$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/6CAAA4586C5111F08D82894CC4F9AE02.roa File: 6CAAA4586C5111F08D82894CC4F9AE02.roa (raw, json) Hash identifier: e0Boz/2zfsZ25NXkwWQ4uGTrNr//Zb/uhgLC2rYh7PI= Subject key identifier: 57:0D:9E:79:03:9B:04:78:69:02:66:1B:C8:0D:AF:9A:56:3E:28:D7 Certificate issuer: /CN=A91E8432/serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Certificate serial: 02 Authority key identifier: 96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/6CAAA4586C5111F08D82894CC4F9AE02.roa Signing time: Tue 29 Jul 2025 07:55:42 +0000 ROA not before: Tue 29 Jul 2025 07:55:42 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153952 IP address blocks: 202.1.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8432, serialNumber=96FC3D1F8795BEE9EAA1EB95D29A59C8A40273D3 Validity Not Before: Jul 29 07:55:42 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68887e7e-2a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0a:b3:bd:d0:0b:97:d6:20:25:22:c6:b1:81: ce:d0:f5:b5:35:54:85:21:6c:ce:49:b9:bb:be:a0: 7c:9b:91:b5:d0:29:22:f3:40:7f:77:23:d9:2f:5c: 2c:19:25:fd:05:67:cf:a1:3f:76:1b:b5:a6:7a:e6: 53:af:90:c4:ea:c1:d8:4f:fb:b1:5e:51:47:06:ff: 22:f7:c0:12:ff:82:90:ba:a0:5f:b0:fd:aa:65:0f: a6:61:25:77:0b:51:5f:9a:76:68:5b:b4:5d:6d:56: 36:a3:3a:3b:24:57:90:35:67:a8:e6:85:86:29:d0: c1:a5:fd:08:40:91:d2:77:db:90:26:9d:1b:4a:55: 9e:f7:52:14:74:4f:8a:da:ab:f4:aa:36:ee:d1:bd: 21:71:0f:5b:ce:e3:99:e7:84:7b:5b:79:46:d3:39: a5:98:01:c9:10:a8:d2:98:ce:24:df:47:59:d3:8e: 6d:28:78:72:ff:b7:34:a4:f7:2b:d2:bb:59:19:eb: 49:c3:e7:f8:77:32:70:e8:d7:a0:4e:be:a7:b2:6f: 89:1b:9e:87:0a:42:40:59:79:ea:1a:84:ea:88:44: a0:09:1c:42:00:24:df:e1:b0:e0:e9:a2:2a:c9:66: b2:81:22:5d:9b:33:b9:40:89:6f:d8:a3:d9:ef:03: 82:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0D:9E:79:03:9B:04:78:69:02:66:1B:C8:0D:AF:9A:56:3E:28:D7 X509v3 Authority Key Identifier: keyid:96:FC:3D:1F:87:95:BE:E9:EA:A1:EB:95:D2:9A:59:C8:A4:02:73:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/lvw9H4eVvunqoeuV0ppZyKQCc9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvw9H4eVvunqoeuV0ppZyKQCc9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8432/FB685B1E6C5011F08998074BC4F9AE02/6CAAA4586C5111F08D82894CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.1.20.0/23 Signature Algorithm: sha256WithRSAEncryption cf:5a:95:d4:1b:89:41:bd:ca:18:e0:09:d3:13:20:ee:56:33: 