$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/6959BDA8C05B11EB9540776AC4F9AE02.roa File: 6959BDA8C05B11EB9540776AC4F9AE02.roa (raw, json) Hash identifier: an7WXAxX+jv7oF31g7hZpPAQEGzXt/L0AOIi2ZabL2I= Subject key identifier: 97:D0:44:46:80:3B:C7:AC:87:C0:8F:D8:33:20:45:6C:71:FC:CF:3F Certificate issuer: /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Certificate serial: 05E1 Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/6959BDA8C05B11EB9540776AC4F9AE02.roa Signing time: Fri 04 Jul 2025 23:35:45 +0000 ROA not before: Fri 04 Jul 2025 23:35:45 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 142275 IP address blocks: 103.167.82.0/23 maxlen: 24 2407:6640::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1505 (0x5e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91973D2, serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3 Validity Not Before: Jul 4 23:35:45 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68686551-7165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1e:08:f8:0d:05:28:80:ae:ce:08:c9:54:2e: e3:91:25:0d:aa:8a:89:a1:9c:e7:cf:64:2f:ee:8f: 19:27:43:4c:fe:de:8d:a6:84:af:b3:0c:b1:8a:d1: 73:1c:bb:39:00:1a:8f:b8:c7:62:27:90:15:ed:00: b5:61:4b:51:08:10:28:ec:94:97:2f:92:dc:66:d0: d0:40:d9:6a:a9:8a:0d:46:5c:72:57:62:01:d2:a9: d2:92:fe:f8:7e:83:38:45:09:2d:6e:97:7c:ae:df: 59:0a:31:ff:d5:2f:7b:d6:73:f7:93:1b:77:ff:a1: 50:5c:ab:d5:04:1c:40:0a:86:ca:c5:73:64:26:03: 99:10:7f:d2:f2:81:0f:46:4f:fd:de:46:a7:01:a2: 62:2a:0f:81:3b:94:b2:bd:4b:8a:02:66:52:c9:39: d4:b8:97:32:d2:38:df:93:57:a3:92:1a:21:43:56: 45:d2:db:df:02:da:19:98:f6:8e:69:af:34:f6:4a: c0:7c:0c:34:00:c9:4a:79:c2:6f:10:a0:47:3a:22: 5c:b1:3f:41:93:a5:10:7c:62:a7:89:83:9e:d0:2b: af:96:81:59:b8:1b:b6:81:b3:98:a8:b4:d4:58:14: 51:d6:ed:16:6e:9f:2a:ee:f5:27:7e:cf:88:c8:97: d0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D0:44:46:80:3B:C7:AC:87:C0:8F:D8:33:20:45:6C:71:FC:CF:3F X509v3 Authority Key Identifier: keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/6959BDA8C05B11EB9540776AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.82.0/23 IPv6: 2407:6640::/40 Signature Algorithm: sha256WithRSAEncryption b1:64:21:60:ec:4b:7d:4c:12:49:5d:3e:08:23:d6:85:8c:89: 38:02:23:02:bb:15:b4:4f:a3:e6:b3:97:12:91:57:36:d3:dc: 0a:c5:fe:8b:b3:7c:07:b7:ad:99:f2:2b:69:f5:17:dc:04:8f: c3:c4:98:4e:b0:af:c2:05:ac:22:4f:a7:44:b8:c4:d1:42:fe: 48:c5:94:d6:d7:29:42:e2:af:35:62:e6:ab:f6:e3:51:63:4c: 02:b3:c8:ca:f4:5b:3b:ba:3a:0c:4c:3d:89:4e:79:35:85:f3: 53:23:cc:72:b1:d1:25:75:d2:df:ad:df:93:5f:b8:4f:4b:27: 09:29:96:4c:82:3a:68:04:87:58:8e:52:01:79:56:2e:74:7b: bd:38:ff:1f:0d:ee:b9:4c:21:0d:bd:9e:ed:20:9f:4f:94:80: 6e:24:fc:9a:71:81:18:67:c4:55:de:d3:8a:ac:e3:7d:28:48: dc:bb:00:17:4b:b6:11:47:02:e9:71:38:a0:9d:19:b1:6f:14: e5:42:83:3c:3e:47:8c:32:b8:1e:33:60:e9:74:c4:81:c3:c3: 9e:85:77:5d:21:f0:65:61:85:69:17:13:f5:b8:eb:ea:ce:ba: f3:59:80:30:34:5b:ab:2c:48:0b:ae:01:c9:63:c9:db:1d:4e: 70:03:d3:96 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICBeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczRDIxMTAvBgNVBAUTKDg2QUIzRUJEN0M0MUU2NTZDQ0VFQ0RCNUE4NTBDN0E0 QjFFMjY3RTMwHhcNMjUwNzA0MjMzNTQ1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4NjU1MS03MTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7h4I+A0FKICuzgjJVC7jkSUNqoqJoZznz2Qv7o8ZJ0NM/t6NpoSvswyxitFz HLs5ABqPuMdiJ5AV7QC1YUtRCBAo7JSXL5LcZtDQQNlqqYoNRlxyV2IB0qnSkv74 foM4RQktbpd8rt9ZCjH/1S971nP3kxt3/6FQXKvVBBxACobKxXNkJgOZEH/S8oEP Rk/93kanAaJiKg+BO5SyvUuKAmZSyTnUuJcy0jjfk1ejkhohQ1ZF0tvfAtoZmPaO aa809krAfAw0AMlKecJvEKBHOiJcsT9Bk6UQfGKniYOe0CuvloFZuBu2gbOYqLTU WBRR1u0Wbp8q7vUnfs+IyJfQkQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJfQREaA O8esh8CP2DMgRWxx/M8/MB8GA1UdIwQYMBaAFIarPr18QeZWzO7NtahQx6Sx4mfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzNEMi9EQTgzOUM5NEJG QzgxMUVCQTVCM0E2N0NDNEY5QUUwMi9ocXMtdlh4QjVsYk03czIxcUZESHBMSGla LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hxcy12WHhCNWxiTTdzMjFxRkRIcExIaVotTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTczRDIvREE4MzlDOTRCRkM4MTFFQkE1QjNBNjdDQzRGOUFFMDIvNjk1OUJEQThD MDVCMTFFQjk1NDA3NzZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAFnp1IwDgQCAAIwCAMGACQHZkAAMA0GCSqGSIb3DQEBCwUA A4IBAQCxZCFg7Et9TBJJXT4II9aFjIk4AiMCuxW0T6Pms5cSkVc209wKxf6Ls3wH t62Z8itp9RfcBI/DxJhOsK/CBawiT6dEuMTRQv5IxZTW1ylC4q81Yuar9uNRY0wC s8jK9Fs7ujoMTD2JTnk1hfNTI8xysdElddLfrd+TX7hPSycJKZZMgjpoBIdYjlIB eVYudHu9OP8fDe65TCENvZ7tIJ9PlIBuJPyacYEYZ8RV3tOKrON9KEjcuwAXS7YR RwLpcTignRmxbxTlQoM8PkeMMrgeM2DpdMSBw8OehXddIfBlYYVpFxP1uOvqzrrz WYAwNFurLEgLrgHJY8nbHU5wA9OW -----END CERTIFICATE-----Generated at Sun Aug 10 13:58:02 2025 by rpki-client