$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/2340D07AF2F111ED91F08A4FC4F9AE02.roa File: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (raw, json) Hash identifier: VgWfSFvnBqBZBBT7n2uea4PCFkDi3gg2tHZzpCuKDJA= Subject key identifier: 4A:27:96:E0:A8:07:C7:3F:27:19:E3:3C:A1:5D:83:34:3B:83:7A:1E Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Certificate serial: 0193 Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/2340D07AF2F111ED91F08A4FC4F9AE02.roa Signing time: Tue 01 Jul 2025 04:08:56 +0000 ROA not before: Tue 01 Jul 2025 04:08:56 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 132823 IP address blocks: 103.254.231.0/24 maxlen: 24 2001:df2:6d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Validity Not Before: Jul 1 04:08:56 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68635f58-cb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e4:4b:72:0c:90:2d:42:6a:15:91:5c:c1:43: 81:96:87:1c:b3:53:b9:d6:a6:fb:3f:f0:ec:ec:01: b8:31:3c:96:b8:2c:b7:29:a1:ea:6d:2d:fd:ef:ba: 88:8e:65:ec:4b:47:79:31:c5:90:03:a1:26:74:70: 31:06:27:ec:12:6e:b9:39:c1:ed:48:23:0c:53:17: 32:20:2c:b9:6f:88:06:8f:8b:0c:98:f8:c4:bb:87: 8c:26:71:2d:02:a6:3c:f8:da:41:df:aa:17:e9:44: e0:aa:2e:c6:eb:4e:4d:33:92:cc:30:6b:b5:26:4c: 2f:7c:44:d7:b6:a8:83:4f:c3:df:3e:99:06:25:e2: 3f:2a:1a:55:d1:22:a1:00:e8:ae:00:e3:a3:45:18: 65:11:92:67:a6:9e:8c:b2:54:4f:44:3c:3b:54:37: 93:8a:6c:f4:d6:bd:61:8c:0b:b2:6e:a8:92:7f:83: 6a:e1:d3:2d:46:f8:dc:6d:16:59:ad:ba:12:d0:2d: 57:62:95:93:e5:c4:92:0e:37:e9:eb:69:60:4d:12: f0:8e:9c:75:24:1d:41:90:c0:09:6c:c4:27:59:bb: cb:d7:a1:f4:cd:b5:ce:97:2f:cb:31:40:5e:5e:c5: 65:7c:5a:bc:bb:fe:f0:9d:c4:a0:c6:70:dc:c4:c8: be:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:27:96:E0:A8:07:C7:3F:27:19:E3:3C:A1:5D:83:34:3B:83:7A:1E X509v3 Authority Key Identifier: keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/2340D07AF2F111ED91F08A4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.254.231.0/24 IPv6: 2001:df2:6d40::/48 Signature Algorithm: sha256WithRSAEncryption 2a:36:d2:a5:e3:fa:12:84:c7:f9:06:70:bd:c4:20:00:42:d9: c4:3c:c5:44:68:ce:c8:c2:86:1b:d0:c8:5e:63:27:80:1f:2d: f8:e9:fe:37:e2:59:93:c4:3e:c5:14:08:3a:30:b3:de:42:a2: 3d:e9:71:b3:38:3d:c5:48:42:54:52:93:a7:f5:bb:81:80:b0: c5:7b:b8:a8:d9:ad:16:8f:3b:29:51:06:b5:a0:1b:3c:33:68: a8:8b:17:51:8b:67:b5:97:d9:49:fc:ac:75:d8:d8:01:8f:98: d4:9f:c6:3e:f2:e0:fe:8f:ca:83:d7:76:05:18:ee:57:e1:de: e0:fd:7d:b7:a1:3e:0d:f2:1d:ad:f4:04:64:a5:22:00:fb:6c: 92:54:3c:d6:86:99:af:b0:c4:83:55:b2:b4:15:e3:f3:99:4b: 80:5a:ae:07:ff:cd:e2:15:dc:d8:31:c9:8e:b9:8b:51:67:dd: c1:5a:e2:f2:ea:05:c3:5a:7a:e7:7a:4c:42:57:9e:bb:c8:91: 93:77:bb:65:13:67:81:32:72:24:87:ba:39:2c:2a:77:1b:9a: 02:5a:80:a2:90:d3:84:85:72:d7:03:1e:e0:51:0e:61:a8:fd: c2:31:8d:37:96:46:7a:f7:52:ab:be:27:71:d7:34:8c:01:77: cb:7c:08:81 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyRTYxMTAvBgNVBAUTKDc1MjUzM0IxODUyRjdEMkFDNkU3MERDREVCRkQ1NDdE REM0MzhGOTQwHhcNMjUwNzAxMDQwODU2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzNWY1OC1jYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+RLcgyQLUJqFZFcwUOBloccs1O51qb7P/Ds7AG4MTyWuCy3KaHqbS3977qI jmXsS0d5McWQA6EmdHAxBifsEm65OcHtSCMMUxcyICy5b4gGj4sMmPjEu4eMJnEt AqY8+NpB36oX6UTgqi7G605NM5LMMGu1JkwvfETXtqiDT8PfPpkGJeI/KhpV0SKh AOiuAOOjRRhlEZJnpp6MslRPRDw7VDeTimz01r1hjAuybqiSf4Nq4dMtRvjcbRZZ rboS0C1XYpWT5cSSDjfp62lgTRLwjpx1JB1BkMAJbMQnWbvL16H0zbXOly/LMUBe XsVlfFq8u/7wncSgxnDcxMi+UwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEonluCo B8c/JxnjPKFdgzQ7g3oeMB8GA1UdIwQYMBaAFHUlM7GFL30qxucNzev9VH3cQ4+U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJFNi9FNkU2RkIzMkYy RUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZTckc1dzNONl8xVWZkeERq NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RTVXpzWVV2ZlNyRzV3M042XzFVZmR4RGo1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzcyRTYvRTZFNkZCMzJGMkVBMTFFRDkwOTkwMDRBQzRGOUFFMDIvMjM0MEQwN0FG MkYxMTFFRDkxRjA4QTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABn/ucwDwQCAAIwCQMHACABDfJtQDANBgkqhkiG9w0BAQsF AAOCAQEAKjbSpeP6EoTH+QZwvcQgAELZxDzFRGjOyMKGG9DIXmMngB8t+On+N+JZ k8Q+xRQIOjCz3kKiPelxszg9xUhCVFKTp/W7gYCwxXu4qNmtFo87KVEGtaAbPDNo qIsXUYtntZfZSfysddjYAY+Y1J/GPvLg/o/Kg9d2BRjuV+He4P19t6E+DfIdrfQE ZKUiAPtsklQ81oaZr7DEg1WytBXj85lLgFquB//N4hXc2DHJjrmLUWfdwVri8uoF w1p653pMQleeu8iRk3e7ZRNngTJyJIe6OSwqdxuaAlqAopDThIVy1wMe4FEOYaj9 wjGNN5ZGevdSq74ncdc0jAF3y3wIgQ== -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:15 2025 by rpki-client