$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/6290CEFA3E3611F0BC85B94CC4F9AE02.roa File: 6290CEFA3E3611F0BC85B94CC4F9AE02.roa (raw, json) Hash identifier: LOoxZWeDgU2+wusXufQ94pg+OOkfT8j3WfNTQznwf90= Subject key identifier: E8:7D:36:EB:87:FA:83:47:9D:7F:63:D7:3B:FF:06:CD:BC:AF:1D:D3 Certificate issuer: /CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Certificate serial: 1B00 Authority key identifier: EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/6290CEFA3E3611F0BC85B94CC4F9AE02.roa Signing time: Sat 31 May 2025 15:46:15 +0000 ROA not before: Sat 31 May 2025 15:46:15 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 133854 IP address blocks: 43.224.108.0/22 maxlen: 24 103.43.148.0/24 maxlen: 24 103.43.150.0/24 maxlen: 24 103.43.151.0/24 maxlen: 24 2401:c680::/32 maxlen: 32 2401:c680:1::/48 maxlen: 48 2401:c680:a::/48 maxlen: 48 2401:c680:f::/48 maxlen: 48 2401:c680:1000::/38 maxlen: 38 2401:c680:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6912 (0x1b00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8632, serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Validity Not Before: May 31 15:46:15 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=683b2447-305b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b1:e0:98:54:5d:ea:73:40:1b:62:c8:67:77: 14:15:41:0c:bb:f5:5a:3d:70:a4:3a:ea:05:13:d4: c1:27:87:19:5b:2c:f9:ca:76:e7:18:18:15:2e:c4: de:8e:bb:e6:e3:a1:cd:cb:a3:80:c0:eb:de:69:d8: a4:9d:90:f8:55:d3:be:a8:82:46:f2:f2:20:59:22: f9:94:78:6e:58:cd:3f:60:67:11:20:69:16:08:c1: 1b:a4:83:e5:67:24:12:80:5a:e9:40:96:ff:f0:c6: 0a:9a:a2:e8:16:b6:eb:18:d6:1f:7d:b9:90:a6:3f: 6a:35:2d:f5:ed:88:fc:67:cd:da:c3:5c:b3:60:ba: 4a:4a:b4:58:ec:b2:64:bd:8a:89:89:29:26:9e:b0: 04:c5:01:42:44:3d:e3:e8:04:ed:9c:80:fa:0b:c4: ac:04:21:b5:10:e4:ce:c9:a7:0f:bf:69:89:f9:26: d1:c9:92:f2:88:93:f2:5b:91:a5:1e:bb:e5:4a:2e: d0:e7:35:bc:bf:76:25:e7:04:40:5f:ab:91:a7:e4: 54:f1:49:4d:f4:97:a3:f9:76:84:09:fd:32:2f:fe: 66:a2:d0:77:6a:0f:29:aa:2e:fa:7c:32:99:53:36: 20:3a:d4:1a:b2:bc:49:55:fa:23:02:cc:cd:ba:16: 6a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7D:36:EB:87:FA:83:47:9D:7F:63:D7:3B:FF:06:CD:BC:AF:1D:D3 X509v3 Authority Key Identifier: keyid:EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/6290CEFA3E3611F0BC85B94CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.108.0/22 103.43.148.0/24 103.43.150.0/23 IPv6: 2401:c680::/32 Signature Algorithm: sha256WithRSAEncryption 0c:35:26:90:11:10:18:f5:0f:15:56:da:20:80:56:dd:3a:96: