$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/02D73B5ED1A911EC97A6335DC4F9AE02.roa File: 02D73B5ED1A911EC97A6335DC4F9AE02.roa (raw, json) Hash identifier: fmgPgYqBF9oBKC2f0IYHXXUOKdyTPKcBMpy4SVGahtc= Subject key identifier: 61:44:AA:81:39:1A:BA:4A:1B:4A:5C:75:B9:8F:09:09:D0:C5:62:6D Certificate issuer: /CN=A91F2152/serialNumber=243E4829ABF2F909C12DDA044FE5D36B82105392 Certificate serial: 0C64 Authority key identifier: 24:3E:48:29:AB:F2:F9:09:C1:2D:DA:04:4F:E5:D3:6B:82:10:53:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/02D73B5ED1A911EC97A6335DC4F9AE02.roa Signing time: Wed 09 Jul 2025 07:11:06 +0000 ROA not before: Wed 09 Jul 2025 07:11:06 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 135037 IP address blocks: 103.206.228.0/23 maxlen: 23 103.206.228.0/24 maxlen: 24 103.206.229.0/24 maxlen: 24 103.206.230.0/24 maxlen: 24 2405:82c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.crl rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 18:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3172 (0xc64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2152, serialNumber=243E4829ABF2F909C12DDA044FE5D36B82105392 Validity Not Before: Jul 9 07:11:06 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=686e1609-d85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:9b:b5:df:bc:5c:99:27:e9:2f:3f:01:f4: 3c:8e:99:41:4d:d5:39:2e:a9:69:aa:43:29:bb:ab: cd:05:e4:32:ce:01:f0:e8:48:d5:89:98:f7:37:f5: 1c:d3:7e:f0:7d:51:09:1f:11:52:97:89:ce:86:9e: 8d:bb:0f:82:16:9d:d2:0f:85:7c:52:2c:70:d0:3e: 61:1c:f2:4f:01:8e:fa:2e:c2:c8:bf:54:4c:c4:11: 55:0c:65:f0:01:6e:f8:1a:2c:f6:2f:a5:b6:de:e3: 0d:35:b5:10:08:d0:21:f4:6f:a1:9c:0f:61:5f:b6: 83:2b:02:64:97:3e:5b:b4:7e:d8:38:f7:4e:57:a1: 20:eb:4e:80:5a:d3:96:a6:a2:1b:13:99:af:94:77: 0b:16:9a:5b:78:13:4b:22:58:af:98:40:e7:7f:f2: 49:aa:37:76:ac:00:aa:b5:9c:1b:1a:b5:67:02:ae: 29:a8:8d:56:d4:17:f1:c8:53:d5:7e:de:54:87:e8: 37:d2:f4:52:35:9f:41:cb:51:08:8c:eb:87:84:ae: 77:2c:f2:ca:6d:89:30:2b:11:6d:6f:bb:21:23:1f: ca:4a:22:be:de:fc:c3:73:e2:9f:fe:75:e9:5a:ae: eb:51:1b:89:34:87:cc:83:4b:62:74:fe:bc:5c:e5: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:44:AA:81:39:1A:BA:4A:1B:4A:5C:75:B9:8F:09:09:D0:C5:62:6D X509v3 Authority Key Identifier: keyid:24:3E:48:29:AB:F2:F9:09:C1:2D:DA:04:4F:E5:D3:6B:82:10:53:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/JD5IKavy-QnBLdoET-XTa4IQU5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD5IKavy-QnBLdoET-XTa4IQU5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2152/B7C6C60006D211EA8AAC9344C4F9AE02/02D73B5ED1A911EC97A6335DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.206.228.0-103.206.230.255 