$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/81B7763C280211ED93948C10C4F9AE02.roa File: 81B7763C280211ED93948C10C4F9AE02.roa (raw, json) Hash identifier: EUxX4jfQlcU/1uY0IOylmxYMPcoOQVgae213RHQG1Xc= Subject key identifier: 33:56:D3:1E:D0:9F:DB:1F:1F:6D:49:CB:A5:7F:A9:EA:CA:B8:26:3A Certificate issuer: /CN=A91D9D7A/serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Certificate serial: 025E Authority key identifier: 35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/81B7763C280211ED93948C10C4F9AE02.roa Signing time: Mon 11 Aug 2025 02:08:50 +0000 ROA not before: Mon 11 Aug 2025 02:08:50 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131241 IP address blocks: 103.83.162.0/23 maxlen: 24 2001:df1:15c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 02:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9D7A, serialNumber=3525F9C544E99B0E63460099C92DFD94D49BF6CA Validity Not Before: Aug 11 02:08:50 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=689950b1-a40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f9:03:57:31:40:29:7d:7b:23:a5:54:b1:97: f3:e5:05:6f:96:3f:ed:5b:4d:ad:48:76:57:8c:ac: b4:6b:6b:82:a5:c8:39:4f:c1:c1:5c:7c:54:88:81: b7:ad:14:c0:6f:16:4e:a0:fb:df:ae:f7:5b:ec:a6: b9:8f:c5:4d:ae:86:1b:46:7f:e8:6c:6d:c2:04:80: 44:86:d1:c0:3e:4e:85:e1:b5:1c:14:c1:a3:a6:62: 92:45:bb:fe:29:93:7f:ff:77:93:4a:f1:67:b1:30: 71:ae:bd:98:9e:9c:8e:c7:a3:9a:b7:9e:dc:db:64: 16:57:8b:f6:eb:9c:47:20:b5:63:08:42:fc:f5:28: 2f:ec:f8:86:c8:5b:fd:3c:af:be:16:03:17:f2:c2: 50:d1:38:0d:cc:f6:0b:39:f9:6b:e5:66:a9:d3:69: 8d:91:64:30:b8:8b:d4:7a:0a:8d:49:b8:64:9c:7d: 68:23:eb:67:e6:21:fb:30:e8:8e:01:a0:3c:3b:de: b5:12:96:9b:41:eb:eb:55:6a:bf:fb:50:bb:b8:7a: c0:0c:bb:50:00:56:c2:8d:4e:61:04:4e:b1:08:ff: a1:29:da:12:5c:38:e2:ac:bf:1f:aa:7c:73:65:be: d5:8d:58:c7:fe:0b:97:21:03:34:4e:64:13:07:11: cd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:56:D3:1E:D0:9F:DB:1F:1F:6D:49:CB:A5:7F:A9:EA:CA:B8:26:3A X509v3 Authority Key Identifier: keyid:35:25:F9:C5:44:E9:9B:0E:63:46:00:99:C9:2D:FD:94:D4:9B:F6:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/NSX5xUTpmw5jRgCZyS39lNSb9so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NSX5xUTpmw5jRgCZyS39lNSb9so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D7A/89A9AA24278311ED9BA02450C4F9AE02/81B7763C280211ED93948C10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.162.0/23 IPv6: 2001:df1:15c0::/48 Signature Algorithm: