$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/2B6413D4670811EF9D46FA4FC4F9AE02.roa File: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (raw, json) Hash identifier: pEMsHg7hpkICm+xaNCW+Re7HwXfnTTFuauFbRpCHC+4= Subject key identifier: 4F:93:73:19:D5:8E:6B:33:BC:E3:9A:C1:87:6A:7A:9C:5B:E4:5C:EE Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: E4 Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/2B6413D4670811EF9D46FA4FC4F9AE02.roa Signing time: Mon 13 Jan 2025 04:08:16 +0000 ROA not before: Mon 13 Jan 2025 04:08:16 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 150750 IP address blocks: 113.192.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Jan 13 04:08:16 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=678491af-dbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:08:14:11:51:37:df:4c:85:d9:5e:03:fd:c2: 47:80:b3:7f:ff:11:5f:ae:23:7f:0a:b9:52:8a:8e: ea:97:28:35:47:0b:ed:de:70:d5:c6:3a:a2:e5:90: b3:72:c0:4f:58:4b:5b:9e:ad:d8:ea:b3:4c:ff:b2: 21:d9:22:99:c5:8d:83:c6:d7:8f:58:b5:68:1a:3c: 85:67:74:e5:89:60:8e:05:f4:c0:f9:e0:42:9d:f2: 8c:fb:57:09:58:28:d6:87:4a:5c:b7:e6:1d:38:35: 5a:5b:c8:aa:58:65:c8:87:b2:d7:0e:14:91:60:77: b8:ad:e2:42:70:a7:55:21:f6:fd:ba:79:bc:1e:16: ff:bb:89:75:93:db:25:49:2b:73:83:ee:a8:84:34: 92:10:5f:3d:af:89:94:fc:07:ff:62:47:02:77:af: fe:8f:d7:df:a8:64:f8:6d:7b:ea:d2:0b:6f:59:ba: 34:6c:ec:6c:c6:a2:ee:a2:d3:5a:f8:51:58:93:ba: 22:2f:17:c7:d1:d4:bc:8c:ca:3a:93:b4:25:e6:57: a5:70:2a:f3:5b:9b:07:aa:2d:66:28:5c:94:8f:c1: 09:08:11:6b:5a:8d:42:93:fa:dd:12:7d:fa:3f:4a: c9:e0:62:50:10:f6:a1:fb:ce:23:a0:e2:b5:b7:83: c0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:93:73:19:D5:8E:6B:33:BC:E3:9A:C1:87:6A:7A:9C:5B:E4:5C:EE X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/2B6413D4670811EF9D46FA4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.192.47.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:09:14:35:b4:fd:11:8e:87:a4:e3:9b:4c:b5:da:29:8f:d5: d1:bb:c6:e6:f5:64:e1:5b:ec:05:08:cc:ec:c9:a8:e5:d1:01: e0:1b:81:c2:b1:7c:ea:0e:49:15:49:ae:f0:38:4c:b5:0d:71: d6:01:6c:ee:1e:7a:c2:ba:18:d1:e3:76:bb:24:c9:eb:47:3f: ef:af:04:54:e7:85:5b:75:11:c5:0b:a4:f0:be:d4:85:48:b7: 43:7a:2e:72:c7:66:7b:f6:f2:68:0e:24:80:ca:d1:43:45:cb: 9b:33:e4:f5:eb:16:72:06:70:af:36:1c:cf:28:75:93:48:28: 70:ea:29:f3:7f:2d:36:5c:81:25:7f:92:f6:91:9d:ac:0d:e3: b5:67:79:ef:13:27:c6:37:3d:c9:4c:09:32:dc:ba:53:f9:a7: 44:20:e2:cf:14:a4:ef:0a:3e:ad:8d:f2:6c:57:bf:3f:97:9a: 4f:65:6a:b3:d8:53:5f:95:da:a5:d5:3a:36:bc:5d:6c:62:e6: 72:77:27:b8:55:9a:43:08:02:13:9f:80:ea:59:06:1d:af:25: ec:82:33:ba:89:1b:04:d6:9a:87:16:73:c6:b5:8b:2f:65:1c: 28:f9:92:c9:87:21:63:28:14:59:6f:a3:39:9f:4c:8b:1b:99: 1a:db:98:40 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjUwMTEzMDQwODE2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg0OTFhZi1kYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QgUEVE330yF2V4D/cJHgLN//xFfriN/CrlSio7qlyg1Rwvt3nDVxjqi5ZCz csBPWEtbnq3Y6rNM/7Ih2SKZxY2DxtePWLVoGjyFZ3TliWCOBfTA+eBCnfKM+1cJ WCjWh0pct+YdODVaW8iqWGXIh7LXDhSRYHe4reJCcKdVIfb9unm8Hhb/u4l1k9sl SStzg+6ohDSSEF89r4mU/Af/YkcCd6/+j9ffqGT4bXvq0gtvWbo0bOxsxqLuotNa +FFYk7oiLxfH0dS8jMo6k7Ql5lelcCrzW5sHqi1mKFyUj8EJCBFrWo1Ck/rdEn36 P0rJ4GJQEPah+84joOK1t4PA6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFE+TcxnV jmszvOOawYdqepxb5FzuMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDYzRUEvNTBBNDI4OUU5NUZGMTFFRUE2QTRGNzBBQzRGOUFFMDIvMkI2NDEzRDQ2 NzA4MTFFRjlENDZGQTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABxwC8wDQYJKoZIhvcNAQELBQADggEBAG8JFDW0/RGOh6Tj m0y12imP1dG7xub1ZOFb7AUIzOzJqOXRAeAbgcKxfOoOSRVJrvA4TLUNcdYBbO4e esK6GNHjdrskyetHP++vBFTnhVt1EcULpPC+1IVIt0N6LnLHZnv28mgOJIDK0UNF y5sz5PXrFnIGcK82HM8odZNIKHDqKfN/LTZcgSV/kvaRnawN47Vnee8TJ8Y3PclM CTLculP5p0Qg4s8UpO8KPq2N8mxXvz+Xmk9larPYU1+V2qXVOja8XWxi5nJ3J7hV mkMIAhOfgOpZBh2vJeyCM7qJGwTWmocWc8a1iy9lHCj5ksmHIWMoFFlvozmfTIsb mRrbmEA= -----END CERTIFICATE-----Generated at Wed Nov 5 19:50:10 2025 by rpki-client