$ rpki-client -vvf rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/0EA2B2D62BB011ED90F41820C4F9AE02.roa File: 0EA2B2D62BB011ED90F41820C4F9AE02.roa (raw, json) Hash identifier: 3j5PRrDY98r3uDB/NRxNOqJcUUYPq2wYxKOeqHbmCZ4= Subject key identifier: C1:DF:8B:95:CE:2A:C6:C7:23:99:0E:CD:04:20:60:F5:54:F7:6A:10 Certificate issuer: /CN=A91136B5/serialNumber=5AECEAD54CB36CBF1B4A00C4CD410846D23141EF Certificate serial: 021E Authority key identifier: 5A:EC:EA:D5:4C:B3:6C:BF:1B:4A:00:C4:CD:41:08:46:D2:31:41:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/0EA2B2D62BB011ED90F41820C4F9AE02.roa Signing time: Tue 15 Apr 2025 02:07:20 +0000 ROA not before: Tue 15 Apr 2025 02:07:20 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136266 IP address blocks: 103.85.192.0/22 maxlen: 24 2400:af40::/32 maxlen: 32 2400:af40::/33 maxlen: 33 2400:af40:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91136B5, serialNumber=5AECEAD54CB36CBF1B4A00C4CD410846D23141EF Validity Not Before: Apr 15 02:07:20 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67fdbf58-0980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:84:50:c6:72:db:3c:89:75:e5:10:9f:2d: 51:5b:38:bd:0d:59:f3:61:ea:57:b7:df:af:51:b5: 64:80:44:2a:12:5d:87:a6:e5:8b:18:35:ef:bf:e2: ec:ce:13:7a:89:a4:9e:53:97:12:58:d2:cd:b9:27: 08:3d:58:d2:8b:67:cc:c6:c8:96:cc:70:92:64:f7: cd:7d:5b:03:cc:a4:38:d2:42:68:2d:26:89:ad:51: b5:2d:ef:73:4d:d1:f3:53:2d:3b:0b:22:a8:80:cb: 26:49:b6:ae:f8:73:8e:5f:32:f4:62:f4:7f:58:9c: 82:be:88:0f:02:97:71:f6:61:87:90:bf:fa:6f:18: fb:ff:bd:36:6f:4b:76:59:2a:50:a0:45:56:6d:df: 2f:1f:71:c7:4c:0c:0b:e2:ec:3e:17:5a:38:fd:f3: 14:f4:80:73:e4:e8:6a:84:dc:a9:6f:53:1c:14:19: 29:f7:7e:3c:c6:63:e3:89:df:5e:a3:12:19:1c:ac: 6b:24:21:6f:2e:72:a2:30:1d:01:ea:76:d9:96:f8: de:dd:d8:3b:b5:5f:6b:27:c3:f6:82:33:c4:f2:15: 60:41:14:ee:48:c7:09:5c:45:0b:2f:ac:8f:78:8b: 49:1c:61:9b:8a:ec:53:46:68:35:07:0e:5d:34:f6: 1f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DF:8B:95:CE:2A:C6:C7:23:99:0E:CD:04:20:60:F5:54:F7:6A:10 X509v3 Authority Key Identifier: keyid:5A:EC:EA:D5:4C:B3:6C:BF:1B:4A:00:C4:CD:41:08:46:D2:31:41:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/0EA2B2D62BB011ED90F41820C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.192.0/22 IPv6: 2400:af40::/32 Signature Algorithm: sha256WithRSAEncryption cc:a0:e7:87:66:47:86:f5:33:19:79:a0:93:22:40:f1:78:28: 