$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/B2306182F3F911EAB9D11D26C4F9AE02.roa File: B2306182F3F911EAB9D11D26C4F9AE02.roa (raw, json) Hash identifier: BiN0k39VUnPLhlKViMIRm8mbjvoQycrvLT233B9KH/Y= Subject key identifier: 6D:E1:CA:69:17:81:DB:1D:12:14:93:4F:AB:28:0B:4A:1F:27:BE:6C Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 34DF Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/B2306182F3F911EAB9D11D26C4F9AE02.roa Signing time: Fri 08 Aug 2025 15:21:00 +0000 ROA not before: Fri 08 Aug 2025 15:21:00 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 14618 IP address blocks: 116.214.100.0/24 maxlen: 24 116.214.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13535 (0x34df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Aug 8 15:21:00 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=689615dc-be89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:35:46:ad:d6:9d:32:82:85:5b:47:db:79:81: 9b:34:db:1f:52:77:99:7b:6d:60:6d:87:ab:fe:fb: 53:98:c2:f0:21:55:ec:c8:50:fd:26:1a:bf:7a:01: 3c:c1:aa:58:70:d7:ef:27:3a:f4:92:55:04:03:a5: b3:29:e7:1a:9c:3d:3d:ad:da:1e:92:72:e6:63:25: 85:2d:c8:16:3c:35:05:ec:88:f8:dc:8e:af:bd:f4: 9e:35:b0:3d:c4:36:81:cd:79:cd:86:bf:84:e7:73: 9a:a8:14:6f:0d:76:2d:9a:3d:64:78:33:c5:68:04: 32:ba:2b:ff:0e:5f:b4:09:64:25:74:31:33:45:28: 87:99:26:1f:09:b0:a7:99:f0:c8:81:f9:c3:2b:ec: 63:73:d7:c3:8d:80:5b:3f:e0:99:b4:f2:c6:db:be: 40:52:e6:fb:90:61:22:b0:64:fd:63:6f:32:97:9d: 67:57:ab:74:f9:0a:c1:79:95:82:e4:b6:24:7d:81: 28:36:ce:d3:9c:a9:5a:c9:82:44:39:37:7b:a3:61: 56:cf:4f:54:bf:e6:89:62:4e:c8:e4:61:ad:63:b5: 0b:37:2a:6d:c1:9c:66:f1:95:c4:22:ef:84:b1:1c: 1d:1d:9c:a0:74:ab:41:11:53:fb:63:09:11:f6:4f: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E1:CA:69:17:81:DB:1D:12:14:93:4F:AB:28:0B:4A:1F:27:BE:6C X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/B2306182F3F911EAB9D11D26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.214.100.0/23 Signature Algorithm: sha256WithRSAEncryption a8:b4:63:cf:0e:13:78:79:8d:3f:3c:fb:1a:f0:3f:bd:31:f6: 8b:47:6e:f6:12:19:81:c8:b1:aa:3c:7b:d7:ab:b3:7b:76:6d: 0f:10:21:d4:7f:7d:ff:d3:d7:c8:6e:ab:7b:ab:c8:14:27:a8: 10:92:ca:44:de:a0:b4:35:32:b0:62:a1:49:3b:51:70:ea:6d: a1:a1:b7:51:11:22:62:60:cf:73:18:03:79:de:93:0c:98:3b: 24:07:49:5b:ca:ae:62:f5:e7:19:49:85:c1:9a:41:f7:e3:a4: e3:ce:4c:64:1d:13:4e:e2:07:ac:47:46:91:49:5e:be:09:96: ed:df:2e:49:4f:67:0d:8f:d2:e3:4b:b0:11:ff:f1:e6:d7:1f: 2d:5f:3d:01:c2:7f:4f:28:01:a3:2e:bf:f0:d9:ab:1b:03:b0: af:31:f9:ef:6f:ca:13:50:ad:31:23:a3:5d:f4:a6:ac:0c:bb: 62:b1:bb:3c:35:f9:68:e1:46:18:aa:c7:ad:42:c8:45:3f:5c: df:3e:4c:c6:ac:5e:b8:bb:56:13:5d:ba:43:27:83:e9:56:5b: b3:ce:95:2a:74:54:dc:9f:d0:dd:d5:db:03:90:ff:5b:55:d7: 25:28:e1:f7:7f:1f:eb:dd:03:f0:e2:c7:4e:ad:74:22:df:23: d7:96:53:ea -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjUwODA4MTUyMTAwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk2MTVkYy1iZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDVGrdadMoKFW0fbeYGbNNsfUneZe21gbYer/vtTmMLwIVXsyFD9Jhq/egE8 wapYcNfvJzr0klUEA6WzKecanD09rdoeknLmYyWFLcgWPDUF7Ij43I6vvfSeNbA9 xDaBzXnNhr+E53OaqBRvDXYtmj1keDPFaAQyuiv/Dl+0CWQldDEzRSiHmSYfCbCn mfDIgfnDK+xjc9fDjYBbP+CZtPLG275AUub7kGEisGT9Y28yl51nV6t0+QrBeZWC 5LYkfYEoNs7TnKlayYJEOTd7o2FWz09Uv+aJYk7I5GGtY7ULNyptwZxm8ZXEIu+E sRwdHZygdKtBEVP7YwkR9k/eCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG3hymkX gdsdEhSTT6soC0ofJ75sMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VBQTIvRDJBQjI5MkMxRDk5MTFFMkJBNTI5QTg2MDhCMDJDRDIvQjIzMDYxODJG M0Y5MTFFQUI5RDExRDI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAF01mQwDQYJKoZIhvcNAQELBQADggEBAKi0Y88OE3h5jT88 +xrwP70x9otHbvYSGYHIsao8e9ers3t2bQ8QIdR/ff/T18huq3uryBQnqBCSykTe oLQ1MrBioUk7UXDqbaGht1ERImJgz3MYA3nekwyYOyQHSVvKrmL15xlJhcGaQffj pOPOTGQdE07iB6xHRpFJXr4Jlu3fLklPZw2P0uNLsBH/8ebXHy1fPQHCf08oAaMu v/DZqxsDsK8x+e9vyhNQrTEjo130pqwMu2Kxuzw1+WjhRhiqx61CyEU/XN8+TMas Xri7VhNdukMng+lWW7POlSp0VNyf0N3V2wOQ/1tV1yUo4fd/H+vdA/Dix06tdCLf I9eWU+o= -----END CERTIFICATE-----Generated at Fri Aug 8 20:57:18 2025 by rpki-client