$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/9A4B6146EED111EC9BDD4C49C4F9AE02.roa File: 9A4B6146EED111EC9BDD4C49C4F9AE02.roa (raw, json) Hash identifier: KkExhLw32KhJNP1vh+cfX+3O2VUbbBLKFmBZMRijetQ= Subject key identifier: AB:B5:5C:20:A5:5C:94:22:29:99:7F:D5:88:17:53:CF:82:64:41:71 Certificate issuer: /CN=A91C3174/serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5 Certificate serial: 02EC Authority key identifier: E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/9A4B6146EED111EC9BDD4C49C4F9AE02.roa Signing time: Thu 31 Jul 2025 02:08:14 +0000 ROA not before: Thu 31 Jul 2025 02:08:14 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 149868 IP address blocks: 103.189.218.0/23 maxlen: 24 2001:df0:db40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3174, serialNumber=E422BF026140D203EFD6BFDEAEE268AA8B0466D5 Validity Not Before: Jul 31 02:08:14 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688ad00e-1545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:44:24:1a:84:25:44:96:46:2f:0d:1e:cd: 18:ec:3d:b7:0c:66:5f:91:2f:42:53:c4:e3:f6:6e: de:70:80:ca:4e:c5:e2:e1:23:3e:95:67:8b:ba:49: 33:ab:90:19:13:d9:a6:37:fb:e1:cc:ad:c3:0d:63: 8e:71:16:93:58:0c:40:50:68:66:43:01:d1:21:7d: 62:4c:43:1b:f5:c4:bf:bd:bc:70:78:b2:f8:c9:fa: 70:a2:e6:48:2c:33:45:da:e1:43:82:9b:e0:1f:90: 3b:0f:66:5b:8a:5c:dc:d7:f2:61:e9:89:1f:76:29: 77:e4:fc:d3:4c:ed:1b:2c:e6:63:d9:ac:21:cf:07: 29:b1:50:5f:22:9f:04:26:c3:f8:93:56:00:c9:46: b8:a7:b9:22:ef:fb:6f:07:fd:38:d3:3f:04:0b:9b: 88:6f:f4:9d:3b:2c:52:0d:07:b5:ae:fa:a4:42:47: 4f:a6:24:7f:9e:61:fe:15:41:ce:33:45:d7:91:78: c3:18:74:4c:8f:13:3a:f3:b1:0c:ea:25:c7:5a:c3: 8a:62:ff:f9:4c:19:fd:2b:11:b7:76:a8:be:22:1f: e7:c8:a1:07:b4:ca:bb:31:57:4e:95:12:a7:04:d7: c1:7b:51:81:85:8a:60:7a:45:74:be:8f:41:b2:ac: 9d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B5:5C:20:A5:5C:94:22:29:99:7F:D5:88:17:53:CF:82:64:41:71 X509v3 Authority Key Identifier: keyid:E4:22:BF:02:61:40:D2:03:EF:D6:BF:DE:AE:E2:68:AA:8B:04:66:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/5CK_AmFA0gPv1r_eruJoqosEZtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CK_AmFA0gPv1r_eruJoqosEZtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3174/B131F89CEECD11EC8CF4471EC4F9AE02/9A4B6146EED111EC9BDD4C49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.218.0/23 IPv6: 2001:df0:db40::/48 Signature Algorithm: sha256WithRSAEncryption 