$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/CBECEF26736C11F0AB1C0331C4F9AE02.roa File: CBECEF26736C11F0AB1C0331C4F9AE02.roa (raw, json) Hash identifier: ORzkYkvhLpkSlBO34+VKnzigJFjKdcpNL7PaFDva6xA= Subject key identifier: 17:E3:0F:8F:32:0E:C3:E3:13:90:31:D9:C9:9A:3A:B4:AB:ED:6E:56 Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: 019E Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/CBECEF26736C11F0AB1C0331C4F9AE02.roa Signing time: Fri 08 Aug 2025 02:26:00 +0000 ROA not before: Fri 08 Aug 2025 02:25:59 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 153952 IP address blocks: 103.155.90.0/23 maxlen: 23 103.155.90.0/24 maxlen: 24 103.155.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: Aug 8 02:25:59 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=68956037-16e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:15:c4:c5:4f:55:56:ad:97:d0:91:d8:c9: 34:e5:32:96:de:33:b1:cd:ff:a4:e9:dc:5e:db:78: 1e:4a:d8:fc:6b:35:97:57:ea:5c:89:46:22:cc:ca: 99:43:64:1e:12:c3:6d:70:44:3c:ba:60:b1:d2:ae: e1:aa:3e:3c:bb:cc:58:06:78:4c:cd:13:df:1b:25: f4:7e:f0:fe:84:53:7c:36:f3:a8:a7:60:23:ad:80: 2f:73:e0:f9:66:c4:25:c3:84:32:3e:9d:66:43:ac: 7b:5a:e1:dc:0a:61:30:90:1f:49:d4:9c:a6:40:dd: 4a:78:2f:71:1e:37:2a:4b:8a:16:dd:aa:bf:df:db: 8e:c6:6e:23:45:19:dc:1b:c6:2a:cf:9d:e6:5f:bd: c6:27:16:fc:da:7e:e0:6d:6c:47:a2:28:51:a9:8a: 12:0d:73:08:d4:7e:73:42:7f:3a:6c:50:db:bb:47: 9f:b1:57:29:8e:55:21:95:04:aa:2b:ed:4f:a1:49: 21:03:2f:58:13:d8:3d:e8:d7:bb:46:25:24:f0:66: 7d:5b:42:6d:67:ce:81:62:3b:2a:89:8f:94:36:16: ef:06:a2:a1:f5:ae:a6:9f:c4:51:05:ab:5c:f6:0d: de:a3:3b:bb:d2:97:82:51:55:c0:01:fc:bf:f9:d0: 66:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E3:0F:8F:32:0E:C3:E3:13:90:31:D9:C9:9A:3A:B4:AB:ED:6E:56 X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/CBECEF26736C11F0AB1C0331C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.90.0/23 Signature Algorithm: sha256WithRSAEncryption 79:b8:bf:84:1d:c5:e1:aa:4e:6c:1b:c5:cd:14:5a:66:10:28: 7c:52:8e:05:b4:1a:a6:1a:b4:8f:09:ee:1f:a7:80:d2:74:3d: 37:bb:0f:da:98:eb:91:cd:d6:e9:91:eb:c5:e8:36:ee:a6:a6: 2f:12:bb:56:50:b1:53:0e:2e:a0:99:b6:3b:e9:a2:1d:ed:2e: 4f:26:b0:e0:da:f2:73:70:a8:67:20:12:55:3e:81:83:20:04: 68:ee:db:a7:41:b3:2d:17:5e:d5:dc:9f:38:82:87:6e:5e:36: aa:5a:59:87:bc:17:8a:77:3e:0e:c1:6d:b6:8b:e3:c9:1e:05: 74:0c:e3:49:8b:13:61:17:c9:d3:83:28:a1:3e:c2:1e:8d:da: 28:32:70:08:29:39:39:ba:e6:3a:52:bd:21:ff:8c:30:c1:8b: b6:aa:19:76:6d:2d:9f:bd:d1:6b:b3:7a:e1:f6:2f:43:4d:40: f7:71:57:e9:fa:ca:06:be:b8:d1:3b:f2:9f:df:51:02:ed:47: ca:29:da:7c:68:55:9d:11:03:ff:de:a2:ba:96:12:1d:2d:fe: b1:53:07:25:f0:fb:e0:4d:78:33:d0:d7:0c:66:e9:81:e4:15: 61:d4:9c:f7:cd:83:88:64:f8:0f:42:64:f0:b4:09:a0:ce:31: b9:0a:1b:15 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjUwODA4MDIyNTU5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk1NjAzNy0xNmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIkVxMVPVVatl9CR2Mk05TKW3jOxzf+k6dxe23geStj8azWXV+pciUYizMqZ Q2QeEsNtcEQ8umCx0q7hqj48u8xYBnhMzRPfGyX0fvD+hFN8NvOop2AjrYAvc+D5 ZsQlw4QyPp1mQ6x7WuHcCmEwkB9J1JymQN1KeC9xHjcqS4oW3aq/39uOxm4jRRnc G8Yqz53mX73GJxb82n7gbWxHoihRqYoSDXMI1H5zQn86bFDbu0efsVcpjlUhlQSq K+1PoUkhAy9YE9g96Ne7RiUk8GZ9W0JtZ86BYjsqiY+UNhbvBqKh9a6mn8RRBatc 9g3eozu70peCUVXAAfy/+dBmJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBfjD48y DsPjE5Ax2cmaOrSr7W5WMB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA2Q0UvRTkwQkQ2NjgwRjg2MTFFRUE1NkVCQjIyQzRGOUFFMDIvQ0JFQ0VGMjY3 MzZDMTFGMEFCMUMwMzMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnm1owDQYJKoZIhvcNAQELBQADggEBAHm4v4QdxeGqTmwb xc0UWmYQKHxSjgW0GqYatI8J7h+ngNJ0PTe7D9qY65HN1umR68XoNu6mpi8Su1ZQ sVMOLqCZtjvpoh3tLk8msODa8nNwqGcgElU+gYMgBGju26dBsy0XXtXcnziCh25e NqpaWYe8F4p3Pg7BbbaL48keBXQM40mLE2EXydODKKE+wh6N2igycAgpOTm65jpS vSH/jDDBi7aqGXZtLZ+90WuzeuH2L0NNQPdxV+n6yga+uNE78p/fUQLtR8op2nxo VZ0RA//eorqWEh0t/rFTByXw++BNeDPQ1wxm6YHkFWHUnPfNg4hk+A9CZPC0CaDO MbkKGxU= -----END CERTIFICATE-----Generated at Mon Aug 11 10:30:02 2025 by rpki-client