$ rpki-client -vvf rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa File: DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa (raw, json) Hash identifier: yNzSo18Zr+VZZ8+QcBD6VKrhKtuzioN93vYAY/qtNGg= Subject key identifier: E3:CC:2E:B2:D8:45:FD:BB:E4:79:D1:F8:BC:E0:7A:13:CD:17:FA:BA Certificate issuer: /CN=A91570C9/serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Certificate serial: 0176 Authority key identifier: 8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa Signing time: Sat 17 May 2025 03:42:20 +0000 ROA not before: Sat 17 May 2025 03:42:20 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151359 IP address blocks: 103.160.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91570C9, serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Validity Not Before: May 17 03:42:20 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6828059c-7b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b5:06:32:a5:62:8b:c0:e5:8f:85:c6:00:db: 04:f3:27:2b:fc:72:54:e3:7b:1c:03:a5:a7:0b:ba: d7:bd:33:75:4d:76:2b:4c:a9:75:73:eb:af:f4:7c: e2:ec:2c:b3:b3:03:41:2e:26:20:96:2a:0c:b8:fa: 5e:89:82:f7:b8:69:92:66:f4:8e:7d:bc:83:16:c7: b3:8d:7c:c8:14:36:b8:d6:23:90:9c:86:5d:dd:11: 12:13:db:2e:1b:d5:0b:f2:95:97:e8:02:bb:d8:1c: 84:c2:df:61:01:13:b2:34:39:ad:b4:2a:56:ab:c9: 71:fe:60:e1:e5:c5:e0:14:a6:65:c2:7f:dd:52:43: 08:d3:41:24:08:40:a4:a0:01:34:55:ae:27:b5:13: 2b:0c:e6:94:85:55:dd:a5:4a:02:3a:e9:63:39:83: df:76:8c:41:ee:2b:83:e1:c9:0e:2e:b6:8d:b5:1a: 95:43:9f:3d:27:06:41:56:c4:a5:b0:73:d4:46:8f: 6f:a3:09:e0:f1:56:e0:d7:06:ff:32:50:9e:d1:2c: 5b:52:5f:a9:63:23:ac:11:0b:ab:9a:5f:3f:42:66: 30:19:9d:9c:dd:80:71:51:e7:4c:0b:2e:8d:57:ea: d9:b5:9c:3b:38:87:28:6f:7a:a5:22:e8:2d:a3:b9: 84:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CC:2E:B2:D8:45:FD:BB:E4:79:D1:F8:BC:E0:7A:13:CD:17:FA:BA X509v3 Authority Key Identifier: keyid:8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.160.0.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:66:40:31:67:d6:e7:cf:09:1e:2b:14:b8:dc:b9:b2:be:93: 6c:8a:42:c5:4a:74:26:c6:22:84:33:31:3e:46:d9:64:df:da: ac:13:22:5d:c7:43:12:25:73:e0:78:34:71:0b:ed:db:8e:31: a4:af:bc:c5:b9:14:c0:88:e0:87:f2:14:14:f8:09:70:88:a4: 5f:3f:24:0f:f3:17:2a:fb:8c:80:3b:5d:55:7d:25:17:d6:5d: 13:e7:52:e4:ea:64:83:0f:01:5a:8a:0d:fc:01:8e:f3:d8:59: 6c:0c:6a:05:fb:fe:c4:3e:b7:ee:59:63:0e:e8:1f:07:b6:df: ac:49:f9:b2:50:bb:e7:96:c8:5e:ba:61:46:db:2d:4c:ad:33: 7b:bc:0f:7a:0a:e6:95:e6:84:27:31:8c:06:9b:47:87:30:c2: 3d:b7:5c:3c:8f:4b:85:9e:53:66:f6:6d:3d:ec:fd:ee:41:90: 87:83:7d:a0:b8:2e:f3:0f:26:47:4f:18:f7:4a:77:53:3c:e6: 9f:aa:6a:ad:a4:81:ac:eb:d1:59:bf:73:cb:92:b1:aa:79:e9: 06:30:46:1c:65:b1:03:54:b2:b5:56:3c:e2:68:11:c0:36:c6: 30:ba:96:c1:c8:2b:31:c6:a9:59:54:2b:53:24:10:86:a0:d0: 92:9f:7b:a6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTcwQzkxMTAvBgNVBAUTKDhFMTQ2QTQ3RkU2MkQwOUEzMjY2Q0UwODNBNTc5Q0FE MTNBNTgwNjYwHhcNMjUwNTE3MDM0MjIwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI4MDU5Yy03Yjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrUGMqVii8Dlj4XGANsE8ycr/HJU43scA6WnC7rXvTN1TXYrTKl1c+uv9Hzi 7CyzswNBLiYglioMuPpeiYL3uGmSZvSOfbyDFsezjXzIFDa41iOQnIZd3RESE9su G9UL8pWX6AK72ByEwt9hAROyNDmttCpWq8lx/mDh5cXgFKZlwn/dUkMI00EkCECk oAE0Va4ntRMrDOaUhVXdpUoCOuljOYPfdoxB7iuD4ckOLraNtRqVQ589JwZBVsSl sHPURo9vowng8Vbg1wb/MlCe0SxbUl+pYyOsEQurml8/QmYwGZ2c3YBxUedMCy6N V+rZtZw7OIcob3qlIugto7mElQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOPMLrLY Rf275HnR+LzgehPNF/q6MB8GA1UdIwQYMBaAFI4Uakf+YtCaMmbOCDpXnK0TpYBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzBDOS8wMjI3QjlBRUZB MjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBKb3laczRJT2xlY3JST2xn R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2poUnFSXzVpMEpveVpzNElPbGVjclJPbGdHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTcwQzkvMDIyN0I5QUVGQTI1MTFFREE3MDI3MDEwQzRGOUFFMDIvREZGRUM0RUNG QTJCMTFFRDg5QjkwQTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnoAAwDQYJKoZIhvcNAQELBQADggEBAG9mQDFn1ufPCR4r FLjcubK+k2yKQsVKdCbGIoQzMT5G2WTf2qwTIl3HQxIlc+B4NHEL7duOMaSvvMW5 FMCI4IfyFBT4CXCIpF8/JA/zFyr7jIA7XVV9JRfWXRPnUuTqZIMPAVqKDfwBjvPY WWwMagX7/sQ+t+5ZYw7oHwe236xJ+bJQu+eWyF66YUbbLUytM3u8D3oK5pXmhCcx jAabR4cwwj23XDyPS4WeU2b2bT3s/e5BkIeDfaC4LvMPJkdPGPdKd1M85p+qaq2k gazr0Vm/c8uSsap56QYwRhxlsQNUsrVWPOJoEcA2xjC6lsHIKzHGqVlUK1MkEIag 0JKfe6Y= -----END CERTIFICATE-----Generated at Wed Nov 5 11:53:19 2025 by rpki-client