$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/0FBF57D2F16611EEB75BE640C4F9AE02.roa File: 0FBF57D2F16611EEB75BE640C4F9AE02.roa (raw, json) Hash identifier: pARn59mvC3EFmnc54zsYhH0vh0pFsHJXtSQmvirMetQ= Subject key identifier: 57:07:3E:E6:C0:2F:C1:A2:3D:FA:0A:32:40:42:85:75:50:42:BF:33 Certificate issuer: /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3 Certificate serial: E4 Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/0FBF57D2F16611EEB75BE640C4F9AE02.roa Signing time: Thu 17 Apr 2025 04:41:21 +0000 ROA not before: Thu 17 Apr 2025 04:41:21 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 150746 IP address blocks: 202.9.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89A2, serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3 Validity Not Before: Apr 17 04:41:21 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68008671-1f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:d9:f3:df:64:01:95:b9:67:b2:84:9a:56: 3b:be:28:1c:6c:6f:0c:03:5f:dd:c8:f5:9c:89:8a: 08:22:0d:48:0e:66:c5:2c:f3:51:c1:9a:2e:78:f4: be:74:2a:73:e6:ea:4d:ed:5c:b2:4e:7e:d5:01:49: e4:c1:71:76:2e:86:49:dd:9f:7b:42:e8:74:db:ed: 6e:89:18:f9:f8:fd:27:d0:b8:27:39:46:16:83:0d: b7:17:61:34:05:06:e6:19:5e:7b:99:91:4e:63:ed: c8:f9:bc:50:3a:1b:e5:f3:9d:60:e7:ef:c2:09:c5: 19:1f:db:36:31:c3:52:cf:00:19:8d:9e:59:b8:8c: dd:37:d1:92:22:6d:db:a1:33:38:65:26:ce:ca:70: 6e:93:46:cf:8a:b8:6c:44:6d:66:95:27:ef:f7:2c: bf:25:1b:fa:d1:6d:fb:cc:93:c3:33:0c:b9:64:c5: 2e:78:cf:6f:3b:82:8c:92:53:cd:ae:4c:13:1a:30: de:4f:54:54:a3:a6:f6:72:f3:6c:9b:31:43:9a:0c: 24:83:54:47:9c:08:87:08:d0:98:76:74:42:52:d4: 51:92:ec:df:bf:cd:be:ff:20:31:f2:8e:ed:a0:65: 98:9e:a1:2c:c7:3b:6e:10:6b:d2:5b:b5:cb:1e:e3: d7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:07:3E:E6:C0:2F:C1:A2:3D:FA:0A:32:40:42:85:75:50:42:BF:33 X509v3 Authority Key Identifier: keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/0FBF57D2F16611EEB75BE640C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.9.83.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:55:6d:67:d4:73:6e:49:8c:46:76:ac:6b:a0:97:70:37:10: 98:37:7d:83:f4:aa:5d:1b:f0:07:bb:80:84:c1:e4:0f:80:d7: 14:d9:0e:e2:83:2b:0f:66:23:5f:3b:29:69:ac:93:ef:ca:20: b4:27:b4:2e:2b:6d:38:be:ea:ec:18:cc:3a:69:bd:b4:01:95: ef:a1:19:ee:83:74:4a:fb:2e:d8:b0:ba:82:f6:a6:68:f3:8a: d8:fb:78:d9:8a:8c:e9:23:24:ed:59:1b:cf:9d:fd:e5:5c:dd: 7f:50:42:7b:c8:97:ff:c9:a8:36:b6:5e:7e:41:f6:d1:9d:00: d6:8e:81:e6:e5:9f:fc:3e:c3:07:95:52:0b:87:ed:5c:0f:45: 7c:fb:af:75:c4:bc:c7:f1:64:72:c0:ab:8c:19:20:e9:c7:a6: 8f:db:8c:93:1b:6c:9f:a2:0e:70:fa:64:60:2f:5b:64:da:fe: 3e:a5:43:06:b3:65:f0:fe:16:66:10:ac:30:e4:2b:8c:8f:3e: e0:e7:86:1b:9e:3c:53:79:dd:04:dd:03:d6:47:08:da:2a:12: c2:a4:9f:c2:b0:82:be:14:c6:2b:03:c6:06:02:2b:93:68:8f: 78:30:58:18:19:67:06:a6:8a:a4:d8:42:82:2e:c8:5b:b1:bd: 3b:85:24:4c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QTIxMTAvBgNVBAUTKDZDODAzMDUyQkY5NkMyQUI0QUJBQTlFRDI2QTNBOUI0 NjM5NjA1QTMwHhcNMjUwNDE3MDQ0MTIxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODAwODY3MS0xZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXTZ899kAZW5Z7KEmlY7vigcbG8MA1/dyPWciYoIIg1IDmbFLPNRwZouePS+ dCpz5upN7VyyTn7VAUnkwXF2LoZJ3Z97Quh02+1uiRj5+P0n0LgnOUYWgw23F2E0 BQbmGV57mZFOY+3I+bxQOhvl851g5+/CCcUZH9s2McNSzwAZjZ5ZuIzdN9GSIm3b oTM4ZSbOynBuk0bPirhsRG1mlSfv9yy/JRv60W37zJPDMwy5ZMUueM9vO4KMklPN rkwTGjDeT1RUo6b2cvNsmzFDmgwkg1RHnAiHCNCYdnRCUtRRkuzfv82+/yAx8o7t oGWYnqEsxztuEGvSW7XLHuPXjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFcHPubA L8GiPfoKMkBChXVQQr8zMB8GA1UdIwQYMBaAFGyAMFK/lsKrSrqp7SajqbRjlgWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlBMi9CQ0JBRTBDRUM1 NDExMUVFQUJDMkMzODVDNEY5QUUwMi9iSUF3VXItV3dxdEt1cW50SnFPcHRHT1dC YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JJQXdVci1Xd3F0S3VxbnRKcU9wdEdPV0JhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg5QTIvQkNCQUUwQ0VDNTQxMTFFRUFCQzJDMzg1QzRGOUFFMDIvMEZCRjU3RDJG MTY2MTFFRUI3NUJFNjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKCVMwDQYJKoZIhvcNAQELBQADggEBAG1VbWfUc25JjEZ2 rGugl3A3EJg3fYP0ql0b8Ae7gITB5A+A1xTZDuKDKw9mI187KWmsk+/KILQntC4r bTi+6uwYzDppvbQBle+hGe6DdEr7LtiwuoL2pmjzitj7eNmKjOkjJO1ZG8+d/eVc 3X9QQnvIl//JqDa2Xn5B9tGdANaOgebln/w+wweVUguH7VwPRXz7r3XEvMfxZHLA q4wZIOnHpo/bjJMbbJ+iDnD6ZGAvW2Ta/j6lQwazZfD+FmYQrDDkK4yPPuDnhhue PFN53QTdA9ZHCNoqEsKkn8Kwgr4UxisDxgYCK5Noj3gwWBgZZwamiqTYQoIuyFux vTuFJEw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:59:33 2025 by rpki-client