$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/61852A6058DF11F08A960A36C4F9AE02.roa File: 61852A6058DF11F08A960A36C4F9AE02.roa (raw, json) Hash identifier: z4mT9ptfzN3NWSk4a4ZYYhpO5X+rRKpUK8G1tEpGlKs= Subject key identifier: 1A:07:CB:2D:BE:13:E0:A5:02:34:A5:5B:C6:F4:22:FC:23:91:BF:55 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0C06 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/61852A6058DF11F08A960A36C4F9AE02.roa Signing time: Fri 04 Jul 2025 14:01:29 +0000 ROA not before: Fri 04 Jul 2025 14:01:29 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 15412 IP address blocks: 43.251.184.0/24 maxlen: 24 43.251.186.0/24 maxlen: 24 45.124.60.0/22 maxlen: 22 103.7.208.0/22 maxlen: 22 103.8.84.0/24 maxlen: 24 103.8.85.0/24 maxlen: 24 103.8.86.0/24 maxlen: 24 103.8.87.0/24 maxlen: 24 103.21.104.0/24 maxlen: 24 103.21.106.0/24 maxlen: 24 103.225.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 14:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3078 (0xc06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Jul 4 14:01:29 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6867deb8-9123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:d9:95:7e:bf:f2:42:95:3b:02:0c:92:81: 16:8d:69:14:a9:0a:fd:f9:7d:ac:16:d3:4a:42:23: b6:3d:39:50:41:1a:f9:67:21:00:a2:e5:be:04:8c: 7c:66:47:9e:52:49:ed:b2:97:ea:19:24:ab:a1:29: ac:2c:d6:2b:5f:e8:1d:ef:14:aa:1b:28:0c:4c:c6: 13:cc:66:13:e5:bf:ca:8d:01:74:ab:d6:98:da:a0: ce:ee:5e:67:bd:5b:7f:21:e2:e9:3d:8c:48:8b:29: 56:c7:fb:49:36:83:88:84:d8:13:1d:32:e6:29:ac: 37:0e:ea:c9:92:ce:3a:5e:6a:66:5b:b8:4f:dd:d7: b8:1d:95:9c:98:85:fb:be:ab:22:d0:9e:11:fa:74: cd:6e:c9:6c:6b:7a:27:32:53:42:52:c9:ad:98:6a: 0a:17:52:cc:7d:5f:72:82:7c:fa:d9:85:95:3c:63: 97:96:93:7c:97:cb:55:33:94:c8:c5:4d:2b:c2:05: a5:2a:0d:0e:eb:67:ae:1a:c9:81:f5:4c:5b:9d:a4: 2d:3b:36:43:c3:8f:75:bd:05:10:14:eb:51:dd:a1: 52:a9:7a:84:46:7a:17:6d:ef:fe:9b:c4:85:9b:99: 03:ce:50:92:3d:1b:87:2d:71:61:d5:3d:84:ba:e5: 9f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:07:CB:2D:BE:13:E0:A5:02:34:A5:5B:C6:F4:22:FC:23:91:BF:55 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/61852A6058DF11F08A960A36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.184.0/24 43.251.186.0/24 45.124.60.0/22 103.7.208.0/22 103.8.84.0/22 103.21.104.0/24 103.21.106.0/24 103.225.192.0/22 Signature Algorithm: sha256WithRSAEncryption 95:de:42:8a:0f:c8:b2:da:c1:4c:c1:c8:4a:22:02:df:cd:85: 23:6e:89:b2:02:ad:2d:e6:8b:6a:30:75:a8:a4:cd:78:24:da: 0b:5e:4b:72:f2:6e:04:ce:ef:3c:b8:80:2b:b0:7a:f0:eb:96: 94:c6:d7:eb:80:6e:7d:1d:58:2f:a5:11:ab:af:b7:d0:86:80: 36:73:7d:f8:45:71:2b:ac:38:39:7f:33:4c:4d:60:06:6c:cd: 96:cd:5e:86:4d:40:70:87:83:a8:77:2b:bc:70:75:d3:ce:9f: 19:cb:d7:b2:f7:99:f1:a8:80:b3:4c:4d:d7:39:24:ba:39:1e: 62:7f:a3:14:b7:83:da:1e:97:42:39:3f:51:cb:f2:4d:15:ee: 3a:57:99:4e:3d:cd:32:7e:42:fd:f0:19:23:dd:5d:55:19:46: 8f:0d:1c:54:14:62:fd:6c:5c:c2:b6:0e:70:1a:56:ca:b3:cf: df:31:d4:74:10:6a:e1:4d:e1:b2:02:40:f8:ab:c7:7e:c8:cc: 64:4e:91:10:e0:5e:32:64:40:a8:eb:f9:9f:6f:ce:4c:a4:d3: 43:cb:43:43:78:94:9b:9f:1e:3f:91:d8:f4:ec:ac:bb:f9:68: 4a:b0:40:cd:e3:64:60:4d:4e:1f:7a:a3:fd:ca:68:a8:a8:ae: ab:4a:d6:1e -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICDAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwNzA0MTQwMTI5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODY3ZGViOC05MTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtf3ZlX6/8kKVOwIMkoEWjWkUqQr9+X2sFtNKQiO2PTlQQRr5ZyEAouW+BIx8 ZkeeUkntspfqGSSroSmsLNYrX+gd7xSqGygMTMYTzGYT5b/KjQF0q9aY2qDO7l5n vVt/IeLpPYxIiylWx/tJNoOIhNgTHTLmKaw3DurJks46XmpmW7hP3de4HZWcmIX7 vqsi0J4R+nTNbslsa3onMlNCUsmtmGoKF1LMfV9ygnz62YWVPGOXlpN8l8tVM5TI xU0rwgWlKg0O62euGsmB9UxbnaQtOzZDw491vQUQFOtR3aFSqXqERnoXbe/+m8SF m5kDzlCSPRuHLXFh1T2EuuWfYwIDAQABo4ICvzCCArswHQYDVR0OBBYEFBoHyy2+ E+ClAjSlW8b0Ivwjkb9VMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvNjE4NTJBNjA1 OERGMTFGMDhBOTYwQTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MDYEAgABMDADBAAr+7gDBAAr+7oDBAItfDwDBAJnB9ADBAJnCFQDBABnFWgD BABnFWoDBAJn4cAwDQYJKoZIhvcNAQELBQADggEBAJXeQooPyLLawUzByEoiAt/N hSNuibICrS3mi2owdaikzXgk2gteS3LybgTO7zy4gCuwevDrlpTG1+uAbn0dWC+l Eauvt9CGgDZzffhFcSusODl/M0xNYAZszZbNXoZNQHCHg6h3K7xwddPOnxnL17L3 mfGogLNMTdc5JLo5HmJ/oxS3g9oel0I5P1HL8k0V7jpXmU49zTJ+Qv3wGSPdXVUZ Ro8NHFQUYv1sXMK2DnAaVsqzz98x1HQQauFN4bICQPirx37IzGROkRDgXjJkQKjr +Z9vzkyk00PLQ0N4lJufHj+R2PTsrLv5aEqwQM3jZGBNTh96o/3KaKiorqtK1h4= -----END CERTIFICATE-----Generated at Sun Jul 20 06:23:17 2025 by rpki-client