$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/A6EF097068F911F092D77151C4F9AE02.roa File: A6EF097068F911F092D77151C4F9AE02.roa (raw, json) Hash identifier: CVgVNZzRg+yoeNSO5TmorciwKychjnQza4bd4ni3W/0= Subject key identifier: 04:11:E9:18:48:01:FA:55:45:29:1E:38:EC:6F:72:63:7F:40:3E:98 Certificate issuer: /CN=A91FF5E4/serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Certificate serial: 0599 Authority key identifier: 85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/A6EF097068F911F092D77151C4F9AE02.roa Signing time: Fri 25 Jul 2025 01:49:50 +0000 ROA not before: Fri 25 Jul 2025 01:49:50 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 133934 IP address blocks: 111.125.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 05:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1433 (0x599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5E4, serialNumber=85EE9038FFC3541ABDFB7DD9ED33F2AAE372E78C Validity Not Before: Jul 25 01:49:50 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6882e2be-6c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:70:93:98:0f:a7:9a:b3:88:7b:36:04:48:9d: 07:34:50:87:0f:ce:76:8c:f1:1c:f1:b7:ec:8c:35: f0:b8:ad:da:9f:1c:8f:7e:63:fa:97:fd:ea:3c:2d: 18:61:93:44:2b:8b:e9:8a:83:36:91:5f:88:f9:b2: 1a:aa:19:74:9f:18:2a:1d:0a:ee:fd:26:04:63:64: 9a:57:dd:92:8a:88:63:d8:29:aa:cf:d9:56:dd:71: a8:fe:e2:f6:87:b5:7f:bf:f6:31:cc:0b:ca:e9:96: e6:e1:13:55:44:ad:72:58:2e:6f:b5:d2:f9:80:45: c8:9a:e1:7a:ad:91:ac:d8:2a:6b:49:70:4f:37:a5: 82:3e:13:bc:95:be:13:21:ea:5c:c4:ec:26:0b:01: df:b3:fa:ac:de:26:b1:9e:aa:93:1f:3b:78:c9:44: d7:f4:db:37:fa:62:58:44:30:9d:e2:a4:08:1c:1a: 74:64:a3:89:64:ee:6e:fe:ab:ae:99:f0:92:bc:80: cb:58:74:25:78:ca:b6:09:75:fe:08:49:e3:c9:4f: 54:c5:e7:54:18:23:eb:9b:f4:45:b8:83:c0:b5:f6: bf:c5:1d:10:cf:5d:99:a8:64:a2:60:56:39:77:f3: 10:bd:d0:b7:d8:dc:cd:03:f1:97:5e:3b:01:23:41: 87:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:11:E9:18:48:01:FA:55:45:29:1E:38:EC:6F:72:63:7F:40:3E:98 X509v3 Authority Key Identifier: keyid:85:EE:90:38:FF:C3:54:1A:BD:FB:7D:D9:ED:33:F2:AA:E3:72:E7:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/he6QOP_DVBq9-33Z7TPyquNy54w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6QOP_DVBq9-33Z7TPyquNy54w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5E4/ED079DFEE38411EBA8593B65C4F9AE02/A6EF097068F911F092D77151C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.125.188.0/22 Signature Algorithm: sha256WithRSAEncryption 08:93:d2:8c:d1:08:4c:50:68:b1:03:18:21:1c:22:c3:e7:cc: 6f:04:69:de:a8:e0:cf:ad:86:7c:a3:6f:9e:b9:1a:56:b6:b6: b6:1c:d4:60:be:5f:d9:04:44:9a:e9:52:f6:5c:58:09:88:f9: 34:33:02:fe:97:c0:36:92:ec:59:29:e7:e0:a2:db:0c:58:8f: 13:0c:ba:83:a8:51:ad:35:48:0c:c4:d1:00:1b:75:ae:c9:83: da:75:ea:20:9b:fa:f8:51:6f:88:67:05:c3:cb:a5:9e:19:03: 7d:dd:cb:40:24:73:61:94:9a:ec:1d:85:d2:cc:e1:d1:68:1c: ac:ff:d8:71:46:21:d5:ce:56:2c:57:03:82:c1:89:94:ab:ec: ba:1a:06:1d:e6:4c:74:0b:0f:73:e7:e0:f8:da:b1:e9:32:d0: 85:69:fa:63:79:84:cd:7c:f8:38:79:5f:28:c2:9e:09:6e:c9: 68:e0:63:01:f6:c8:2d:71:2b:39:99:7d:32:d2:f2:16:a6:0b: b7:58:bc:dc:f9:22:e7:07:ac:8b:ea:68:83:12:1f:0d:1d:67: b7:30:ef:3f:a7:43:78:93:88:5b:5f:5e:3b:84:62:98:d5:b8: 46:ab:a5:90:8b:68:55:2d:78:38:a1:06:96:ae:f5:61:23:f8: 87:24:09:bb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1RTQxMTAvBgNVBAUTKDg1RUU5MDM4RkZDMzU0MUFCREZCN0REOUVEMzNGMkFB RTM3MkU3OEMwHhcNMjUwNzI1MDE0OTUwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgyZTJiZS02YzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk3CTmA+nmrOIezYESJ0HNFCHD852jPEc8bfsjDXwuK3anxyPfmP6l/3qPC0Y YZNEK4vpioM2kV+I+bIaqhl0nxgqHQru/SYEY2SaV92Siohj2Cmqz9lW3XGo/uL2 h7V/v/YxzAvK6Zbm4RNVRK1yWC5vtdL5gEXImuF6rZGs2CprSXBPN6WCPhO8lb4T IepcxOwmCwHfs/qs3iaxnqqTHzt4yUTX9Ns3+mJYRDCd4qQIHBp0ZKOJZO5u/quu mfCSvIDLWHQleMq2CXX+CEnjyU9UxedUGCPrm/RFuIPAtfa/xR0Qz12ZqGSiYFY5 d/MQvdC32NzNA/GXXjsBI0GHYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAQR6RhI AfpVRSkeOOxvcmN/QD6YMB8GA1UdIwQYMBaAFIXukDj/w1Qavft92e0z8qrjcueM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVFNC9FRDA3OURGRUUz ODQxMUVCQTg1OTNCNjVDNEY5QUUwMi9oZTZRT1BfRFZCcTktMzNaN1RQeXF1Tnk1 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNlFPUF9EVkJxOS0zM1o3VFB5cXVOeTU0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkY1RTQvRUQwNzlERkVFMzg0MTFFQkE4NTkzQjY1QzRGOUFFMDIvQTZFRjA5NzA2 OEY5MTFGMDkyRDc3MTUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJvfbwwDQYJKoZIhvcNAQELBQADggEBAAiT0ozRCExQaLED GCEcIsPnzG8Ead6o4M+thnyjb565Gla2trYc1GC+X9kERJrpUvZcWAmI+TQzAv6X wDaS7Fkp5+Ci2wxYjxMMuoOoUa01SAzE0QAbda7Jg9p16iCb+vhRb4hnBcPLpZ4Z A33dy0Akc2GUmuwdhdLM4dFoHKz/2HFGIdXOVixXA4LBiZSr7LoaBh3mTHQLD3Pn 4Pjaseky0IVp+mN5hM18+Dh5XyjCngluyWjgYwH2yC1xKzmZfTLS8hamC7dYvNz5 IucHrIvqaIMSHw0dZ7cw7z+nQ3iTiFtfXjuEYpjVuEarpZCLaFUteDihBpau9WEj +IckCbs= -----END CERTIFICATE-----Generated at Mon Aug 4 14:05:54 2025 by rpki-client