$ rpki-client -vvf rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/06E87B54046711ED95A3495FC4F9AE02.roa File: 06E87B54046711ED95A3495FC4F9AE02.roa (raw, json) Hash identifier: 5x89WekcpnY5fvShaZ35VDRztPc3dfKuIiSt+uKfQig= Subject key identifier: 7A:82:E5:5C:3C:AB:2A:ED:CA:63:B0:FB:9A:78:48:D4:E1:93:5B:87 Certificate issuer: /CN=A91F609C/serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Certificate serial: 0292 Authority key identifier: FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/06E87B54046711ED95A3495FC4F9AE02.roa Signing time: Mon 26 May 2025 06:45:37 +0000 ROA not before: Mon 26 May 2025 06:45:37 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 150123 IP address blocks: 103.191.84.0/23 maxlen: 23 103.191.84.0/24 maxlen: 24 103.191.85.0/24 maxlen: 24 2001:df0:f940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F609C, serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Validity Not Before: May 26 06:45:37 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=68340e11-d6d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f8:d4:c0:2a:9d:43:42:f4:fc:fe:82:4d:d1: aa:cd:af:2e:9c:ef:41:8d:b8:9b:d6:ae:61:a0:25: 2f:5a:6a:df:ab:f9:21:89:d3:8b:8e:34:68:02:b8: 48:51:d1:02:b7:7c:a8:2d:ba:29:47:7a:36:4e:db: 04:ae:13:0f:19:5f:0d:1d:bb:8f:74:4c:3a:f6:2c: 00:83:ef:1c:3c:1a:bb:d1:35:ac:c8:c1:d4:67:5a: 6b:09:1d:f0:f2:f0:53:51:54:08:5e:6f:43:e3:7c: b0:b4:2c:55:5a:a1:bb:ea:d3:19:01:69:49:9b:5c: e5:74:eb:95:cf:53:45:f0:74:c0:04:8a:6c:90:c1: d5:0a:6a:06:49:a0:20:54:9f:57:78:eb:26:a7:bf: e8:93:a3:28:c2:db:da:f1:a0:9d:d3:04:90:db:ed: c0:7b:bf:c3:e4:d4:5d:98:b5:0f:74:10:cd:4a:e6: a6:cd:83:37:5d:fe:20:7c:f1:cf:d3:66:a2:6b:7a: e8:9c:50:e3:03:35:e9:c7:2d:00:81:54:a6:86:c9: a9:38:3a:eb:02:fb:97:0f:5f:5a:9c:a3:2e:93:bf: af:72:ef:57:8d:b4:d2:36:83:1b:f0:9b:c8:17:df: 68:4c:8b:c4:72:76:21:0f:8b:70:e6:8e:06:98:94: 00:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:82:E5:5C:3C:AB:2A:ED:CA:63:B0:FB:9A:78:48:D4:E1:93:5B:87 X509v3 Authority Key Identifier: keyid:FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/06E87B54046711ED95A3495FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.84.0/23 IPv6: 2001:df0:f940::/48 Signature Algorithm: sha256WithRSAEncryption 49:d1:63:63:f8:8e:f3:17:6a:88:47:98:f5:80:0c:64:bd:10: 66:39:aa:58:3d:e5:90:c1:8b:3c:2e:31:92:22:76:b0:1e:1f: 4f:b0:f7:39:9f:f0:9b:77:1d:01:e0:6a:3a:6d:89:24:22:88: 0c:05:d9:07:34:2c:4b:8d:ba:f0:ec:25:04:59:38:35:da:d5: d2:f8:36:16:99:5b:99:ae:21:f0:14:d0:08:b8:3d:d2:4d:45: f8:b6:c2:42:f0:90:86:2f:19:e7:26:9a:80:3c:b1:4d:03:e8: 9d:59:05:a0:db:55:a1:a9:71:a6:69:48:47:3c:b0:98:ea:84: b0:53:87:e8:d4:9b:a2:b9:60:c0:19:1b:37:be:1e:bb:76:3b: 5e:a3:3c:e1:a7:2f:39:f5:cd:7d:89:76:54:9b:ac:e4:88:1f: f1:1a:18:47:b0:39:47:4d:04:9a:73:eb:d3:c6:01:c2:d3:f2: 97:a7:5a:aa:50:41:81:9c:37:5d:cf:6c:4c:ab:96:0a:62:33: 52:43:8e:0b:66:48:ef:22:cd:a8:33:e6:0e:1a:54:6e:f5:d0: f9:a9:18:4b:8e:0f:1d:84:ec:3e:61:dd:a6:31:12:10:ea:b2: 10:ae:eb:5d:44:5e:47:64:a4:1d:23:cd:e9:05:64:49:73:f9: 8f:c8:b5:4d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwOUMxMTAvBgNVBAUTKEZERDU1NzRBQTZCM0EyMzdCNDM2Njk5NTdEODUzMzk1 OTNEQzFFOUEwHhcNMjUwNTI2MDY0NTM3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM0MGUxMS1kNmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvjUwCqdQ0L0/P6CTdGqza8unO9Bjbib1q5hoCUvWmrfq/khidOLjjRoArhI UdECt3yoLbopR3o2TtsErhMPGV8NHbuPdEw69iwAg+8cPBq70TWsyMHUZ1prCR3w 8vBTUVQIXm9D43ywtCxVWqG76tMZAWlJm1zldOuVz1NF8HTABIpskMHVCmoGSaAg VJ9XeOsmp7/ok6Mowtva8aCd0wSQ2+3Ae7/D5NRdmLUPdBDNSuamzYM3Xf4gfPHP 02aia3ronFDjAzXpxy0AgVSmhsmpODrrAvuXD19anKMuk7+vcu9XjbTSNoMb8JvI F99oTIvEcnYhD4tw5o4GmJQAIQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHqC5Vw8 qyrtymOw+5p4SNThk1uHMB8GA1UdIwQYMBaAFP3VV0qms6I3tDZplX2FM5WT3B6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjA5Qy8wQUE1N0M2QzA0 NjUxMUVEOUM4NUYxNUVDNEY5QUUwMi9fZFZYU3Fhem9qZTBObW1WZllVemxaUGNI cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19kVlhTcWF6b2plME5tbVZmWVV6bFpQY0hwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjYwOUMvMEFBNTdDNkMwNDY1MTFFRDlDODVGMTVFQzRGOUFFMDIvMDZFODdCNTQw NDY3MTFFRDk1QTM0OTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnv1QwDwQCAAIwCQMHACABDfD5QDANBgkqhkiG9w0BAQsF AAOCAQEASdFjY/iO8xdqiEeY9YAMZL0QZjmqWD3lkMGLPC4xkiJ2sB4fT7D3OZ/w m3cdAeBqOm2JJCKIDAXZBzQsS4268OwlBFk4NdrV0vg2Fplbma4h8BTQCLg90k1F +LbCQvCQhi8Z5yaagDyxTQPonVkFoNtVoalxpmlIRzywmOqEsFOH6NSborlgwBkb N74eu3Y7XqM84acvOfXNfYl2VJus5Igf8RoYR7A5R00EmnPr08YBwtPyl6daqlBB gZw3Xc9sTKuWCmIzUkOOC2ZI7yLNqDPmDhpUbvXQ+akYS44PHYTsPmHdpjESEOqy EK7rXUReR2SkHSPN6QVkSXP5j8i1TQ== -----END CERTIFICATE-----Generated at Wed Jun 18 20:18:39 2025 by rpki-client