$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/6EB972341D6011EEB28A4323C4F9AE02.roa File: 6EB972341D6011EEB28A4323C4F9AE02.roa (raw, json) Hash identifier: V7+xw0Oh19sCCsRJ/3dn3BE03yFJdR1cttirX6vRQc4= Subject key identifier: 14:92:62:BC:6F:62:D0:D2:79:3E:74:82:66:CA:F1:6B:C1:62:29:4F Certificate issuer: /CN=A91C0CD5/serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1 Certificate serial: 019D Authority key identifier: 4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/6EB972341D6011EEB28A4323C4F9AE02.roa Signing time: Sat 09 Aug 2025 04:10:22 +0000 ROA not before: Sat 09 Aug 2025 04:10:22 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 151501 IP address blocks: 103.235.162.0/23 maxlen: 23 103.235.162.0/24 maxlen: 24 103.235.163.0/24 maxlen: 24 2001:df2:aa40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD5, serialNumber=4C7DAC21203DAE416C1FCEEAFC556572022208A1 Validity Not Before: Aug 9 04:10:22 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6896ca2d-81ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:ea:0c:bc:7c:83:e5:2f:ce:2e:e2:23:d5: 6a:48:6f:5f:2d:0f:83:ef:15:97:5d:5e:57:d4:4b: 61:bb:7e:7e:bd:5c:f3:36:f0:30:17:48:19:c0:c9: a0:16:f6:b8:bf:c6:ee:99:e8:f2:0e:82:54:fc:b6: 63:e9:06:40:21:dc:41:f5:cf:79:1a:dd:cd:e8:78: 07:85:5a:31:c4:d2:fe:70:4a:98:c5:92:cc:f3:4f: 03:06:fa:ba:88:d3:da:57:08:a4:05:c3:fd:01:7d: 6b:3a:88:4b:a5:8c:18:35:76:27:55:d0:6e:fa:4b: c0:18:69:21:5e:6e:1d:94:72:3a:d6:d5:19:2e:ac: 59:73:a5:85:55:57:4e:b3:3f:c2:d7:1f:cf:a6:23: 1e:c5:5e:5f:85:70:2c:f0:6d:05:7d:10:79:e5:42: f2:38:40:72:5d:11:08:e0:02:9f:ad:52:b8:3f:18: b2:eb:8d:d9:b3:5e:1c:54:fe:18:04:76:b8:ee:26: fc:ff:cb:5b:12:68:e4:61:92:82:a8:f0:78:9e:d6: 6a:98:44:98:72:5a:0c:7a:40:24:56:8f:61:23:ed: cf:6d:ac:49:5d:ff:99:21:0a:d7:c5:ce:ba:ca:f6: d3:0e:32:42:a6:fc:9f:ab:20:23:12:07:e1:0a:9e: 20:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:92:62:BC:6F:62:D0:D2:79:3E:74:82:66:CA:F1:6B:C1:62:29:4F X509v3 Authority Key Identifier: keyid:4C:7D:AC:21:20:3D:AE:41:6C:1F:CE:EA:FC:55:65:72:02:22:08:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/TH2sISA9rkFsH87q_FVlcgIiCKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TH2sISA9rkFsH87q_FVlcgIiCKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD5/CD2B4B441D0B11EE87048A4CC4F9AE02/6EB972341D6011EEB28A4323C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.235.162.0/23 IPv6: 2001:df2:aa40::/48 Signature Algorithm: