$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/28CED806EA5811EF90C1D323C4F9AE02.roa File: 28CED806EA5811EF90C1D323C4F9AE02.roa (raw, json) Hash identifier: b2BcNMesZ27DQqzlZd7MPdoju4HvYEGHIF6wjO+48TQ= Subject key identifier: 45:93:47:DA:8D:F2:84:DF:68:55:A7:8C:29:6E:27:BC:0F:58:98:75 Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Certificate serial: 3F Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/28CED806EA5811EF90C1D323C4F9AE02.roa Signing time: Sat 07 Jun 2025 07:17:18 +0000 ROA not before: Sat 07 Jun 2025 07:17:18 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 134829 IP address blocks: 103.92.137.0/24 maxlen: 24 103.92.138.0/24 maxlen: 24 103.92.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 06:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57 Validity Not Before: Jun 7 07:17:18 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6843e77e-0634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:f1:16:3f:24:81:cb:56:22:a7:6c:51:3e: 5d:f1:35:e8:11:f1:c1:e4:30:34:ac:cc:3f:c2:22: a1:e8:bd:35:11:e3:5a:46:15:66:1c:d2:8f:03:bd: af:ca:84:0e:4c:15:28:02:2c:70:49:65:2b:61:01: d1:2e:aa:e6:db:8c:96:51:29:98:9f:44:cb:50:2e: ea:35:26:fe:17:9d:26:b8:77:f7:ac:99:a0:3f:a0: fb:a1:1a:cc:ff:50:56:e1:e1:b3:18:7d:02:96:b6: d2:b2:75:af:43:43:be:d1:57:46:e7:7b:b9:bf:7e: 77:9e:9b:69:e4:7f:14:2f:fb:bc:63:9a:65:5f:0e: 20:1e:6b:c8:28:9c:2c:85:d6:60:86:89:1a:c9:99: 1d:d5:59:ed:42:6a:df:4e:4e:33:df:6d:2e:10:71: df:da:32:e3:a8:0b:79:2c:c7:29:19:8c:a0:66:aa: a1:0c:7e:90:2d:12:0d:05:00:3b:d7:8e:a7:30:1a: d9:00:5f:68:de:02:84:3d:6c:6c:f7:3c:a0:da:c9: fd:2b:e2:e8:25:19:b7:31:43:45:0c:2a:9c:5c:68: e5:30:9d:a5:23:f2:cf:62:9e:40:cf:d7:ce:8e:61: db:b3:95:8b:d6:4f:6d:d8:14:6c:ed:2d:14:40:09: 20:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:93:47:DA:8D:F2:84:DF:68:55:A7:8C:29:6E:27:BC:0F:58:98:75 X509v3 Authority Key Identifier: keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/28CED806EA5811EF90C1D323C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.92.137.0-103.92.139.255 Signature Algorithm: sha256WithRSAEncryption 8b:9d:eb:68:9e:84:4b:28:ae:0c:a0:87:41:9f:8a:26:2a:1f: 8d:9a:a4:9f:61:f7:ea:29:6d:bb:20:04:ff:67:55:d7:db:11: 7b:d9:87:56:e2:c7:4b:3b:38:45:f8:62:86:d0:fd:e8:71:86: 40:c9:0a:cf:7f:21:d9:ec:e9:2a:ec:e7:0b:e8:1c:ab:aa:7c: 24:c4:41:62:f6:e2:f2:5e:41:08:ab:e9:c7:05:85:c7:1a:81: 8f:36:17:34:f5:60:24:c3:3b:d0:53:98:74:35:40:2c:2a:c1: 6a:a1:3a:fb:12:01:91:4e:b9:b5:0d:d3:68:58:d0:c3:91:34: 88:8a:53:8a:1a:14:10:08:35:64:fa:34:e6:9e:c9:02:50:a1: a9:fd:51:4e:ea:72:61:32:0c:37:1a:ee:96:7d:91:72:15:9b: e9:cb:2e:d5:b0:64:4e:69:d3:ea:0a:aa:88:bb:29:63:a2:cb: c7:4c:c5:a8:01:cb:a9:a1:27:e4:16:6e:af:79:8d:c0:25:4c: 7d:a4:3a:5a:3c:97:d6:e3:20:fa:6f:51:08:d3:1d:ed:42:99: 9f:13:26:c2:65:0d:ae:5b:e0:81:a4:65:74:79:26:28:74:69: 0a:f1:d4:6a:fa:a6:61:b5:2e:d8:83:57:84:7a:a3:88:25:b6: 0e:5d:41:c5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OTc2NjExMC8GA1UEBRMoQzkyNDYwMTQyNTdFRUZGRkZFODBDRDNFQUJGRUQ2N0E4 OThENkY1NzAeFw0yNTA2MDcwNzE3MThaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NDNlNzdlLTA2MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9tPEWPySBy1Yip2xRPl3xNegR8cHkMDSszD/CIqHovTUR41pGFWYc0o8Dva/K hA5MFSgCLHBJZSthAdEuqubbjJZRKZifRMtQLuo1Jv4XnSa4d/esmaA/oPuhGsz/ UFbh4bMYfQKWttKyda9DQ77RV0bne7m/fneem2nkfxQv+7xjmmVfDiAea8gonCyF 1mCGiRrJmR3VWe1Cat9OTjPfbS4Qcd/aMuOoC3ksxykZjKBmqqEMfpAtEg0FADvX jqcwGtkAX2jeAoQ9bGz3PKDayf0r4uglGbcxQ0UMKpxcaOUwnaUj8s9inkDP186O YduzlYvWT23YFGztLRRACSD9AgMBAAGjggKdMIICmTAdBgNVHQ4EFgQURZNH2o3y hN9oVaeMKW4nvA9YmHUwHwYDVR0jBBgwFoAUySRgFCV+7//+gM0+q/7WeomNb1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5NzY2LzgwRjU5RTk0RUE1 NzExRUZCNDJDQjI4NUM0RjlBRTAyL3lTUmdGQ1YtN19fLWdNMC1xXzdXZW9tTmIx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVNSZ0ZDVi03X18tZ00wLXFfN1dlb21OYjFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTc2Ni84MEY1OUU5NEVBNTcxMUVGQjQyQ0IyODVDNEY5QUUwMi8yOENFRDgwNkVB NTgxMUVGOTBDMUQzMjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQY MBYwFAQCAAEwDjAMAwQAZ1yJAwQCZ1yIMA0GCSqGSIb3DQEBCwUAA4IBAQCLneto noRLKK4MoIdBn4omKh+NmqSfYffqKW27IAT/Z1XX2xF72YdW4sdLOzhF+GKG0P3o cYZAyQrPfyHZ7Okq7OcL6ByrqnwkxEFi9uLyXkEIq+nHBYXHGoGPNhc09WAkwzvQ U5h0NUAsKsFqoTr7EgGRTrm1DdNoWNDDkTSIilOKGhQQCDVk+jTmnskCUKGp/VFO 6nJhMgw3Gu6WfZFyFZvpyy7VsGROadPqCqqIuyljosvHTMWoAcupoSfkFm6veY3A JUx9pDpaPJfW4yD6b1EI0x3tQpmfEybCZQ2uW+CBpGV0eSYodGkK8dRq+qZhtS7Y g1eEeqOIJbYOXUHF -----END CERTIFICATE-----Generated at Sat Jun 21 19:52:31 2025 by rpki-client