sha256WithRSAEncryption 3f:68:39:ac:5a:aa:19:0e:b7:cb:08:61:73:c9:ef:ec:62:73: 7a:49:05:81:8b:5a:ea:fb:c8:1f:d2:55:92:2f:a8:ec:e1:14: bf:96:c1:12:54:06:82:6a:8a:37:a2:48:a1:30:f7:dc:20:e0: 3a:3c:a8:be:5e:13:70:b1:96:76:f7:ec:70:88:79:13:7d:2a: 17:80:31:c9:cf:c5:27:80:3d:99:d2:62:9e:6a:8b:9a:1a:d9: b0:9c:6a:66:87:bc:d3:b9:cb:2c:7f:ca:0b:d4:e8:a6:ca:69: 2e:d9:6c:4c:b3:71:ff:a2:dc:79:bf:8b:a5:20:89:e9:7b:cb: 0c:a2:78:29:19:1a:2a:42:2a:14:bd:ff:af:58:cb:f5:d3:9c: 41:53:08:58:98:72:c2:81:9b:b1:52:76:82:c1:b9:cb:81:d5: 90:82:48:a2:0b:a6:31:22:ba:d3:f4:d0:86:73:22:17:49:7b: 95:79:0e:20:b7:01:8c:40:2e:1d:d1:34:9f:19:be:a1:c5:fb: 84:c0:e3:8c:30:bc:84:fb:71:93:2e:8e:ca:40:a1:aa:b7:29: 6e:f9:1c:62:de:cc:36:7a:5e:c2:03:63:6b:1d:b9:69:e3:97: 7b:b9:5f:d6:00:d8:b5:bd:cf:e1:56:e4:c1:34:58:68:3b:f5: eb:34:67:60 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlEN0ExMTAvBgNVBAUTKDM1MjVGOUM1NDRFOTlCMEU2MzQ2MDA5OUM5MkRGRDk0 RDQ5QkY2Q0EwHhcNMjUwODExMDIwODUwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk5NTBiMS1hNDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvkDVzFAKX17I6VUsZfz5QVvlj/tW02tSHZXjKy0a2uCpcg5T8HBXHxUiIG3 rRTAbxZOoPvfrvdb7Ka5j8VNroYbRn/obG3CBIBEhtHAPk6F4bUcFMGjpmKSRbv+ KZN//3eTSvFnsTBxrr2YnpyOx6Oat57c22QWV4v265xHILVjCEL89Sgv7PiGyFv9 PK++FgMX8sJQ0TgNzPYLOflr5Wap02mNkWQwuIvUegqNSbhknH1oI+tn5iH7MOiO AaA8O961EpabQevrVWq/+1C7uHrADLtQAFbCjU5hBE6xCP+hKdoSXDjirL8fqnxz Zb7VjVjH/guXIQM0TmQTBxHNUwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDNW0x7Q n9sfH21Jy6V/qerKuCY6MB8GA1UdIwQYMBaAFDUl+cVE6ZsOY0YAmckt/ZTUm/bK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ3QS84OUE5QUEyNDI3 ODMxMUVEOUJBMDI0NTBDNEY5QUUwMi9OU1g1eFVUcG13NWpSZ0NaeVMzOWxOU2I5 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05TWDV4VVRwbXc1alJnQ1p5UzM5bE5TYjlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlEN0EvODlBOUFBMjQyNzgzMTFFRDlCQTAyNDUwQzRGOUFFMDIvODFCNzc2M0My ODAyMTFFRDkzOTQ4QzEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnU6IwDwQCAAIwCQMHACABDfEVwDANBgkqhkiG9w0BAQsF AAOCAQEAP2g5rFqqGQ63ywhhc8nv7GJzekkFgYta6vvIH9JVki+o7OEUv5bBElQG gmqKN6JIoTD33CDgOjyovl4TcLGWdvfscIh5E30qF4Axyc/FJ4A9mdJinmqLmhrZ sJxqZoe807nLLH/KC9TopsppLtlsTLNx/6Lceb+LpSCJ6XvLDKJ4KRkaKkIqFL3/ r1jL9dOcQVMIWJhywoGbsVJ2gsG5y4HVkIJIogumMSK60/TQhnMiF0l7lXkOILcB jEAuHdE0nxm+ocX7hMDjjDC8hPtxky6OykChqrcpbvkcYt7MNnpewgNjax25aeOX e7lf1gDYtb3P4VbkwTRYaDv16zRnYA== -----END CERTIFICATE-----Generated at Wed Aug 13 16:03:16 2025 by rpki-client