$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/2245CE0A606811EB80E3D531C4F9AE02.roa File: 2245CE0A606811EB80E3D531C4F9AE02.roa (raw, json) Hash identifier: PSSQDCbjfGOv5hsREHHq3AE69qVBQBbQjxmYclshFuc= Subject key identifier: 4A:CC:D9:B8:52:C0:D7:A4:B2:05:97:36:47:B0:AE:8A:88:13:BF:2B Certificate issuer: /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Certificate serial: 1148 Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/2245CE0A606811EB80E3D531C4F9AE02.roa Signing time: Mon 10 Feb 2025 17:35:09 +0000 ROA not before: Mon 10 Feb 2025 17:35:09 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 135025 IP address blocks: 14.102.168.0/22 maxlen: 22 14.102.168.0/24 maxlen: 24 14.102.169.0/24 maxlen: 24 14.102.170.0/24 maxlen: 24 14.102.171.0/24 maxlen: 24 103.206.80.0/22 maxlen: 22 103.206.80.0/24 maxlen: 24 103.206.81.0/24 maxlen: 24 103.206.82.0/24 maxlen: 24 103.206.83.0/24 maxlen: 24 2404:2380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4424 (0x1148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91560A3, serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Validity Not Before: Feb 10 17:35:09 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67aa38cc-3e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9a:62:96:01:87:6e:2e:71:c0:cd:74:94:14: 35:57:8d:d7:88:a3:b0:17:09:5b:52:33:ec:16:8d: d8:b8:d3:3e:d4:c2:6e:45:f9:ed:72:ba:33:31:31: b4:89:4f:82:e8:8c:09:57:3f:4b:84:70:ae:b7:17: b5:03:ba:73:a5:f8:65:35:34:01:cc:05:0c:d5:b1: a2:62:d7:c6:86:ae:ca:b3:df:8e:62:b9:6a:ac:fd: 8e:ee:e9:95:30:95:86:23:f5:b1:4f:fd:15:19:9c: 2e:b4:28:d4:98:4e:6e:9a:56:e2:07:95:33:0c:f1: f5:8c:e8:e7:22:11:ec:1a:af:aa:76:56:aa:a3:06: 7c:31:a2:ba:52:41:29:25:66:3a:6b:12:7d:93:72: 8e:b5:35:8c:f5:11:11:f5:25:61:39:8a:07:b3:f4: 7d:c8:99:28:cd:1f:bc:29:60:70:9d:6b:ca:8b:4d: 6a:e5:56:e0:e4:c0:08:22:5d:fa:5b:82:f5:f2:98: fb:fe:24:3b:df:db:33:32:24:8c:b0:70:c1:f8:45: 47:aa:7a:64:16:3b:52:98:04:d9:76:a3:fc:08:cf: 77:c1:c5:64:12:f4:14:93:aa:5e:d1:7d:61:30:30: 3d:25:28:48:b3:73:2f:4d:d5:a8:04:a9:7c:3b:2d: 7d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CC:D9:B8:52:C0:D7:A4:B2:05:97:36:47:B0:AE:8A:88:13:BF:2B X509v3 Authority Key Identifier: keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/2245CE0A606811EB80E3D531C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.102.168.0/22 103.206.80.0/22 IPv6: 2404:2380::/32 Signature Algorithm: sha256WithRSAEncryption 71:17:50:51:b2:18:75:23:3f:2e:47:c3:43:f0:ef:ec:f7:4c: f6:be:cd:4b:45:43:44:2f:76:61:8c:92:30:67:00:ac:e2:92: e7:77:42:30:5d:0f:f2:e8:4c:7a:d9:67:07:11:34:1a:50:a9: 97:25:e6:56:b7:e3:dd:d7:ad:74:c6:73:e2:cb:95:4f:c9:02: e3:89:27:ff:ce:5f:d0:19:f8:1a:84:f3:e0:ba:7f:5d:28:01: 8f:c7:37:4e:c8:d8:77:d7:f6:bf:22:54:cc:44:a1:2b:69:2d: 95:eb:3c:2f:d7:8e:75:ab:36:d0:32:fc:97:f7:6e:2a:d3:f9: a8:43:fa:26:bc:59:51:2d:95:42:f1:e6:e3:ed:10:f5:e8:46: ff:1c:53:c7:c1:91:f3:fc:fe:65:e1:24:0c:13:22:71:2d:de: a9:99:04:50:09:b3:55:a3:90:54:26:c6:f1:23:25:8d:a2:d5: 88:85:f9:06:a8:d3:cb:66:81:78:54:01:29:16:15:8d:83:91: ec:e1:ef:44:6c:38:92:b7:53:65:19:09:66:3b:af:46:31:b2: c5:15:15:8c:ec:e8:64:cb:dd:01:24:99:99:a4:d2:32:ba:98: 97:7a:32:4d:ab:f1:63:be:eb:0d:6b:f9:dd:c6:7c:44:c9:1d: d7:e2:70:1d -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwQTMxMTAvBgNVBAUTKDBFMkRFQTE0RkQ3Q0ZGRDBEMEE5RUEzRTM3NDM3Qjkx RTQ1NEIyMzYwHhcNMjUwMjEwMTczNTA5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FhMzhjYy0zZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZpilgGHbi5xwM10lBQ1V43XiKOwFwlbUjPsFo3YuNM+1MJuRfntcrozMTG0 iU+C6IwJVz9LhHCutxe1A7pzpfhlNTQBzAUM1bGiYtfGhq7Ks9+OYrlqrP2O7umV MJWGI/WxT/0VGZwutCjUmE5umlbiB5UzDPH1jOjnIhHsGq+qdlaqowZ8MaK6UkEp JWY6axJ9k3KOtTWM9RER9SVhOYoHs/R9yJkozR+8KWBwnWvKi01q5Vbg5MAIIl36 W4L18pj7/iQ739szMiSMsHDB+EVHqnpkFjtSmATZdqP8CM93wcVkEvQUk6pe0X1h MDA9JShIs3MvTdWoBKl8Oy19twIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFErM2bhS wNeksgWXNkewroqIE78rMB8GA1UdIwQYMBaAFA4t6hT9fP/Q0KnqPjdDe5HkVLI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjBBMy9FNERGOTZBQUZE RjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85RFFxZW8tTjBON2tlUlVz alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpM3FGUDE4XzlEUXFlby1OME43a2VSVXNqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTYwQTMvRTRERjk2QUFGREY4MTFFOEFEMkMxMjYyQzRGOUFFMDIvMjI0NUNFMEE2 MDY4MTFFQjgwRTNENTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIOZqgDBAJnzlAwDQQCAAIwBwMFACQEI4AwDQYJKoZIhvcN AQELBQADggEBAHEXUFGyGHUjPy5Hw0Pw7+z3TPa+zUtFQ0QvdmGMkjBnAKzikud3 QjBdD/LoTHrZZwcRNBpQqZcl5la3493XrXTGc+LLlU/JAuOJJ//OX9AZ+BqE8+C6 f10oAY/HN07I2HfX9r8iVMxEoStpLZXrPC/XjnWrNtAy/Jf3birT+ahD+ia8WVEt lULx5uPtEPXoRv8cU8fBkfP8/mXhJAwTInEt3qmZBFAJs1WjkFQmxvEjJY2i1YiF +Qao08tmgXhUASkWFY2Dkezh70RsOJK3U2UZCWY7r0YxssUVFYzs6GTL3QEkmZmk 0jK6mJd6Mk2r8WO+6w1r+d3GfETJHdficB0= -----END CERTIFICATE-----Generated at Wed Nov 5 19:50:22 2025 by rpki-client