$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/566BECC8EE1711EFB60E2F5CC4F9AE02.roa File: 566BECC8EE1711EFB60E2F5CC4F9AE02.roa (raw, json) Hash identifier: rQrRKRNqLrNVEr8ai1wfn1FM9+uxSqSSHb0bzKO5WNg= Subject key identifier: F4:5B:17:4F:0B:CE:01:2E:B4:3B:47:28:02:49:2E:4B:A2:3F:D2:20 Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 03B4 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/566BECC8EE1711EFB60E2F5CC4F9AE02.roa Signing time: Thu 05 Jun 2025 03:09:30 +0000 ROA not before: Thu 05 Jun 2025 03:09:30 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 13378 IP address blocks: 103.151.4.0/23 maxlen: 23 103.151.4.0/24 maxlen: 24 103.151.5.0/24 maxlen: 24 103.178.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 948 (0x3b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Jun 5 03:09:30 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68410a6a-111e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4b:9b:27:65:2e:2e:6a:1b:d8:b1:e2:e3:3b: 07:30:2e:6b:73:36:e4:bb:ed:b9:fb:f2:62:5d:f5: ec:83:f2:cf:95:4c:1c:e3:1b:a4:65:c3:43:48:f7: 29:40:05:12:02:ae:1a:61:b9:43:f6:ff:1f:fe:80: d8:67:b3:75:03:50:a7:1a:89:cf:b6:41:cf:99:43: 6b:85:6b:cb:01:0a:bd:3d:af:33:3b:4e:8d:b8:35: da:20:5a:d3:08:5f:ed:08:89:b1:88:34:4f:75:67: 0e:9c:20:c8:19:2e:39:79:8e:1e:5e:6e:f0:87:06: 9d:26:25:a7:11:66:81:00:f6:93:6e:11:e2:43:24: 4c:02:55:ce:59:58:eb:06:51:e5:99:b1:47:67:cf: 90:30:b5:61:49:6f:3a:8b:92:f7:c7:78:19:de:e4: 91:32:b7:cd:4e:41:0f:e3:d0:4d:7d:45:55:a2:a9: 12:8c:72:dd:39:f4:d0:01:e1:08:3f:db:6a:27:ee: d8:75:1a:3e:11:71:4f:98:0d:5c:3f:f9:06:0d:1b: ec:76:93:41:3f:84:37:2e:cd:c2:51:26:6c:7f:5e: 14:8f:eb:da:9b:f1:ce:b1:5c:f8:a2:5d:cf:74:57: 1d:68:bb:3b:49:e8:7b:aa:c5:34:84:fd:4d:c6:a2: 7d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5B:17:4F:0B:CE:01:2E:B4:3B:47:28:02:49:2E:4B:A2:3F:D2:20 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/566BECC8EE1711EFB60E2F5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.4.0/23 103.178.56.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:37:ee:8e:bc:6f:03:d7:aa:a7:d3:a7:a2:c1:db:92:ce:42: 73:cb:f0:6c:f0:20:d5:75:15:12:ff:7d:2c:04:d4:17:1d:8b: 4a:67:53:42:06:aa:fe:e8:7a:fe:aa:bb:28:50:ff:e9:50:00: 0f:8f:76:3c:a9:bd:b9:8b:ff:4e:2c:c4:ae:8b:41:1a:4d:ba: 6d:6b:26:2f:42:37:c8:cc:ac:27:b7:87:64:8c:d0:b1:e8:b5: 4d:f9:be:1e:f9:ea:ff:97:3f:a3:27:36:ca:35:57:b9:00:c6: ca:77:1f:70:b1:d6:36:a3:2c:ee:a3:50:10:ac:94:22:26:48: 68:b7:16:6d:8e:c5:e2:39:ea:f5:fd:03:c9:ff:73:1f:df:8d: f3:06:09:36:ed:cf:de:72:db:53:6b:d4:ff:8a:76:4b:90:88: c8:30:fe:c7:b2:c4:8e:a4:ca:49:9f:48:9d:2c:d7:42:d1:bf: 89:1c:b4:6b:94:9c:64:38:6f:68:84:5c:40:88:eb:d5:a2:7c: d2:34:01:15:f5:8f:81:b2:e1:77:fa:92:a9:6a:89:c5:66:20: fa:86:5f:ec:c2:d0:05:1c:6b:f8:9b:97:18:c1:3b:b0:1a:e1: 49:6f:6a:3b:03:16:d6:d3:e8:f5:fe:4c:2e:7b:48:7e:0c:8e: db:9e:00:d9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjUwNjA1MDMwOTMwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQxMGE2YS0xMTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0ubJ2UuLmob2LHi4zsHMC5rczbku+25+/JiXfXsg/LPlUwc4xukZcNDSPcp QAUSAq4aYblD9v8f/oDYZ7N1A1CnGonPtkHPmUNrhWvLAQq9Pa8zO06NuDXaIFrT CF/tCImxiDRPdWcOnCDIGS45eY4eXm7whwadJiWnEWaBAPaTbhHiQyRMAlXOWVjr BlHlmbFHZ8+QMLVhSW86i5L3x3gZ3uSRMrfNTkEP49BNfUVVoqkSjHLdOfTQAeEI P9tqJ+7YdRo+EXFPmA1cP/kGDRvsdpNBP4Q3Ls3CUSZsf14Uj+vam/HOsVz4ol3P dFcdaLs7Seh7qsU0hP1NxqJ92wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPRbF08L zgEutDtHKAJJLkuiP9IgMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkRDRjEvRUI1OTExMjJBODNDMTFFQ0EzQTRGMzI1QzRGOUFFMDIvNTY2QkVDQzhF RTE3MTFFRkI2MEUyRjVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnlwQDBABnsjgwDQYJKoZIhvcNAQELBQADggEBAH037o68 bwPXqqfTp6LB25LOQnPL8GzwINV1FRL/fSwE1Bcdi0pnU0IGqv7oev6quyhQ/+lQ AA+PdjypvbmL/04sxK6LQRpNum1rJi9CN8jMrCe3h2SM0LHotU35vh756v+XP6Mn Nso1V7kAxsp3H3Cx1jajLO6jUBCslCImSGi3Fm2OxeI56vX9A8n/cx/fjfMGCTbt z95y21Nr1P+KdkuQiMgw/seyxI6kykmfSJ0s10LRv4kctGuUnGQ4b2iEXECI69Wi fNI0ARX1j4Gy4Xf6kqlqicVmIPqGX+zC0AUca/iblxjBO7Aa4UlvajsDFtbT6PX+ TC57SH4MjtueANk= -----END CERTIFICATE-----Generated at Thu Jun 19 08:32:55 2025 by rpki-client