$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/A02B90EA479311F0BBFADC27C4F9AE02.roa File: A02B90EA479311F0BBFADC27C4F9AE02.roa (raw, json) Hash identifier: FSGba/ksTfUcD5c5nTx4WizNyHeIp3OO4bcFqqjagGE= Subject key identifier: 2C:DE:01:E4:A1:50:F2:1F:A0:A5:4B:A1:BB:B0:33:EF:C2:FD:62:A9 Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Certificate serial: 095B Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/A02B90EA479311F0BBFADC27C4F9AE02.roa Signing time: Thu 12 Jun 2025 13:46:22 +0000 ROA not before: Thu 12 Jun 2025 13:46:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 103.112.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2395 (0x95b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Validity Not Before: Jun 12 13:46:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=684ada2e-c666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b7:6e:38:02:0e:06:12:6e:05:67:b3:ab:93: 7a:ba:77:07:d7:76:19:23:d0:94:6c:e5:ee:14:8f: 4d:50:90:60:4a:d5:c2:5b:fa:3f:68:17:29:97:96: 85:32:2e:bb:4b:7b:6f:bd:17:17:1c:87:8a:8a:1d: 32:1c:97:48:69:4e:96:d7:25:9c:86:f2:4c:ba:91: a2:e5:51:d9:b6:42:f9:74:c5:70:a9:a6:8e:da:7f: 07:bc:c9:39:31:d1:6a:65:6d:34:0a:aa:3d:91:64: 78:94:87:cd:01:c7:bd:7d:cb:08:ca:c1:9e:bf:7d: 7d:64:97:1c:cc:33:50:93:ce:04:0b:f7:68:47:ff: ea:2a:21:07:06:31:ce:51:56:7c:28:2e:00:79:1b: 14:49:96:e6:ba:df:3f:e2:8c:26:3b:7e:7b:00:f5: 55:8b:48:51:9d:50:9c:37:08:ef:9c:21:d1:80:d4: 34:60:e4:a7:db:5f:d8:c8:b9:35:2c:45:cd:d6:d8: e8:2e:85:09:7f:29:5b:b6:97:e3:f5:da:86:d4:03: 2b:de:6a:e4:6a:df:a5:e8:b2:a1:93:54:0e:b2:f7: a6:f4:3c:68:06:52:a0:c3:4c:97:c8:7f:26:fb:50: 46:93:80:34:b3:a0:84:3c:ed:1f:59:1e:6f:4d:9c: 96:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DE:01:E4:A1:50:F2:1F:A0:A5:4B:A1:BB:B0:33:EF:C2:FD:62:A9 X509v3 Authority Key Identifier: keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/A02B90EA479311F0BBFADC27C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.112.1.0/24 Signature Algorithm: sha256WithRSAEncryption 86:d5:6a:52:92:44:85:d6:e4:fb:f1:03:c9:c3:09:d3:1e:a0: d7:e8:c4:bb:f6:9d:e1:dd:71:74:07:ad:58:79:d1:a9:43:e6: 83:90:08:bf:cc:4f:13:78:26:3b:94:4f:a6:4c:57:1c:b4:9c: 44:36:6d:63:5b:89:0d:d4:a3:b2:81:e4:de:6d:48:5b:d4:5f: 0a:43:21:e9:09:df:e9:34:e2:91:35:44:56:19:f6:9d:20:67: e3:ac:7a:d1:41:17:5e:2b:6c:bc:88:c1:7f:f1:54:c5:90:02: 29:f5:a6:1b:4c:85:ab:17:90:6c:36:37:4b:3a:70:9b:a8:a3: fa:59:58:90:77:f0:f9:3c:9d:bd:45:fe:a2:ca:91:2f:c9:4e: b9:3a:15:fd:52:d9:13:1d:c7:a5:dc:61:6d:e4:1d:f0:22:b3: 48:00:3d:57:42:32:a2:5e:72:80:0c:11:b4:b7:d7:31:86:f3: 0a:86:18:fd:b3:9a:c4:dd:bb:16:2b:07:46:20:6d:67:1a:e8: e6:0c:66:4a:1f:6d:ff:c7:16:74:6e:a2:91:5d:3c:f1:78:c1: 0a:60:55:03:41:29:14:2e:54:af:50:34:46:94:82:e2:09:9c: 69:73:4f:c4:af:46:6b:7b:68:ee:d3:37:f6:2c:4e:95:b5:2c: 9e:b2:a1:f4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE RkRBMkNGRDAwHhcNMjUwNjEyMTM0NjIyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRhZGEyZS1jNjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rduOAIOBhJuBWezq5N6uncH13YZI9CUbOXuFI9NUJBgStXCW/o/aBcpl5aF Mi67S3tvvRcXHIeKih0yHJdIaU6W1yWchvJMupGi5VHZtkL5dMVwqaaO2n8HvMk5 MdFqZW00Cqo9kWR4lIfNAce9fcsIysGev319ZJcczDNQk84EC/doR//qKiEHBjHO UVZ8KC4AeRsUSZbmut8/4owmO357APVVi0hRnVCcNwjvnCHRgNQ0YOSn21/YyLk1 LEXN1tjoLoUJfylbtpfj9dqG1AMr3mrkat+l6LKhk1QOsvem9DxoBlKgw0yXyH8m +1BGk4A0s6CEPO0fWR5vTZyWlQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCzeAeSh UPIfoKVLobuwM+/C/WKpMB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzhGMjcvN0Y1MjI5QThCMDkyMTFFQUI1REJFQzU4QzRGOUFFMDIvQTAyQjkwRUE0 NzkzMTFGMEJCRkFEQzI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABncAEwDQYJKoZIhvcNAQELBQADggEBAIbValKSRIXW5Pvx A8nDCdMeoNfoxLv2neHdcXQHrVh50alD5oOQCL/MTxN4JjuUT6ZMVxy0nEQ2bWNb iQ3Uo7KB5N5tSFvUXwpDIekJ3+k04pE1RFYZ9p0gZ+OsetFBF14rbLyIwX/xVMWQ Ain1phtMhasXkGw2N0s6cJuoo/pZWJB38Pk8nb1F/qLKkS/JTrk6Ff1S2RMdx6Xc YW3kHfAis0gAPVdCMqJecoAMEbS31zGG8wqGGP2zmsTduxYrB0YgbWca6OYMZkof bf/HFnRuopFdPPF4wQpgVQNBKRQuVK9QNEaUguIJnGlzT8SvRmt7aO7TN/YsTpW1 LJ6yofQ= -----END CERTIFICATE-----Generated at Sun Jun 15 06:55:47 2025 by rpki-client