$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/5FC8538AE7D811ECB3E05318C4F9AE02.roa File: 5FC8538AE7D811ECB3E05318C4F9AE02.roa (raw, json) Hash identifier: QUXJ6EoEVGUyvaKXpTag7fMul5UWaiUgtkt9cLzt5qM= Subject key identifier: D3:DD:BA:12:A9:97:AA:CD:37:3B:0D:BC:7B:6D:CA:34:F2:6E:DD:D2 Certificate issuer: /CN=A91CB06F/serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Certificate serial: 02FF Authority key identifier: C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/5FC8538AE7D811ECB3E05318C4F9AE02.roa Signing time: Thu 31 Jul 2025 02:07:59 +0000 ROA not before: Thu 31 Jul 2025 02:07:59 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 149860 IP address blocks: 103.189.66.0/24 maxlen: 24 103.189.67.0/24 maxlen: 24 2001:df0:ccc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 01:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 767 (0x2ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB06F, serialNumber=C945B7772CCC27413865A92CB892DFD27CAA9F77 Validity Not Before: Jul 31 02:07:59 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688acfff-6f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8e:31:19:fc:64:61:ef:5b:0c:2c:cd:37:07: ab:e9:ae:98:6b:61:aa:c8:f4:bf:35:a3:51:70:df: 69:6e:6f:4d:62:3a:67:63:9b:3f:3d:48:6c:3d:26: 58:d9:ac:1f:1c:cf:cd:5f:6f:42:fd:2e:c5:6f:82: c7:d0:92:92:ad:14:6b:0e:7e:1d:3f:92:76:1a:36: 7e:c3:36:56:07:ae:da:6a:d4:61:b3:0c:e5:3e:49: 3c:c5:9e:3b:fc:c6:f7:3f:4d:2c:69:8c:94:7d:fc: 9c:9b:62:96:86:6a:67:38:4a:0e:f2:2f:fb:04:a1: d2:04:c2:3e:31:95:8e:56:92:b5:da:fd:a3:b7:d3: d5:bc:29:07:46:6d:e8:3f:04:f4:a0:49:89:c7:ef: 1a:84:64:cc:b4:70:9e:33:ed:e5:de:0b:da:ec:cb: df:9a:8e:c5:45:8a:79:3c:f8:33:f0:e6:ba:e5:c8: a1:9f:af:ea:34:b9:a0:3e:3e:d0:e4:bb:f2:80:aa: 52:0f:5c:78:bb:20:4a:1d:d3:22:36:34:c4:15:94: f8:22:3a:2e:ed:5b:f1:df:29:dc:9a:6b:16:aa:78: 72:25:4c:d4:93:51:f8:23:b6:5f:44:7e:e7:47:3a: 2a:75:4a:75:41:16:2e:d2:27:9f:40:58:10:02:c1: ba:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DD:BA:12:A9:97:AA:CD:37:3B:0D:BC:7B:6D:CA:34:F2:6E:DD:D2 X509v3 Authority Key Identifier: keyid:C9:45:B7:77:2C:CC:27:41:38:65:A9:2C:B8:92:DF:D2:7C:AA:9F:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUW3dyzMJ0E4ZaksuJLf0nyqn3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB06F/12F30212E73811EC88F11641C4F9AE02/5FC8538AE7D811ECB3E05318C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.66.0/23 IPv6: 2001:df0:ccc0::/48 Signature Algorithm: