$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/E22ECDEAC4F811EAB8D31113C4F9AE02.roa File: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (raw, json) Hash identifier: 1QX8DyT1A4CiikAaWBicwaY94hYcJgWNUoKN7UlLwiU= Subject key identifier: 6F:A1:78:D5:7F:9A:36:83:D7:EF:F6:4C:6C:CF:E0:E0:E5:F1:D9:E9 Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Certificate serial: 08E6 Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/E22ECDEAC4F811EAB8D31113C4F9AE02.roa Signing time: Mon 04 Aug 2025 21:01:46 +0000 ROA not before: Mon 04 Aug 2025 21:01:46 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 137443 IP address blocks: 103.152.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2278 (0x8e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Validity Not Before: Aug 4 21:01:46 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68911fba-9c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:61:36:ab:d1:06:cc:50:2c:a5:85:83:e5:98: e6:52:11:6c:93:5f:b7:1b:16:32:4f:43:56:ab:0c: fa:ca:46:f9:3d:c5:8a:98:68:42:ad:eb:76:0f:5f: ce:42:01:8e:1e:19:dc:0e:18:a8:e0:3b:7e:aa:1a: 9e:95:74:ca:1c:1c:67:3d:52:2b:d0:62:27:c5:0d: de:2a:b0:0e:0a:78:53:96:20:e0:de:13:af:e8:4b: 13:dc:a9:ad:d9:91:1d:83:1c:77:b6:e7:06:3e:e4: a5:4b:ef:cc:73:8c:76:72:df:0f:a4:90:02:2c:81: 01:b1:6c:19:58:4c:44:49:a4:ad:11:7f:0c:45:c7: 57:65:ce:eb:fa:2c:28:9b:a2:99:0b:78:59:2a:cb: d8:01:56:87:14:40:d0:3c:13:93:2e:0d:99:9e:76: ff:49:e2:70:e8:77:5f:da:60:51:51:c1:1e:7b:67: be:f4:f7:fa:e2:11:e1:ad:f6:e7:bd:34:27:b2:92: a3:2b:a3:e9:65:07:13:62:27:1d:87:ed:50:09:be: 8b:d8:0b:7d:16:61:66:4f:9a:ed:66:8d:ed:7a:12: e4:49:16:35:17:80:df:ee:11:52:d6:7b:f4:22:e7: ec:51:50:35:10:2c:01:05:99:27:64:b7:18:f0:99: 24:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A1:78:D5:7F:9A:36:83:D7:EF:F6:4C:6C:CF:E0:E0:E5:F1:D9:E9 X509v3 Authority Key Identifier: keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/E22ECDEAC4F811EAB8D31113C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.170.0/23 Signature Algorithm: sha256WithRSAEncryption 49:2e:2a:cf:15:21:4a:e2:08:1f:2d:b5:96:23:52:90:4f:1f: de:dd:1a:fe:d9:4d:51:79:d2:b4:ac:6e:20:0d:ac:6f:0d:42: 92:05:aa:5e:02:c7:d7:74:de:f6:36:a4:d0:00:a2:4a:d0:f7: e6:63:3b:26:82:f9:e3:85:b0:a6:73:28:e1:ab:b5:87:02:4d: 5e:10:56:e0:92:7a:62:79:4b:10:e8:40:12:ff:fb:f2:7c:70: c8:31:a3:b2:02:0b:75:91:85:7e:6d:ae:46:c5:10:c6:f9:61: 65:36:31:56:79:1d:e5:7c:72:ce:3c:68:4e:cc:85:96:01:42: c4:c9:91:4f:84:e7:a2:50:ad:7a:a8:d9:74:57:64:77:cc:93: 3b:31:28:07:f3:af:20:b1:d4:88:78:e3:f4:26:da:96:86:96: db:77:66:75:10:3e:9b:d1:44:e9:76:98:57:1d:4a:70:42:9c: e8:d0:4b:4f:6f:f8:43:e3:14:a5:a3:78:70:c0:33:69:8c:a4: 34:d1:b0:db:da:81:a4:9c:30:d5:7f:04:22:32:e2:25:1a:94: fb:f3:b4:d6:fa:44:05:91:61:05:b1:be:b8:0f:7e:48:8b:7c: 43:a5:8e:2c:78:d2:e1:fc:c0:6c:1f:66:26:a4:74:a1:dc:ba: 84:85:65:6a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1 QTUwMjcwRTMwHhcNMjUwODA0MjEwMTQ2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkxMWZiYS05YzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2E2q9EGzFAspYWD5ZjmUhFsk1+3GxYyT0NWqwz6ykb5PcWKmGhCret2D1/O QgGOHhncDhio4Dt+qhqelXTKHBxnPVIr0GInxQ3eKrAOCnhTliDg3hOv6EsT3Kmt 2ZEdgxx3tucGPuSlS+/Mc4x2ct8PpJACLIEBsWwZWExESaStEX8MRcdXZc7r+iwo m6KZC3hZKsvYAVaHFEDQPBOTLg2Znnb/SeJw6Hdf2mBRUcEee2e+9Pf64hHhrfbn vTQnspKjK6PpZQcTYicdh+1QCb6L2At9FmFmT5rtZo3tehLkSRY1F4Df7hFS1nv0 IufsUVA1ECwBBZknZLcY8Jkk9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFG+heNV/ mjaD1+/2TGzP4ODl8dnpMB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5 RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUJGRDkvNEFFODA0MUVCOUQ3MTFFQTlDRjUxRTVGQzRGOUFFMDIvRTIyRUNERUFD NEY4MTFFQUI4RDMxMTEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmKowDQYJKoZIhvcNAQELBQADggEBAEkuKs8VIUriCB8t tZYjUpBPH97dGv7ZTVF50rSsbiANrG8NQpIFql4Cx9d03vY2pNAAokrQ9+ZjOyaC +eOFsKZzKOGrtYcCTV4QVuCSemJ5SxDoQBL/+/J8cMgxo7ICC3WRhX5trkbFEMb5 YWU2MVZ5HeV8cs48aE7MhZYBQsTJkU+E56JQrXqo2XRXZHfMkzsxKAfzryCx1Ih4 4/Qm2paGltt3ZnUQPpvRROl2mFcdSnBCnOjQS09v+EPjFKWjeHDAM2mMpDTRsNva gaScMNV/BCIy4iUalPvztNb6RAWRYQWxvrgPfkiLfEOljix40uH8wGwfZiakdKHc uoSFZWo= -----END CERTIFICATE-----Generated at Fri Aug 8 19:30:28 2025 by rpki-client