$ rpki-client -vvf rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa File: F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa (raw, json) Hash identifier: J5jgYUR9UX4U3661KuIFfEO7PQhAAk/pGUJOgrFfgBs= Subject key identifier: CD:39:37:11:9A:0F:A9:11:1F:A1:B8:55:9F:1C:34:2A:56:CB:10:90 Certificate issuer: /CN=A91112C1/serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Certificate serial: 05A2 Authority key identifier: 34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa Signing time: Sat 26 Jul 2025 23:34:31 +0000 ROA not before: Sat 26 Jul 2025 23:34:31 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 142558 IP address blocks: 103.169.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 23:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1442 (0x5a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112C1, serialNumber=3496A3095D478B026E47555EBAC51D8E0A2B3B96 Validity Not Before: Jul 26 23:34:31 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68856607-3acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b1:f5:8b:f0:43:d8:33:3c:fe:78:7c:c8:47: 91:40:3c:03:25:da:b6:f8:c7:0e:8f:82:3e:9d:0a: 1c:f0:86:a6:b4:5f:3d:ef:1f:b3:56:7d:87:d6:67: 99:a5:72:4d:2e:09:b6:af:f1:82:e5:f5:5d:67:c5: be:a7:9f:d5:d8:db:c7:af:6e:cc:84:8b:9c:da:94: 3a:6c:a0:94:e1:79:61:98:6e:f8:aa:79:79:4e:6e: 54:18:ba:d4:e8:79:9c:3b:b7:8f:2b:d8:6c:0c:8d: 8d:23:b3:0a:09:e2:d9:aa:c9:fe:3c:cb:f3:b7:b7: 25:3e:d9:70:a5:10:58:5d:1a:85:0a:5c:79:48:50: 96:b6:c1:24:6b:6f:2e:80:83:96:bd:5f:45:77:cf: 01:c5:56:2c:ac:96:70:8c:c8:a7:7b:37:83:2f:02: 61:2e:cb:e2:cd:da:f2:55:a8:56:95:11:26:01:da: 38:39:76:fd:2b:5e:0f:b7:32:5e:49:b0:6a:55:1d: 39:ae:ad:c0:b5:a9:99:ad:c4:b3:01:16:ce:36:d2: b0:29:66:65:07:48:3a:87:f5:f3:e0:79:ce:44:7c: aa:ac:24:fc:38:39:ca:06:e1:4b:a3:af:1f:d6:2e: a2:ee:66:ed:52:b3:3c:3e:3b:b9:df:e9:ab:3f:09: 60:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:39:37:11:9A:0F:A9:11:1F:A1:B8:55:9F:1C:34:2A:56:CB:10:90 X509v3 Authority Key Identifier: keyid:34:96:A3:09:5D:47:8B:02:6E:47:55:5E:BA:C5:1D:8E:0A:2B:3B:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/NJajCV1HiwJuR1VeusUdjgorO5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJajCV1HiwJuR1VeusUdjgorO5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112C1/86AB6624DA2B11EB8F0B013FC4F9AE02/F7C5E44EDA2E11EB8FAAB246C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.169.100.0/23 Signature Algorithm: sha256WithRSAEncryption 13:95:e5:a6:77:27:71:59:fb:a9:78:49:66:48:8c:2a:3f:57: 9a:48:03:fb:9c:48:67:c0:ef:c9:a3:50:1a:78:c5:e8:cf:6c: 19:1b:09:f5:15:e6:e9:a1:8b:bb:2c:31:ac:08:0a:5a:f3:80: 39:58:b5:40:cc:38:95:d8:34:33:c1:fc:ab:0c:a9:c9:44:d0: 06:11:8b:f5:a7:9f:47:12:74:86:b0:56:35:dd:e2:b0:2d:95: 2b:64:e1:3d:85:ac:72:5a:43:3a:3a:eb:c8:f9:9a:55:c1:b5: bc:93:98:30:65:17:7f:35:26:a0:21:69:77:84:1e:63:17:a8: 45:f1:32:02:9f:e0:04:3e:a9:bf:10:01:b6:48:6d:4e:c9:17: 02:60:09:cb:c2:62:cf:3d:3d:88:05:4f:37:d6:b7:45:44:b7: d7:78:aa:b5:3d:cf:c7:8d:a1:20:71:75:0c:77:d2:c9:cc:b0: 28:ed:a3:fd:c9:90:39:26:d0:ab:99:6b:4f:1a:68:05:ef:0c: 9a:92:74:79:ef:8c:43:fb:b8:b5:27:97:be:3c:d9:08:48:c1: 40:71:54:1c:7b:1a:82:4b:fa:66:da:03:f5:b4:0b:2c:cc:fb: 75:65:3a:a6:f4:3b:42:17:fb:f4:3e:af:76:7e:05:f4:5e:a6: a5:cb:84:46 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQzExMTAvBgNVBAUTKDM0OTZBMzA5NUQ0NzhCMDI2RTQ3NTU1RUJBQzUxRDhF MEEyQjNCOTYwHhcNMjUwNzI2MjMzNDMxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg1NjYwNy0zYWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrH1i/BD2DM8/nh8yEeRQDwDJdq2+McOj4I+nQoc8IamtF897x+zVn2H1meZ pXJNLgm2r/GC5fVdZ8W+p5/V2NvHr27MhIuc2pQ6bKCU4XlhmG74qnl5Tm5UGLrU 6HmcO7ePK9hsDI2NI7MKCeLZqsn+PMvzt7clPtlwpRBYXRqFClx5SFCWtsEka28u gIOWvV9Fd88BxVYsrJZwjMinezeDLwJhLsvizdryVahWlREmAdo4OXb9K14PtzJe SbBqVR05rq3AtamZrcSzARbONtKwKWZlB0g6h/Xz4HnORHyqrCT8ODnKBuFLo68f 1i6i7mbtUrM8Pju53+mrPwlgYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFM05NxGa D6kRH6G4VZ8cNCpWyxCQMB8GA1UdIwQYMBaAFDSWowldR4sCbkdVXrrFHY4KKzuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJDMS84NkFCNjYyNERB MkIxMUVCOEYwQjAxM0ZDNEY5QUUwMi9OSmFqQ1YxSGl3SnVSMVZldXNVZGpnb3JP NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KYWpDVjFIaXdKdVIxVmV1c1Vkamdvck81WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTEyQzEvODZBQjY2MjREQTJCMTFFQjhGMEIwMTNGQzRGOUFFMDIvRjdDNUU0NEVE QTJFMTFFQjhGQUFCMjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnqWQwDQYJKoZIhvcNAQELBQADggEBABOV5aZ3J3FZ+6l4 SWZIjCo/V5pIA/ucSGfA78mjUBp4xejPbBkbCfUV5umhi7ssMawIClrzgDlYtUDM OJXYNDPB/KsMqclE0AYRi/Wnn0cSdIawVjXd4rAtlStk4T2FrHJaQzo668j5mlXB tbyTmDBlF381JqAhaXeEHmMXqEXxMgKf4AQ+qb8QAbZIbU7JFwJgCcvCYs89PYgF TzfWt0VEt9d4qrU9z8eNoSBxdQx30snMsCjto/3JkDkm0KuZa08aaAXvDJqSdHnv jEP7uLUnl7482QhIwUBxVBx7GoJL+mbaA/W0CyzM+3VlOqb0O0IX+/Q+r3Z+BfRe pqXLhEY= -----END CERTIFICATE-----Generated at Wed Aug 13 15:59:42 2025 by rpki-client