$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/843804BE744C11F0B13EF277C4F9AE02.roa File: 843804BE744C11F0B13EF277C4F9AE02.roa (raw, json) Hash identifier: WVu1M2pfONTzjQ7tQiNival/OyDU+Y+z27/PrWnqEKc= Subject key identifier: 25:25:83:D3:33:2A:7A:64:49:A2:A3:0C:25:F4:86:5B:0D:01:13:8D Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Certificate serial: 0B7A Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/843804BE744C11F0B13EF277C4F9AE02.roa Signing time: Fri 08 Aug 2025 11:40:43 +0000 ROA not before: Fri 08 Aug 2025 11:40:43 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 15083 IP address blocks: 103.101.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 19:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2938 (0xb7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Validity Not Before: Aug 8 11:40:43 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6895e23b-0bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:6e:45:70:30:c8:90:6f:1d:dd:12:55:71: ff:0b:7d:d2:98:50:8c:26:b4:48:0f:97:e5:32:40: 2d:db:17:cb:03:2f:f4:a1:ce:a1:8a:67:95:80:b7: e1:51:ab:55:a8:4d:96:87:68:c4:77:64:b9:1c:77: be:53:df:65:44:9a:fc:e5:9b:2d:7f:9a:a2:8a:34: e5:02:00:4c:d6:04:ac:1a:6e:f9:60:47:19:27:ca: e4:b3:5a:12:ed:14:cf:c2:b6:54:72:a9:b1:c7:e4: e0:6a:4f:2e:41:5d:03:b3:1e:74:ba:11:da:96:d0: e8:c7:90:15:0e:9c:f8:e5:21:42:0c:f7:64:dd:73: 73:c4:49:ba:5e:13:54:68:12:0d:84:a9:b3:84:ee: 33:2d:71:52:3a:48:b1:b4:8e:f1:f2:a2:be:77:83: ab:67:f2:f6:94:9d:8d:64:93:aa:8b:8a:a3:52:fc: b5:0b:81:61:45:6e:f5:d2:69:50:9b:76:63:34:11: 37:80:b3:95:bd:03:a5:d1:ed:5e:72:5a:c6:fd:64: a6:c3:7f:e5:c9:71:1f:b3:bf:4f:2f:d0:94:db:81: fd:87:6f:57:22:69:93:45:15:bf:b6:17:c2:38:4c: 35:d9:4f:97:d4:25:9d:71:9e:ef:8e:70:3a:f8:2e: 8d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:25:83:D3:33:2A:7A:64:49:A2:A3:0C:25:F4:86:5B:0D:01:13:8D X509v3 Authority Key Identifier: keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/843804BE744C11F0B13EF277C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.51.0/24 Signature Algorithm: sha256WithRSAEncryption 95:f2:db:dc:b3:d5:ef:03:59:f8:71:ad:99:23:c0:b8:1f:c5: 6d:af:b7:04:32:69:82:a1:d7:2d:3c:32:c1:35:19:32:43:59: 83:3c:d6:d0:ff:52:d7:ab:33:3c:21:3f:59:64:4d:5f:27:a6: 91:42:ce:af:2a:13:7a:11:4f:d4:01:9c:96:b3:a4:b9:b9:7e: 14:15:5b:9b:f1:43:c9:69:5a:cc:bb:da:1d:ff:53:77:4e:d4: 5b:85:5c:cf:9f:b9:58:2b:65:15:f4:db:e2:c4:50:cb:00:63: d3:4c:28:b8:2b:52:6b:5c:4a:ff:59:48:dc:44:77:62:ed:d0: 32:66:3f:d1:ce:b1:09:79:40:ba:ab:2b:cf:42:7b:49:bf:ed: 33:53:b8:c2:c3:e8:73:42:a1:e7:c5:5f:d0:51:7c:0e:12:c3: cd:6e:10:a9:8c:0d:32:a1:e8:4f:de:cc:b4:dc:19:8b:ac:04: e2:59:3d:f2:8b:e3:01:e4:a7:46:07:a9:48:05:64:83:20:7d: 28:c3:48:30:5c:97:58:94:6c:d0:5e:2a:6f:32:5a:7b:4a:24: b0:2e:31:21:35:c6:14:1a:0c:24:53:82:f1:3f:9a:6e:99:fd: 69:03:20:d5:28:10:32:03:0d:25:47:13:24:e9:6f:2d:19:e3: b4:c0:c9:cc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB RkI1RTJCQjIwHhcNMjUwODA4MTE0MDQzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk1ZTIzYi0wYmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcNuRXAwyJBvHd0SVXH/C33SmFCMJrRID5flMkAt2xfLAy/0oc6himeVgLfh UatVqE2Wh2jEd2S5HHe+U99lRJr85Zstf5qiijTlAgBM1gSsGm75YEcZJ8rks1oS 7RTPwrZUcqmxx+Tgak8uQV0Dsx50uhHaltDox5AVDpz45SFCDPdk3XNzxEm6XhNU aBINhKmzhO4zLXFSOkixtI7x8qK+d4OrZ/L2lJ2NZJOqi4qjUvy1C4FhRW710mlQ m3ZjNBE3gLOVvQOl0e1eclrG/WSmw3/lyXEfs79PL9CU24H9h29XImmTRRW/thfC OEw12U+X1CWdcZ7vjnA6+C6NfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCUlg9Mz KnpkSaKjDCX0hlsNARONMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4 NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU2RjAvN0Q2N0U0RDQzODRDMTFFQUJFQTJEQjcxQzRGOUFFMDIvODQzODA0QkU3 NDRDMTFGMEIxM0VGMjc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnZTMwDQYJKoZIhvcNAQELBQADggEBAJXy29yz1e8DWfhx rZkjwLgfxW2vtwQyaYKh1y08MsE1GTJDWYM81tD/UterMzwhP1lkTV8nppFCzq8q E3oRT9QBnJazpLm5fhQVW5vxQ8lpWsy72h3/U3dO1FuFXM+fuVgrZRX02+LEUMsA Y9NMKLgrUmtcSv9ZSNxEd2Lt0DJmP9HOsQl5QLqrK89Ce0m/7TNTuMLD6HNCoefF X9BRfA4Sw81uEKmMDTKh6E/ezLTcGYusBOJZPfKL4wHkp0YHqUgFZIMgfSjDSDBc l1iUbNBeKm8yWntKJLAuMSE1xhQaDCRTgvE/mm6Z/WkDINUoEDIDDSVHEyTpby0Z 47TAycw= -----END CERTIFICATE-----Generated at Wed Aug 13 07:37:02 2025 by rpki-client