sha256WithRSAEncryption 8b:9c:b0:ce:ef:d6:71:94:60:16:b3:d2:a8:a1:1e:32:09:4a: ec:33:34:a5:d9:43:7b:1d:db:b2:75:b9:d2:62:f9:c4:96:ff: ac:96:3f:76:6a:3b:aa:5b:81:a1:f4:e9:a1:77:ef:69:b1:74: 28:47:af:e9:40:15:19:38:5b:5c:3b:da:7e:4f:2b:87:3c:35: 98:24:2d:71:ba:74:ae:6d:66:35:8b:5c:58:e4:39:7d:77:87: 62:fb:34:cb:37:5d:de:9a:a6:2f:6d:a3:26:22:81:21:a2:ae: f5:10:b0:f4:ec:08:2e:f8:36:b3:24:8d:df:62:b2:69:db:80: ee:ad:2f:b7:4c:d9:86:93:72:3f:65:40:d4:52:0b:2d:b3:c3: 9a:d9:ca:57:3d:78:80:10:d3:49:14:55:66:60:29:fc:44:76: 23:01:38:ad:49:d0:69:3c:cb:1b:9f:c0:6d:07:90:ef:a8:85: a3:ad:34:b2:6e:cb:1a:39:ec:ea:51:0c:3c:fa:5b:4e:6a:b2: 3e:2f:c2:fe:d4:6f:2d:76:3a:25:c7:ed:19:48:ce:75:3e:7b: da:b1:85:bb:4b:61:47:6e:8c:77:4c:0d:bf:cb:4e:dd:42:6c: b6:e3:a5:ca:d9:90:7e:08:84:88:f7:db:70:36:ed:28:e2:5e: b7:da:21:57 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDUxMTAvBgNVBAUTKDRDN0RBQzIxMjAzREFFNDE2QzFGQ0VFQUZDNTU2NTcy MDIyMjA4QTEwHhcNMjUwODA5MDQxMDIyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk2Y2EyZC04MWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDbqDLx8g+Uvzi7iI9VqSG9fLQ+D7xWXXV5X1Ethu35+vVzzNvAwF0gZwMmg Fva4v8bumejyDoJU/LZj6QZAIdxB9c95Gt3N6HgHhVoxxNL+cEqYxZLM808DBvq6 iNPaVwikBcP9AX1rOohLpYwYNXYnVdBu+kvAGGkhXm4dlHI61tUZLqxZc6WFVVdO sz/C1x/PpiMexV5fhXAs8G0FfRB55ULyOEByXREI4AKfrVK4Pxiy643Zs14cVP4Y BHa47ib8/8tbEmjkYZKCqPB4ntZqmESYcloMekAkVo9hI+3PbaxJXf+ZIQrXxc66 yvbTDjJCpvyfqyAjEgfhCp4gIwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBSSYrxv YtDSeT50gmbK8WvBYilPMB8GA1UdIwQYMBaAFEx9rCEgPa5BbB/O6vxVZXICIgih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENENS9DRDJCNEI0NDFE MEIxMUVFODcwNDhBNENDNEY5QUUwMi9USDJzSVNBOXJrRnNIODdxX0ZWbGNnSWlD S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RIMnNJU0E5cmtGc0g4N3FfRlZsY2dJaUNLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzBDRDUvQ0QyQjRCNDQxRDBCMTFFRTg3MDQ4QTRDQzRGOUFFMDIvNkVCOTcyMzQx RDYwMTFFRUIyOEE0MzIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFn66IwDwQCAAIwCQMHACABDfKqQDANBgkqhkiG9w0BAQsF AAOCAQEAi5ywzu/WcZRgFrPSqKEeMglK7DM0pdlDex3bsnW50mL5xJb/rJY/dmo7 qluBofTpoXfvabF0KEev6UAVGThbXDvafk8rhzw1mCQtcbp0rm1mNYtcWOQ5fXeH Yvs0yzdd3pqmL22jJiKBIaKu9RCw9OwILvg2sySN32KyaduA7q0vt0zZhpNyP2VA 1FILLbPDmtnKVz14gBDTSRRVZmAp/ER2IwE4rUnQaTzLG5/AbQeQ76iFo600sm7L Gjns6lEMPPpbTmqyPi/C/tRvLXY6JcftGUjOdT572rGFu0thR26Md0wNv8tO3UJs tuOlytmQfgiEiPfbcDbtKOJet9ohVw== -----END CERTIFICATE-----Generated at Wed Nov 5 22:31:22 2025 by rpki-client