$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/60523BEA0CA411ED96936D79C4F9AE02.roa File: 60523BEA0CA411ED96936D79C4F9AE02.roa (raw, json) Hash identifier: 4GJunqqaJYIF16cCsMPgPX96ELnXrrR7663nppGhNhg= Subject key identifier: 5C:0B:25:51:02:C0:FD:47:13:5D:1A:26:27:CC:A2:A7:CD:47:27:68 Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Certificate serial: 03E0 Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/60523BEA0CA411ED96936D79C4F9AE02.roa Signing time: Fri 01 Aug 2025 02:07:40 +0000 ROA not before: Fri 01 Aug 2025 02:07:40 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 133861 IP address blocks: 43.240.28.0/22 maxlen: 22 43.240.28.0/24 maxlen: 24 43.240.29.0/24 maxlen: 24 43.240.30.0/24 maxlen: 24 43.240.31.0/24 maxlen: 24 43.242.32.0/22 maxlen: 22 43.242.32.0/24 maxlen: 24 43.242.33.0/24 maxlen: 24 43.242.34.0/24 maxlen: 24 43.242.35.0/24 maxlen: 24 45.119.96.0/24 maxlen: 24 45.119.97.0/24 maxlen: 24 45.119.98.0/24 maxlen: 24 45.119.99.0/24 maxlen: 24 103.59.144.0/24 maxlen: 24 103.59.145.0/24 maxlen: 24 103.59.146.0/24 maxlen: 24 103.59.147.0/24 maxlen: 24 103.249.108.0/24 maxlen: 24 103.249.109.0/24 maxlen: 24 103.249.110.0/24 maxlen: 24 103.249.111.0/24 maxlen: 24 103.254.148.0/24 maxlen: 24 103.254.149.0/24 maxlen: 24 103.254.150.0/24 maxlen: 24 103.254.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 992 (0x3e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944 Validity Not Before: Aug 1 02:07:40 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688c216c-2ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:40:85:42:f4:9a:f7:ad:59:4c:9e:f8:0e:18: 71:2e:30:ec:b4:25:19:92:e5:6f:03:81:2a:d9:ae: d7:16:43:a8:57:fd:3f:d7:08:de:7e:10:7a:f2:8d: 35:54:b5:98:6c:4f:e9:14:83:62:a7:44:55:1a:72: 6b:11:7b:55:26:13:3c:15:97:4e:8f:b9:0a:61:78: a0:fe:b1:d2:58:aa:e4:5c:ae:4f:2e:82:23:6d:4c: c6:76:a2:45:4a:a7:da:d0:2e:ac:c2:fe:52:88:9e: 88:af:31:54:47:f6:b5:ee:33:c2:31:b6:59:d0:4e: 13:0a:1f:a0:1a:da:b6:0e:f8:48:de:87:fb:5d:c2: 1c:56:4c:45:5e:0d:11:e1:d8:d7:39:e2:d8:53:e2: 7b:31:e3:7c:b8:32:17:ec:de:30:37:61:7a:1c:2f: fc:3a:2e:0d:94:c3:a4:39:4e:53:60:69:af:9e:60: 9e:a7:62:68:10:6d:49:49:85:4e:02:97:ba:3e:c3: 6a:c4:0a:05:07:d1:ad:61:75:e4:cc:94:dd:f0:12: 64:1b:4e:d3:ba:86:09:37:c0:fa:45:40:3e:2d:07: 14:45:fc:a1:a2:97:83:97:ed:21:68:77:4b:f1:9f: 79:97:bf:f1:99:c4:05:2a:01:53:79:59:1f:b5:b9: d4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0B:25:51:02:C0:FD:47:13:5D:1A:26:27:CC:A2:A7:CD:47:27:68 