sha256WithRSAEncryption 11:ef:70:a9:75:ba:16:a7:2d:4e:f7:81:f5:5b:f6:0c:94:ba: 06:1d:69:74:0f:4f:68:9d:10:41:b8:1b:8f:25:28:68:c2:ee: eb:05:41:5e:0b:cf:8d:64:f0:34:ae:79:a1:a2:90:9f:8c:0a: b2:47:a0:9d:50:e5:0d:3d:1a:ee:0f:27:2d:ef:e0:8c:06:59: 27:c1:a4:78:77:32:94:a3:aa:ff:8c:34:e7:b2:ed:03:63:8e: 1e:37:37:37:af:b7:a5:8f:b0:1a:8f:73:b3:ec:77:6d:49:42: ba:4c:54:27:a4:a4:35:13:8c:0d:a7:86:54:11:46:70:7d:e8: ed:4c:90:48:d4:45:c8:f0:b3:7a:1c:ac:55:89:95:b2:46:5b: 58:05:2d:2c:63:66:1c:36:3f:b8:cb:80:a5:a1:d5:a8:5c:d6: 62:cb:b5:8d:7f:17:7c:e0:b0:3c:de:ff:ab:a1:05:d3:98:00: b0:12:0a:20:bc:b7:a3:c6:08:e0:df:dd:96:55:db:a3:b3:a0: 5a:c1:c0:00:cc:71:5a:9e:2f:db:18:c8:be:e9:3e:f3:5c:88: 29:9d:0b:03:ea:bb:94:db:a8:bb:2c:4f:8a:44:dc:a3:65:8f: 48:40:4c:dc:b6:c0:7a:75:0c:34:8f:19:19:7c:2b:bc:bf:d0: 7f:cd:26:45 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwNkYxMTAvBgNVBAUTKEM5NDVCNzc3MkNDQzI3NDEzODY1QTkyQ0I4OTJERkQy N0NBQTlGNzcwHhcNMjUwNzMxMDIwNzU5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhY2ZmZi02ZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA044xGfxkYe9bDCzNNwer6a6Ya2GqyPS/NaNRcN9pbm9NYjpnY5s/PUhsPSZY 2awfHM/NX29C/S7Fb4LH0JKSrRRrDn4dP5J2GjZ+wzZWB67aatRhswzlPkk8xZ47 /Mb3P00saYyUffycm2KWhmpnOEoO8i/7BKHSBMI+MZWOVpK12v2jt9PVvCkHRm3o PwT0oEmJx+8ahGTMtHCeM+3l3gva7Mvfmo7FRYp5PPgz8Oa65cihn6/qNLmgPj7Q 5LvygKpSD1x4uyBKHdMiNjTEFZT4Ijou7Vvx3yncmmsWqnhyJUzUk1H4I7ZfRH7n RzoqdUp1QRYu0iefQFgQAsG6bQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNPduhKp l6rNNzsNvHttyjTybt3SMB8GA1UdIwQYMBaAFMlFt3cszCdBOGWpLLiS39J8qp93 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2Ri8xMkYzMDIxMkU3 MzgxMUVDODhGMTE2NDFDNEY5QUUwMi95VVczZHl6TUowRTRaYWtzdUpMZjBueXFu M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVVzNkeXpNSjBFNFpha3N1SkxmMG55cW4zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0IwNkYvMTJGMzAyMTJFNzM4MTFFQzg4RjExNjQxQzRGOUFFMDIvNUZDODUzOEFF N0Q4MTFFQ0IzRTA1MzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnvUIwDwQCAAIwCQMHACABDfDMwDANBgkqhkiG9w0BAQsF AAOCAQEAEe9wqXW6FqctTveB9Vv2DJS6Bh1pdA9PaJ0QQbgbjyUoaMLu6wVBXgvP jWTwNK55oaKQn4wKskegnVDlDT0a7g8nLe/gjAZZJ8GkeHcylKOq/4w057LtA2OO Hjc3N6+3pY+wGo9zs+x3bUlCukxUJ6SkNROMDaeGVBFGcH3o7UyQSNRFyPCzehys VYmVskZbWAUtLGNmHDY/uMuApaHVqFzWYsu1jX8XfOCwPN7/q6EF05gAsBIKILy3 o8YI4N/dllXbo7OgWsHAAMxxWp4v2xjIvuk+81yIKZ0LA+q7lNuouyxPikTco2WP SEBM3LbAenUMNI8ZGXwrvL/Qf80mRQ== -----END CERTIFICATE-----Generated at Wed Aug 13 20:18:53 2025 by rpki-client