$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/9F46C468355711EBA5B81020C4F9AE02.roa File: 9F46C468355711EBA5B81020C4F9AE02.roa (raw, json) Hash identifier: 03WpwA3JZLQp184AJleW1z4TTnMqm9OpYp8fSIGXxK0= Subject key identifier: D0:67:E1:3C:A5:28:9F:EC:1A:BE:A9:97:E1:83:48:D7:95:3A:47:B4 Certificate issuer: /CN=A91E1887/serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B Certificate serial: 0737 Authority key identifier: E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/9F46C468355711EBA5B81020C4F9AE02.roa Signing time: Wed 18 Jun 2025 21:49:58 +0000 ROA not before: Wed 18 Jun 2025 21:49:58 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135356 IP address blocks: 45.251.104.0/24 maxlen: 24 45.251.105.0/24 maxlen: 24 45.251.106.0/24 maxlen: 24 45.251.107.0/24 maxlen: 24 103.220.72.0/24 maxlen: 24 103.220.73.0/24 maxlen: 24 103.220.74.0/24 maxlen: 24 103.220.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 21:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1887, serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B Validity Not Before: Jun 18 21:49:58 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68533486-8b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:58:e2:c0:e1:c5:e3:fb:c3:71:5b:1c:4e:fe: ee:44:10:9f:01:02:1f:92:5d:d7:1a:ed:4f:2a:f4: de:54:f2:f9:26:ec:66:62:64:1e:b6:49:b7:f0:85: 15:41:39:21:6b:81:f0:04:52:ff:15:35:81:6c:14: 38:19:11:8d:18:4b:82:1d:15:1f:41:77:ad:7a:a4: 71:68:6d:e5:12:79:f4:0b:0e:73:c3:28:f4:ca:95: c5:2f:2c:af:6f:17:3b:a7:21:2c:03:53:4a:41:34: 6d:f2:cc:9d:5d:9f:86:4e:17:3b:2c:b9:21:01:fb: 85:b5:f6:a0:7e:23:09:a8:22:81:d7:be:b7:32:47: c8:5d:b9:69:a3:73:8f:f4:4b:db:52:d3:95:a4:2c: fa:ca:ed:59:e3:a2:12:bf:ce:c6:d0:73:bf:4d:fc: 28:f1:6f:55:3a:04:0a:83:df:7c:cc:7f:03:cf:0c: 0c:da:d8:dc:08:55:00:96:50:59:49:a1:2f:c9:78: 29:47:d8:cf:07:ea:f1:f1:17:0d:5d:32:ad:73:06: 98:21:e7:98:80:00:1f:c3:bb:a8:f4:a5:45:bc:cf: 5d:5e:18:a9:60:ad:2f:80:7d:10:6a:f1:af:3c:cf: 62:20:d4:48:03:48:30:5b:5a:34:95:11:da:ad:bb: ac:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:67:E1:3C:A5:28:9F:EC:1A:BE:A9:97:E1:83:48:D7:95:3A:47:B4 X509v3 Authority Key Identifier: keyid:E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/9F46C468355711EBA5B81020C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.251.104.0/22 103.220.72.0/22 Signature Algorithm: sha256WithRSAEncryption ae:64:70:6f:61:cd:c0:7d:02:b8:b4:b9:82:1b:ea:a6:bb:17: 75:b4:2d:67:53:76:7b:dc:5a:46:31:4a:27:1d:91:79:5b:40: a3:ea:ff:3e:3c:49:e2:40:47:45:46:37:f0:d1:17:fe:f9:b9: 9b:c9:53:2e:c8:0c:79:12:82:c3:1f:3f:f8:bf:02:9c:5b:6e: 1e:fc:43:5d:df:66:46:49:bb:08:7d:f6:75:14:29:a1:95:d2: 6b:5c:e8:99:ca:07:7a:4a:86:52:c3:e6:d5:50:a5:3b:06:22: d9:3b:4e:94:41:70:b6:74:e6:fe:36:fc:67:e6:24:3c:b1:93: 8a:5d:b5:69:4a:02:ab:37:3b:8f:60:5f:47:cb:ef:18:bf:5a: 19:9b:ba:18:ff:dd:29:8c:27:e6:71:e2:13:46:a8:ee:2f:6a: 84:0d:79:bd:da:4e:d0:c8:27:04:81:fd:44:e2:c7:6d:9f:20: 4e:4f:d1:a8:8f:8b:6b:3c:6b:c3:7d:e4:86:5e:ec:b0:af:a1: c8:84:ec:4a:88:4e:80:50:c5:bd:18:9c:dc:de:11:33:3b:58: b2:b4:37:75:26:bc:20:45:65:c7:ad:da:ec:30:dc:1a:70:f2: ed:c4:1c:36:6e:22:ae:e7:13:6e:5b:10:2e:5c:89:e0:be:87: d4:75:e3:e0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE4ODcxMTAvBgNVBAUTKEUwRTlCOTM5OUI4QTRBNUZEQ0RFMjA5RkM1QkVDMDc4 QUY5NUNGN0IwHhcNMjUwNjE4MjE0OTU4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUzMzQ4Ni04YjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVjiwOHF4/vDcVscTv7uRBCfAQIfkl3XGu1PKvTeVPL5JuxmYmQetkm38IUV QTkha4HwBFL/FTWBbBQ4GRGNGEuCHRUfQXeteqRxaG3lEnn0Cw5zwyj0ypXFLyyv bxc7pyEsA1NKQTRt8sydXZ+GThc7LLkhAfuFtfagfiMJqCKB1763MkfIXblpo3OP 9EvbUtOVpCz6yu1Z46ISv87G0HO/Tfwo8W9VOgQKg998zH8DzwwM2tjcCFUAllBZ SaEvyXgpR9jPB+rx8RcNXTKtcwaYIeeYgAAfw7uo9KVFvM9dXhipYK0vgH0QavGv PM9iINRIA0gwW1o0lRHarbusTwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNBn4Tyl KJ/sGr6pl+GDSNeVOke0MB8GA1UdIwQYMBaAFODpuTmbikpf3N4gn8W+wHivlc97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTg4Ny84NEVFOEI2MDM1 NTExMUVCOUY0MTk1MEVDNEY5QUUwMi80T201T1p1S1NsX2MzaUNmeGI3QWVLLVZ6 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRPbTVPWnVLU2xfYzNpQ2Z4YjdBZUstVnozcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE4ODcvODRFRThCNjAzNTUxMTFFQjlGNDE5NTBFQzRGOUFFMDIvOUY0NkM0Njgz NTU3MTFFQkE1QjgxMDIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIt+2gDBAJn3EgwDQYJKoZIhvcNAQELBQADggEBAK5kcG9h zcB9Ari0uYIb6qa7F3W0LWdTdnvcWkYxSicdkXlbQKPq/z48SeJAR0VGN/DRF/75 uZvJUy7IDHkSgsMfP/i/Apxbbh78Q13fZkZJuwh99nUUKaGV0mtc6JnKB3pKhlLD 5tVQpTsGItk7TpRBcLZ05v42/GfmJDyxk4pdtWlKAqs3O49gX0fL7xi/Whmbuhj/ 3SmMJ+Zx4hNGqO4vaoQNeb3aTtDIJwSB/UTix22fIE5P0aiPi2s8a8N95IZe7LCv ociE7EqIToBQxb0YnNzeETM7WLK0N3UmvCBFZcet2uww3Bpw8u3EHDZuIq7nE25b EC5cieC+h9R14+A= -----END CERTIFICATE-----Generated at Fri Jun 20 18:40:15 2025 by rpki-client