$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AFD67E1C912A11EF94655626C4F9AE02.roa File: AFD67E1C912A11EF94655626C4F9AE02.roa (raw, json) Hash identifier: S0MMLApHAoQOnTZjykQzrWCMopdYW0jusWWiw9L3TPg= Subject key identifier: 7D:2E:2D:9E:EC:3B:75:F6:A0:21:C3:66:72:5C:8E:ED:EE:87:0A:26 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 28B7 Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AFD67E1C912A11EF94655626C4F9AE02.roa Signing time: Wed 30 Jul 2025 07:59:42 +0000 ROA not before: Wed 30 Jul 2025 07:59:42 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 7029 IP address blocks: 43.254.12.0/22 maxlen: 24 115.167.0.0/24 maxlen: 24 115.167.4.0/24 maxlen: 24 115.167.108.0/22 maxlen: 24 115.167.126.0/24 maxlen: 24 115.167.127.0/24 maxlen: 24 175.110.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10423 (0x28b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Jul 30 07:59:42 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6889d0ee-47e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5b:5f:fd:37:67:43:f6:0b:2b:62:54:b9:59: 79:d9:a9:23:0c:cc:69:3d:5e:03:ce:96:4a:2a:89: 0a:10:49:74:5d:97:11:ee:65:52:92:70:00:f2:d5: 03:e8:0b:ca:f1:73:0e:4e:75:9e:a1:9b:b1:d0:c6: a4:85:ba:bb:87:67:52:da:f8:86:21:44:38:c2:05: 9b:62:a0:d2:2a:12:14:f0:ae:22:fa:cf:36:50:74: 79:1c:b5:36:58:5c:ee:aa:e3:ff:1f:16:47:5a:2f: 48:16:bf:b8:79:3c:62:41:f4:ef:9a:bd:29:d2:69: d4:8e:dc:98:b7:26:f5:74:9e:fb:ac:ea:a3:72:e7: a0:65:dc:17:3b:01:14:7f:9a:f4:f8:d3:e1:31:78: 9f:f3:82:de:17:10:2b:13:78:5b:30:c7:4b:f7:80: 6d:c9:ed:01:41:de:e2:e8:0b:2a:c8:e7:6d:05:13: 8d:2d:50:00:a5:c0:dd:49:47:8d:1b:a7:c6:32:40: 3e:2c:8a:96:d1:cb:cb:0f:f0:c5:11:5f:dd:aa:b8: e1:79:ac:5b:d6:b4:f5:b9:4c:89:6a:20:73:d7:c6: e7:00:71:38:4f:68:22:d4:82:8d:6c:a0:34:43:89: e9:ed:fb:f1:a8:1f:cf:52:4a:62:4f:bd:cb:23:6a: 25:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2E:2D:9E:EC:3B:75:F6:A0:21:C3:66:72:5C:8E:ED:EE:87:0A:26 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AFD67E1C912A11EF94655626C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.254.12.0/22 115.167.0.0/24 115.167.4.0/24 115.167.108.0/22 115.167.126.0/23 175.110.68.0/22 Signature Algorithm: sha256WithRSAEncryption b0:3c:cf:0c:d0:db:86:6d:f3:fc:4a:8b:91:9f:d0:ca:4b:1e: 70:b6:36:70:a2:4b:ee:90:ae:ea:9b:24:97:2b:5b:bb:1e:75: 9a:24:d7:2d:2d:32:9d:4e:e4:b0:56:77:f6:77:c3:d9:af:eb: e8:58:12:4b:6c:64:be:c4:f0:f4:f6:5b:af:29:3e:8b:ef:fd: 01:80:8d:65:0d:87:42:5f:ce:78:0c:4b:99:51:8f:9e:39:c5: 49:24:e1:a8:1c:c6:d1:59:6c:6d:1c:96:e9:1e:9a:2c:a2:92: 07:2d:d8:c3:3b:2c:7b:19:73:b4:05:f9:07:94:22:65:47:76: 83:74:9e:9e:58:36:ae:7d:f4:eb:4b:fd:29:48:76:44:07:c4: b7:c9:be:30:38:f4:9d:b1:1b:27:ef:0e:8b:70:e9:9f:bd:23: 47:ba:40:bd:85:f7:71:1a:58:48:9d:9d:d8:11:e2:27:e2:2e: b3:85:ae:18:a6:27:4b:9a:e2:65:e6:c3:db:0b:cb:81:e8:aa: 2f:89:d1:68:f1:b8:56:76:aa:b6:58:0e:27:0a:ca:34:bc:a6: ad:7e:12:ef:3f:69:3f:2d:2b:fa:5b:5e:1d:06:01:0d:cf:6b: 9d:b1:ed:5c:6a:85:f2:26:1f:33:29:4a:3c:92:1a:8d:40:3b: 46:b1:63:42 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICKLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjUwNzMwMDc1OTQyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg5ZDBlZS00N2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFtf/TdnQ/YLK2JUuVl52akjDMxpPV4DzpZKKokKEEl0XZcR7mVSknAA8tUD 6AvK8XMOTnWeoZux0Makhbq7h2dS2viGIUQ4wgWbYqDSKhIU8K4i+s82UHR5HLU2 WFzuquP/HxZHWi9IFr+4eTxiQfTvmr0p0mnUjtyYtyb1dJ77rOqjcuegZdwXOwEU f5r0+NPhMXif84LeFxArE3hbMMdL94Btye0BQd7i6AsqyOdtBRONLVAApcDdSUeN G6fGMkA+LIqW0cvLD/DFEV/dqrjheaxb1rT1uUyJaiBz18bnAHE4T2gi1IKNbKA0 Q4np7fvxqB/PUkpiT73LI2oltQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFH0uLZ7s O3X2oCHDZnJcju3uhwomMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQUZENjdFMUM5 MTJBMTFFRjk0NjU1NjI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAIr/gwDBABzpwADBABzpwQDBAJzp2wDBAFzp34DBAKvbkQw DQYJKoZIhvcNAQELBQADggEBALA8zwzQ24Zt8/xKi5Gf0MpLHnC2NnCiS+6Qruqb JJcrW7sedZok1y0tMp1O5LBWd/Z3w9mv6+hYEktsZL7E8PT2W68pPovv/QGAjWUN h0JfzngMS5lRj545xUkk4agcxtFZbG0clukemiyikgct2MM7LHsZc7QF+QeUImVH doN0np5YNq599OtL/SlIdkQHxLfJvjA49J2xGyfvDotw6Z+9I0e6QL2F93EaWEid ndgR4ifiLrOFrhimJ0ua4mXmw9sLy4Hoqi+J0WjxuFZ2qrZYDicKyjS8pq1+Eu8/ aT8tK/pbXh0GAQ3Pa52x7VxqhfImHzMpSjySGo1AO0axY0I= -----END CERTIFICATE-----Generated at Sun Aug 10 04:51:23 2025 by rpki-client