$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/FEB624F6B94911EE897F7947C4F9AE02.roa File: FEB624F6B94911EE897F7947C4F9AE02.roa (raw, json) Hash identifier: PkBHUrnClJtIRj3hyvhFOR74ygd0IwmSJ02fNGArhbM= Subject key identifier: 1B:F2:7E:33:D1:98:52:C7:C8:70:32:07:5E:48:C7:42:09:7D:4F:54 Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Certificate serial: 0D0E Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/FEB624F6B94911EE897F7947C4F9AE02.roa Signing time: Wed 30 Jul 2025 18:28:20 +0000 ROA not before: Wed 30 Jul 2025 18:28:20 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 395363 IP address blocks: 103.80.4.0/24 maxlen: 24 103.80.5.0/24 maxlen: 24 2400:4840::/48 maxlen: 48 2400:4840:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3342 (0xd0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Validity Not Before: Jul 30 18:28:20 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688a6444-250e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:46:6a:29:c4:cd:8a:d4:5b:56:39:20:b8:72: 66:1d:7a:01:ea:28:ed:44:f9:98:68:72:39:ba:f4: ab:a9:85:d5:2a:f2:8e:1a:67:3d:00:b9:42:68:ad: cd:04:dd:81:30:b9:3c:96:73:bc:70:85:db:ea:d8: e0:6c:83:0c:4f:61:49:32:4b:6b:a1:06:80:53:74: 58:88:99:51:64:a1:be:7d:9c:b5:2b:0b:40:fb:8a: cd:0a:24:e6:7a:27:57:d5:e3:b7:eb:71:ba:7d:35: 03:d7:f0:6b:42:48:b4:ce:2f:6e:0d:81:5c:9d:dc: 4e:8d:9d:44:aa:00:b6:9a:79:f2:11:af:e5:a4:da: 59:aa:c1:54:ea:7b:33:bb:95:a6:1c:79:9f:bf:09: 73:fa:3c:90:b3:a0:5b:b2:d1:e9:83:bb:a1:d1:94: ee:9a:af:74:ef:c7:6f:f7:8c:37:30:49:05:34:3c: 9b:ba:15:2b:87:75:12:7d:3a:fa:e0:8d:e1:7f:af: 95:a5:30:8e:d4:03:e8:a8:cb:7b:c3:3b:c2:81:13: fc:03:c9:d2:f1:d9:0d:e6:de:f3:3a:78:1c:22:ae: 08:ed:39:6d:3f:dd:a7:86:e6:5d:41:34:98:06:55: 97:df:04:fd:cb:79:03:4f:f2:96:a3:2f:b8:ec:e1: 72:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F2:7E:33:D1:98:52:C7:C8:70:32:07:5E:48:C7:42:09:7D:4F:54 X509v3 Authority Key Identifier: keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/FEB624F6B94911EE897F7947C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.80.4.0/23 IPv6: 2400:4840::/48 2400:4840:10::/48 Signature Algorithm: sha256WithRSAEncryption 1e:65:64:72:82:6e:4f:8a:bd:70:7d:32:3f:4c:83:c0:04:01: 58:e6:22:89:c6:6f:45:c4:24:a5:3b:c9:47:4a:ad:df:d4:4a: 71:7e:8d:30:3d:1b:ba:20:95:39:64:a4:2b:af:54:42:f6:ed: 75:2b:c1:80:48:53:74:ff:68:5e:60:fc:00:57:12:02:a1:30: f7:f1:e8:1a:bd:58:00:c8:66:82:e4:2f:e3:6c:06:5b:71:76: 37:ee:ac:da:ff:8f:17:5f:86:c5:42:41:64:7f:db:b6:53:2b: 8f:b3:b1:23:d9:17:3d:23:e4:b7:cb:58:93:77:4e:02:6c:b4: f8:8c:5f:fd:f8:59:a1:2c:f5:f8:b5:12:70:03:d4:75:6a:b3: 6d:5e:76:d1:3b:66:ca:d3:af:ae:13:db:c0:55:bd:61:d0:59: 98:28:3f:d2:b8:e1:e1:69:d6:88:d4:2f:dc:19:f8:cc:4e:c7: ef:ea:b8:7a:9b:7c:78:8f:05:90:c1:7e:91:02:64:bf:ab:1c: 13:f6:3b:ac:e9:d9:e9:c5:ec:94:6a:f3:17:c7:0f:37:63:1b: 9c:9b:0f:b3:c0:d5:ea:22:80:ac:ca:4b:30:aa:95:21:f8:11: 09:aa:91:21:0e:70:40:0c:4d:31:5c:72:93:ca:05:d7:10:2c: 67:ad:ae:8f -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICDQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF NTQ0NUU5Q0MwHhcNMjUwNzMwMTgyODIwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhNjQ0NC0yNTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kZqKcTNitRbVjkguHJmHXoB6ijtRPmYaHI5uvSrqYXVKvKOGmc9ALlCaK3N BN2BMLk8lnO8cIXb6tjgbIMMT2FJMktroQaAU3RYiJlRZKG+fZy1KwtA+4rNCiTm eidX1eO363G6fTUD1/BrQki0zi9uDYFcndxOjZ1EqgC2mnnyEa/lpNpZqsFU6nsz u5WmHHmfvwlz+jyQs6BbstHpg7uh0ZTumq9078dv94w3MEkFNDybuhUrh3USfTr6 4I3hf6+VpTCO1APoqMt7wzvCgRP8A8nS8dkN5t7zOngcIq4I7TltP92nhuZdQTSY BlWX3wT9y3kDT/KWoy+47OFy1QIDAQABo4ICrzCCAqswHQYDVR0OBBYEFBvyfjPR mFLHyHAyB15Ix0IJfU9UMB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5 RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTcwRUQvRTYyNzdBM0VFOUUxMTFFOUE1OTg3RTFGQzRGOUFFMDIvRkVCNjI0RjZC OTQ5MTFFRTg5N0Y3OTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBAFnUAQwGAQCAAIwEgMHACQASEAAAAMHACQASEAAEDANBgkq hkiG9w0BAQsFAAOCAQEAHmVkcoJuT4q9cH0yP0yDwAQBWOYiicZvRcQkpTvJR0qt 39RKcX6NMD0buiCVOWSkK69UQvbtdSvBgEhTdP9oXmD8AFcSAqEw9/HoGr1YAMhm guQv42wGW3F2N+6s2v+PF1+GxUJBZH/btlMrj7OxI9kXPSPkt8tYk3dOAmy0+Ixf /fhZoSz1+LUScAPUdWqzbV520TtmytOvrhPbwFW9YdBZmCg/0rjh4WnWiNQv3Bn4 zE7H7+q4ept8eI8FkMF+kQJkv6scE/Y7rOnZ6cXslGrzF8cPN2MbnJsPs8DV6iKA rMpLMKqVIfgRCaqRIQ5wQAxNMVxyk8oF1xAsZ62ujw== -----END CERTIFICATE-----Generated at Sun Aug 10 04:55:26 2025 by rpki-client