$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/BCD8D1DCD22B11EE9443A443C4F9AE02.roa File: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (raw, json) Hash identifier: c6vlUnQWxWwAT8iWt17JqzfF6ipPIApaxLVylf4FJGg= Subject key identifier: E6:E9:60:10:CC:7C:4C:73:D3:97:D8:41:F8:41:62:07:45:CE:06:4D Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Certificate serial: 0416 Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/BCD8D1DCD22B11EE9443A443C4F9AE02.roa Signing time: Tue 25 Feb 2025 01:53:33 +0000 ROA not before: Tue 25 Feb 2025 01:53:33 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.179.36.0/24 maxlen: 24 2001:df0:45c4::/46 maxlen: 47 2001:df0:45c4::/47 maxlen: 48 2001:df0:45c6::/48 maxlen: 48 2001:df0:45c8::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1046 (0x416) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Validity Not Before: Feb 25 01:53:33 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67bd229d-6a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f6:f7:c5:9f:6a:fa:c7:3a:be:18:69:8e:e4: 0e:9d:41:a7:a6:78:84:af:12:f0:85:aa:03:06:73: 5a:48:0e:86:a9:35:9f:21:61:89:31:38:77:b9:77: ee:c8:f2:a1:59:11:ed:c3:0a:99:2d:c7:07:e2:13: 9a:cc:b2:9a:77:42:89:5e:ec:5b:1a:ae:38:9a:ef: a1:0c:a8:bd:66:e2:3c:02:17:49:52:0a:6c:6b:2a: f9:b9:59:af:00:f0:d2:42:02:d8:08:82:4f:68:76: 25:9a:92:c0:58:04:4c:8c:c4:04:2f:d8:83:0c:ef: 83:27:c4:ef:86:2b:fa:1d:e4:b1:9c:17:e8:8f:1b: e7:23:63:0c:c1:7d:63:fb:58:7b:55:bf:04:0c:b2: d0:4a:37:e6:e9:91:48:5b:ae:1e:c9:a3:c5:52:e0: 25:b8:34:ee:7a:62:38:d6:41:dd:a5:6b:cf:80:8b: f0:7e:a8:88:4b:eb:f3:e8:bc:97:41:96:2e:d1:9b: a2:d0:0e:b3:03:95:58:31:3d:0e:6b:da:39:25:49: 9c:b9:c7:98:c2:c5:ba:9f:c0:6f:22:81:bf:cf:b0: 28:ca:14:19:ad:7b:3b:0b:b3:b9:9d:20:e9:22:aa: b3:4a:8a:92:b9:39:fe:d5:e9:d0:75:55:e3:80:0a: 32:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E9:60:10:CC:7C:4C:73:D3:97:D8:41:F8:41:62:07:45:CE:06:4D X509v3 Authority Key Identifier: keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/BCD8D1DCD22B11EE9443A443C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.36.0/24 IPv6: 2001:df0:45c4::-2001:df0:45cf:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a8:b4:e5:20:89:08:a3:34:7e:28:64:8d:bf:13:2a:bf:af:3e: 3d:c3:4b:06:3f:9a:be:2a:ad:3e:ba:60:42:52:c9:03:1a:f4: 1d:9c:59:09:3f:3f:95:66:30:b6:0b:d2:28:4f:9f:d9:3b:bf: 2b:28:b2:08:25:49:04:92:3e:97:bd:31:56:33:98:a8:f7:78: 68:1f:48:0c:9b:eb:97:3f:f1:9c:d0:8a:0c:4e:cd:28:cd:bc: 2a:a0:93:eb:34:84:cd:86:af:85:b2:91:50:e4:86:1e:b2:3e: 20:b7:31:b3:30:8d:d7:79:bb:6b:3a:9a:a4:cb:0d:dd:e2:0c: 2a:24:09:2a:e3:f7:87:37:70:92:6a:d6:65:31:1e:64:be:e5: 4d:6d:83:38:91:6a:c1:67:02:e6:2e:34:f8:ea:59:d2:10:97: ca:44:59:b8:d7:42:fd:ca:ac:0f:fe:15:5b:38:05:0a:df:f4: 2f:20:75:4d:79:29:40:da:da:d8:72:9c:8a:9a:cb:e2:eb:93: bb:3c:31:a8:38:b2:13:af:1a:25:7c:8f:ae:12:7f:65:08:25: 34:14:86:a5:dd:c8:eb:44:37:79:26:35:a3:8c:d7:43:0a:e9: 54:4f:8c:47:34:99:4d:af:0f:a7:12:b5:84:dd:4a:c3:12:4c: a1:ba:92:6c -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICBBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFBRjUxMTAvBgNVBAUTKDQ1ODRBRUEyMzk0QzQ2RDY5MzRFNjNFRDY4ODdENDcy NkZERjdBMTMwHhcNMjUwMjI1MDE1MzMzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JkMjI5ZC02YTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Pb3xZ9q+sc6vhhpjuQOnUGnpniErxLwhaoDBnNaSA6GqTWfIWGJMTh3uXfu yPKhWRHtwwqZLccH4hOazLKad0KJXuxbGq44mu+hDKi9ZuI8AhdJUgpsayr5uVmv APDSQgLYCIJPaHYlmpLAWARMjMQEL9iDDO+DJ8Tvhiv6HeSxnBfojxvnI2MMwX1j +1h7Vb8EDLLQSjfm6ZFIW64eyaPFUuAluDTuemI41kHdpWvPgIvwfqiIS+vz6LyX QZYu0Zui0A6zA5VYMT0Oa9o5JUmcuceYwsW6n8BvIoG/z7AoyhQZrXs7C7O5nSDp IqqzSoqSuTn+1enQdVXjgAoyTwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFObpYBDM fExz05fYQfhBYgdFzgZNMB8GA1UdIwQYMBaAFEWErqI5TEbWk05j7WiH1HJv33oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUFGNS9FOTlGNTIzQTZF QzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0YVRUbVB0YUlmVWNtX2Zl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZU3VvamxNUnRhVFRtUHRhSWZVY21fZmVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFBRjUvRTk5RjUyM0E2RUM0MTFFQ0FGRDI3MzMxQzRGOUFFMDIvQkNEOEQxRENE MjJCMTFFRTk0NDNBNDQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMAwEAgABMAYDBABnsyQwGgQCAAIwFDASAwcCIAEN8EXEAwcEIAEN8EXAMA0G CSqGSIb3DQEBCwUAA4IBAQCotOUgiQijNH4oZI2/Eyq/rz49w0sGP5q+Kq0+umBC UskDGvQdnFkJPz+VZjC2C9IoT5/ZO78rKLIIJUkEkj6XvTFWM5io93hoH0gMm+uX P/Gc0IoMTs0ozbwqoJPrNITNhq+FspFQ5IYesj4gtzGzMI3XebtrOpqkyw3d4gwq JAkq4/eHN3CSatZlMR5kvuVNbYM4kWrBZwLmLjT46lnSEJfKRFm410L9yqwP/hVb OAUK3/QvIHVNeSlA2trYcpyKmsvi65O7PDGoOLITrxolfI+uEn9lCCU0FIal3cjr RDd5JjWjjNdDCulUT4xHNJlNrw+nErWE3UrDEkyhupJs -----END CERTIFICATE-----Generated at Wed Nov 5 16:38:04 2025 by rpki-client