$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/6CAE0142092E11F094B4703FC4F9AE02.roa File: 6CAE0142092E11F094B4703FC4F9AE02.roa (raw, json) Hash identifier: U0UOsn2/X5DeOGEGCah3NBej8ExoikxrU8EoBu6Tnyg= Subject key identifier: 2F:02:18:46:BB:FA:BA:58:73:04:14:96:35:8A:80:B0:F8:FF:41:23 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0C13 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/6CAE0142092E11F094B4703FC4F9AE02.roa Signing time: Mon 14 Jul 2025 08:11:30 +0000 ROA not before: Mon 14 Jul 2025 08:11:30 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 142622 IP address blocks: 43.249.241.0/24 maxlen: 24 103.7.116.0/24 maxlen: 24 103.12.53.0/24 maxlen: 24 103.12.54.0/24 maxlen: 24 103.13.16.0/24 maxlen: 24 103.13.17.0/24 maxlen: 24 103.13.18.0/24 maxlen: 24 103.24.160.0/24 maxlen: 24 103.24.161.0/24 maxlen: 24 103.24.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 14:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3091 (0xc13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Jul 14 08:11:30 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6874bbb2-0e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5f:06:ca:54:eb:a7:92:81:0e:9d:ab:be:29: d6:99:97:8d:b4:d6:6f:c7:34:88:ac:04:f3:36:32: 72:22:8d:5d:7e:39:0c:3f:fc:5c:39:f4:33:61:9e: 95:a5:d5:0b:80:61:95:70:11:98:85:8d:25:c0:53: 95:cc:d2:fc:b9:14:53:09:4d:df:ab:0d:87:9d:33: 6e:1b:bf:81:66:ec:dd:fb:a6:2c:f8:88:2b:89:1e: e2:b7:8a:ae:93:a0:59:c3:81:7c:68:14:8d:14:43: a4:9f:22:c6:0f:b0:32:1a:10:f9:90:0c:5c:09:1e: a9:e0:2a:a5:c3:47:37:66:ab:4b:2c:eb:4a:04:8b: 5a:09:4b:34:d5:0f:66:27:e7:1f:ff:2f:82:31:86: 97:c4:d3:22:4e:fd:1a:15:82:ed:40:3e:1e:77:b1: a4:bb:37:41:8b:21:33:b1:57:ea:36:b4:30:a6:28: 82:02:12:b2:10:df:ed:e7:6c:0c:6b:67:d1:d6:58: cb:fb:d3:ad:8b:c2:43:f3:91:0d:4e:d8:d7:b3:5b: f0:8a:60:bf:02:18:c6:6d:75:48:70:6e:b6:56:14: 3f:8e:3a:f3:9f:98:42:f2:b5:6c:95:e9:6b:cf:b8: ef:ac:5b:55:cd:a4:c0:cb:4a:7b:ce:1b:ba:74:5f: e1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:02:18:46:BB:FA:BA:58:73:04:14:96:35:8A:80:B0:F8:FF:41:23 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/6CAE0142092E11F094B4703FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.241.0/24 103.7.116.0/24 103.12.53.0-103.12.54.255 103.13.16.0-103.13.18.255 103.24.160.0-103.24.162.255 Signature Algorithm: sha256WithRSAEncryption 9c:dd:15:9b:c7:8a:2d:49:0e:e3:24:ff:3a:06:65:2a:71:9a: 84:a6:3a:14:64:26:5b:c2:ed:90:4f:77:df:02:89:06:f5:bc: b0:40:7f:17:0b:9b:ca:ea:ea:33:fb:f3:e1:a7:1e:de:90:67: 48:13:2b:77:69:1b:dc:ef:58:87:40:a9:82:97:e4:63:63:23: 32:e9:97:47:d1:15:7d:b1:9e:2e:54:fa:ba:9f:a1:63:55:9f: 4a:21:15:73:e8:27:21:d3:a7:99:00:1a:89:65:8e:a9:1a:9a: f9:0e:a3:3f:f6:e9:2d:55:91:94:fb:08:c9:19:53:5f:1a:66: d2:46:da:82:8e:1f:f2:f3:5f:1c:d9:1f:1b:ba:01:c9:fe:76: d6:7c:32:19:7f:cc:a6:df:0a:f3:f4:45:57:de:f8:a2:2a:62: 87:4a:71:3b:e7:94:c5:c1:8b:62:40:38:cb:e4:0d:26:b3:ba: 86:c7:31:99:44:e1:89:19:b8:fb:4c:2c:20:a2:2c:f7:aa:56: c6:4a:00:60:6e:36:37:1d:e6:33:85:72:08:56:d9:e0:cc:c5: bd:d0:9f:95:1e:9b:99:07:f1:6a:97:ea:a2:89:db:d4:3b:70: 77:73:d3:ac:12:39:cf:99:a9:e9:48:b4:ce:56:2d:4a:ad:c4: 6d:c4:9e:56 -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgICDBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwNzE0MDgxMTMwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODc0YmJiMi0wZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuV8GylTrp5KBDp2rvinWmZeNtNZvxzSIrATzNjJyIo1dfjkMP/xcOfQzYZ6V pdULgGGVcBGYhY0lwFOVzNL8uRRTCU3fqw2HnTNuG7+BZuzd+6Ys+IgriR7it4qu k6BZw4F8aBSNFEOknyLGD7AyGhD5kAxcCR6p4Cqlw0c3ZqtLLOtKBItaCUs01Q9m J+cf/y+CMYaXxNMiTv0aFYLtQD4ed7GkuzdBiyEzsVfqNrQwpiiCAhKyEN/t52wM a2fR1ljL+9Oti8JD85ENTtjXs1vwimC/AhjGbXVIcG62VhQ/jjrzn5hC8rVslelr z7jvrFtVzaTAy0p7zhu6dF/hgwIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFC8CGEa7 +rpYcwQUljWKgLD4/0EjMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvNkNBRTAxNDIw OTJFMTFGMDk0QjQ3MDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTwYIKwYBBQUHAQcBAf8E QDA+MDwEAgABMDYDBAAr+fEDBABnB3QwDAMEAGcMNQMEAGcMNjAMAwQEZw0QAwQA Zw0SMAwDBAVnGKADBABnGKIwDQYJKoZIhvcNAQELBQADggEBAJzdFZvHii1JDuMk /zoGZSpxmoSmOhRkJlvC7ZBPd98CiQb1vLBAfxcLm8rq6jP78+GnHt6QZ0gTK3dp G9zvWIdAqYKX5GNjIzLpl0fRFX2xni5U+rqfoWNVn0ohFXPoJyHTp5kAGolljqka mvkOoz/26S1VkZT7CMkZU18aZtJG2oKOH/LzXxzZHxu6Acn+dtZ8Mhl/zKbfCvP0 RVfe+KIqYodKcTvnlMXBi2JAOMvkDSazuobHMZlE4YkZuPtMLCCiLPeqVsZKAGBu Njcd5jOFcghW2eDMxb3Qn5Uem5kH8WqX6qKJ29Q7cHdz06wSOc+ZqelItM5WLUqt xG3EnlY= -----END CERTIFICATE-----Generated at Sun Jul 20 06:38:13 2025 by rpki-client