$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/E454FEF2689311F09107C42BC4F9AE02.roa File: E454FEF2689311F09107C42BC4F9AE02.roa (raw, json) Hash identifier: 3AkXtceE0UqV8/zNzn9ey5ikMm6oLMztcjBsMDD6ykQ= Subject key identifier: 2D:17:76:BD:AF:A0:29:B1:8F:8B:11:0E:96:6A:C0:E5:05:EC:5F:D7 Certificate issuer: /CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Certificate serial: 68 Authority key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/E454FEF2689311F09107C42BC4F9AE02.roa Signing time: Thu 24 Jul 2025 13:41:25 +0000 ROA not before: Thu 24 Jul 2025 13:41:25 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 18381 IP address blocks: 43.250.52.0/22 maxlen: 24 103.41.176.0/22 maxlen: 22 2406:4fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 07:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Validity Not Before: Jul 24 13:41:25 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68823805-e0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:87:cf:dc:35:47:e9:cb:91:f7:b7:6d:6f: d8:6a:18:8b:12:06:24:52:04:ff:89:d8:b9:14:4d: c9:f1:c5:31:69:64:54:e8:90:ca:31:1c:e3:15:b2: fd:bc:60:8d:6a:c4:f2:f9:5f:88:96:47:c9:26:54: c2:87:31:b8:e8:64:e7:e0:60:cb:b5:ad:62:30:cb: 80:6d:20:2a:a1:14:c3:5d:20:0d:ec:ea:8a:17:13: 6d:bb:b4:c8:09:d5:7f:f4:2b:7e:e8:a5:44:56:70: ac:c0:b9:a4:a9:74:5e:53:60:39:ec:4c:96:11:28: 18:e5:cf:18:6d:38:f3:2d:10:fb:bb:ed:57:ae:fd: 5e:a0:71:39:96:02:9c:f1:cc:af:98:c1:ad:c2:3f: 2d:3f:93:21:f7:13:c5:86:84:44:5b:8e:8a:aa:1d: 81:5d:59:a8:66:f1:82:a9:f6:d0:9b:11:c0:14:7e: 4f:65:b0:b0:95:4b:96:2c:58:e7:8f:4a:ea:96:92: 32:85:d9:64:64:19:fd:0a:c0:1f:08:a7:68:ea:3c: a9:62:56:1a:f8:9d:2c:26:e7:3b:c1:c7:3e:3d:ac: 25:99:8f:79:75:b0:cd:b5:6c:47:ab:66:41:c2:d2: c8:8b:e3:02:ff:57:fe:f6:70:c8:36:e6:ea:0e:13: 22:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:17:76:BD:AF:A0:29:B1:8F:8B:11:0E:96:6A:C0:E5:05:EC:5F:D7 X509v3 Authority Key Identifier: keyid:62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/E454FEF2689311F09107C42BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.52.0/22 103.41.176.0/22 IPv6: 2406:4fc0::/32 Signature Algorithm: sha256WithRSAEncryption 1b:f2:b5:95:df:dc:f6:5b:1a:84:25:24:03:99:8d:5e:fe:d9: 15:b1:90:92:db:be:ff:97:92:95:e8:c7:80:05:e0:d2:b3:02: 62:c0:6b:2b:37:66:40:d1:c5:7a:72:4d:aa:8d:b0:a5:bc:1a: b0:3f:c3:48:c9:ed:1d:58:ea:ca:59:34:a0:be:52:9e:35:62: c0:f1:98:e7:f6:2a:af:3b:79:ed:23:8e:5c:5b:cc:87:06:6f: 66:e5:1b:54:ab:f5:83:b8:19:58:46:a5:35:ea:70:51:ac:55: 28:f6:8b:39:4b:50:7d:02:8b:d2:b2:86:45:6a:88:b1:fd:c2: cd:54:d2:e3:23:bd:a6:7e:af:10:0e:ef:42:82:64:da:45:6a: 26:80:9f:2e:6a:62:41:85:bd:13:c2:94:97:af:e5:fb:b4:09: c3:1d:7b:5d:d0:4b:5c:f7:bc:cd:32:7c:e5:0d:c3:98:0d:28: b7:26:71:c1:6c:40:9a:6e:51:4f:1f:bd:eb:28:69:5e:1d:7a: 34:99:3f:88:34:95:e5:dc:11:76:fc:f6:35:92:aa:7e:1e:8f: 3a:68:8f:02:7f:aa:bf:4b:52:64:95:bf:a2:db:b6:9e:31:1f: ac:10:b0:90:8d:8e:12:3d:9a:5b:0d:e6:6b:f2:a6:a4:a5:72: 1a:51:82:f1 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY2ODExMC8GA1UEBRMoNjIwRDM5QjNBMTgzNzk3M0JEMTMyNjlGMkIwNkFDOUIy NzM4ODIwRDAeFw0yNTA3MjQxMzQxMjVaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ODIzODA1LWUwZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHHofP3DVH6cuR97dtb9hqGIsSBiRSBP+J2LkUTcnxxTFpZFTokMoxHOMVsv28 YI1qxPL5X4iWR8kmVMKHMbjoZOfgYMu1rWIwy4BtICqhFMNdIA3s6ooXE227tMgJ 1X/0K37opURWcKzAuaSpdF5TYDnsTJYRKBjlzxhtOPMtEPu77Veu/V6gcTmWApzx zK+Ywa3CPy0/kyH3E8WGhERbjoqqHYFdWahm8YKp9tCbEcAUfk9lsLCVS5YsWOeP SuqWkjKF2WRkGf0KwB8Ip2jqPKliVhr4nSwm5zvBxz49rCWZj3l1sM21bEerZkHC 0siL4wL/V/72cMg25uoOEyLVAgMBAAGjggKqMIICpjAdBgNVHQ4EFgQULRd2va+g KbGPixEOlmrA5QXsX9cwHwYDVR0jBBgwFoAUYg05s6GDeXO9EyafKwasmyc4gg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjY4LzkyRTI1OTYyREYy MTExRUY4MzNGNEYyQ0M0RjlBRTAyL1lnMDVzNkdEZVhPOUV5YWZLd2FzbXljNGdn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWcwNXM2R0RlWE85RXlhZkt3YXNteWM0Z2cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkY2OC85MkUyNTk2MkRGMjExMUVGODMzRjRGMkNDNEY5QUUwMi9FNDU0RkVGMjY4 OTMxMUYwOTEwN0M0MkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA0BggrBgEFBQcBBwEB/wQl MCMwEgQCAAEwDAMEAiv6NAMEAmcpsDANBAIAAjAHAwUAJAZPwDANBgkqhkiG9w0B AQsFAAOCAQEAG/K1ld/c9lsahCUkA5mNXv7ZFbGQktu+/5eSlejHgAXg0rMCYsBr KzdmQNHFenJNqo2wpbwasD/DSMntHVjqylk0oL5SnjViwPGY5/Yqrzt57SOOXFvM hwZvZuUbVKv1g7gZWEalNepwUaxVKPaLOUtQfQKL0rKGRWqIsf3CzVTS4yO9pn6v EA7vQoJk2kVqJoCfLmpiQYW9E8KUl6/l+7QJwx17XdBLXPe8zTJ85Q3DmA0otyZx wWxAmm5RTx+96yhpXh16NJk/iDSV5dwRdvz2NZKqfh6POmiPAn+qv0tSZJW/otu2 njEfrBCwkI2OEj2aWw3ma/KmpKVyGlGC8Q== -----END CERTIFICATE-----Generated at Sat Jul 26 15:22:08 2025 by rpki-client