$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/653C22F441C311F0999A9935C4F9AE02.roa File: 653C22F441C311F0999A9935C4F9AE02.roa (raw, json) Hash identifier: nMBBR9lD5xYiXfIobFM2SlzdnRZMD+0VZpUbgMpJGzg= Subject key identifier: EB:E6:7F:1A:3A:75:B8:A6:C7:B8:85:7B:4B:13:DC:EA:4C:0B:5C:C6 Certificate issuer: /CN=A91BDF2B/serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E Certificate serial: 02 Authority key identifier: 8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/653C22F441C311F0999A9935C4F9AE02.roa Signing time: Thu 05 Jun 2025 04:13:12 +0000 ROA not before: Thu 05 Jun 2025 04:13:12 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 63126 IP address blocks: 103.60.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 07:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDF2B, serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E Validity Not Before: Jun 5 04:13:12 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=68411958-0f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:ea:98:39:88:11:8a:2d:f5:2e:e1:1b:1e: 4f:11:4b:9b:23:80:90:e8:3e:e3:14:96:17:84:9d: 87:a5:43:97:e5:5f:d2:f4:8a:ff:e9:02:6d:02:67: 0d:b5:33:ba:4c:81:cb:6a:8e:ec:68:e5:16:2d:6c: 1d:89:84:69:04:7e:37:12:60:05:34:7a:5b:95:23: 8c:16:c3:7f:36:e2:c1:08:86:07:6f:dd:be:17:69: 00:0e:1a:ef:30:1a:89:c4:8a:7f:a3:7b:bc:59:c0: b9:6d:be:3b:cb:4d:2c:d0:b0:78:cf:56:94:c7:5c: 17:0e:d8:7b:44:0e:8b:96:16:d6:cd:27:33:eb:14: c6:a9:12:55:b4:00:88:57:2b:da:5c:7c:91:08:a5: dc:3a:08:23:63:82:5e:93:df:ab:4a:5e:33:2a:7e: fd:8f:69:2c:2a:f3:fe:9c:56:d5:53:a2:cb:7e:8c: 67:9f:3c:31:dd:b8:d8:3a:72:e0:e7:b4:57:9f:99: 3d:bf:b7:77:22:b2:0a:28:ec:e2:5a:86:16:91:b1: 62:c5:32:de:dd:49:4a:dc:ca:c2:cb:20:d1:42:11: 46:ba:fa:47:1a:df:5b:4f:57:34:7e:89:0a:32:e0: 73:a0:d2:e3:9b:49:bd:14:7f:ef:2c:49:fc:cf:63: f3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E6:7F:1A:3A:75:B8:A6:C7:B8:85:7B:4B:13:DC:EA:4C:0B:5C:C6 X509v3 Authority Key Identifier: keyid:8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/653C22F441C311F0999A9935C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.91.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:29:de:16:60:92:97:82:50:d5:65:dc:dc:2a:c0:7c:63:06: 88:fb:d7:eb:52:99:ed:79:b6:b0:50:16:78:a7:af:30:84:a5: fd:76:fb:50:94:60:50:7b:f5:af:e7:ef:f5:0c:0d:f2:93:dd: d0:5c:88:d5:6d:da:ba:65:40:07:b9:b6:5f:94:49:a1:d0:28: e0:74:21:56:8e:ef:b4:8c:ce:6d:23:65:9f:cf:71:f7:89:f2: 72:0f:69:59:3b:b7:9b:a0:e1:28:53:6c:ed:36:6a:3c:79:9a: e5:5b:a0:c1:aa:97:5a:aa:cb:0d:0e:73:6b:d0:37:cc:5d:b2: 7e:2c:b7:5c:dc:bd:f3:1e:46:1b:7f:12:27:44:0d:6c:a0:ce: b3:a0:9b:63:be:61:ca:aa:04:98:53:9c:d5:b2:8b:e1:6b:c5: 58:4b:3c:8e:81:18:19:66:63:ef:24:c1:4e:d3:3b:4c:30:76: 08:93:78:5e:96:3e:58:f9:7e:95:75:52:78:03:8a:7b:69:6a: 2b:1f:48:bd:8e:7c:e3:f7:a3:49:25:7c:1d:15:d9:11:2e:c7: 0e:f5:01:60:8a:02:fe:88:8e:6e:b6:6b:94:b2:64:e0:14:a6: 18:7f:6e:d8:9c:06:90:8b:2b:23:c1:0c:d4:57:d6:c7:d0:0e: f2:a9:c8:d3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REYyQjExMC8GA1UEBRMoOENEMTkwQTE0M0FBMkUxRTQ4NzMwM0IxM0RDMDUzRUQx N0JDRUIxRTAeFw0yNTA2MDUwNDEzMTJaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NDExOTU4LTBmMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxLeqYOYgRii31LuEbHk8RS5sjgJDoPuMUlheEnYelQ5flX9L0iv/pAm0CZw21 M7pMgctqjuxo5RYtbB2JhGkEfjcSYAU0eluVI4wWw3824sEIhgdv3b4XaQAOGu8w GonEin+je7xZwLltvjvLTSzQsHjPVpTHXBcO2HtEDouWFtbNJzPrFMapElW0AIhX K9pcfJEIpdw6CCNjgl6T36tKXjMqfv2PaSwq8/6cVtVTost+jGefPDHduNg6cuDn tFefmT2/t3cisgoo7OJahhaRsWLFMt7dSUrcysLLINFCEUa6+kca31tPVzR+iQoy 4HOg0uObSb0Uf+8sSfzPY/NxAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU6+Z/Gjp1 uKbHuIV7SxPc6kwLXMYwHwYDVR0jBBgwFoAUjNGQoUOqLh5IcwOxPcBT7Re86x4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJERjJCLzZDMkI3QjFDNDFC QjExRjBCNDU2RDg1N0M0RjlBRTAyL2pOR1FvVU9xTGg1SWN3T3hQY0JUN1JlODZ4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvak5HUW9VT3FMaDVJY3dPeFBjQlQ3UmU4Nng0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REYyQi82QzJCN0IxQzQxQkIxMUYwQjQ1NkQ4NTdDNEY5QUUwMi82NTNDMjJGNDQx QzMxMUYwOTk5QTk5MzVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGc8WzANBgkqhkiG9w0BAQsFAAOCAQEAKyneFmCSl4JQ1WXc 3CrAfGMGiPvX61KZ7Xm2sFAWeKevMISl/Xb7UJRgUHv1r+fv9QwN8pPd0FyI1W3a umVAB7m2X5RJodAo4HQhVo7vtIzObSNln89x94nycg9pWTu3m6DhKFNs7TZqPHma 5VugwaqXWqrLDQ5za9A3zF2yfiy3XNy98x5GG38SJ0QNbKDOs6CbY75hyqoEmFOc 1bKL4WvFWEs8joEYGWZj7yTBTtM7TDB2CJN4XpY+WPl+lXVSeAOKe2lqKx9IvY58 4/ejSSV8HRXZES7HDvUBYIoC/oiObrZrlLJk4BSmGH9u2JwGkIsrI8EM1FfWx9AO 8qnI0w== -----END CERTIFICATE-----Generated at Thu Jun 19 23:42:59 2025 by rpki-client