$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/B92859F46EF611F0BEAA5130C4F9AE02.roa File: B92859F46EF611F0BEAA5130C4F9AE02.roa (raw, json) Hash identifier: KxrlmGdN300w3GzZo2NWvwcNeTUF77b4vkK7jJtow4Y= Subject key identifier: 65:EE:1E:12:66:ED:89:64:A7:39:02:44:84:9A:CE:FE:84:2B:2A:A3 Certificate issuer: /CN=A91FAB3C/serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C Certificate serial: 0C Authority key identifier: 82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/B92859F46EF611F0BEAA5130C4F9AE02.roa Signing time: Fri 01 Aug 2025 16:43:59 +0000 ROA not before: Fri 01 Aug 2025 16:43:59 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 134489 IP address blocks: 192.188.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB3C, serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C Validity Not Before: Aug 1 16:43:59 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688ceecf-f125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:45:45:3f:b9:cb:b2:72:e3:0b:80:68:eb:9a: 01:33:23:44:67:1f:f2:48:3e:e1:24:c9:9a:37:ba: 9c:69:42:19:53:a0:f6:e8:d9:91:cc:8c:0c:2b:af: 05:97:80:2c:83:8f:42:39:60:f5:64:33:26:48:69: e4:b7:8e:1d:64:92:4f:c0:8f:8a:d3:80:c8:0b:77: b4:02:c6:db:b3:f8:bc:a7:c2:0f:80:d3:0f:55:a3: df:c9:f3:04:a6:f5:03:d4:72:7c:2c:4c:74:fc:98: c7:be:89:ab:6f:3b:aa:2c:04:26:45:1c:c2:85:84: ac:14:24:7b:0a:01:b6:98:04:3b:72:64:d5:b6:a7: 46:23:e6:8b:62:cb:09:81:52:6e:5b:fe:b4:82:3d: d1:ba:29:de:95:7f:f0:19:92:8e:4d:4b:44:2c:43: 3a:59:70:ae:76:14:e0:86:38:77:ee:32:71:07:f7: 28:18:99:63:47:5e:11:13:57:66:fa:f1:2b:86:64: 63:23:ea:57:80:9e:19:a1:c2:41:62:d5:eb:b1:44: 75:4b:9e:4e:98:86:38:4a:91:1e:97:65:b6:bc:c5: 7b:42:d2:fd:9f:06:db:74:e4:8a:15:0a:ac:dd:b6: 9c:9d:4c:d7:15:d4:40:3f:b0:21:8c:36:b8:1a:11: fe:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EE:1E:12:66:ED:89:64:A7:39:02:44:84:9A:CE:FE:84:2B:2A:A3 X509v3 Authority Key Identifier: keyid:82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/B92859F46EF611F0BEAA5130C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.188.87.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:52:09:22:38:d3:11:2a:45:bf:59:36:a4:b7:7d:35:7f:ce: d7:4d:36:94:21:3c:0c:fb:04:98:1b:c7:4e:b7:04:77:35:ac: 8b:0f:ca:cc:d2:91:30:84:a3:73:78:6a:bc:1b:02:7e:99:a6: 2b:ed:da:53:d8:48:e1:e6:22:22:05:a0:d7:55:fe:1a:12:b8: 1d:2e:1f:cf:f5:43:3d:c5:8e:a9:9d:f7:62:16:d1:b5:a4:1b: a7:78:b5:4f:79:99:94:5d:74:43:eb:42:f2:ec:88:88:5e:43: b4:8b:30:c6:56:30:d5:25:32:c9:bd:53:67:75:b4:b7:fe:28: c2:68:e6:3e:04:b6:56:86:48:53:7e:69:8c:ef:6f:ab:72:98: d8:0d:f8:bf:5c:d0:ce:1a:fa:8c:82:20:32:41:25:ce:d8:6d: a1:b2:d5:83:c3:76:1b:32:c7:cd:2f:93:12:5e:ea:79:51:c5: 76:0c:38:5b:13:fc:f4:b6:4a:3c:59:d1:2a:d5:0d:0c:83:d4: 56:28:bd:1a:d9:3d:71:ad:41:7e:1f:d1:98:a7:33:c8:b5:3d: 22:83:b0:83:ec:dc:7a:0c:a3:fe:a5:69:77:3d:dd:45:cb:95: 7a:a1:8c:45:bb:06:be:41:6f:36:f5:cd:53:b7:91:dd:f6:57: 7f:1e:c5:9f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QUIzQzExMC8GA1UEBRMoODI2QjQ0NzRCQzZGNEYzQkU0MEI1RTc1MTFGMTA1Q0FF N0ZFOEMwQzAeFw0yNTA4MDExNjQzNTlaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4OGNlZWNmLWYxMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiRUU/ucuycuMLgGjrmgEzI0RnH/JIPuEkyZo3upxpQhlToPbo2ZHMjAwrrwWX gCyDj0I5YPVkMyZIaeS3jh1kkk/Aj4rTgMgLd7QCxtuz+Lynwg+A0w9Vo9/J8wSm 9QPUcnwsTHT8mMe+iatvO6osBCZFHMKFhKwUJHsKAbaYBDtyZNW2p0Yj5otiywmB Um5b/rSCPdG6Kd6Vf/AZko5NS0QsQzpZcK52FOCGOHfuMnEH9ygYmWNHXhETV2b6 8SuGZGMj6leAnhmhwkFi1euxRHVLnk6YhjhKkR6XZba8xXtC0v2fBtt05IoVCqzd tpydTNcV1EA/sCGMNrgaEf4BAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZe4eEmbt iWSnOQJEhJrO/oQrKqMwHwYDVR0jBBgwFoAUgmtEdLxvTzvkC151EfEFyuf+jAww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQjNDLzk5MUVBREZFNjk0 QTExRjBBNzc0MUE0M0M0RjlBRTAyL2dtdEVkTHh2VHp2a0MxNTFFZkVGeXVmLWpB dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ210RWRMeHZUenZrQzE1MUVmRUZ5dWYtakF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUIzQy85OTFFQURGRTY5NEExMUYwQTc3NDFBNDNDNEY5QUUwMi9COTI4NTlGNDZF RjYxMUYwQkVBQTUxMzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMC8VzANBgkqhkiG9w0BAQsFAAOCAQEAPFIJIjjTESpFv1k2 pLd9NX/O1002lCE8DPsEmBvHTrcEdzWsiw/KzNKRMISjc3hqvBsCfpmmK+3aU9hI 4eYiIgWg11X+GhK4HS4fz/VDPcWOqZ33YhbRtaQbp3i1T3mZlF10Q+tC8uyIiF5D tIswxlYw1SUyyb1TZ3W0t/4owmjmPgS2VoZIU35pjO9vq3KY2A34v1zQzhr6jIIg MkElzthtobLVg8N2GzLHzS+TEl7qeVHFdgw4WxP89LZKPFnRKtUNDIPUVii9Gtk9 ca1Bfh/RmKczyLU9IoOwg+zcegyj/qVpdz3dRcuVeqGMRbsGvkFvNvXNU7eR3fZX fx7Fnw== -----END CERTIFICATE-----Generated at Sun Aug 10 03:55:57 2025 by rpki-client