$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/1E8ADFD0C1F211EBA984726AC4F9AE02.roa File: 1E8ADFD0C1F211EBA984726AC4F9AE02.roa (raw, json) Hash identifier: 9l/idt3LJislssNxfPBsqgjifz4U+6PzxoXpIp44G34= Subject key identifier: 33:46:F7:3E:00:DE:4B:C2:FA:99:EC:B5:1F:FA:11:58:03:34:D6:E5 Certificate issuer: /CN=A91D51C1/serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050 Certificate serial: 05DE Authority key identifier: 97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/1E8ADFD0C1F211EBA984726AC4F9AE02.roa Signing time: Tue 01 Jul 2025 00:02:31 +0000 ROA not before: Tue 01 Jul 2025 00:02:31 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 0 IP address blocks: 43.243.22.0/23 maxlen: 23 103.26.68.0/23 maxlen: 23 103.26.70.0/24 maxlen: 24 103.26.71.0/24 maxlen: 24 202.12.243.0/24 maxlen: 24 2001:dea:0:10::/64 maxlen: 64 2001:dea:0:20::/64 maxlen: 64 2001:dea:0:30::/64 maxlen: 64 2001:dea:0:40::/64 maxlen: 64 2001:dea:0:50::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1502 (0x5de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51C1, serialNumber=97BB54B3D23C37C3DD3E0169CA974D27DBA9F050 Validity Not Before: Jul 1 00:02:31 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68632597-bfca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:03:e7:46:a4:6a:ee:c9:be:c8:c7:b9:3a:50: 4b:65:e3:26:0b:8b:41:16:5d:d0:c9:9b:13:7a:b7: c6:42:da:5a:3f:32:6d:36:47:2d:e0:d1:c6:4b:04: 70:9e:96:6e:b5:9c:df:7e:f9:fa:28:6c:ad:5b:7c: bf:13:5c:32:34:57:c0:5b:fc:ec:29:44:82:22:2e: 41:f9:6b:df:b5:10:ab:94:91:40:ac:7c:c4:4b:77: 0d:0b:29:6f:9e:0d:b1:b6:42:91:ff:0a:b5:3f:9e: 7a:35:b6:e6:e0:9d:e9:8d:4e:2b:a9:4d:15:cc:1c: e8:52:b3:8c:c8:1e:98:2c:4f:5c:05:9c:eb:b3:59: 3e:09:42:52:83:36:d9:8f:4a:59:ca:1a:59:4f:a6: 23:2e:03:6d:4d:b5:2f:90:61:47:61:91:2d:14:42: b1:17:3d:4f:ac:05:c3:17:6c:4a:7e:5e:e2:b9:d2: e3:7a:35:90:41:36:8e:77:b7:dd:98:7b:03:98:95: 33:c8:38:bf:70:dc:56:72:a6:c0:35:ed:75:11:2d: 58:09:c4:60:3f:e9:48:04:91:eb:63:80:fd:3b:90: 14:6f:40:27:9e:a5:bd:ea:70:8b:71:c6:78:4e:f2: 7d:94:3e:ee:cb:7f:0a:bd:79:33:7f:81:93:16:4f: fa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:46:F7:3E:00:DE:4B:C2:FA:99:EC:B5:1F:FA:11:58:03:34:D6:E5 X509v3 Authority Key Identifier: keyid:97:BB:54:B3:D2:3C:37:C3:DD:3E:01:69:CA:97:4D:27:DB:A9:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/l7tUs9I8N8PdPgFpypdNJ9up8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7tUs9I8N8PdPgFpypdNJ9up8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51C1/D92E69AAC1EE11EBBFD57E2AC4F9AE02/1E8ADFD0C1F211EBA984726AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.22.0/23 103.26.68.0/22 202.12.243.0/24 IPv6: 2001:dea:0:10::/64 2001:dea:0:20::/64 