$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/7C796C5E743311F0BAAA8B29C4F9AE02.roa File: 7C796C5E743311F0BAAA8B29C4F9AE02.roa (raw, json) Hash identifier: oV+7pciFu8VhBC86X8ypaBvDmcSTDXLU7n3WAsVVpeU= Subject key identifier: 8C:DB:36:66:39:38:8D:82:3A:90:7C:9E:AC:AB:50:AC:B9:03:7D:FC Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Certificate serial: 01FA Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/7C796C5E743311F0BAAA8B29C4F9AE02.roa Signing time: Fri 08 Aug 2025 08:41:33 +0000 ROA not before: Fri 08 Aug 2025 08:41:33 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 153952 IP address blocks: 43.224.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Validity Not Before: Aug 8 08:41:33 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6895b83d-5f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7d:0b:54:51:f0:c7:19:9d:5c:92:63:b3:d7: 96:80:17:ae:17:41:05:bb:73:b3:a2:60:85:c4:28: c3:88:74:3d:d2:db:28:41:b4:44:b9:a7:2d:e8:0b: b3:91:7f:64:1d:08:22:b4:37:ab:b3:be:f7:d0:61: 9d:90:95:e3:4a:1e:8f:40:5f:e6:ce:d6:46:f4:d7: d9:f2:79:83:5b:81:d6:2c:72:c6:9c:24:7d:10:e3: 01:92:2a:b7:16:42:1c:e9:ad:25:db:d1:ef:8e:65: cb:72:38:97:13:ab:2f:eb:cc:4e:f7:40:03:2c:64: ae:1c:25:9e:4d:65:8c:58:4e:b3:b3:8d:a9:26:7c: 3a:ec:40:ca:21:4d:1f:8d:a0:3c:f5:88:f2:a9:00: ed:05:8f:58:7b:96:79:50:4b:f4:6b:ef:71:f4:74: 7f:79:70:fe:11:d4:d8:ea:7c:de:3b:b3:2b:1f:03: 72:48:1b:7a:33:27:4e:34:8f:a8:ac:55:d6:13:e7: 03:dc:dc:5d:16:de:93:09:e1:5c:27:b3:2b:48:f0: 79:f4:21:75:92:5b:72:df:2b:b2:1f:c5:01:d2:da: cb:fa:95:1a:0b:69:73:0d:e1:5d:c5:d6:d0:02:7a: fb:03:5d:fe:55:ab:15:62:43:fa:bc:09:f1:65:9f: 36:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DB:36:66:39:38:8D:82:3A:90:7C:9E:AC:AB:50:AC:B9:03:7D:FC X509v3 Authority Key Identifier: keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/7C796C5E743311F0BAAA8B29C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.148.0/24 Signature Algorithm: sha256WithRSAEncryption 19:a6:6a:be:5f:f6:f3:61:8f:68:b8:fa:f0:fc:3d:6b:d2:10: 4d:68:d2:75:12:8b:36:ec:c3:97:4d:82:ef:07:d3:e1:4b:30: 31:ba:3a:61:35:0b:41:c6:93:ec:19:3b:1e:58:fe:4d:26:5c: ff:b4:d0:7d:9e:c0:16:aa:79:1d:8e:5c:4b:d5:92:9b:0f:4a: cb:43:29:77:85:6a:4e:9a:d2:d3:8a:dc:88:ab:e4:f2:e8:77: 15:3d:14:bd:fb:87:38:d6:eb:cb:40:d5:cf:c2:9c:08:34:ba: b2:ea:e1:d0:9c:e8:ae:d7:4e:bc:e2:e3:97:f1:bf:bc:26:21: c0:cc:90:7b:6c:38:f7:92:11:32:80:ae:17:28:52:17:9b:81: 2f:32:50:26:64:59:12:56:73:c3:2d:b2:9d:0b:6c:31:c8:75: 92:44:f6:f7:b7:ad:ec:ae:76:e5:16:6a:bc:86:65:aa:08:2d: 2c:bf:62:cd:30:21:c1:1a:7a:25:b9:aa:b7:9f:92:fc:bb:4e: ca:dd:6e:e4:59:f4:cf:30:4a:47:50:d0:e3:bb:de:24:86:b3: 60:61:1b:2c:c4:d6:2e:ab:46:d7:80:f0:a6:bd:9e:9e:03:99: e1:be:ab:d8:15:af:d3:62:2b:8e:d0:39:c1:08:e8:a6:02:a3: e8:90:54:13 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDODcxMTAvBgNVBAUTKEVGOUZFMzgxREEzRDQyRUI3QzRFMEQwNDlDQ0FFNzIy OEUyOEZCNEIwHhcNMjUwODA4MDg0MTMzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk1YjgzZC01ZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn0LVFHwxxmdXJJjs9eWgBeuF0EFu3OzomCFxCjDiHQ90tsoQbREuact6Auz kX9kHQgitDers7730GGdkJXjSh6PQF/mztZG9NfZ8nmDW4HWLHLGnCR9EOMBkiq3 FkIc6a0l29HvjmXLcjiXE6sv68xO90ADLGSuHCWeTWWMWE6zs42pJnw67EDKIU0f jaA89YjyqQDtBY9Ye5Z5UEv0a+9x9HR/eXD+EdTY6nzeO7MrHwNySBt6MydONI+o rFXWE+cD3NxdFt6TCeFcJ7MrSPB59CF1klty3yuyH8UB0trL+pUaC2lzDeFdxdbQ Anr7A13+VasVYkP6vAnxZZ827QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIzbNmY5 OI2COpB8nqyrUKy5A338MB8GA1UdIwQYMBaAFO+f44HaPULrfE4NBJzK5yKOKPtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0M4Ny9FNzgyODU0RUVG MEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1dDhUZzBFbk1ybklvNG8t MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1X2pnZG85UXV0OFRnMEVuTXJuSW80by0wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNDODcvRTc4Mjg1NEVFRjBCMTFFRDgxREQyRDcyQzRGOUFFMDIvN0M3OTZDNUU3 NDMzMTFGMEJBQUE4QjI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr4JQwDQYJKoZIhvcNAQELBQADggEBABmmar5f9vNhj2i4 +vD8PWvSEE1o0nUSizbsw5dNgu8H0+FLMDG6OmE1C0HGk+wZOx5Y/k0mXP+00H2e wBaqeR2OXEvVkpsPSstDKXeFak6a0tOK3Iir5PLodxU9FL37hzjW68tA1c/CnAg0 urLq4dCc6K7XTrzi45fxv7wmIcDMkHtsOPeSETKArhcoUhebgS8yUCZkWRJWc8Mt sp0LbDHIdZJE9ve3reyuduUWaryGZaoILSy/Ys0wIcEaeiW5qrefkvy7TsrdbuRZ 9M8wSkdQ0OO73iSGs2BhGyzE1i6rRteA8Ka9np4DmeG+q9gVr9NiK47QOcEI6KYC o+iQVBM= -----END CERTIFICATE-----Generated at Wed Aug 13 00:20:39 2025 by rpki-client