49:bc:b8:de:00:d1:37:f9:04:20:fb:4e:42:84:0a:2b:73:44: fa:4f:44:5a:0c:df:38:13:af:a1:1b:e8:b0:ca:e5:6d:da:25: 0d:e9:09:c8:69:c9:a8:73:18:52:2d:ac:90:7d:85:84:b1:37: 3a:36:a5:43:4e:97:ce:60:4a:02:7c:7e:34:9b:e9:78:23:1b: bd:63:12:67:0f:13:08:0c:5e:be:10:90:ef:5d:62:6d:59:f4: fd:a7:51:e3:27:c6:36:d6:bb:e9:b8:b3:79:ff:fa:d8:45:de: cb:1d:1e:04:e9:bc:26:d8:db:91:89:ae:f6:3b:73:17:16:1f: 8e:e6:c8:a4:14:ad:03:b3:3a:2d:f4:11:5b:12:8a:b0:6a:1b: b6:84:18:e2:3e:d5:ef:ab:01:b2:46:c6:81:a8:d0:af:3e:a7: 70:fc:f0:b4:25:18:ae:d2:9c:06:a3:5a:49:ff:f5:cb:0c:6e: 26:4e:b1:9f:b5:e0:1c:b4:82:dc:6c:fe:ca:00:2f:68:51:1d: ad:95:20:0b:df:5c:29:2c:d4:34:e6:bb:77:f0:27:d4:c0:78: cd:57:9d:c7:2d:70:1b:2d:47:22:c3:a9:c0:46:07:4f:5b:4f: d8:79:fd:7d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2QjUxMTAvBgNVBAUTKDVBRUNFQUQ1NENCMzZDQkYxQjRBMDBDNENENDEwODQ2 RDIzMTQxRUYwHhcNMjUwNDE1MDIwNzIwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZkYmY1OC0wOTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxT6EUMZy2zyJdeUQny1RWzi9DVnzYepXt9+vUbVkgEQqEl2HpuWLGDXvv+Ls zhN6iaSeU5cSWNLNuScIPVjSi2fMxsiWzHCSZPfNfVsDzKQ40kJoLSaJrVG1Le9z TdHzUy07CyKogMsmSbau+HOOXzL0YvR/WJyCvogPApdx9mGHkL/6bxj7/702b0t2 WSpQoEVWbd8vH3HHTAwL4uw+F1o4/fMU9IBz5OhqhNypb1McFBkp9348xmPjid9e oxIZHKxrJCFvLnKiMB0B6nbZlvje3dg7tV9rJ8P2gjPE8hVgQRTuSMcJXEULL6yP eItJHGGbiuxTRmg1Bw5dNPYfnQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMHfi5XO KsbHI5kOzQQgYPVU92oQMB8GA1UdIwQYMBaAFFrs6tVMs2y/G0oAxM1BCEbSMUHv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzZCNS9GNDExNURCQzJC QUMxMUVEOEQ0MkFCMTlDNEY5QUUwMi9XdXpxMVV5emJMOGJTZ0RFelVFSVJ0SXhR ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1enExVXl6Ykw4YlNnREV6VUVJUnRJeFFlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTM2QjUvRjQxMTVEQkMyQkFDMTFFRDhENDJBQjE5QzRGOUFFMDIvMEVBMkIyRDYy QkIwMTFFRDkwRjQxODIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnVcAwDQQCAAIwBwMFACQAr0AwDQYJKoZIhvcNAQELBQAD ggEBAMyg54dmR4b1Mxl5oJMiQPF4KEm8uN4A0Tf5BCD7TkKECitzRPpPRFoM3zgT r6Eb6LDK5W3aJQ3pCchpyahzGFItrJB9hYSxNzo2pUNOl85gSgJ8fjSb6XgjG71j EmcPEwgMXr4QkO9dYm1Z9P2nUeMnxjbWu+m4s3n/+thF3ssdHgTpvCbY25GJrvY7 cxcWH47myKQUrQOzOi30EVsSirBqG7aEGOI+1e+rAbJGxoGo0K8+p3D88LQlGK7S nAajWkn/9csMbiZOsZ+14By0gtxs/soAL2hRHa2VIAvfXCks1DTmu3fwJ9TAeM1X ncctcBstRyLDqcBGB09bT9h5/X0= -----END CERTIFICATE-----Generated at Wed Nov 5 00:23:07 2025 by rpki-client