X509v3 Authority Key Identifier: keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/60523BEA0CA411ED96936D79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.240.28.0/22 43.242.32.0/22 45.119.96.0/22 103.59.144.0/22 103.249.108.0/22 103.254.148.0/22 Signature Algorithm: sha256WithRSAEncryption a5:70:f8:f3:29:f7:62:0e:63:44:39:c7:07:00:91:59:c8:78: 41:53:a0:c5:cb:1a:6a:f4:90:4d:c1:33:2d:32:26:7e:7e:98: f6:ef:fa:76:7d:6a:a1:eb:79:4b:01:5d:f5:be:22:45:c9:fa: 23:25:2b:43:fe:e5:ff:64:0b:f9:01:4a:88:57:1f:58:db:97: 8a:70:91:96:1d:2f:9f:42:f0:58:1c:cc:e4:b6:1f:0b:b3:f4: 0a:f0:77:b3:8c:01:bb:44:3e:b0:62:ce:e9:a3:70:e0:bc:7e: e1:bb:5f:38:d2:92:a5:cf:83:c3:f0:68:66:24:2b:04:a2:37: bb:4c:57:39:0c:64:e1:fb:ff:97:45:1f:80:c3:8e:4c:2b:e4: c2:b9:29:31:90:49:de:c3:25:fb:3c:cd:db:fb:8a:c8:aa:98: cc:71:e3:c4:c5:bb:e9:5f:41:b2:be:ce:8a:c3:e1:ca:3d:e1: 84:4c:1e:cf:e8:4f:be:99:b0:b6:9f:b8:2d:22:e4:2b:ab:8e: 85:c7:c5:20:c1:b8:c9:58:c5:0b:18:ec:46:de:2b:f1:45:81: fe:55:9e:26:52:5c:c8:f1:ea:07:8a:d3:ba:4b:8c:9d:ea:a0: 56:f3:34:bf:6a:6e:a6:19:98:cc:2a:61:02:71:c3:2d:2b:3b: 28:96:9e:2f -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz OUI3OTQ5NDQwHhcNMjUwODAxMDIwNzQwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhjMjE2Yy0yYWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokCFQvSa961ZTJ74DhhxLjDstCUZkuVvA4Eq2a7XFkOoV/0/1wjefhB68o01 VLWYbE/pFINip0RVGnJrEXtVJhM8FZdOj7kKYXig/rHSWKrkXK5PLoIjbUzGdqJF Sqfa0C6swv5SiJ6IrzFUR/a17jPCMbZZ0E4TCh+gGtq2DvhI3of7XcIcVkxFXg0R 4djXOeLYU+J7MeN8uDIX7N4wN2F6HC/8Oi4NlMOkOU5TYGmvnmCep2JoEG1JSYVO Ape6PsNqxAoFB9GtYXXkzJTd8BJkG07TuoYJN8D6RUA+LQcURfyhopeDl+0haHdL 8Z95l7/xmcQFKgFTeVkftbnUtQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFFwLJVEC wP1HE10aJifMoqfNRydoMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTUwNEUvNTkwOTQ5OTA5NjA4MTFFQ0EwNEEwMDg2QzRGOUFFMDIvNjA1MjNCRUEw Q0E0MTFFRDk2OTM2RDc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAIr8BwDBAIr8iADBAItd2ADBAJnO5ADBAJn+WwDBAJn/pQw DQYJKoZIhvcNAQELBQADggEBAKVw+PMp92IOY0Q5xwcAkVnIeEFToMXLGmr0kE3B My0yJn5+mPbv+nZ9aqHreUsBXfW+IkXJ+iMlK0P+5f9kC/kBSohXH1jbl4pwkZYd L59C8FgczOS2Hwuz9Arwd7OMAbtEPrBizumjcOC8fuG7XzjSkqXPg8PwaGYkKwSi N7tMVzkMZOH7/5dFH4DDjkwr5MK5KTGQSd7DJfs8zdv7isiqmMxx48TFu+lfQbK+ zorD4co94YRMHs/oT76ZsLafuC0i5CurjoXHxSDBuMlYxQsY7EbeK/FFgf5VniZS XMjx6geK07pLjJ3qoFbzNL9qbqYZmMwqYQJxwy0rOyiWni8= -----END CERTIFICATE-----Generated at Sun Aug 10 21:13:38 2025 by rpki-client