$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/652A87CC65EC11F0BAEF8066C4F9AE02.roa File: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (raw, json) Hash identifier: 9Lyfdf8jewXKDNNSejND0Fdao81XqhdSmTyOn0pVCEo= Subject key identifier: 77:E0:AE:BF:3D:CE:3C:00:62:A0:6E:9C:41:38:BF:A7:FB:89:EA:07 Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Certificate serial: 02E1 Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/652A87CC65EC11F0BAEF8066C4F9AE02.roa Signing time: Sun 27 Jul 2025 02:06:51 +0000 ROA not before: Sun 27 Jul 2025 02:06:51 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 138115 IP address blocks: 103.67.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 737 (0x2e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Validity Not Before: Jul 27 02:06:51 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688589bb-9824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c2:80:46:25:13:cf:8d:46:db:3c:49:64:05: 86:a1:23:0e:78:81:a5:92:0b:08:3e:62:da:f8:1d: c8:56:88:bb:7c:6f:77:1d:ff:af:98:02:81:75:bb: 89:21:bc:04:dc:97:99:4b:b2:52:c8:a0:1a:98:44: c1:31:7d:50:32:dd:58:ed:08:24:cf:3b:ba:dc:9e: 2b:02:be:1b:b7:ef:98:96:7c:46:2b:20:c1:d9:65: bc:4d:9d:03:10:37:9a:33:64:48:73:c5:9a:6c:4d: 7f:1a:c0:5c:97:5e:0a:56:1d:89:8d:88:7a:1f:d1: 79:31:8e:90:4a:e7:fb:b6:70:5e:8e:a4:6b:e7:a3: 15:45:fd:e0:9b:b7:2d:a9:f3:03:31:2f:c6:a2:91: 0d:77:f0:bf:0d:15:a8:d4:ed:5a:ee:29:46:96:98: 4d:fc:73:5a:07:3b:18:4e:9b:ea:ea:56:11:06:9b: 1a:bb:cd:29:bc:5b:40:de:3a:54:20:bb:f1:ff:56: 19:e3:ed:5f:1e:0c:d0:7b:a3:7e:9a:0e:1e:eb:27: 8d:07:96:4c:74:2b:64:c9:54:bc:67:93:97:ef:b4: 25:0c:c2:f7:d1:1c:24:8b:da:5f:97:d1:41:fa:d3: e2:94:f3:dd:4e:96:eb:8a:0f:31:49:2b:cf:db:db: e7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E0:AE:BF:3D:CE:3C:00:62:A0:6E:9C:41:38:BF:A7:FB:89:EA:07 X509v3 Authority Key Identifier: keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/652A87CC65EC11F0BAEF8066C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.244.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:bc:39:21:d9:3c:05:c2:4d:6e:36:89:d0:8a:63:a3:4d:17: 57:03:37:b7:34:cd:a1:16:c9:9e:01:10:9c:8c:b6:42:89:46: 7f:35:83:e6:6d:bf:83:f1:88:3a:3d:6a:c5:0c:49:96:57:c1: 8d:e7:bb:1e:4b:7f:6f:8e:0b:19:db:08:cc:93:b5:f4:ba:3d: 53:37:c3:4c:2f:cb:35:c7:bf:d3:56:f3:6f:8c:8d:53:c6:18: 3c:5d:9a:2a:6a:e1:77:40:fa:81:8b:e6:97:1d:5a:6a:bb:68: 80:6e:25:92:eb:dc:3b:2c:1e:a6:cc:80:87:6e:7b:a9:3c:9b: d7:a3:96:67:9c:24:4b:c2:b4:cf:49:b0:d2:c1:e5:90:73:3a: f9:27:97:aa:44:5b:26:5a:6d:58:a1:5c:f2:d5:9d:54:5a:c3: d1:a4:28:9b:6b:8f:92:a7:6e:7d:42:1b:0e:4d:03:b7:c9:ea: bc:37:d4:50:e2:67:c4:7c:25:1f:f1:e5:c6:e0:25:49:8d:6f: 28:cc:e6:5d:f9:31:26:f3:c0:c5:de:be:34:06:d6:1e:81:20: a4:df:24:e6:03:cb:d8:96:15:b5:15:f2:e7:ab:ee:7a:f2:c8: 9c:e2:b9:0a:74:c3:1a:0f:4b:c2:3a:2a:39:17:e7:39:ef:63: 0a:25:b9:5e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0N0MxMTAvBgNVBAUTKEVEQTM4NUQ0NTcyM0IxRTFERjI5NzNGNjJCNUQyM0Ey RkJGRDI2ODYwHhcNMjUwNzI3MDIwNjUxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg1ODliYi05ODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8KARiUTz41G2zxJZAWGoSMOeIGlkgsIPmLa+B3IVoi7fG93Hf+vmAKBdbuJ IbwE3JeZS7JSyKAamETBMX1QMt1Y7Qgkzzu63J4rAr4bt++YlnxGKyDB2WW8TZ0D EDeaM2RIc8WabE1/GsBcl14KVh2JjYh6H9F5MY6QSuf7tnBejqRr56MVRf3gm7ct qfMDMS/GopENd/C/DRWo1O1a7ilGlphN/HNaBzsYTpvq6lYRBpsau80pvFtA3jpU ILvx/1YZ4+1fHgzQe6N+mg4e6yeNB5ZMdCtkyVS8Z5OX77QlDML30Rwki9pfl9FB +tPilPPdTpbrig8xSSvP29vnZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHfgrr89 zjwAYqBunEE4v6f7ieoHMB8GA1UdIwQYMBaAFO2jhdRXI7Hh3ylz9itdI6L7/SaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ3Qy83RTBGNTg3MjAx RTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNlSGZLWFAySzEwam92djlK b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhT0YxRmNqc2VIZktYUDJLMTBqb3Z2OUpvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE0N0MvN0UwRjU4NzIwMUU5MTFFREFGOEJERTMwQzRGOUFFMDIvNjUyQTg3Q0M2 NUVDMTFGMEJBRUY4MDY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnQ/QwDQYJKoZIhvcNAQELBQADggEBABq8OSHZPAXCTW42 idCKY6NNF1cDN7c0zaEWyZ4BEJyMtkKJRn81g+Ztv4PxiDo9asUMSZZXwY3nux5L f2+OCxnbCMyTtfS6PVM3w0wvyzXHv9NW82+MjVPGGDxdmipq4XdA+oGL5pcdWmq7 aIBuJZLr3DssHqbMgIdue6k8m9ejlmecJEvCtM9JsNLB5ZBzOvknl6pEWyZabVih XPLVnVRaw9GkKJtrj5Knbn1CGw5NA7fJ6rw31FDiZ8R8JR/x5cbgJUmNbyjM5l35 MSbzwMXevjQG1h6BIKTfJOYDy9iWFbUV8uer7nryyJziuQp0wxoPS8I6KjkX5znv YwoluV4= -----END CERTIFICATE-----Generated at Sun Aug 10 04:17:47 2025 by rpki-client