$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0F622CE267DF11F0B0FE2965C4F9AE02.roa File: 0F622CE267DF11F0B0FE2965C4F9AE02.roa (raw, json) Hash identifier: 6wiW5rSZhJ7AajW2wJDcb+kd1GwZLeWDxMOFqAtosWk= Subject key identifier: 64:30:AE:DB:A0:E8:01:81:96:11:53:6C:B2:75:A2:8E:E7:C5:9A:DB Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 28A7 Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0F622CE267DF11F0B0FE2965C4F9AE02.roa Signing time: Wed 23 Jul 2025 16:06:58 +0000 ROA not before: Wed 23 Jul 2025 16:06:58 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 10753 IP address blocks: 115.167.100.0/24 maxlen: 24 175.110.72.0/22 maxlen: 24 175.110.84.0/22 maxlen: 24 180.178.151.0/24 maxlen: 24 223.29.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10407 (0x28a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Jul 23 16:06:58 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=688108a2-d31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:8d:5a:d5:81:8f:81:49:e9:17:5f:e9:e7: 4e:1a:b4:ec:28:9f:0b:db:82:ce:23:d7:4a:57:55: 4a:2d:12:bf:97:14:f2:29:f6:1f:23:94:2a:a5:dd: ac:cf:a0:10:ae:91:b1:89:1d:93:71:26:90:0b:cd: d1:c5:9b:ec:ca:c5:bf:e5:c0:3c:f7:71:fd:70:0f: 36:61:c4:1b:b5:46:3b:c2:70:b6:c6:37:e7:3b:6d: 6c:3a:21:41:58:46:66:13:c5:e5:04:e3:cd:0c:7a: 72:72:95:78:5f:46:f0:b1:af:b0:14:51:dc:dd:ad: 47:13:7e:b1:18:9e:a8:de:ae:67:2c:45:7b:52:71: b1:f5:f7:8d:1d:5c:75:60:4a:9a:97:26:1b:3a:d4: 83:28:ad:b8:f9:04:b1:64:6f:d5:44:72:b0:d6:8b: c9:fc:87:10:67:ab:a5:f7:64:75:65:bc:4f:1c:4c: 84:e3:97:46:ae:7b:ef:1e:29:67:e6:c9:f5:09:82: e6:ba:11:b5:65:72:a1:fa:d1:c8:2b:ef:c7:7c:68: 09:ee:8d:b8:37:0f:f9:31:50:a7:87:cd:c0:80:61: c7:a0:64:39:52:b8:e2:80:5d:ce:22:e3:f5:2e:cc: 67:ef:eb:14:60:ef:8b:12:12:c5:22:cd:cb:a0:f3: 6d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:30:AE:DB:A0:E8:01:81:96:11:53:6C:B2:75:A2:8E:E7:C5:9A:DB X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0F622CE267DF11F0B0FE2965C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.167.100.0/24 175.110.72.0/22 175.110.84.0/22 180.178.151.0/24 223.29.227.0/24 Signature Algorithm: sha256WithRSAEncryption 93:93:a8:98:67:c8:cd:c9:06:56:dc:29:4d:2a:7d:23:72:05: 4f:15:3d:dc:8a:b7:73:12:9a:a2:40:18:15:4d:5b:bd:f0:d9: 54:fe:27:b4:bc:0c:a4:61:6d:e9:05:90:75:45:38:6a:74:e0: df:4d:54:ec:b4:2d:a3:2b:e7:5e:1a:39:16:04:d8:22:50:ee: ca:eb:0f:d5:f4:9f:0d:83:1a:08:8a:80:45:38:95:f1:ed:c5: 15:09:72:4a:8b:e8:f5:79:6e:98:df:7d:2c:a8:56:73:69:ae: 92:35:92:a0:14:5a:c7:4d:13:02:04:db:06:2b:1c:57:1f:6a: 7c:73:a8:8d:69:b9:86:83:86:ab:d1:3f:7f:1a:dc:57:b1:8b: 11:78:77:03:f1:4b:c2:ca:55:0b:99:ca:75:0e:a1:6e:37:8b: a5:ad:b2:f1:ca:9c:77:5f:f9:3c:a1:3a:18:04:94:f2:ee:58: 14:36:14:b5:85:f8:eb:61:d1:81:49:2a:4d:f8:62:e0:10:89: 87:a0:3c:bf:c2:15:7e:49:d8:7d:2a:ab:0e:8a:98:fa:67:9e: 30:fb:cf:eb:f7:ea:0c:d5:ab:78:c8:82:af:61:56:05:9e:1e: 06:a4:6d:c1:59:b3:ae:4e:e6:20:8d:db:36:4c:03:10:4a:3a: da:ba:01:04 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICKKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjUwNzIzMTYwNjU4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgxMDhhMi1kMzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsCNWtWBj4FJ6Rdf6edOGrTsKJ8L24LOI9dKV1VKLRK/lxTyKfYfI5Qqpd2s z6AQrpGxiR2TcSaQC83RxZvsysW/5cA893H9cA82YcQbtUY7wnC2xjfnO21sOiFB WEZmE8XlBOPNDHpycpV4X0bwsa+wFFHc3a1HE36xGJ6o3q5nLEV7UnGx9feNHVx1 YEqalyYbOtSDKK24+QSxZG/VRHKw1ovJ/IcQZ6ul92R1ZbxPHEyE45dGrnvvHiln 5sn1CYLmuhG1ZXKh+tHIK+/HfGgJ7o24Nw/5MVCnh83AgGHHoGQ5UrjigF3OIuP1 Lsxn7+sUYO+LEhLFIs3LoPNtuwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFGQwrtug 6AGBlhFTbLJ1oo7nxZrbMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMEY2MjJDRTI2 N0RGMTFGMEIwRkUyOTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBABzp2QDBAKvbkgDBAKvblQDBAC0spcDBADfHeMwDQYJKoZI hvcNAQELBQADggEBAJOTqJhnyM3JBlbcKU0qfSNyBU8VPdyKt3MSmqJAGBVNW73w 2VT+J7S8DKRhbekFkHVFOGp04N9NVOy0LaMr514aORYE2CJQ7srrD9X0nw2DGgiK gEU4lfHtxRUJckqL6PV5bpjffSyoVnNprpI1kqAUWsdNEwIE2wYrHFcfanxzqI1p uYaDhqvRP38a3FexixF4dwPxS8LKVQuZynUOoW43i6WtsvHKnHdf+TyhOhgElPLu WBQ2FLWF+Oth0YFJKk34YuAQiYegPL/CFX5J2H0qqw6KmPpnnjD7z+v36gzVq3jI gq9hVgWeHgakbcFZs65O5iCN2zZMAxBKOtq6AQQ= -----END CERTIFICATE-----Generated at Sun Aug 10 05:37:01 2025 by rpki-client