$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/410B457E609811F0A70C2B32C4F9AE02.roa File: 410B457E609811F0A70C2B32C4F9AE02.roa (raw, json) Hash identifier: AJZwPASrCJ7F+xJTKr0sCmRQySB9T9a/QWn2vj0KBKs= Subject key identifier: D8:7C:62:8F:5A:E6:1E:2C:88:F8:74:D0:55:61:FC:C6:3A:6C:43:D4 Certificate issuer: /CN=A91EBA1C/serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Certificate serial: 22A0 Authority key identifier: 51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/410B457E609811F0A70C2B32C4F9AE02.roa Signing time: Mon 14 Jul 2025 16:23:53 +0000 ROA not before: Mon 14 Jul 2025 16:23:53 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 63980 IP address blocks: 59.153.200.0/22 maxlen: 24 103.57.20.0/22 maxlen: 24 2402:5380::/33 maxlen: 36 2402:5380:8000::/33 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 15:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8864 (0x22a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA1C, serialNumber=51C2611B461DD511835A5141F8AEE502D3A39AEB Validity Not Before: Jul 14 16:23:53 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68752f19-e820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:63:42:d1:5d:83:17:91:d0:f2:74:da:0e: 9f:6e:72:a3:26:82:76:8a:bd:88:75:5a:7d:89:06: ea:ef:f6:9c:bb:fa:77:46:19:8e:36:9f:50:b5:f4: 88:eb:b1:2a:fe:09:10:75:8c:e8:96:73:d4:4f:4f: cd:64:53:55:19:fb:ee:eb:51:85:3f:16:64:0f:ae: 04:54:ce:90:7c:91:96:91:78:91:65:e8:58:e9:ac: 50:d5:15:14:69:d9:20:61:cc:e5:43:88:e7:ab:ea: ec:6c:2c:83:c9:02:6a:00:e4:19:3f:84:ac:7b:f0: 8a:29:cb:94:c6:f0:f5:61:71:0b:78:64:8f:59:d7: 6c:b4:61:92:6a:d5:35:5c:ee:4f:62:97:10:7d:04: af:a6:68:ec:c1:6f:75:78:76:44:ee:bb:bb:dd:56: c6:cb:56:b9:76:a4:5c:41:cc:63:97:af:d7:1b:8c: ca:6d:eb:73:7b:83:aa:48:02:1b:c9:68:ec:15:52: 03:d2:8c:28:b5:ae:5e:53:78:9e:13:5f:36:72:c7: be:05:61:dd:7f:c7:46:31:e6:a9:0c:68:a2:60:ec: 16:72:7c:23:9e:b7:dc:d8:da:46:d4:db:be:7c:21: 93:63:3f:a2:c8:a3:49:b2:5b:2f:fc:5d:05:fc:d4: 3e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7C:62:8F:5A:E6:1E:2C:88:F8:74:D0:55:61:FC:C6:3A:6C:43:D4 X509v3 Authority Key Identifier: keyid:51:C2:61:1B:46:1D:D5:11:83:5A:51:41:F8:AE:E5:02:D3:A3:9A:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/UcJhG0Yd1RGDWlFB-K7lAtOjmus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcJhG0Yd1RGDWlFB-K7lAtOjmus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA1C/63B214A2C81511E581D20884C4F9AE02/410B457E609811F0A70C2B32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.153.200.0/22 103.57.20.0/22 IPv6: 