69:b9:03:e3:9e:ae:67:a5:fe:c3:7c:09:5c:8c:15:84:5d:05: 31:c2:ce:dc:51:1d:bb:a3:93:da:c9:89:0e:2c:ee:84:da:20: d5:6e:01:50:cb:4b:b8:2a:64:45:9c:3c:e0:9c:eb:49:d3:14: db:06:ee:4e:0e:03:34:1b:73:64:62:d0:eb:08:87:eb:59:c9: e6:3d:c9:77:2c:34:e8:5d:98:e5:aa:7f:68:9d:63:a9:86:76: cb:35:46:91:e0:d6:2e:19:0c:de:d8:89:18:3c:30:c9:1e:56: 6d:f5:61:cb:e4:2c:39:60:ca:6b:8b:ec:b7:5e:90:ae:90:ba: 03:7a:97:ac:1f:0f:19:8e:45:5b:24:7c:c6:39:d4:40:d5:df: 03:04:73:18:fa:40:53:9c:4c:68:2e:9c:a0:4e:fa:19:aa:e7: d9:e9:e1:c1:92:28:fa:3e:46:fa:19:24:38:ea:ac:12:3e:eb: 41:79:09:ce:5b:8b:39:23:0a:47:39:9a:22:19:f6:09:fc:55: 96:d6:1d:00:fa:8a:58:bb:aa:7e:e3:2e:80:a0:13:ca:12:39: d9:35:50:64:b6:a7:b4:6c:57:93:cb:a4:93:ac:41:80:67:5d: 0f:8b:14:89 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODQzMjExMC8GA1UEBRMoOTZGQzNEMUY4Nzk1QkVFOUVBQTFFQjk1RDI5QTU5QzhB NDAyNzNEMzAeFw0yNTA3MjkwNzU1NDJaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ODg3ZTdlLTJhM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnCrO90AuX1iAlIsaxgc7Q9bU1VIUhbM5Jubu+oHybkbXQKSLzQH93I9kvXCwZ Jf0FZ8+hP3YbtaZ65lOvkMTqwdhP+7FeUUcG/yL3wBL/gpC6oF+w/aplD6ZhJXcL UV+admhbtF1tVjajOjskV5A1Z6jmhYYp0MGl/QhAkdJ325AmnRtKVZ73UhR0T4ra q/SqNu7RvSFxD1vO45nnhHtbeUbTOaWYAckQqNKYziTfR1nTjm0oeHL/tzSk9yvS u1kZ60nD5/h3MnDo16BOvqeyb4kbnocKQkBZeeoahOqIRKAJHEIAJN/hsODpoirJ ZrKBIl2bM7lAiW/Yo9nvA4JtAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUVw2eeQOb BHhpAmYbyA2vmlY+KNcwHwYDVR0jBBgwFoAUlvw9H4eVvunqoeuV0ppZyKQCc9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NDMyL0ZCNjg1QjFFNkM1 MDExRjA4OTk4MDc0QkM0RjlBRTAyL2x2dzlINGVWdnVucW9ldVYwcHBaeUtRQ2M5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbHZ3OUg0ZVZ2dW5xb2V1VjBwcFp5S1FDYzlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODQzMi9GQjY4NUIxRTZDNTAxMUYwODk5ODA3NEJDNEY5QUUwMi82Q0FBQTQ1ODZD NTExMUYwOEQ4Mjg5NENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcoBFDANBgkqhkiG9w0BAQsFAAOCAQEAz1qV1BuJQb3KGOAJ 0xMg7lYzabkD456uZ6X+w3wJXIwVhF0FMcLO3FEdu6OT2smJDizuhNog1W4BUMtL uCpkRZw84JzrSdMU2wbuTg4DNBtzZGLQ6wiH61nJ5j3Jdyw06F2Y5ap/aJ1jqYZ2 yzVGkeDWLhkM3tiJGDwwyR5WbfVhy+QsOWDKa4vst16QrpC6A3qXrB8PGY5FWyR8 xjnUQNXfAwRzGPpAU5xMaC6coE76Garn2enhwZIo+j5G+hkkOOqsEj7rQXkJzluL OSMKRzmaIhn2CfxVltYdAPqKWLuqfuMugKATyhI52TVQZLantGxXk8ukk6xBgGdd D4sUiQ== -----END CERTIFICATE-----Generated at Sat Aug 9 15:09:40 2025 by rpki-client