$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/D9BD904224B611EBAE734152C4F9AE02.roa File: D9BD904224B611EBAE734152C4F9AE02.roa (raw, json) Hash identifier: KZro3pgOeUHIq7UlI8pVpaWLtUDP+zywuDR46T5LBrU= Subject key identifier: 56:3E:EA:19:6F:53:90:CF:19:F4:0F:8A:5C:5C:C1:B7:CC:CB:D9:6B Certificate issuer: /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Certificate serial: 073B Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/D9BD904224B611EBAE734152C4F9AE02.roa Signing time: Thu 20 Mar 2025 22:01:43 +0000 ROA not before: Thu 20 Mar 2025 22:01:43 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138621 IP address blocks: 103.134.254.0/23 maxlen: 23 103.134.254.0/24 maxlen: 24 103.134.255.0/24 maxlen: 24 2001:df7:db00::/48 maxlen: 48 2401:abe0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1851 (0x73b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Validity Not Before: Mar 20 22:01:43 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67dc9046-a50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0d:da:67:6f:59:bd:b0:46:6e:1f:43:dc:61: d3:d1:29:2f:5a:1e:dd:07:57:10:d7:03:d0:8d:9b: d4:5f:9f:85:97:e0:36:a0:83:c7:ac:b7:d1:26:ff: ed:06:55:ee:02:03:41:72:9e:5d:eb:08:63:44:cd: fc:f6:9e:af:3b:80:9b:a8:1d:07:a3:55:7b:b3:86: 40:58:0d:5c:a5:18:4a:7b:b8:62:21:fd:d8:5f:ac: 20:dd:6b:7c:bb:00:6a:f0:37:2c:e1:b4:d5:a0:39: 9e:1d:3c:df:56:c2:a1:e9:05:56:fb:65:0a:46:11: 20:0c:8c:1c:9d:be:7b:8c:a5:42:0c:30:5a:7b:10: dc:e5:e7:ce:26:02:ab:fa:b9:4f:a0:7f:11:39:25: ee:17:29:76:c1:80:71:67:12:97:0d:79:c0:41:b0: 24:54:ba:fc:dd:23:9a:4f:14:8d:a4:67:29:0b:5f: 80:e1:6f:76:73:2f:f5:8a:2d:5d:74:27:bf:5c:16: 29:65:fa:5f:e8:02:73:db:f8:40:ef:90:e3:7b:b6: 2a:fd:72:e8:66:4c:ed:87:ea:ee:1b:31:73:61:f4: de:e7:e7:29:a6:b4:fd:c2:5b:2f:0e:e0:d4:04:7c: 08:e1:27:11:10:c2:59:ef:3c:47:ad:f1:73:44:91: 40:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3E:EA:19:6F:53:90:CF:19:F4:0F:8A:5C:5C:C1:B7:CC:CB:D9:6B X509v3 Authority Key Identifier: keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/D9BD904224B611EBAE734152C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.254.0/23 IPv6: 2001:df7:db00::/48 2401:abe0::/32 Signature Algorithm: sha256WithRSAEncryption 88:b3:96:11:49:84:42:36:1c:fa:06:c3:e2:ce:61:0b:b4:c5: c3:7c:2e:0a:df:c0:d4:eb:af:32:08:f4:cd:9b:15:a1:c0:8c: 1c:24:56:3c:24:e4:a4:df:0c:60:7b:55:cc:25:8b:78:e3:97: 74:63:89:a3:06:73:2b:71:0c:2c:f4:fd:3f:ee:1e:b9:ca:ae: 04:87:f5:b1:ac:9b:4a:6c:ea:7f:9d:70:00:1a:5c:6a:c9:ba: 7d:b0:fb:28:75:24:28:c2:bd:7d:10:e0:3f:91:84:12:00:ee: d0:b1:0b:5c:25:b9:10:0a:f3:87:65:2f:0f:61:60:53:5a:ab: 33:db:b3:f9:69:66:3b:af:4c:f7:b9:14:a3:26:53:89:a4:34: 0b:01:34:8d:a4:cc:3d:ad:83:1c:f2:82:ec:a7:d8:63:46:7e: d4:75:22:13:3a:98:ca:f7:cd:0b:a7:06:36:09:38:85:3f:50: 1b:2a:21:5a:ed:6b:cc:a5:04:24:3c:75:ca:be:b5:6b:5d:a6: 05:4b:7e:76:d0:1e:b4:af:b0:ac:79:b3:d6:a4:ee:68:3d:aa: 76:dc:44:83:63:fb:3f:e7:c2:a8:67:70:5b:2f:3d:e0:b7:fb: 02:d4:21:72:32:3e:db:3f:77:5b:d4:e8:96:6a:f9:3a:a6:46: 26:f7:1d:96 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICBzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREMkMxMTAvBgNVBAUTKDFGMTJFQzJENDM5NUY5NUFBQ0M2MEM2MkVDREQ4Mjg1 N0VEMzA0MTIwHhcNMjUwMzIwMjIwMTQzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RjOTA0Ni1hNTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyg3aZ29ZvbBGbh9D3GHT0SkvWh7dB1cQ1wPQjZvUX5+Fl+A2oIPHrLfRJv/t BlXuAgNBcp5d6whjRM389p6vO4CbqB0Ho1V7s4ZAWA1cpRhKe7hiIf3YX6wg3Wt8 uwBq8Dcs4bTVoDmeHTzfVsKh6QVW+2UKRhEgDIwcnb57jKVCDDBaexDc5efOJgKr +rlPoH8ROSXuFyl2wYBxZxKXDXnAQbAkVLr83SOaTxSNpGcpC1+A4W92cy/1ii1d dCe/XBYpZfpf6AJz2/hA75Dje7Yq/XLoZkzth+ruGzFzYfTe5+cpprT9wlsvDuDU BHwI4ScREMJZ7zxHrfFzRJFA7QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFY+6hlv U5DPGfQPilxcwbfMy9lrMB8GA1UdIwQYMBaAFB8S7C1DlflarMYMYuzdgoV+0wQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQyQy80OENFNTE2MjI0 QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1WcXN4Z3hpN04yQ2hYN1RC QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4THNMVU9WLVZxc3hneGk3TjJDaFg3VEJCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkREMkMvNDhDRTUxNjIyNEI1MTFFQkEyODc4RjUwQzRGOUFFMDIvRDlCRDkwNDIy NEI2MTFFQkFFNzM0MTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMAwEAgABMAYDBAFnhv4wFgQCAAIwEAMHACABDffbAAMFACQBq+AwDQYJKoZI hvcNAQELBQADggEBAIizlhFJhEI2HPoGw+LOYQu0xcN8LgrfwNTrrzII9M2bFaHA jBwkVjwk5KTfDGB7Vcwli3jjl3RjiaMGcytxDCz0/T/uHrnKrgSH9bGsm0ps6n+d cAAaXGrJun2w+yh1JCjCvX0Q4D+RhBIA7tCxC1wluRAK84dlLw9hYFNaqzPbs/lp ZjuvTPe5FKMmU4mkNAsBNI2kzD2tgxzyguyn2GNGftR1IhM6mMr3zQunBjYJOIU/ UBsqIVrta8ylBCQ8dcq+tWtdpgVLfnbQHrSvsKx5s9ak7mg9qnbcRINj+z/nwqhn cFsvPeC3+wLUIXIyPts/d1vU6JZq+TqmRib3HZY= -----END CERTIFICATE-----Generated at Wed Nov 5 15:03:36 2025 by rpki-client