$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/A6888CA8562B11F0A9D71979C4F9AE02.roa File: A6888CA8562B11F0A9D71979C4F9AE02.roa (raw, json) Hash identifier: iDmp89Xpkp1Fll7WvZDCHcwidt+lSLGg3Xgb3jX5mHY= Subject key identifier: 29:4F:24:65:78:B7:32:B4:DA:62:22:8D:C5:AC:3A:E5:AF:E0:0A:B8 Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Certificate serial: 01EB Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/A6888CA8562B11F0A9D71979C4F9AE02.roa Signing time: Fri 11 Jul 2025 04:09:39 +0000 ROA not before: Fri 11 Jul 2025 04:09:39 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 9409 IP address blocks: 103.151.154.0/24 maxlen: 24 2401:3fa0:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Validity Not Before: Jul 11 04:09:39 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68708e82-adbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f7:92:c2:b0:60:13:bc:0e:57:c3:de:aa:4b: b8:b2:a4:59:50:ba:40:bc:e5:74:6d:98:21:1b:e3: 71:b2:25:ce:8a:bc:b9:26:69:61:c1:84:76:63:c4: e3:b4:21:36:66:52:ce:3c:e2:91:bf:8a:aa:83:fd: 7c:cd:ae:38:7b:e7:47:c0:69:f9:c6:07:4a:45:de: 72:7d:39:23:88:91:0f:f7:85:b4:82:10:2b:01:f3: 6a:49:44:ba:36:1e:e8:3a:8a:54:99:83:18:ca:c1: c1:5f:d5:44:1d:3b:39:29:37:58:05:77:90:23:d0: a2:e7:e9:49:7e:88:45:5b:2b:fd:e6:f7:a2:f1:a6: 25:6e:f4:76:29:d9:1a:a8:2c:aa:c5:22:34:cf:36: e9:03:80:86:23:3c:13:bd:03:3f:b5:e1:9a:76:47: cb:8f:91:f2:ac:c7:fa:08:e8:30:f9:cc:19:b9:cc: c0:76:de:5b:de:d0:36:b2:5d:30:4a:ab:f4:72:d9: 19:c1:52:a2:75:27:59:95:47:89:88:e8:a1:f1:c7: 98:8b:c7:4e:2f:6f:7c:a6:4a:5d:bf:b7:1c:f1:7f: 7d:3f:f2:20:da:52:d1:b6:36:e0:fe:64:22:b3:74: 3b:4a:79:ef:bb:1b:70:61:1c:2a:1f:08:67:cc:ee: 72:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4F:24:65:78:B7:32:B4:DA:62:22:8D:C5:AC:3A:E5:AF:E0:0A:B8 X509v3 Authority Key Identifier: keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/A6888CA8562B11F0A9D71979C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.154.0/24 IPv6: 2401:3fa0:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 48:94:5d:72:78:08:cd:3a:17:b6:b7:07:9e:b7:1d:6c:2a:45: fa:b8:25:f3:09:d6:e5:05:7b:63:29:bb:aa:d2:29:b4:4d:e9: be:4b:cc:d2:48:51:92:bf:d9:54:dc:d5:ca:c7:59:88:e8:44: 1f:42:17:22:62:c7:c2:30:98:5a:39:d1:57:d3:9e:91:2b:43: 84:9d:cc:28:22:e8:ab:b4:b2:86:a9:e9:48:ac:43:25:6a:17: 77:99:ee:4f:f0:74:8a:7d:af:0e:f4:76:cf:5a:6f:0b:54:b6: c9:f4:cf:09:e3:bf:80:7b:e6:3c:e9:d3:16:b0:c1:cf:53:ce: 63:ff:8b:f0:48:87:a1:07:01:34:b6:43:00:46:33:de:c2:10: 86:9a:54:fb:10:97:e4:df:fd:58:14:7b:f8:02:b6:ca:65:44: d1:70:9d:7e:13:8a:16:2a:b8:70:cd:b1:99:a4:99:d9:93:4d: 72:db:93:20:d7:3c:83:df:9b:05:69:63:99:bd:0f:f3:6b:f4: cd:03:25:f0:4b:87:d6:1b:f3:11:50:99:d8:a3:97:60:1b:e3: 89:ea:61:fe:2f:3a:ac:87:9d:1e:c6:86:96:a2:37:6c:dc:5e: d3:7e:26:48:31:3c:a7:c8:ba:ca:64:88:f0:d4:74:33:ed:4a: 76:53:a0:9b -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3RkQxMTAvBgNVBAUTKDY4ODUyQUI3RjI3MTRGQ0Y1NEQ3NUYwQUFFMzA2OEFE QzM4QjM1Q0MwHhcNMjUwNzExMDQwOTM5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcwOGU4Mi1hZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPeSwrBgE7wOV8Peqku4sqRZULpAvOV0bZghG+NxsiXOiry5JmlhwYR2Y8Tj tCE2ZlLOPOKRv4qqg/18za44e+dHwGn5xgdKRd5yfTkjiJEP94W0ghArAfNqSUS6 Nh7oOopUmYMYysHBX9VEHTs5KTdYBXeQI9Ci5+lJfohFWyv95vei8aYlbvR2Kdka qCyqxSI0zzbpA4CGIzwTvQM/teGadkfLj5HyrMf6COgw+cwZuczAdt5b3tA2sl0w Sqv0ctkZwVKidSdZlUeJiOih8ceYi8dOL298pkpdv7cc8X99P/Ig2lLRtjbg/mQi s3Q7SnnvuxtwYRwqHwhnzO5yOwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFClPJGV4 tzK02mIijcWsOuWv4Aq4MB8GA1UdIwQYMBaAFGiFKrfycU/PVNdfCq4waK3DizXM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdGRC81NUVENkExNjEw QTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4OVUxMThLcmpCb3JjT0xO Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJVXF0X0p4VDg5VTExOEtyakJvcmNPTE5jdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTg3RkQvNTVFRDZBMTYxMEEwMTFFRTkzNDkzQzUyQzRGOUFFMDIvQTY4ODhDQTg1 NjJCMTFGMEE5RDcxOTc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBABnl5owDgQCAAIwCAMGACQBP6D/MA0GCSqGSIb3DQEBCwUA A4IBAQBIlF1yeAjNOhe2tweetx1sKkX6uCXzCdblBXtjKbuq0im0Tem+S8zSSFGS v9lU3NXKx1mI6EQfQhciYsfCMJhaOdFX056RK0OEncwoIuirtLKGqelIrEMlahd3 me5P8HSKfa8O9HbPWm8LVLbJ9M8J47+Ae+Y86dMWsMHPU85j/4vwSIehBwE0tkMA RjPewhCGmlT7EJfk3/1YFHv4ArbKZUTRcJ1+E4oWKrhwzbGZpJnZk01y25Mg1zyD 35sFaWOZvQ/za/TNAyXwS4fWG/MRUJnYo5dgG+OJ6mH+Lzqsh50exoaWojds3F7T fiZIMTynyLrKZIjw1HQz7Up2U6Cb -----END CERTIFICATE-----Generated at Sun Jul 20 03:11:24 2025 by rpki-client