$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3C0376CC6FD511F0BF33C829C4F9AE02.roa File: 3C0376CC6FD511F0BF33C829C4F9AE02.roa (raw, json) Hash identifier: tcVwqZZLgzM/JYa8wH8nV+ejGoZFhH0k2MAzqkTeLmo= Subject key identifier: 86:29:0B:9C:3D:A8:4F:D9:CB:5B:6C:DF:0B:A2:88:06:E3:F3:3E:71 Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 0148 Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3C0376CC6FD511F0BF33C829C4F9AE02.roa Signing time: Sat 02 Aug 2025 19:16:47 +0000 ROA not before: Sat 02 Aug 2025 19:16:47 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 62044 IP address blocks: 167.103.168.0/23 maxlen: 24 167.103.185.0/24 maxlen: 24 167.103.194.0/24 maxlen: 24 167.103.218.0/23 maxlen: 24 167.103.220.0/23 maxlen: 24 167.103.222.0/23 maxlen: 24 167.103.224.0/23 maxlen: 24 167.103.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: Aug 2 19:16:47 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=688e641f-80a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:64:a6:46:a5:21:f1:6b:83:91:37:48:02:6d: 6b:5d:9d:a4:cd:46:a7:01:fb:1d:03:2e:0d:b3:27: 05:b9:9c:75:be:41:af:c6:4f:a6:5c:ce:52:21:c2: e7:d2:da:61:2b:91:bb:f8:2d:a8:21:ea:9f:99:7c: f3:93:c0:a9:6d:59:3f:bc:68:a8:9e:a8:41:8b:a6: 34:fc:71:3e:b4:d5:11:e6:08:77:00:eb:26:ea:a3: 25:89:d1:ce:26:f4:bb:79:4b:76:57:42:b3:89:2b: 6a:c8:9e:be:da:20:da:15:dd:f7:00:ff:2c:f0:0b: f4:72:0e:42:fd:30:51:1c:d1:c8:05:37:17:79:d5: 1a:36:30:ab:ed:19:0b:d9:00:87:0a:81:27:dd:65: 4b:77:4f:59:2b:80:db:b4:ad:53:78:22:ad:4b:03: 6e:24:00:c9:3d:63:a2:b7:74:05:e3:3e:0e:fb:44: d6:d5:b3:df:08:c1:76:de:e7:da:17:d3:45:be:d5: db:31:33:83:f3:06:6d:fa:98:3b:a3:c0:44:bd:c4: ee:15:e3:93:0e:b4:e2:76:47:a9:af:3a:1a:34:09: 22:14:8d:37:7d:15:ab:e2:49:71:c1:6b:0f:92:e6: db:4b:aa:1e:a3:51:b8:e3:9d:a9:57:87:4b:8f:14: 33:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:29:0B:9C:3D:A8:4F:D9:CB:5B:6C:DF:0B:A2:88:06:E3:F3:3E:71 X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3C0376CC6FD511F0BF33C829C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.103.168.0/23 167.103.185.0/24 167.103.194.0/24 167.103.218.0-167.103.227.255 Signature Algorithm: sha256WithRSAEncryption 7e:f3:07:65:af:66:ca:b8:3a:16:24:77:28:dc:19:02:fc:3c: b3:0a:df:c9:29:4f:8c:42:2d:72:db:4b:0c:58:a9:bc:67:62: f9:15:3b:c7:1c:9c:79:9c:97:4b:9a:97:a5:12:27:96:31:b4: d3:8d:6e:44:39:d6:a9:9d:a6:18:f3:2c:5c:dc:50:a4:ce:27: cd:01:0e:86:be:27:76:7c:82:14:0b:ef:fd:d3:b1:e2:28:e5: 73:f8:0f:94:dc:c7:6b:53:18:74:ff:2d:e7:b1:fb:1e:f7:25: 26:61:c3:b0:9d:bf:2c:a6:6d:b6:04:f4:84:f0:e6:cd:60:1c: cb:82:2e:82:e1:96:80:64:98:30:51:98:53:28:86:44:2d:73: 35:1b:8c:fc:0d:02:d6:be:5a:2f:14:2c:bd:3f:52:f9:c4:77: 72:5f:82:ff:60:87:b5:c3:ca:3f:79:18:3a:14:a0:9b:c0:9e: 6d:e8:20:8e:c9:1c:9f:b7:e5:17:22:46:b8:4b:2d:35:7b:d2: 9d:9d:00:2c:16:02:57:f2:4f:88:ea:86:68:51:ce:ef:97:e6: 09:af:73:0c:6a:54:fd:12:df:76:21:fc:78:0a:17:7b:e6:55: bd:66:b3:cf:6c:18:c0:50:c2:ca:54:29:38:e6:4a:18:7f:6b: ea:6a:5b:d6 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw QkVDQUE5QTkwHhcNMjUwODAyMTkxNjQ3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlNjQxZi04MGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoGSmRqUh8WuDkTdIAm1rXZ2kzUanAfsdAy4NsycFuZx1vkGvxk+mXM5SIcLn 0tphK5G7+C2oIeqfmXzzk8CpbVk/vGionqhBi6Y0/HE+tNUR5gh3AOsm6qMlidHO JvS7eUt2V0KziStqyJ6+2iDaFd33AP8s8Av0cg5C/TBRHNHIBTcXedUaNjCr7RkL 2QCHCoEn3WVLd09ZK4DbtK1TeCKtSwNuJADJPWOit3QF4z4O+0TW1bPfCMF23ufa F9NFvtXbMTOD8wZt+pg7o8BEvcTuFeOTDrTidkeprzoaNAkiFI03fRWr4klxwWsP kubbS6oeo1G4452pV4dLjxQziwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFIYpC5w9 qE/Zy1ts3wuiiAbj8z5xMB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTcxNjkvNjIzM0REM0VFQkFFMTFFRThBMEVEOTY0QzRGOUFFMDIvM0MwMzc2Q0M2 RkQ1MTFGMEJGMzNDODI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBAGnZ6gDBACnZ7kDBACnZ8IwDAMEAadn2gMEAqdn4DANBgkq hkiG9w0BAQsFAAOCAQEAfvMHZa9myrg6FiR3KNwZAvw8swrfySlPjEItcttLDFip vGdi+RU7xxyceZyXS5qXpRInljG0041uRDnWqZ2mGPMsXNxQpM4nzQEOhr4ndnyC FAvv/dOx4ijlc/gPlNzHa1MYdP8t57H7HvclJmHDsJ2/LKZttgT0hPDmzWAcy4Iu guGWgGSYMFGYUyiGRC1zNRuM/A0C1r5aLxQsvT9S+cR3cl+C/2CHtcPKP3kYOhSg m8Cebeggjskcn7flFyJGuEstNXvSnZ0ALBYCV/JPiOqGaFHO75fmCa9zDGpU/RLf diH8eAoXe+ZVvWazz2wYwFDCylQpOOZKGH9r6mpb1g== -----END CERTIFICATE-----Generated at Wed Aug 6 13:14:17 2025 by rpki-client