c:3a:ad:69: c6:7b:f0:43:3d:96:f3:07:14:f1:33:76:52:3d:f2:f5:1a:91: fa:05:4d:0d:f3:0a:1f:bd:02:68:aa:5a:a4:4d:8b:82:27:94: 72:75:d7:05:b1:a8:2c:53:ee:1f:a7:21:ac:0a:ea:7f:87:7c: 2f:a3:76:85:15:a0:ec:42:ed:b5:9b:82:73:ed:61:06:21:86: d7:60:37:b5:bb:e5:c8:6a:6a:ff:47:fa:63:c9:0e:0c:94:ef: 39:71:a0:2a:31:93:d6:eb:31:22:5d:f4:cc:f7:97:11:fc:d9: c0:af:1f:a7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NTAxMTAvBgNVBAUTKDQ1NkVFQTA2OTJDNkE0RjI2RjUzRDJEMjM3RDFDQjRE Q0Q3ODMzMDUwHhcNMjUwNjExMDAxNzE1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ4Y2IwYi00ZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj99C9ZZpzawCOE4HALz0PbgBmk+DvYwp7fH1qJ1tm78AAj75tw+40Ma3B8l tTIWb9+69oQ1kzHlB1QBKgnAxNkMBM0x/3CZxCs03SgwbvfU8QKCbtI/du2rX4OK r58CFTIsc75PGT513K82SWKcUgFCI+/2L/u45wk0fR7GqczWkF8LxJgeuBZ0PE// 6g5pWFpy3uwfw9f4g7sJDF+Lt516vPPqWeFkoryd+OpU82FTDCCTeGiRPJIxZ3Ar bB9mkRpqpf5OOb1Ffigq0cPJ0Y5LIg1a23EGx5VJACFjEiz59kIaGWioaGYmHkGr AxGzVw/dGSO81CYxYuoIwci2LwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBwr6Rqu h6V7yNu1NvgCiN8BrJBMMB8GA1UdIwQYMBaAFEVu6gaSxqTyb1PS0jfRy03NeDMF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU1MC84NDAwOTU0QUNF QzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQSnZVOUxTTjlITFRjMTRN d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzY1NTAvODQwMDk1NEFDRUM0MTFFRDhBODNGQjExQzRGOUFFMDIvNkQ4NThBOEM0 NjU5MTFGMEEyQkFGNjBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKhvkwDQYJKoZIhvcNAQELBQADggEBAKm32Tgm30SsxU/k unUFpOGrDW1QvjJszMwskeMaSakJs7rf1jTxJvyDPZI9yBhFpf7nWtQ3nR8xMead h33qr/pZPSPhqNc5+YWZpRt46Carhr0oP1ubjrZZoYKxB2nB7L3w55//TAMbgkUR tvvUBWf13AyB+0HjlkBfwJRTyGGKS/UeDFGW2uBcodFMjDqtacZ78EM9lvMHFPEz dlI98vUakfoFTQ3zCh+9AmiqWqRNi4InlHJ11wWxqCxT7h+nIawK6n+HfC+jdoUV oOxC7bWbgnPtYQYhhtdgN7W75chqav9H+mPJDgyU7zlxoCoxk9brMSJd9Mz3lxH8 2cCvH6c= -----END CERTIFICATE-----Generated at Sun Jun 15 07:55:55 2025 by rpki-client