2001:dea:0:30::/64 2001:dea:0:40::/64 2001:dea:0:50::/64 Signature Algorithm: sha256WithRSAEncryption 40:bb:1d:ca:34:1c:a5:a0:26:04:a0:e2:03:fd:cd:29:09:cc: a1:85:33:74:26:34:77:22:83:bd:41:67:b2:07:15:40:d6:c5: 6e:48:ad:ec:f3:5b:d9:b9:f7:13:2d:1b:63:e2:56:ef:8e:e6: 9c:31:0f:7a:49:7d:3f:8f:43:ac:61:5b:70:f4:44:36:1b:50: 09:5c:87:46:99:22:e4:5e:86:1c:93:c0:b6:2c:3d:14:42:c5: ee:d2:83:86:5a:0e:97:ce:cd:dd:c4:3e:02:a2:9b:e1:b7:4a: 1a:6a:1a:e9:4f:5b:2c:7a:4d:ef:bc:b7:0e:9c:6c:29:5a:a6: 9d:f4:82:40:dd:be:18:23:47:47:08:e5:2b:89:49:d0:23:b9: 7a:1b:a2:d4:d1:ff:26:35:55:8c:ff:70:63:e0:b4:24:4e:3f: af:66:37:3d:f2:0f:9c:f0:78:ce:c3:2d:00:06:d0:03:4c:8b: 2b:ba:3b:ee:1f:b3:e2:5e:99:88:2e:12:a3:63:d6:4e:ee:7c: 89:99:ae:2c:e1:b1:d4:99:87:b7:fd:3a:e9:3d:8f:10:36:33: 1c:df:3a:d2:58:c1:fd:39:92:f7:88:12:63:48:c9:7f:f4:ec: 3f:c1:73:f3:27:ef:8c:83:f2:14:50:9d:7f:2d:fa:a9:03:d5: c6:5f:c3:79 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgICBd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQzExMTAvBgNVBAUTKDk3QkI1NEIzRDIzQzM3QzNERDNFMDE2OUNBOTc0RDI3 REJBOUYwNTAwHhcNMjUwNzAxMDAwMjMxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzMjU5Ny1iZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6QPnRqRq7sm+yMe5OlBLZeMmC4tBFl3QyZsTerfGQtpaPzJtNkct4NHGSwRw npZutZzffvn6KGytW3y/E1wyNFfAW/zsKUSCIi5B+WvftRCrlJFArHzES3cNCylv ng2xtkKR/wq1P556Nbbm4J3pjU4rqU0VzBzoUrOMyB6YLE9cBZzrs1k+CUJSgzbZ j0pZyhpZT6YjLgNtTbUvkGFHYZEtFEKxFz1PrAXDF2xKfl7iudLjejWQQTaOd7fd mHsDmJUzyDi/cNxWcqbANe11ES1YCcRgP+lIBJHrY4D9O5AUb0AnnqW96nCLccZ4 TvJ9lD7uy38KvXkzf4GTFk/67wIDAQABo4IC4DCCAtwwHQYDVR0OBBYEFDNG9z4A 3kvC+pnstR/6EVgDNNblMB8GA1UdIwQYMBaAFJe7VLPSPDfD3T4BacqXTSfbqfBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFDMS9EOTJFNjlBQUMx RUUxMUVCQkZENTdFMkFDNEY5QUUwMi9sN3RVczlJOE44UGRQZ0ZweXBkTko5dXA4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3dFVzOUk4TjhQZFBnRnB5cGROSjl1cDhGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDUxQzEvRDkyRTY5QUFDMUVFMTFFQkJGRDU3RTJBQzRGOUFFMDIvMUU4QURGRDBD MUYyMTFFQkE5ODQ3MjZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwagYIKwYBBQUHAQcBAf8E WzBZMBgEAgABMBIDBAEr8xYDBAJnGkQDBADKDPMwPQQCAAIwNwMJACABDeoAAAAQ AwkAIAEN6gAAACADCQAgAQ3qAAAAMAMJACABDeoAAABAAwkAIAEN6gAAAFAwDQYJ KoZIhvcNAQELBQADggEBAEC7Hco0HKWgJgSg4gP9zSkJzKGFM3QmNHcig71BZ7IH FUDWxW5IrezzW9m59xMtG2PiVu+O5pwxD3pJfT+PQ6xhW3D0RDYbUAlch0aZIuRe hhyTwLYsPRRCxe7Sg4ZaDpfOzd3EPgKim+G3ShpqGulPWyx6Te+8tw6cbClapp30 gkDdvhgjR0cI5SuJSdAjuXobotTR/yY1VYz/cGPgtCROP69mNz3yD5zweM7DLQAG 0ANMiyu6O+4fs+JemYguEqNj1k7ufImZrizhsdSZh7f9Ouk9jxA2MxzfOtJYwf05 kveIEmNIyX/07D/Bc/Mn74yD8hRQnX8t+qkD1cZfw3k= -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:09 2025 by rpki-client