$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/62959E66682B11F09ECB0C24C4F9AE02.roa File: 62959E66682B11F09ECB0C24C4F9AE02.roa (raw, json) Hash identifier: QteYiqxagttieW0gH2HjsmgjmoFz+n9ylxq8eEuUcDA= Subject key identifier: C3:5D:93:CA:36:4B:6A:D0:C8:E3:09:0C:9C:65:55:35:37:F7:A3:E1 Certificate issuer: /CN=A91CE65A/serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00 Certificate serial: C7 Authority key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/62959E66682B11F09ECB0C24C4F9AE02.roa Signing time: Tue 29 Jul 2025 06:42:48 +0000 ROA not before: Tue 29 Jul 2025 06:42:48 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 7545 IP address blocks: 203.8.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE65A, serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00 Validity Not Before: Jul 29 06:42:48 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68886d68-1590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dc:ca:79:92:b1:20:92:d6:a7:2a:86:99:3b: 43:86:95:63:02:33:49:97:05:44:9a:9e:60:1b:b5: 90:5a:8f:14:25:0a:a6:59:53:0d:bc:e1:87:0e:6a: ed:53:03:4a:4c:99:3a:cd:6b:86:f6:70:a3:48:7b: 5c:d6:e2:7e:30:b5:e1:4e:a9:64:a6:23:df:2b:c3: 40:12:15:58:f3:66:31:8a:c7:fc:26:2a:0c:05:48: 2a:81:7a:73:60:59:ef:fd:36:20:3f:fc:08:29:38: 39:16:c6:a2:cd:a9:de:8f:58:74:a3:ec:50:87:89: d1:b5:5f:49:ef:83:15:ad:b5:19:03:89:79:78:5e: ff:06:f1:39:0c:f7:d0:0a:dc:50:cf:2c:d4:db:3d: 99:17:99:c5:e6:58:c3:ea:4a:c4:c4:fb:3b:49:eb: 7a:01:d7:0e:00:aa:cc:a5:e1:8b:47:53:4f:bf:c8: c8:2b:b5:5a:73:8a:a9:0b:4e:2d:f4:a2:03:51:51: 76:2e:97:eb:31:82:75:34:6a:6e:cc:c0:33:41:36: 41:90:b4:55:38:88:ad:3e:8e:6e:4c:b3:ca:bb:12: 13:ab:98:ec:06:9b:06:71:98:07:bb:4d:11:7e:10: fc:b2:79:7f:74:5e:38:ff:c6:72:ac:a2:50:7e:67: 0a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5D:93:CA:36:4B:6A:D0:C8:E3:09:0C:9C:65:55:35:37:F7:A3:E1 X509v3 Authority Key Identifier: keyid:29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/62959E66682B11F09ECB0C24C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.8.2.0/24 Signature Algorithm: sha256WithRSAEncryption 24:29:5d:7c:6d:6c:2c:fb:72:9b:c0:c0:8f:0f:80:e4:4e:65: 95:82:6f:74:11:9b:74:26:71:5c:43:f8:ce:53:b3:0f:5e:c9: fc:5a:5f:7c:8c:2c:2b:52:69:39:16:b7:eb:b7:db:35:b3:11: ec:8e:ae:45:8e:34:a3:95:de:e3:63:14:3d:20:8b:fd:f4:a6: 30:f0:fa:50:68:ec:d3:a4:fa:1a:63:d9:b9:66:03:4e:99:61: 27:dc:5b:e5:79:75:44:bd:c2:8c:be:85:ef:4b:f9:0c:f1:8d: 8c:8c:bf:a5:71:db:55:d9:21:3f:d7:ad:6d:c6:7b:50:f0:ff: de:44:1d:9e:7f:d0:ec:e6:bd:e9:4a:cb:3a:81:28:5d:1a:e1: 04:ea:29:55:08:00:7f:95:b5:3d:5f:31:55:99:e4:6f:47:ba: ce:9f:31:45:fb:0f:3b:f7:ab:c6:66:51:e5:81:6f:68:31:04: 6c:21:16:1f:c2:12:19:30:c8:f3:94:67:59:34:28:1c:21:6a: ff:1a:2b:87:c0:c7:10:c7:d4:e0:f7:a2:9f:cc:83:9b:25:34: 67:48:72:b0:6d:cd:e6:e6:f1:86:db:a4:9d:b8:8a:c3:97:0f: 7b:b0:b1:94:e6:48:d4:f5:c9:0f:52:df:da:d7:47:af:f9:7b: ee:f0:b1:b8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2NUExMTAvBgNVBAUTKDI5M0JGMDY5QzRGNEQ4MzFFRUU3NjlENUIxMzlFMzAy MURCMzRCMDAwHhcNMjUwNzI5MDY0MjQ4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg4NmQ2OC0xNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9zKeZKxIJLWpyqGmTtDhpVjAjNJlwVEmp5gG7WQWo8UJQqmWVMNvOGHDmrt UwNKTJk6zWuG9nCjSHtc1uJ+MLXhTqlkpiPfK8NAEhVY82Yxisf8JioMBUgqgXpz YFnv/TYgP/wIKTg5Fsaizanej1h0o+xQh4nRtV9J74MVrbUZA4l5eF7/BvE5DPfQ CtxQzyzU2z2ZF5nF5ljD6krExPs7Set6AdcOAKrMpeGLR1NPv8jIK7Vac4qpC04t 9KIDUVF2LpfrMYJ1NGpuzMAzQTZBkLRVOIitPo5uTLPKuxITq5jsBpsGcZgHu00R fhD8snl/dF44/8ZyrKJQfmcKkwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMNdk8o2 S2rQyOMJDJxlVTU396PhMB8GA1UdIwQYMBaAFCk78GnE9Ngx7udp1bE54wIds0sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTY1QS82NkU2RkUzNjQ5 N0ExMUVGQUY1NTE4NDJDNEY5QUUwMi9LVHZ3YWNUMDJESHU1Mm5Wc1RuakFoMnpT d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tUdndhY1QwMkRIdTUyblZzVG5qQWgyelN3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U2NUEvNjZFNkZFMzY0OTdBMTFFRkFGNTUxODQyQzRGOUFFMDIvNjI5NTlFNjY2 ODJCMTFGMDlFQ0IwQzI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLCAIwDQYJKoZIhvcNAQELBQADggEBACQpXXxtbCz7cpvA wI8PgOROZZWCb3QRm3QmcVxD+M5Tsw9eyfxaX3yMLCtSaTkWt+u32zWzEeyOrkWO NKOV3uNjFD0gi/30pjDw+lBo7NOk+hpj2blmA06ZYSfcW+V5dUS9woy+he9L+Qzx jYyMv6Vx21XZIT/XrW3Ge1Dw/95EHZ5/0OzmvelKyzqBKF0a4QTqKVUIAH+VtT1f MVWZ5G9Hus6fMUX7Dzv3q8ZmUeWBb2gxBGwhFh/CEhkwyPOUZ1k0KBwhav8aK4fA xxDH1OD3op/Mg5slNGdIcrBtzebm8YbbpJ24isOXD3uwsZTmSNT1yQ9S39rXR6/5 e+7wsbg= -----END CERTIFICATE-----Generated at Sun Aug 10 16:03:11 2025 by rpki-client