5c:81:0c:4b:a1:81:cd:db:fe:57:5a:11:87:99:90:27:be:c7: 7c:68:70:6e:de:26:fe:9c:38:78:db:d3:a8:71:32:f4:c0:19: 0a:a2:c9:9a:a1:6e:53:42:17:b8:46:d7:91:80:95:01:7a:9f: ff:74:67:46:21:63:c7:10:c6:57:d1:2a:e0:a2:df:06:c6:4b: 37:34:27:c3:08:2e:32:91:51:60:98:f0:ca:6d:b8:ff:eb:e5: e0:1e:8c:3b:33:85:6f:b8:c6:22:c5:f1:51:79:8a:65:08:d4: 18:6f:7e:07:01:36:2e:88:29:5a:f5:2f:07:06:0e:91:a0:b8: 8b:33:86:d8:e6:e2:f6:a8:b7:9a:8b:09:21:ec:c0:c4:3e:d7: 9a:cd:d6:6b:af:39:0f:2f:91:fe:19:25:de:de:16:f9:63:b4: 37:b2:cf:9a:b5:81:9e:87:e1:9a:c4:7d:51:26:f1:25:6f:4c: bf:d6:99:0f:77:b6:ee:6f:60:a1:0d:17:45:9c:4c:11:31:08: 0e:fa:b3:13:23:e8:ce:01:4c:ab:83:0c:8f:c2:59:32:51:0b: 4a:cb:84:1b:17:e8:96:47:73:e8:d6:08:b2:6d:e5:41:6d:3d: 63:6e:f3:b0:e7:67:95:c0:0b:32:e6:ea:d4:3c:8a:85:ae:cb: b3:29:e8:57 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxNzQxMTAvBgNVBAUTKEU0MjJCRjAyNjE0MEQyMDNFRkQ2QkZERUFFRTI2OEFB OEIwNDY2RDUwHhcNMjUwNzMxMDIwODE0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhZDAwZS0xNTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApz9EJBqEJUSWRi8NHs0Y7D23DGZfkS9CU8Tj9m7ecIDKTsXi4SM+lWeLukkz q5AZE9mmN/vhzK3DDWOOcRaTWAxAUGhmQwHRIX1iTEMb9cS/vbxweLL4yfpwouZI LDNF2uFDgpvgH5A7D2Zbilzc1/Jh6Ykfdil35PzTTO0bLOZj2awhzwcpsVBfIp8E JsP4k1YAyUa4p7ki7/tvB/040z8EC5uIb/SdOyxSDQe1rvqkQkdPpiR/nmH+FUHO M0XXkXjDGHRMjxM687EM6iXHWsOKYv/5TBn9KxG3dqi+Ih/nyKEHtMq7MVdOlRKn BNfBe1GBhYpgekV0vo9Bsqyd1QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKu1XCCl XJQiKZl/1YgXU8+CZEFxMB8GA1UdIwQYMBaAFOQivwJhQNID79a/3q7iaKqLBGbV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzE3NC9CMTMxRjg5Q0VF Q0QxMUVDOENGNDQ3MUVDNEY5QUUwMi81Q0tfQW1GQTBnUHYxcl9lcnVKb3Fvc0Va dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDS19BbUZBMGdQdjFyX2VydUpvcW9zRVp0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzMxNzQvQjEzMUY4OUNFRUNEMTFFQzhDRjQ0NzFFQzRGOUFFMDIvOUE0QjYxNDZF RUQxMTFFQzlCREQ0QzQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnvdowDwQCAAIwCQMHACABDfDbQDANBgkqhkiG9w0BAQsF AAOCAQEAXIEMS6GBzdv+V1oRh5mQJ77HfGhwbt4m/pw4eNvTqHEy9MAZCqLJmqFu U0IXuEbXkYCVAXqf/3RnRiFjxxDGV9Eq4KLfBsZLNzQnwwguMpFRYJjwym24/+vl 4B6MOzOFb7jGIsXxUXmKZQjUGG9+BwE2LogpWvUvBwYOkaC4izOG2Obi9qi3mosJ IezAxD7Xms3Wa685Dy+R/hkl3t4W+WO0N7LPmrWBnofhmsR9USbxJW9Mv9aZD3e2 7m9goQ0XRZxMETEIDvqzEyPozgFMq4MMj8JZMlELSsuEGxfolkdz6NYIsm3lQW09 Y27zsOdnlcALMubq1DyKha7LsynoVw== -----END CERTIFICATE-----Generated at Sat Aug 9 23:22:06 2025 by rpki-client