$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/5E2A4C584ED911EAA7F1A521C4F9AE02.roa File: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (raw, json) Hash identifier: QAE/MC+xtHDwjDC4We28f6uqNECigc7G6Vc7+DGOZ34= Subject key identifier: FD:5E:DB:D5:AB:D1:6B:C1:68:41:F0:2E:79:5D:0B:4B:CC:73:2B:E9 Certificate issuer: /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Certificate serial: 0AB8 Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/5E2A4C584ED911EAA7F1A521C4F9AE02.roa Signing time: Wed 16 Apr 2025 19:29:19 +0000 ROA not before: Wed 16 Apr 2025 19:29:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139310 IP address blocks: 103.137.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2744 (0xab8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA Validity Not Before: Apr 16 19:29:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6800050f-e56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:08:44:9c:c8:02:9a:2d:5e:19:5b:89:3b: 7a:89:53:9e:35:0e:d2:0d:5a:f9:18:a4:64:02:4f: 69:7c:cb:cd:35:34:6f:55:fb:1d:32:c8:2b:79:48: 85:25:15:ab:b1:87:d4:4c:83:ff:c9:93:29:e0:b4: 51:50:a2:c1:c7:25:49:57:ab:4a:7f:a6:17:93:0e: 7e:be:98:61:4e:24:ab:68:ee:04:ce:0c:6b:a8:34: c0:5b:6c:d9:12:88:13:b1:91:a9:8b:6f:1a:99:7f: 93:f3:49:53:f0:d8:dd:04:50:38:d0:a2:8d:6f:fc: b8:cb:5d:2c:5a:7a:29:01:20:52:ba:2d:76:b8:81: 98:56:20:e8:40:d8:60:a7:b1:8d:0c:4e:c8:97:74: 85:b4:41:0c:05:04:20:d7:ea:5c:80:92:ea:31:de: d8:2d:c7:7f:94:b6:79:cf:65:fa:22:ce:fe:c7:65: bc:58:10:9e:cb:99:5b:2d:36:4e:a9:2c:93:20:7f: 77:77:6c:9d:f3:74:16:6d:cb:3d:a9:89:ea:a0:2b: 49:84:7a:3b:13:5a:7b:21:1d:d5:f6:8a:e4:0e:29: cd:7d:0e:0b:a9:55:5c:ba:cc:87:f2:36:b4:06:60: b2:cb:b6:cc:f6:1d:38:c4:90:e9:7d:dd:91:9a:e7: 62:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5E:DB:D5:AB:D1:6B:C1:68:41:F0:2E:79:5D:0B:4B:CC:73:2B:E9 X509v3 Authority Key Identifier: keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/5E2A4C584ED911EAA7F1A521C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.130.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:37:2c:1f:b5:f2:07:7a:79:1d:4a:65:f8:aa:5d:30:f0:4c: 43:83:36:e9:c6:ea:97:90:14:6a:68:4a:aa:6a:61:e1:7e:81: 68:bd:0b:27:ea:b6:b3:4e:10:22:05:58:44:93:62:89:7c:e6: 82:2a:c5:96:1d:01:e7:bd:ed:4a:93:e1:da:6a:d2:0d:c7:7f: 63:61:f1:38:b3:00:52:e0:5b:3c:ea:1c:24:13:ce:0e:20:be: f7:42:f4:ad:46:57:c1:35:8f:b5:2f:c5:31:c4:c1:03:90:e2: be:56:35:28:74:52:46:bc:0a:11:9e:ef:93:5c:4f:b4:03:2a: bc:2a:ae:ec:8a:dd:a7:93:95:10:fb:7b:08:8b:8c:47:06:fb: 72:7c:72:0d:85:5e:bb:be:78:57:27:8c:46:b9:eb:c0:fb:9d: f9:a9:c5:0d:58:3a:4f:5e:25:40:ba:33:00:5a:d1:ed:6a:8c: 58:aa:2c:41:0c:59:79:ea:ef:4d:f9:6c:03:fa:f4:4d:11:08: 40:b8:ea:c6:56:45:bf:cc:d6:67:29:98:5e:ad:42:7f:22:b4: 98:3e:83:e4:56:c9:b4:66:b1:d3:92:1e:14:4d:fb:a8:70:f7: ad:ef:85:67:35:c3:45:2a:84:be:04:fc:44:6a:8f:28:8b:4e: 02:71:6b:ad -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3Q0YxMTAvBgNVBAUTKEQyRUMwNzkwQkM0RUJEMzQwN0M5NTA3NEU2QjU2QjQw MDAzODEyREEwHhcNMjUwNDE2MTkyOTE5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAwMDUwZi1lNTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNUIRJzIApotXhlbiTt6iVOeNQ7SDVr5GKRkAk9pfMvNNTRvVfsdMsgreUiF JRWrsYfUTIP/yZMp4LRRUKLBxyVJV6tKf6YXkw5+vphhTiSraO4EzgxrqDTAW2zZ EogTsZGpi28amX+T80lT8NjdBFA40KKNb/y4y10sWnopASBSui12uIGYViDoQNhg p7GNDE7Il3SFtEEMBQQg1+pcgJLqMd7YLcd/lLZ5z2X6Is7+x2W8WBCey5lbLTZO qSyTIH93d2yd83QWbcs9qYnqoCtJhHo7E1p7IR3V9orkDinNfQ4LqVVcusyH8ja0 BmCyy7bM9h04xJDpfd2RmudiHwIDAQABo4IClTCCApEwHQYDVR0OBBYEFP1e29Wr 0WvBaEHwLnldC0vMcyvpMB8GA1UdIwQYMBaAFNLsB5C8Tr00B8lQdOa1a0AAOBLa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODdDRi9FNjg1QjEyQTRF RDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZUUUh5VkIwNXJWclFBQTRF dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB1d0hrTHhPdlRRSHlWQjA1clZyUUFBNEV0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDg3Q0YvRTY4NUIxMkE0RUQ3MTFFQTg4RTYwNTFGQzRGOUFFMDIvNUUyQTRDNTg0 RUQ5MTFFQUE3RjFBNTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFniYIwDQYJKoZIhvcNAQELBQADggEBABo3LB+18gd6eR1K ZfiqXTDwTEODNunG6peQFGpoSqpqYeF+gWi9CyfqtrNOECIFWESTYol85oIqxZYd Aee97UqT4dpq0g3Hf2Nh8TizAFLgWzzqHCQTzg4gvvdC9K1GV8E1j7UvxTHEwQOQ 4r5WNSh0Uka8ChGe75NcT7QDKrwqruyK3aeTlRD7ewiLjEcG+3J8cg2FXru+eFcn jEa568D7nfmpxQ1YOk9eJUC6MwBa0e1qjFiqLEEMWXnq7035bAP69E0RCEC46sZW Rb/M1mcpmF6tQn8itJg+g+RWybRmsdOSHhRN+6hw963vhWc1w0UqhL4E/ERqjyiL TgJxa60= -----END CERTIFICATE-----Generated at Wed Nov 5 19:33:25 2025 by rpki-client