$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/FA6E4ECC755B11EAA7D9532EC4F9AE02.roa File: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (raw, json) Hash identifier: QAHIkspdc3TnmsVMtC5FECO+wrvdYFQYpTaiZNKj4yg= Subject key identifier: E3:51:BE:21:F9:A1:BC:73:4C:6C:FF:6C:13:34:80:92:AB:4E:21:80 Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Certificate serial: 0A1B Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/FA6E4ECC755B11EAA7D9532EC4F9AE02.roa Signing time: Wed 02 Jul 2025 20:29:19 +0000 ROA not before: Wed 02 Jul 2025 20:29:19 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 18378 IP address blocks: 103.229.249.0/24 maxlen: 24 202.36.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2587 (0xa1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91154E1, serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491 Validity Not Before: Jul 2 20:29:19 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6865969f-e13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:22:1a:54:30:8c:42:bc:13:ae:08:7d:45:5d: a6:b7:dc:25:9e:18:a5:56:a9:6e:9d:01:11:1b:ff: 32:11:e7:1a:5b:48:81:21:7b:0a:1b:c9:18:36:01: 1f:08:3b:40:df:66:e4:d3:e8:fe:30:72:24:64:8a: 68:11:4c:22:2c:38:56:40:fa:10:b9:de:eb:49:44: 62:8a:a2:37:04:7f:05:45:48:71:c2:a9:df:83:5e: 73:7f:7a:96:1e:95:6a:36:48:8d:98:9e:2e:2e:83: 44:d3:ad:d7:5a:90:bd:8c:35:0c:2c:42:11:2a:77: 25:be:20:9a:ee:c7:9e:bd:e8:90:8b:f5:6d:6b:e9: 54:b2:62:20:50:c3:ba:af:45:a3:47:68:d8:d9:48: 9c:a3:39:53:1f:56:9d:b6:5c:db:f5:c1:78:13:21: 8c:72:93:db:7d:4d:7c:35:cd:74:c1:dd:f0:4a:80: c3:11:45:60:cd:26:13:b8:e7:cd:1f:5f:da:0f:55: 89:ff:87:0a:2c:1f:9c:1b:06:82:06:04:10:7f:e1: de:84:6f:19:e1:db:ed:4b:2a:5a:2d:33:83:df:07: f5:3b:9a:48:e7:43:c1:4d:3a:87:f1:4d:26:74:f1: 08:da:34:be:74:b4:fc:88:69:6c:bb:f5:1d:25:67: 7f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:51:BE:21:F9:A1:BC:73:4C:6C:FF:6C:13:34:80:92:AB:4E:21:80 X509v3 Authority Key Identifier: keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/FA6E4ECC755B11EAA7D9532EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.249.0/24 202.36.29.0/24 Signature Algorithm: sha256WithRSAEncryption 91:f7:2c:c2:e1:bd:25:5e:bb:9d:12:f0:b5:db:11:9a:b2:92: e2:79:e4:13:1c:76:ca:63:84:2a:99:f7:9d:95:cf:ba:d6:8b: f5:08:d2:39:24:3b:0f:a5:85:d6:39:55:ea:ad:b9:8b:be:45: 7b:0d:6d:0f:cf:6e:0a:06:b3:b0:57:7a:a0:40:bc:e5:62:cc: d8:4e:4f:ef:9d:e8:83:91:67:b8:ad:59:d2:0a:c1:35:69:e2: 2c:7e:2c:b7:49:59:81:20:2b:44:93:55:76:ff:bb:89:dd:96: 6e:6a:b9:ba:7e:d0:bc:ff:70:ce:9b:96:0a:69:46:01:64:67: 7b:95:70:a8:e9:77:2c:06:bb:a1:95:c3:09:c6:d0:74:c6:73: ea:8f:39:f7:20:1a:cb:ec:03:0d:5b:bd:a0:99:88:96:0d:10: 7a:05:5a:52:1d:f3:74:82:ab:07:ec:2b:a7:73:15:4f:4f:0a: c1:52:64:5f:68:26:51:0a:15:b4:6e:1d:7f:e4:33:83:97:20: 16:58:e1:b9:30:c3:ec:d9:03:9e:95:a0:7f:fc:f0:2c:b5:da: 88:79:53:4c:06:00:e8:72:92:e8:0b:35:87:ce:f6:0e:45:74: 70:c9:7c:4b:c3:2f:4e:04:18:53:08:e4:9b:f2:60:ee:b7:19: 3c:5b:da:a2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICChswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0RTExMTAvBgNVBAUTKDkyOTVCRkEyNjJFMDU3Q0M5QkM4MjE3NURDQUUzNDdB Qzk2Q0E0OTEwHhcNMjUwNzAyMjAyOTE5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1OTY5Zi1lMTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8yIaVDCMQrwTrgh9RV2mt9wlnhilVqlunQERG/8yEecaW0iBIXsKG8kYNgEf CDtA32bk0+j+MHIkZIpoEUwiLDhWQPoQud7rSURiiqI3BH8FRUhxwqnfg15zf3qW HpVqNkiNmJ4uLoNE063XWpC9jDUMLEIRKnclviCa7seeveiQi/Vta+lUsmIgUMO6 r0WjR2jY2UicozlTH1adtlzb9cF4EyGMcpPbfU18Nc10wd3wSoDDEUVgzSYTuOfN H1/aD1WJ/4cKLB+cGwaCBgQQf+HehG8Z4dvtSypaLTOD3wf1O5pI50PBTTqH8U0m dPEI2jS+dLT8iGlsu/UdJWd/tQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFONRviH5 obxzTGz/bBM0gJKrTiGAMB8GA1UdIwQYMBaAFJKVv6Ji4FfMm8ghddyuNHrJbKSR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTRFMS80QTBDQjZGODc1 NDMxMUVBQTc1NzExNjBDNEY5QUUwMi9rcFdfb21MZ1Y4eWJ5Q0YxM0s0MGVzbHNw SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2twV19vbUxnVjh5YnlDRjEzSzQwZXNsc3BKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTU0RTEvNEEwQ0I2Rjg3NTQzMTFFQUE3NTcxMTYwQzRGOUFFMDIvRkE2RTRFQ0M3 NTVCMTFFQUE3RDk1MzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABn5fkDBADKJB0wDQYJKoZIhvcNAQELBQADggEBAJH3LMLh vSVeu50S8LXbEZqykuJ55BMcdspjhCqZ952Vz7rWi/UI0jkkOw+lhdY5VeqtuYu+ RXsNbQ/PbgoGs7BXeqBAvOVizNhOT++d6IORZ7itWdIKwTVp4ix+LLdJWYEgK0ST VXb/u4ndlm5qubp+0Lz/cM6blgppRgFkZ3uVcKjpdywGu6GVwwnG0HTGc+qPOfcg GsvsAw1bvaCZiJYNEHoFWlId83SCqwfsK6dzFU9PCsFSZF9oJlEKFbRuHX/kM4OX IBZY4bkww+zZA56VoH/88Cy12oh5U0wGAOhykugLNYfO9g5FdHDJfEvDL04EGFMI 5JvyYO63GTxb2qI= -----END CERTIFICATE-----Generated at Sun Aug 10 18:25:25 2025 by rpki-client