$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/FA4555AA93DC11EEB00AF628C4F9AE02.roa File: FA4555AA93DC11EEB00AF628C4F9AE02.roa (raw, json) Hash identifier: B0CVo9ry++sVZy/2rBP2AlbhG4hjHy12hERvlOOeEZ8= Subject key identifier: 57:4E:AF:9B:73:74:5A:A5:D9:C6:2D:69:D2:FC:CF:4E:59:7A:CE:53 Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1E6E Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/FA4555AA93DC11EEB00AF628C4F9AE02.roa Signing time: Wed 18 Dec 2024 16:43:37 +0000 ROA not before: Wed 18 Dec 2024 16:43:37 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 134729 IP address blocks: 43.92.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7790 (0x1e6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Dec 18 16:43:37 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6762fbb9-7588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b2:4a:f9:e5:ed:e1:80:e4:54:09:a5:96:35: c7:40:0a:de:70:3c:e6:89:50:a9:21:17:85:81:5d: 81:a1:ad:2c:2b:e1:4a:c3:e2:13:68:af:b6:d8:2f: 63:f5:1f:38:0d:38:db:05:05:a2:7a:8b:c4:90:77: 47:d0:2a:98:37:7c:a8:b9:01:74:ff:96:b0:b5:4a: 31:60:fb:74:db:6f:52:14:f5:9c:4f:47:d8:6d:28: b9:a7:86:58:f1:4c:4d:5c:09:65:3a:ed:c4:d3:08: a2:77:50:6b:60:69:63:b0:df:f0:fe:0f:25:96:ff: b1:05:cc:c4:67:df:53:67:e2:fa:45:56:4d:cf:70: 42:e4:d3:56:6b:25:ca:65:eb:8f:32:43:65:b8:d6: e5:f4:0b:00:a7:0b:6d:12:8e:21:33:db:9a:2f:52: 3f:04:3f:41:35:88:f5:f9:cc:3f:43:fe:71:df:ef: 06:1f:82:36:bb:fb:01:a7:ab:9f:3e:ef:df:13:71: 5a:84:2d:fa:23:2d:21:71:48:71:de:26:43:f1:60: 9c:bd:5f:d9:96:81:e0:e6:0c:58:ba:ec:b3:f9:09: f3:92:e9:f6:9c:67:5e:fb:8d:b1:12:ba:78:a8:bc: 79:ed:46:0c:91:70:16:62:fc:23:62:b2:1f:14:82: 70:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4E:AF:9B:73:74:5A:A5:D9:C6:2D:69:D2:FC:CF:4E:59:7A:CE:53 X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/FA4555AA93DC11EEB00AF628C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.92.224.0/19 Signature Algorithm: sha256WithRSAEncryption 43:d2:97:c0:30:0b:fd:83:86:46:f5:08:13:8b:be:e9:b6:c2: 5c:c1:01:2d:01:d5:0d:82:62:e9:4e:b3:6d:ae:e6:cd:b3:08: 73:b6:45:cf:26:c4:7e:73:8b:1b:9a:fc:ef:eb:ee:62:15:3a: b9:42:df:29:ff:23:45:08:8d:f5:cd:88:52:19:6c:51:d0:91: b2:94:28:f1:af:4a:c9:9d:8b:a5:e5:06:e5:76:d7:bf:17:b6: 36:af:35:13:bb:c4:11:44:a9:74:44:2b:a9:1a:05:0f:6a:33: 7e:03:1a:b2:9c:c1:40:78:eb:e5:3c:98:72:e1:80:19:65:ae: 0a:25:8b:43:0d:f2:8b:f7:df:6c:d1:40:ef:2f:c8:30:ed:27: 97:97:53:3a:22:bc:27:8f:90:d8:d2:bc:e4:4a:65:0b:cf:30: 84:af:18:48:a1:eb:a3:ae:d1:ff:a9:a9:2a:d9:f2:4f:ed:57: 65:78:09:71:c1:56:f2:3c:73:e1:a2:08:26:83:65:0b:4c:15: 47:a8:81:cf:11:31:e4:f7:e0:7d:22:9c:30:1f:26:ab:eb:bb: c5:6d:90:ab:37:68:89:19:0d:98:32:f0:27:cb:60:99:42:34: 14:c7:10:2a:fc:96:2e:32:dd:ad:a0:84:d9:8b:db:cd:5a:6a: 57:46:1c:b4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjQxMjE4MTY0MzM3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYyZmJiOS03NTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorJK+eXt4YDkVAmlljXHQArecDzmiVCpIReFgV2Boa0sK+FKw+ITaK+22C9j 9R84DTjbBQWieovEkHdH0CqYN3youQF0/5awtUoxYPt0229SFPWcT0fYbSi5p4ZY 8UxNXAllOu3E0wiid1BrYGljsN/w/g8llv+xBczEZ99TZ+L6RVZNz3BC5NNWayXK ZeuPMkNluNbl9AsApwttEo4hM9uaL1I/BD9BNYj1+cw/Q/5x3+8GH4I2u/sBp6uf Pu/fE3FahC36Iy0hcUhx3iZD8WCcvV/ZloHg5gxYuuyz+Qnzkun2nGde+42xErp4 qLx57UYMkXAWYvwjYrIfFIJwMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFdOr5tz dFql2cYtadL8z05Zes5TMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUExOTgvOTkzRjIwOTBBQkM0MTFFNkJENkJFRDE0QzRGOUFFMDIvRkE0NTU1QUE5 M0RDMTFFRUIwMEFGNjI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAUrXOAwDQYJKoZIhvcNAQELBQADggEBAEPSl8AwC/2Dhkb1 CBOLvum2wlzBAS0B1Q2CYulOs22u5s2zCHO2Rc8mxH5zixua/O/r7mIVOrlC3yn/ I0UIjfXNiFIZbFHQkbKUKPGvSsmdi6XlBuV2178XtjavNRO7xBFEqXREK6kaBQ9q M34DGrKcwUB46+U8mHLhgBllrgoli0MN8ov332zRQO8vyDDtJ5eXUzoivCePkNjS vORKZQvPMISvGEih66Ou0f+pqSrZ8k/tV2V4CXHBVvI8c+GiCCaDZQtMFUeogc8R MeT34H0inDAfJqvru8VtkKs3aIkZDZgy8CfLYJlCNBTHECr8li4y3a2ghNmL281a aldGHLQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:29 2025 by rpki-client