IPv6: 2405:82c0::/32 Signature Algorithm: sha256WithRSAEncryption 35:89:14:82:a2:11:74:82:cf:c2:d0:83:02:2d:15:a8:a1:f5: 9a:bf:9b:33:09:47:d1:2d:1f:6c:02:47:f9:33:2d:26:3c:11: 28:6d:40:66:1d:12:94:b8:74:b8:e0:7d:7c:e3:9a:95:99:85: a0:c5:dc:1e:f8:ac:34:23:df:10:cc:25:b2:e3:9d:52:d1:78: 71:81:01:66:45:b8:f5:9e:0f:c6:67:22:0f:c6:5c:21:c3:f2: 6b:fe:b2:bb:0d:7b:56:75:7c:98:41:b5:e8:6a:27:04:03:a9: 58:6e:18:f0:78:bc:11:35:ca:4e:a5:f3:f8:95:e9:fa:ee:36: 49:c2:19:f0:58:ec:69:21:70:ed:7d:1d:c2:47:99:57:be:e2: 40:a2:a1:c2:f9:8f:a1:9d:ed:b6:a2:de:7b:ea:61:b0:11:25: 24:b1:1f:66:a6:9f:0d:13:31:b6:f2:ab:ab:eb:ea:69:5c:23: d3:81:50:bd:3c:a1:b4:18:63:f2:29:66:ce:e2:02:72:2d:c2: 7d:6c:b6:70:28:f7:04:7e:45:7e:cd:9b:37:c7:41:c0:19:6c: b5:4c:f2:68:67:8a:cf:d0:56:24:e4:f3:86:a8:3d:ef:35:f0: 0b:0d:aa:83:01:56:b8:2b:f5:e4:b6:a7:52:8c:d9:9a:dc:98: c4:f1:d4:4e -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICDGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIxNTIxMTAvBgNVBAUTKDI0M0U0ODI5QUJGMkY5MDlDMTJEREEwNDRGRTVEMzZC ODIxMDUzOTIwHhcNMjUwNzA5MDcxMTA2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZlMTYwOS1kODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppybtd+8XJkn6S8/AfQ8jplBTdU5LqlpqkMpu6vNBeQyzgHw6EjViZj3N/Uc 037wfVEJHxFSl4nOhp6Nuw+CFp3SD4V8Uixw0D5hHPJPAY76LsLIv1RMxBFVDGXw AW74Giz2L6W23uMNNbUQCNAh9G+hnA9hX7aDKwJklz5btH7YOPdOV6Eg606AWtOW pqIbE5mvlHcLFppbeBNLIlivmEDnf/JJqjd2rACqtZwbGrVnAq4pqI1W1BfxyFPV ft5Uh+g30vRSNZ9By1EIjOuHhK53LPLKbYkwKxFtb7shIx/KSiK+3vzDc+Kf/nXp Wq7rURuJNIfMg0tidP68XOWwGQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFGFEqoE5 GrpKG0pcdbmPCQnQxWJtMB8GA1UdIwQYMBaAFCQ+SCmr8vkJwS3aBE/l02uCEFOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjE1Mi9CN0M2QzYwMDA2 RDIxMUVBOEFBQzkzNDRDNEY5QUUwMi9KRDVJS2F2eS1RbkJMZG9FVC1YVGE0SVFV NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pENUlLYXZ5LVFuQkxkb0VULVhUYTRJUVU1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjIxNTIvQjdDNkM2MDAwNkQyMTFFQThBQUM5MzQ0QzRGOUFFMDIvMDJENzNCNUVE MUE5MTFFQzk3QTYzMzVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEAmfO5AMEAGfO5jANBAIAAjAHAwUAJAWCwDANBgkqhkiG 9w0BAQsFAAOCAQEANYkUgqIRdILPwtCDAi0VqKH1mr+bMwlH0S0fbAJH+TMtJjwR KG1AZh0SlLh0uOB9fOOalZmFoMXcHvisNCPfEMwlsuOdUtF4cYEBZkW49Z4Pxmci D8ZcIcPya/6yuw17VnV8mEG16GonBAOpWG4Y8Hi8ETXKTqXz+JXp+u42ScIZ8Fjs aSFw7X0dwkeZV77iQKKhwvmPoZ3ttqLee+phsBElJLEfZqafDRMxtvKrq+vqaVwj 04FQvTyhtBhj8ilmzuICci3CfWy2cCj3BH5Ffs2bN8dBwBlstUzyaGeKz9BWJOTz hqg97zXwCw2qgwFWuCv15LanUozZmtyYxPHUTg== -----END CERTIFICATE-----Generated at Wed Aug 13 00:25:34 2025 by rpki-client