$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/6D7F22A60DF511EBA2098D67C4F9AE02.roa File: 6D7F22A60DF511EBA2098D67C4F9AE02.roa (raw, json) Hash identifier: 6t5gjK6uSlTdUUyjqaA8L4ugjjxcnRzK8+qoE0d23h4= Subject key identifier: 6A:D3:47:4B:FF:28:D8:F5:45:D7:8F:D8:74:C2:6C:EE:C5:DB:30:C4 Certificate issuer: /CN=A91A9E55/serialNumber=E35CE44E7197297591398D82F33D1186174DE83A Certificate serial: 07A3 Authority key identifier: E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/6D7F22A60DF511EBA2098D67C4F9AE02.roa Signing time: Fri 20 Jun 2025 21:20:38 +0000 ROA not before: Fri 20 Jun 2025 21:20:38 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 24323 IP address blocks: 103.231.176.0/24 maxlen: 24 103.231.177.0/24 maxlen: 24 103.231.178.0/24 maxlen: 24 103.231.179.0/24 maxlen: 24 116.206.56.0/24 maxlen: 24 116.206.57.0/24 maxlen: 24 116.206.58.0/24 maxlen: 24 116.206.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1955 (0x7a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E55, serialNumber=E35CE44E7197297591398D82F33D1186174DE83A Validity Not Before: Jun 20 21:20:38 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6855d0a5-3647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c8:fc:cf:61:53:a0:fd:93:af:48:82:cd:dd: 00:cb:b3:ae:4b:43:cc:6c:c7:08:91:91:7e:e9:c5: f6:d2:e4:9f:df:44:de:1e:46:ab:15:14:6e:d1:e9: ab:b3:44:0a:00:cf:87:fa:61:38:cb:42:9e:b1:2b: b9:8d:d8:36:bd:ab:20:48:86:9f:c9:03:46:c3:6f: 6c:fa:37:78:77:07:40:e5:a1:65:87:29:3b:94:e8: 5b:21:89:e3:09:97:6a:f3:60:c7:ea:0c:82:29:2e: 99:d0:9c:15:82:98:36:49:e5:d0:76:77:38:10:2d: de:5f:84:8b:94:1d:6a:41:89:02:53:cd:93:de:f5: fd:a8:31:a7:57:a2:bf:7f:e7:1e:58:37:63:9b:54: 44:c2:36:67:37:bc:cb:d6:24:a6:25:08:4f:2e:71: 6d:0d:c5:20:2e:d5:5f:c5:83:55:e5:79:a0:5b:60: 39:20:41:a8:60:6c:e8:20:8d:de:1f:b2:a7:04:25: b9:90:69:f0:99:5f:7c:e0:0a:c1:07:9d:f6:88:9c: b7:c5:97:63:66:e5:f3:4f:0e:99:43:e7:69:52:8f: b6:1b:42:9f:6c:16:db:3e:7a:ba:9d:55:a7:c9:65: c2:8b:b7:b3:3e:d2:a4:03:e1:09:c9:82:8f:8d:05: 6f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D3:47:4B:FF:28:D8:F5:45:D7:8F:D8:74:C2:6C:EE:C5:DB:30:C4 X509v3 Authority Key Identifier: keyid:E3:5C:E4:4E:71:97:29:75:91:39:8D:82:F3:3D:11:86:17:4D:E8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/41zkTnGXKXWROY2C8z0RhhdN6Do.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/41zkTnGXKXWROY2C8z0RhhdN6Do.