e3:ae:d8:db:4a:5d:71:dd:93:ea:01:2c:52:65:a0:59:1d:c5: 3f:5a:b2:1a:aa:4b:fc:72:ea:08:ee:88:1b:6b:fe:13:e1:8c: 26:e3:58:bb:14:26:07:a5:86:fe:c4:c5:ab:7a:c3:07:68:01: 03:5b:83:60:0c:28:e3:28:34:72:f3:6b:76:14:8a:a2:fe:2a: b1:21:c4:59:eb:19:1f:a8:db:b4:41:9e:82:14:e2:22:76:46: 5c:72:3e:3d:7c:35:41:4f:60:41:5f:f0:40:fc:0b:7f:66:d3: 6e:2b:54:aa:b9:ac:73:c4:3f:52:50:68:31:a8:30:40:25:02: e6:29:95:b2:27:2b:c8:c6:e2:d9:6a:17:ef:92:28:7b:26:76: 03:82:10:7b:3c:86:a2:7e:55:7a:e6:4f:56:4c:76:5b:f7:57: 9d:58:ed:89:bc:14:cf:d4:fd:3d:68:d1:b2:8e:7b:a6:82:49: ad:6f:27:51:b0:a3:8f:ab:06:b3:b1:ca:d7:19:8d:2f:00:62: 09:f2:c4:10:fd:ee:f9:67:ff:b4:5c:0d:aa:aa:39:45:1e:54: b6:67:45:d9:64:3d:25:e9:8a:8e:00:f9:6f:7b:7b:b7:71:7f: 3e:72:97:77 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICGwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2MzIxMTAvBgNVBAUTKEVDNTYzREJGRTJGMzk4QzhFOUZCMTlGOUY3NDIzMkI2 QjU0QUE2RUEwHhcNMjUwNTMxMTU0NjE1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNiMjQ0Ny0zMDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7HgmFRd6nNAG2LIZ3cUFUEMu/VaPXCkOuoFE9TBJ4cZWyz5ynbnGBgVLsTe jrvm46HNy6OAwOveadiknZD4VdO+qIJG8vIgWSL5lHhuWM0/YGcRIGkWCMEbpIPl ZyQSgFrpQJb/8MYKmqLoFrbrGNYffbmQpj9qNS317Yj8Z83aw1yzYLpKSrRY7LJk vYqJiSkmnrAExQFCRD3j6ATtnID6C8SsBCG1EOTOyacPv2mJ+SbRyZLyiJPyW5Gl HrvlSi7Q5zW8v3Yl5wRAX6uRp+RU8UlN9Jej+XaECf0yL/5motB3ag8pqi76fDKZ UzYgOtQasrxJVfojAszNuhZqcQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOh9NuuH +oNHnX9j1zv/Bs28rx3TMB8GA1UdIwQYMBaAFOxWPb/i85jI6fsZ+fdCMra1Sqbq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODYzMi8wNUNFNDRFQTJF NUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1NanAteG41OTBJeXRyVktw dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGWTl2LUx6bU1qcC14bjU5MEl5dHJWS3B1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg2MzIvMDVDRTQ0RUEyRTVFMTFFN0JBQzg4QjY5QzRGOUFFMDIvNjI5MENFRkEz RTM2MTFGMEJDODVCOTRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAIr4GwDBABnK5QDBAFnK5YwDQQCAAIwBwMFACQBxoAwDQYJ KoZIhvcNAQELBQADggEBAAw1JpAREBj1DxVW2iCAVt06luOu2NtKXXHdk+oBLFJl oFkdxT9ashqqS/xy6gjuiBtr/hPhjCbjWLsUJgelhv7Exat6wwdoAQNbg2AMKOMo NHLza3YUiqL+KrEhxFnrGR+o27RBnoIU4iJ2RlxyPj18NUFPYEFf8ED8C39m024r VKq5rHPEP1JQaDGoMEAlAuYplbInK8jG4tlqF++SKHsmdgOCEHs8hqJ+VXrmT1ZM dlv3V51Y7Ym8FM/U/T1o0bKOe6aCSa1vJ1Gwo4+rBrOxytcZjS8AYgnyxBD97vln /7RcDaqqOUUeVLZnRdlkPSXpio4A+W97e7dxfz5yl3c= -----END CERTIFICATE-----Generated at Tue Nov 4 22:19:13 2025 by rpki-client