$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/5761FF06493411EF859C1D49C4F9AE02.roa File: 5761FF06493411EF859C1D49C4F9AE02.roa (raw, json) Hash identifier: nP3RcVP/gbGg6rx+o8wZqZToMdd4Sr+IoSCjwNOdYfA= Subject key identifier: 7C:C5:54:C2:26:15:3A:DC:CA:EE:1B:BE:D1:B3:EA:69:68:B1:9D:81 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 34CA Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/5761FF06493411EF859C1D49C4F9AE02.roa Signing time: Sat 02 Aug 2025 14:50:51 +0000 ROA not before: Sat 02 Aug 2025 14:50:51 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 3356 IP address blocks: 103.212.168.0/24 maxlen: 24 160.202.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13514 (0x34ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Aug 2 14:50:51 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688e25ca-b6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3e:9f:65:e6:e0:73:14:84:e5:84:c7:b3:51: 57:c1:f4:0e:c7:69:98:bf:d6:03:9e:e6:8a:25:be: 0f:93:ec:86:d5:e9:d8:99:79:16:d5:79:95:b1:d5: b7:a4:76:e5:c3:24:e5:7b:e5:f3:19:c8:92:c3:14: 0e:6c:08:76:53:34:9c:b9:03:a3:de:47:f1:22:86: 80:bc:92:a6:b7:f3:f1:4b:e6:84:68:bb:9c:34:38: b5:20:3c:bf:15:9b:30:d3:75:0d:f7:3c:26:dd:fe: 60:83:63:29:de:ec:ea:91:a3:a6:1f:62:3f:86:5b: ea:b2:95:09:7a:9d:95:f6:5b:5f:c8:e7:2f:ca:5b: aa:4f:0d:d9:73:33:c7:09:e4:c3:1a:dc:f4:c2:d9: cc:b9:53:6b:a8:ae:7d:0c:c7:e9:c9:3f:37:13:58: 38:af:6f:a2:47:bf:30:a5:56:19:51:6c:c2:69:85: 20:6e:6c:32:47:80:0c:7e:06:27:87:b5:3f:ed:a2: bf:5e:f8:6a:5c:36:54:ae:64:85:41:08:36:86:ea: 0b:d1:34:d3:2f:72:89:49:3e:97:d1:d3:ef:80:bc: 24:91:07:70:16:aa:e7:c4:88:fe:0c:38:15:be:92: 04:99:4e:c9:d9:a8:54:de:46:ef:e0:57:f6:d3:df: 1b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C5:54:C2:26:15:3A:DC:CA:EE:1B:BE:D1:B3:EA:69:68:B1:9D:81 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/5761FF06493411EF859C1D49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.212.168.0/24 160.202.136.0/24 Signature Algorithm: sha256WithRSAEncryption 55:bc:7f:a5:4c:d2:3d:6e:69:7b:de:c3:4e:66:48:53:63:fd: ed:f6:00:98:7f:1d:b0:c2:1a:5b:6f:9d:02:a7:07:67:2d:3b: 6e:91:60:ca:5d:bd:30:71:d2:c3:1d:75:18:52:79:23:6a:48: 79:27:ed:84:a7:a1:ac:c9:ba:03:ba:14:ce:2f:11:06:ef:bc: da:4d:9b:af:e7:2e:c9:e5:25:a7:15:9b:1b:83:b7:0a:d1:1b: 91:ba:f3:b7:2b:d2:3e:ee:bb:2e:11:4c:42:ea:07:ad:e8:4b: 73:ba:02:bd:a2:dc:92:c9:dc:9a:e0:b9:3d:42:84:5e:33:5d: 2d:e2:43:f4:cb:04:6d:40:2b:6b:21:87:26:e3:7f:8c:a2:85: 7d:0a:03:66:df:25:e0:41:ec:e5:d1:55:df:11:ab:77:18:a1: b1:82:f8:c9:f6:0f:45:2e:85:da:87:62:5e:a6:34:9b:b8:73: 40:e7:09:b7:9e:76:28:ef:f8:d7:da:1f:b3:ac:2d:c7:42:23: 05:47:30:95:7a:23:7b:1f:8a:49:73:2e:2c:3b:aa:02:aa:7f: 5c:31:d9:16:be:b6:72:98:e0:a5:3d:aa:53:94:6c:63:22:39: a0:75:a6:3f:66:7d:22:25:b7:7f:e6:93:b3:78:4c:68:b5:e4: 42:46:8f:0b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjUwODAyMTQ1MDUxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlMjVjYS1iNmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5j6fZebgcxSE5YTHs1FXwfQOx2mYv9YDnuaKJb4Pk+yG1enYmXkW1XmVsdW3 pHblwyTle+XzGciSwxQObAh2UzScuQOj3kfxIoaAvJKmt/PxS+aEaLucNDi1IDy/ FZsw03UN9zwm3f5gg2Mp3uzqkaOmH2I/hlvqspUJep2V9ltfyOcvyluqTw3ZczPH CeTDGtz0wtnMuVNrqK59DMfpyT83E1g4r2+iR78wpVYZUWzCaYUgbmwyR4AMfgYn h7U/7aK/XvhqXDZUrmSFQQg2huoL0TTTL3KJST6X0dPvgLwkkQdwFqrnxIj+DDgV vpIEmU7J2ahU3kbv4Ff2098bbwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHzFVMIm FTrcyu4bvtGz6mlosZ2BMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkzNTAvMzkxM0JDQTAxRDg3MTFFMkI0MkIwMkRGMDhCMDJDRDIvNTc2MUZGMDY0 OTM0MTFFRjg1OUMxRDQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABn1KgDBACgyogwDQYJKoZIhvcNAQELBQADggEBAFW8f6VM 0j1uaXvew05mSFNj/e32AJh/HbDCGltvnQKnB2ctO26RYMpdvTBx0sMddRhSeSNq SHkn7YSnoazJugO6FM4vEQbvvNpNm6/nLsnlJacVmxuDtwrRG5G687cr0j7uuy4R TELqB63oS3O6Ar2i3JLJ3JrguT1ChF4zXS3iQ/TLBG1AK2shhybjf4yihX0KA2bf JeBB7OXRVd8Rq3cYobGC+Mn2D0UuhdqHYl6mNJu4c0DnCbeedijv+NfaH7OsLcdC IwVHMJV6I3sfiklzLiw7qgKqf1wx2Ra+tnKY4KU9qlOUbGMiOaB1pj9mfSIlt3/m k7N4TGi15EJGjws= -----END CERTIFICATE-----Generated at Sun Aug 10 13:58:23 2025 by rpki-client