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E55/D95176840DF311EB93076F65C4F9AE02/6D7F22A60DF511EBA2098D67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.231.176.0/22 116.206.56.0/22 Signature Algorithm: sha256WithRSAEncryption c2:41:f8:e0:a5:e1:f6:86:fc:da:78:fb:2c:5b:6c:38:49:ec: 20:81:08:dc:9c:21:50:e3:b4:19:6c:53:9c:19:d6:0d:50:0d: c9:28:92:bd:ca:3f:49:ab:84:b8:8d:ad:3b:0e:d2:11:90:5e: 82:96:22:37:cc:04:4f:9b:dd:d8:2c:c9:8a:9c:23:62:0f:c4: 9a:17:df:be:65:91:03:52:3d:a7:d2:a2:b8:7a:ae:df:a2:7c: 06:98:3c:11:f0:65:41:13:84:07:b6:e0:be:91:5d:3f:ce:1a: 3d:ef:07:d9:5a:eb:c8:e5:c8:f1:5b:62:4a:0d:e1:93:84:22: 49:24:70:24:b9:15:99:eb:45:9a:30:eb:6b:8c:3e:28:8a:cf: da:42:10:5c:9f:b1:81:2b:d7:0d:b0:c2:0d:fa:3e:ac:40:c9: 31:60:03:25:61:e1:16:44:a8:28:35:c1:8c:9f:e1:75:5f:2c: 41:25:15:30:8f:b1:11:7c:94:86:a1:9d:8c:80:42:07:b4:29: 15:22:ea:d3:95:21:0d:c8:bf:11:c5:80:bc:a2:47:f6:1d:29: 91:6d:6b:7f:6c:e5:47:0c:2e:5e:ba:84:2a:3d:a2:99:97:f8: e2:65:53:dc:3c:40:ff:ce:9a:e3:8e:44:78:31:be:da:6e:d6: cd:f1:bb:ba -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFNTUxMTAvBgNVBAUTKEUzNUNFNDRFNzE5NzI5NzU5MTM5OEQ4MkYzM0QxMTg2 MTc0REU4M0EwHhcNMjUwNjIwMjEyMDM4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU1ZDBhNS0zNjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsj8z2FToP2Tr0iCzd0Ay7OuS0PMbMcIkZF+6cX20uSf30TeHkarFRRu0emr s0QKAM+H+mE4y0KesSu5jdg2vasgSIafyQNGw29s+jd4dwdA5aFlhyk7lOhbIYnj CZdq82DH6gyCKS6Z0JwVgpg2SeXQdnc4EC3eX4SLlB1qQYkCU82T3vX9qDGnV6K/ f+ceWDdjm1REwjZnN7zL1iSmJQhPLnFtDcUgLtVfxYNV5XmgW2A5IEGoYGzoII3e H7KnBCW5kGnwmV984ArBB532iJy3xZdjZuXzTw6ZQ+dpUo+2G0KfbBbbPnq6nVWn yWXCi7ezPtKkA+EJyYKPjQVvIwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGrTR0v/ KNj1RdeP2HTCbO7F2zDEMB8GA1UdIwQYMBaAFONc5E5xlyl1kTmNgvM9EYYXTeg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUU1NS9EOTUxNzY4NDBE RjMxMUVCOTMwNzZGNjVDNEY5QUUwMi80MXprVG5HWEtYV1JPWTJDOHowUmhoZE42 RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQxemtUbkdYS1hXUk9ZMkM4ejBSaGhkTjZEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTlFNTUvRDk1MTc2ODQwREYzMTFFQjkzMDc2RjY1QzRGOUFFMDIvNkQ3RjIyQTYw REY1MTFFQkEyMDk4RDY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn57ADBAJ0zjgwDQYJKoZIhvcNAQELBQADggEBAMJB+OCl 4faG/Np4+yxbbDhJ7CCBCNycIVDjtBlsU5wZ1g1QDckokr3KP0mrhLiNrTsO0hGQ XoKWIjfMBE+b3dgsyYqcI2IPxJoX375lkQNSPafSorh6rt+ifAaYPBHwZUEThAe2 4L6RXT/OGj3vB9la68jlyPFbYkoN4ZOEIkkkcCS5FZnrRZow62uMPiiKz9pCEFyf sYEr1w2wwg36PqxAyTFgAyVh4RZEqCg1wYyf4XVfLEElFTCPsRF8lIahnYyAQge0 KRUi6tOVIQ3IvxHFgLyiR/YdKZFta39s5UcMLl66hCo9opmX+OJlU9w8QP/OmuOO RHgxvtpu1s3xu7o= -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:36 2025 by rpki-client