$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/68C5CFBE076911EF8569F157C4F9AE02.roa File: 68C5CFBE076911EF8569F157C4F9AE02.roa (raw, json) Hash identifier: StO4PQ6ffihfvooMv19fGDjAg2vQbPTwXqeeTRzTihQ= Subject key identifier: 68:BE:61:51:1B:D3:8A:F8:94:2A:39:BB:9A:38:FF:40:14:E1:D1:1D Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 081B Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/68C5CFBE076911EF8569F157C4F9AE02.roa Signing time: Mon 26 May 2025 21:19:18 +0000 ROA not before: Mon 26 May 2025 21:19:18 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 997 IP address blocks: 103.213.244.0/22 maxlen: 24 144.48.4.0/22 maxlen: 24 2401:1640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2075 (0x81b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: May 26 21:19:18 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6834dad6-d98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:5c:da:a9:e6:a3:01:36:57:3c:33:d1:39: d7:96:22:99:f7:4a:43:1f:6b:08:9d:f9:8d:32:09: 21:fd:32:91:2c:55:8d:55:01:21:c1:12:48:70:a4: 07:a9:08:aa:d6:8d:50:df:04:76:6a:38:1e:a1:a9: 65:d6:ac:18:bd:11:d4:d0:b9:5d:59:6b:ca:66:76: 6a:45:78:e0:53:2f:49:7c:0b:3f:4a:d4:dd:55:67: 72:d4:c0:b7:07:92:09:eb:2b:47:e8:e8:a7:58:b1: 48:da:2a:08:6d:2f:19:b9:21:3f:ee:0e:01:16:60: 5f:20:5b:8f:39:37:cd:a3:28:ca:10:ca:cc:45:59: c5:5f:3a:2e:0f:1d:ab:b3:57:99:1d:24:62:0e:e2: a5:db:f8:3c:ad:ba:88:73:1c:74:f1:00:40:c7:9f: 6f:03:7d:ab:7d:27:af:49:4f:ee:81:59:39:64:56: ce:b3:5a:05:b8:04:4f:b8:94:4c:0e:67:c6:1d:ff: 7b:3a:b4:b6:bf:a1:81:c0:b7:94:80:c2:7f:01:c2: 34:4d:3a:7c:0e:9a:8d:6c:80:ce:e8:3a:ee:9c:b7: c2:da:cd:52:db:4f:38:83:2c:19:e2:c7:7a:5f:e9: bb:5e:94:98:ed:09:90:3e:64:db:3d:de:d4:2e:ce: 80:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BE:61:51:1B:D3:8A:F8:94:2A:39:BB:9A:38:FF:40:14:E1:D1:1D X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/68C5CFBE076911EF8569F157C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.213.244.0/22 144.48.4.0/22 IPv6: 2401:1640::/32 Signature Algorithm: sha256WithRSAEncryption 6c:ac:04:45:df:2c:bf:40:45:8d:08:6c:ad:cf:6d:3e:92:f2: e4:88:c0:f4:de:b9:5b:a7:9a:86:c9:8d:9f:1e:c3:98:f6:a3: 9a:30:4d:6c:01:c1:65:ae:d6:d4:e0:0f:3f:9c:98:67:b5:88: e1:59:4a:02:20:21:fc:e4:44:45:dd:af:62:48:b3:2b:60:e0: 58:01:3b:d3:44:cb:cd:5e:b9:56:d8:fa:7b:e1:ef:fa:2d:13: 8a:3f:05:e5:de:fc:4a:aa:f2:c5:23:a6:7a:bd:fd:59:96:9b: 7c:be:f3:09:7c:ef:bc:4f:39:89:ee:73:c6:89:6d:dc:13:1f: 68:ed:e6:46:57:45:1e:1e:c4:86:20:d2:65:ab:a2:9c:5c:be: b9:77:30:87:f9:57:0a:3b:50:5f:4a:9e:db:b0:1d:64:d9:52: 71:81:1e:37:e9:e1:6a:76:2a:4e:ad:0d:37:7e:5f:94:e4:03: d8:9e:72:a4:33:a2:01:60:ac:ff:97:05:34:4f:cf:b3:93:99: 42:f7:f7:1f:b0:ab:42:8f:cb:b9:c2:73:a8:61:c1:e3:6e:2b: fe:ec:ea:13:b7:75:34:96:53:ce:bb:97:87:af:af:32:43:ff: 18:cf:93:d6:30:f4:20:7b:e5:80:1e:c3:22:c3:8a:0a:64:5f: 2b:21:18:54 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjUwNTI2MjExOTE4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM0ZGFkNi1kOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbZc2qnmowE2Vzwz0TnXliKZ90pDH2sInfmNMgkh/TKRLFWNVQEhwRJIcKQH qQiq1o1Q3wR2ajgeoall1qwYvRHU0LldWWvKZnZqRXjgUy9JfAs/StTdVWdy1MC3 B5IJ6ytH6OinWLFI2ioIbS8ZuSE/7g4BFmBfIFuPOTfNoyjKEMrMRVnFXzouDx2r s1eZHSRiDuKl2/g8rbqIcxx08QBAx59vA32rfSevSU/ugVk5ZFbOs1oFuARPuJRM DmfGHf97OrS2v6GBwLeUgMJ/AcI0TTp8DpqNbIDO6DrunLfC2s1S2084gywZ4sd6 X+m7XpSY7QmQPmTbPd7ULs6ANQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFGi+YVEb 04r4lCo5u5o4/0AU4dEdMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REExMEEvRTM0MDIwNENGMTg3MTFFQUI5NzM0QjFDQzRGOUFFMDIvNjhDNUNGQkUw NzY5MTFFRjg1NjlGMTU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn1fQDBAKQMAQwDQQCAAIwBwMFACQBFkAwDQYJKoZIhvcN AQELBQADggEBAGysBEXfLL9ARY0IbK3PbT6S8uSIwPTeuVunmobJjZ8ew5j2o5ow TWwBwWWu1tTgDz+cmGe1iOFZSgIgIfzkREXdr2JIsytg4FgBO9NEy81euVbY+nvh 7/otE4o/BeXe/Eqq8sUjpnq9/VmWm3y+8wl877xPOYnuc8aJbdwTH2jt5kZXRR4e xIYg0mWropxcvrl3MIf5Vwo7UF9KntuwHWTZUnGBHjfp4Wp2Kk6tDTd+X5TkA9ie cqQzogFgrP+XBTRPz7OTmUL39x+wq0KPy7nCc6hhweNuK/7s6hO3dTSWU867l4ev rzJD/xjPk9Yw9CB75YAewyLDigpkXyshGFQ= -----END CERTIFICATE-----Generated at Sun Jun 15 10:25:39 2025 by rpki-client