$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa File: CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa (raw, json) Hash identifier: cqaNGUAp+AM9Nk5TWMcE/5SRJKY4Makpxzc5uTKkH7g= Subject key identifier: 80:DA:B4:4B:21:0B:C2:55:62:06:9B:B9:C9:DC:02:9B:B0:FB:88:9F Certificate issuer: /CN=A91D9F5A/serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545 Certificate serial: 02 Authority key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa Signing time: Sun 27 Jul 2025 23:02:46 +0000 ROA not before: Sun 27 Jul 2025 23:02:46 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 138545 IP address blocks: 103.147.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545 Validity Not Before: Jul 27 23:02:46 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6886b016-b8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2a:9c:76:ea:b9:78:b1:58:55:c2:12:f4:9d: 9a:fc:11:8f:7f:d0:7b:9d:be:93:56:73:83:ca:3d: 45:c2:62:6b:ce:37:ca:d5:2e:40:38:cf:46:54:a5: 30:6f:ce:ff:e6:48:90:23:23:c6:9e:d7:4e:0f:38: bf:b5:f2:ad:b9:7f:ca:18:98:90:3d:a7:3f:26:2d: 19:80:9d:f8:e3:76:11:87:8a:b8:c2:10:45:55:6c: ba:aa:00:b3:54:dd:0c:1c:02:84:13:65:5f:9f:fa: b5:33:e3:17:2d:c7:5f:83:76:6c:63:ea:cb:99:88: 7b:c9:fb:f3:94:8e:ae:11:82:32:02:da:bb:9d:bf: 92:4e:90:b4:e8:da:dc:2b:fc:18:74:8e:c5:ec:b3: 64:81:dd:4a:59:b7:d5:c6:da:a5:1b:e7:e2:c1:47: 92:40:e4:2a:54:69:1f:58:e6:d9:cc:ea:f5:34:8d: 5f:48:8c:1b:52:64:c5:b5:01:d2:fe:3b:dc:8f:08: f0:b2:a0:25:ed:b5:6b:16:4e:bd:90:38:46:9e:8d: 18:e5:76:d7:42:09:98:6b:0b:68:46:13:6b:64:43: f9:0f:df:c9:a2:e8:55:0f:7c:52:c9:fb:5f:c5:38: 9a:60:08:8c:3a:0e:2d:c6:6b:09:1d:3c:b2:a0:27: 5e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DA:B4:4B:21:0B:C2:55:62:06:9B:B9:C9:DC:02:9B:B0:FB:88:9F X509v3 Authority Key Identifier: keyid:88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.198.0/23 Signature Algorithm: sha256WithRSAEncryption 02:65:2c:6a:ca:72:a2:f1:0e:86:df:f9:e4:a3:d1:29:d3:ef: 7f:68:24:27:6d:4b:79:60:c7:99:3e:ff:6d:ec:c5:02:6e:e0: 64:de:c6:fb:57:69:bf:9a:01:5b:12:2f:36:0a:67:0c:ff:eb: 4c:93:70:d1:e2:45:5b:0b:72:77:31:ab:f6:3f:e0:55:7b:3a: b7:e4:aa:22:42:2c:89:77:fe:48:cb:51:08:a4:0f:cf:8c:63: 15:73:8b:17:45:7a:88:ce:31:2e:68:47:fd:b8:29:ed:2b:92: 82:3f:a5:1b:ba:39:97:f5:31:ec:c7:04:84:db:3c:2d:19:18: 3a:c7:fa:11:50:ce:23:17:06:9f:4a:13:25:81:7d:35:da:33: 51:60:aa:74:d3:df:e8:d0:53:dc:e3:df:09:f8:49:98:92:c3: a3:c8:2c:9d:76:28:ed:3a:9e:40:95:87:e2:90:2a:98:1b:b8: cd:51:d9:e7:e0:19:d8:60:1f:f1:80:98:d3:fc:2f:bb:8e:1c: 89:4a:21:67:fd:b6:1c:f8:6e:c9:bb:33:b1:fc:72:40:73:01: 6a:f5:74:74:65:dc:d5:1d:80:6c:37:0a:f9:c8:59:9d:fa:29: 31:0c:84:5d:2e:6c:6b:db:c7:4e:6c:15:b8:39:c0:02:3b:c8: 46:41:9a:ee -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OUY1QTExMC8GA1UEBRMoODg3RTc5RTI1QjZEMUQzN0VGMUYzMUJDNUEwMjMyRjhF NzY1MTU0NTAeFw0yNTA3MjcyMzAyNDZaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ODZiMDE2LWI4ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkKpx26rl4sVhVwhL0nZr8EY9/0HudvpNWc4PKPUXCYmvON8rVLkA4z0ZUpTBv zv/mSJAjI8ae104POL+18q25f8oYmJA9pz8mLRmAnfjjdhGHirjCEEVVbLqqALNU 3QwcAoQTZV+f+rUz4xctx1+Ddmxj6suZiHvJ+/OUjq4RgjIC2rudv5JOkLTo2twr /Bh0jsXss2SB3UpZt9XG2qUb5+LBR5JA5CpUaR9Y5tnM6vU0jV9IjBtSZMW1AdL+ O9yPCPCyoCXttWsWTr2QOEaejRjldtdCCZhrC2hGE2tkQ/kP38mi6FUPfFLJ+1/F OJpgCIw6Di3GawkdPLKgJ16DAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUgNq0SyEL wlViBpu5ydwCm7D7iJ8wHwYDVR0jBBgwFoAUiH554lttHTfvHzG8WgIy+OdlFUUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5RjVBLzA4OThCMjNBMTFC QTExRUJCQzFBNTg0Q0M0RjlBRTAyL2lINTU0bHR0SFRmdkh6RzhXZ0l5LU9kbEZV VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUg1NTRsdHRIVGZ2SHpHOFdnSXktT2RsRlVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUY1QS8wODk4QjIzQTExQkExMUVCQkMxQTU4NENDNEY5QUUwMi9DRUZFREFCMjZC M0QxMUYwQTA4MzdEN0ZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWeTxjANBgkqhkiG9w0BAQsFAAOCAQEAAmUsaspyovEOht/5 5KPRKdPvf2gkJ21LeWDHmT7/bezFAm7gZN7G+1dpv5oBWxIvNgpnDP/rTJNw0eJF WwtydzGr9j/gVXs6t+SqIkIsiXf+SMtRCKQPz4xjFXOLF0V6iM4xLmhH/bgp7SuS gj+lG7o5l/Ux7McEhNs8LRkYOsf6EVDOIxcGn0oTJYF9NdozUWCqdNPf6NBT3OPf CfhJmJLDo8gsnXYo7TqeQJWH4pAqmBu4zVHZ5+AZ2GAf8YCY0/wvu44ciUohZ/22 HPhuybszsfxyQHMBavV0dGXc1R2AbDcK+chZnfopMQyEXS5sa9vHTmwVuDnAAjvI RkGa7g== -----END CERTIFICATE-----Generated at Fri Aug 8 00:39:00 2025 by rpki-client