2402:5380::/32 Signature Algorithm: sha256WithRSAEncryption 9e:26:af:5f:83:e8:93:f4:57:f7:45:af:9c:5f:17:5f:52:39: 9c:b9:09:db:50:1b:89:52:ee:00:b9:7a:e6:6e:d1:33:d7:5c: d9:19:e6:33:e5:90:ec:4d:54:40:ab:82:47:06:76:8b:8d:8d: 5c:78:a1:46:33:47:cd:80:15:db:80:c2:19:ec:66:f4:a8:cf: 30:5b:3b:98:29:21:96:33:74:bc:a8:31:eb:1d:1d:e5:ca:9c: ff:de:0d:a4:b0:96:6e:be:9e:1c:89:ca:bd:f8:c3:a6:82:5c: 0b:c2:17:6f:1f:3b:fa:36:05:76:31:07:97:de:63:e7:a9:08: 37:95:81:b7:aa:6c:72:f9:97:92:7c:86:28:8a:dd:87:b9:e8: db:a3:1d:1e:bc:41:b7:e6:9b:5b:f6:99:66:ed:32:83:4c:e6: 79:60:19:9a:9b:0c:c1:b6:0d:8c:df:12:7a:45:f7:ea:0e:ac: d2:dd:90:14:79:e6:11:33:63:33:43:16:4d:29:1e:9b:cb:2f: 7d:f9:73:39:a6:9b:36:d5:a3:f8:65:cc:23:b5:29:68:44:1e: 69:d3:ac:01:2d:6e:f0:b3:79:95:9c:e7:22:e9:bf:87:6e:dd: dc:6d:6c:a5:48:df:18:6d:3b:89:53:5b:03:ec:61:c1:22:91: 20:02:f4:31 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICIqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMUMxMTAvBgNVBAUTKDUxQzI2MTFCNDYxREQ1MTE4MzVBNTE0MUY4QUVFNTAy RDNBMzlBRUIwHhcNMjUwNzE0MTYyMzUzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1MmYxOS1lODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXxjQtFdgxeR0PJ02g6fbnKjJoJ2ir2IdVp9iQbq7/acu/p3RhmONp9QtfSI 67Eq/gkQdYzolnPUT0/NZFNVGfvu61GFPxZkD64EVM6QfJGWkXiRZehY6axQ1RUU adkgYczlQ4jnq+rsbCyDyQJqAOQZP4Sse/CKKcuUxvD1YXELeGSPWddstGGSatU1 XO5PYpcQfQSvpmjswW91eHZE7ru73VbGy1a5dqRcQcxjl6/XG4zKbetze4OqSAIb yWjsFVID0owota5eU3ieE182cse+BWHdf8dGMeapDGiiYOwWcnwjnrfc2NpG1Nu+ fCGTYz+iyKNJslsv/F0F/NQ+QQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNh8Yo9a 5h4siPh00FVh/MY6bEPUMB8GA1UdIwQYMBaAFFHCYRtGHdURg1pRQfiu5QLTo5rr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkExQy82M0IyMTRBMkM4 MTUxMUU1ODFEMjA4ODRDNEY5QUUwMi9VY0poRzBZZDFSR0RXbEZCLUs3bEF0T2pt dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VjSmhHMFlkMVJHRFdsRkItSzdsQXRPam11cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJBMUMvNjNCMjE0QTJDODE1MTFFNTgxRDIwODg0QzRGOUFFMDIvNDEwQjQ1N0U2 MDk4MTFGMEE3MEMyQjMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAI7mcgDBAJnORQwDQQCAAIwBwMFACQCU4AwDQYJKoZIhvcN AQELBQADggEBAJ4mr1+D6JP0V/dFr5xfF19SOZy5CdtQG4lS7gC5euZu0TPXXNkZ 5jPlkOxNVECrgkcGdouNjVx4oUYzR82AFduAwhnsZvSozzBbO5gpIZYzdLyoMesd HeXKnP/eDaSwlm6+nhyJyr34w6aCXAvCF28fO/o2BXYxB5feY+epCDeVgbeqbHL5 l5J8hiiK3Ye56NujHR68Qbfmm1v2mWbtMoNM5nlgGZqbDMG2DYzfEnpF9+oOrNLd kBR55hEzYzNDFk0pHpvLL335czmmmzbVo/hlzCO1KWhEHmnTrAEtbvCzeZWc5yLp v4du3dxtbKVI3xhtO4lTWwPsYcEikSAC9DE= -----END CERTIFICATE-----Generated at Tue Aug 12 22:53:48 2025 by rpki-client