$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/6D24010C300311F0995E874EC4F9AE02.roa File: 6D24010C300311F0995E874EC4F9AE02.roa (raw, json) Hash identifier: JH/oVs3Jqan8Flty+gkOdXRSGquUVwbS7q7MqJveDFs= Subject key identifier: 85:51:3B:EC:2D:42:E1:5F:64:64:B3:61:CF:5B:11:72:34:A9:93:62 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 05BB Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/6D24010C300311F0995E874EC4F9AE02.roa Signing time: Tue 13 May 2025 14:06:12 +0000 ROA not before: Tue 13 May 2025 14:06:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214143 IP address blocks: 103.136.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1467 (0x5bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Validity Not Before: May 13 14:06:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=682351d4-95fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2c:27:80:ee:03:cb:51:d1:15:a7:0a:48:c0: 48:10:fd:68:54:c0:5a:b3:a7:27:84:87:da:94:49: 67:88:46:64:2f:04:0b:01:f1:6e:27:c2:bc:69:33: 19:d4:fb:61:2a:1d:7a:fb:df:d7:11:61:9b:9f:68: c6:6f:4f:67:29:df:82:93:e2:cb:ac:66:d3:ab:86: 1f:19:13:a8:16:08:54:dd:8e:b4:e3:34:90:34:3e: b1:22:90:45:fb:d7:3e:e8:04:c6:c7:2e:88:41:fc: f3:48:93:bb:9d:d1:e9:cd:cc:8a:4c:5d:ac:21:36: 07:cd:93:69:ba:69:a8:49:8e:10:82:a5:82:8c:84: 13:fd:c5:24:66:11:de:71:db:23:ae:0f:a0:4d:4d: f4:8f:c1:dc:6f:da:19:34:7b:98:41:7b:60:2e:ee: fa:3a:80:f0:b1:c5:58:85:82:83:29:2f:9d:13:39: ae:08:a0:40:f5:9e:d5:ee:59:b2:12:e8:78:67:41: 82:a4:a8:9a:64:fd:5f:03:a9:cd:ec:e5:a0:e5:95: 8c:ca:01:15:1b:48:ed:cc:2d:cd:d6:62:5f:e9:82: 0a:2e:cf:02:2c:82:e1:32:8b:63:dd:87:93:44:5d: b6:72:05:b9:5d:c0:d6:c9:ee:b7:40:e6:ad:d9:0f: b1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:51:3B:EC:2D:42:E1:5F:64:64:B3:61:CF:5B:11:72:34:A9:93:62 X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/6D24010C300311F0995E874EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.148.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:46:5d:2c:c5:92:e4:16:c1:8b:b0:59:b6:c4:d4:4f:a9:79: a9:fe:c2:cc:e1:e1:af:5e:f6:54:b5:be:ce:75:4a:d6:fa:df: 94:1e:ef:c2:d9:11:93:b6:f5:19:5e:81:4f:8b:9a:be:cd:0f: 9b:d7:c6:a9:46:92:4f:e2:66:7f:f7:d2:3d:fb:d8:48:59:a6: ff:25:ed:43:58:a4:ca:b8:99:0f:67:8a:d6:50:1f:06:bc:ee: f9:76:71:e6:55:d8:cc:ee:48:e5:52:0b:ce:2f:33:8b:1e:34: d0:12:3c:8d:8c:7a:2d:1a:bc:39:4e:ec:05:2c:1a:9b:eb:94: eb:c5:84:20:eb:b1:f0:49:63:cb:e8:c6:bf:5e:cc:1d:fb:aa: 17:8c:23:b3:af:f7:1b:bc:a7:1c:81:4f:c0:62:a7:f2:dd:2f: 33:52:bf:de:55:0c:b0:44:06:8c:25:58:3a:bd:5b:b4:a3:8c: 93:5f:73:a6:1d:0c:c1:44:f8:71:8b:7f:4b:95:6c:0d:13:a2: ff:7e:02:3b:6e:eb:71:8c:12:4f:fd:52:c7:0c:f8:64:2e:f1: 84:4a:0c:be:56:d6:c0:1f:4f:0a:0d:22:25:49:d7:84:29:55: f2:22:ee:53:a7:3a:57:23:69:c3:65:08:77:26:9e:92:39:9f: ee:0a:37:78 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjUwNTEzMTQwNjEyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODIzNTFkNC05NWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvywngO4Dy1HRFacKSMBIEP1oVMBas6cnhIfalElniEZkLwQLAfFuJ8K8aTMZ 1PthKh16+9/XEWGbn2jGb09nKd+Ck+LLrGbTq4YfGROoFghU3Y604zSQND6xIpBF +9c+6ATGxy6IQfzzSJO7ndHpzcyKTF2sITYHzZNpummoSY4QgqWCjIQT/cUkZhHe cdsjrg+gTU30j8Hcb9oZNHuYQXtgLu76OoDwscVYhYKDKS+dEzmuCKBA9Z7V7lmy Euh4Z0GCpKiaZP1fA6nN7OWg5ZWMygEVG0jtzC3N1mJf6YIKLs8CLILhMotj3YeT RF22cgW5XcDWye63QOat2Q+xZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIVRO+wt QuFfZGSzYc9bEXI0qZNiMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0IwOUUvNDcxMTlEMDBEMDBCMTFFQkI1ODkwRTdCQzRGOUFFMDIvNkQyNDAxMEMz MDAzMTFGMDk5NUU4NzRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABniJQwDQYJKoZIhvcNAQELBQADggEBAJxGXSzFkuQWwYuw WbbE1E+pean+wszh4a9e9lS1vs51Stb635Qe78LZEZO29RlegU+Lmr7ND5vXxqlG kk/iZn/30j372EhZpv8l7UNYpMq4mQ9nitZQHwa87vl2ceZV2MzuSOVSC84vM4se NNASPI2Mei0avDlO7AUsGpvrlOvFhCDrsfBJY8voxr9ezB37qheMI7Ov9xu8pxyB T8Bip/LdLzNSv95VDLBEBowlWDq9W7SjjJNfc6YdDMFE+HGLf0uVbA0Tov9+Ajtu 63GMEk/9UscM+GQu8YRKDL5W1sAfTwoNIiVJ14QpVfIi7lOnOlcjacNlCHcmnpI5 n+4KN3g= -----END CERTIFICATE-----Generated at Wed Nov 5 11:44:15 2025 by rpki-client