$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/7AD326AC663911EDA919A02AC4F9AE02.roa File: 7AD326AC663911EDA919A02AC4F9AE02.roa (raw, json) Hash identifier: e4e/2weEWR9V4/NE3J2YPV05BSS+/w2P0bwX2/dmeeA= Subject key identifier: 06:02:91:02:F9:99:13:F7:4D:76:0D:95:A3:96:AF:3B:6C:01:FB:08 Certificate issuer: /CN=A91BA733/serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E Certificate serial: 0292 Authority key identifier: 47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/7AD326AC663911EDA919A02AC4F9AE02.roa Signing time: Wed 09 Jul 2025 02:38:41 +0000 ROA not before: Wed 09 Jul 2025 02:38:41 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 142539 IP address blocks: 103.168.178.0/23 maxlen: 24 2407:95c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 02:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA733, serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E Validity Not Before: Jul 9 02:38:41 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686dd631-d458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:79:5a:9f:32:88:38:40:e7:1a:3e:2b:1c:f0: 79:b9:4a:a9:86:a0:aa:d9:1b:ff:2c:9e:a9:21:7c: bb:16:51:91:f1:a4:db:c0:d4:dd:8b:7f:99:8a:e4: cd:06:ca:82:a9:1d:2a:69:aa:db:0c:7c:f1:1b:c5: 40:bb:1b:ac:54:58:8b:89:0b:e0:41:c9:3f:ae:4c: 01:7f:c0:81:39:03:cd:45:ee:0d:f6:65:d7:f2:90: e3:c5:cc:3e:77:b0:5d:64:9c:65:fc:21:31:c9:f5: 52:4d:dc:6a:c4:66:08:54:58:17:d8:1b:bc:09:e0: bb:16:59:f3:ba:dc:ed:55:50:7c:a6:71:72:87:fd: b0:b8:50:de:61:17:32:3d:38:c3:9c:10:e9:29:b8: 5e:ef:c6:f7:ab:5d:6b:2e:9b:9f:cf:53:59:db:b0: ae:19:6e:f0:70:07:18:ff:0e:36:dc:97:05:76:db: 56:0f:a3:78:ce:20:72:24:ed:22:52:b7:fd:b2:40: 6f:c2:a4:33:17:e8:63:91:19:d4:6a:f0:6a:e4:f8: 7a:f3:15:98:02:05:7d:20:cf:06:17:2c:ad:08:16: c5:98:0f:f5:63:12:4a:2a:f8:76:cd:8b:2c:ae:4a: dd:4b:33:bb:22:47:de:e1:06:1c:11:48:25:55:69: aa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:02:91:02:F9:99:13:F7:4D:76:0D:95:A3:96:AF:3B:6C:01:FB:08 X509v3 Authority Key Identifier: keyid:47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/7AD326AC663911EDA919A02AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.178.0/23 IPv6: 2407:95c0::/32 Signature Algorithm: sha256WithRSAEncryption 13:1e:86:70:7c:15:12:10:27:06:ae:fc:98:28:cc:18:67:fa: 2a:a5:b3:d5:ed:7f:bd:18:12:1c:4e:1e:18:0f:ec:2d:56:3d: 9a:56:97:ac:1a:38:36:5c:b8:9a:a9:3d:4c:2f:e7:b1:31:58: 75:d1:c3:99:cc:df:88:c8:7d:f7:23:07:7e:26:bf:0d:f8:48: 07:43:c6:a6:38:f8:f6:7a:ac:52:2b:04:b4:42:4b:f8:c3:38: 25:94:8b:dc:ad:59:dd:c8:af:69:9d:9a:19:9c:dc:2f:a1:25: 48:33:74:e7:92:53:93:bc:72:e1:e7:70:7b:13:65:6f:7a:b2: e3:20:0e:cf:10:c8:53:12:ef:f4:52:77:99:a3:ea:6f:99:c2: c4:fb:bb:a9:3c:86:fd:10:f3:7c:ab:28:f9:4c:a1:1d:2f:85: 4e:27:04:14:dc:0d:4a:dc:6c:a4:98:77:ff:a4:f7:ca:9a:3c: 76:f8:28:24:0e:34:29:15:9d:c9:78:ab:d2:17:97:13:76:67: 2d:58:bc:4a:9e:fc:c0:7b:54:f4:1b:5b:b5:cb:38:10:eb:44: 92:ab:07:02:94:78:45:fe:39:80:34:94:20:55:b6:d2:76:f1: 1c:80:07:80:d4:c8:c0:c5:cc:4e:c6:2f:36:3a:d5:cc:85:2d: 08:37:c9:27 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE3MzMxMTAvBgNVBAUTKDQ3NDA2NTdBNEUyRkI4NjdCRkI0NERCRjZDQjhCQzFE RDFCMkMyMEUwHhcNMjUwNzA5MDIzODQxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZkZDYzMS1kNDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3lanzKIOEDnGj4rHPB5uUqphqCq2Rv/LJ6pIXy7FlGR8aTbwNTdi3+ZiuTN BsqCqR0qaarbDHzxG8VAuxusVFiLiQvgQck/rkwBf8CBOQPNRe4N9mXX8pDjxcw+ d7BdZJxl/CExyfVSTdxqxGYIVFgX2Bu8CeC7FlnzutztVVB8pnFyh/2wuFDeYRcy PTjDnBDpKbhe78b3q11rLpufz1NZ27CuGW7wcAcY/w423JcFdttWD6N4ziByJO0i Urf9skBvwqQzF+hjkRnUavBq5Ph68xWYAgV9IM8GFyytCBbFmA/1YxJKKvh2zYss rkrdSzO7Ikfe4QYcEUglVWmqnQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAYCkQL5 mRP3TXYNlaOWrztsAfsIMB8GA1UdIwQYMBaAFEdAZXpOL7hnv7RNv2y4vB3RssIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTczMy8zMzM4NzJBMjBE NzQxMUVEQTg5NjA2MkZDNEY5QUUwMi9SMEJsZWs0dnVHZV90RTJfYkxpOEhkR3l3 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IwQmxlazR2dUdlX3RFMl9iTGk4SGRHeXdnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkE3MzMvMzMzODcyQTIwRDc0MTFFREE4OTYwNjJGQzRGOUFFMDIvN0FEMzI2QUM2 NjM5MTFFREE5MTlBMDJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnqLIwDQQCAAIwBwMFACQHlcAwDQYJKoZIhvcNAQELBQAD ggEBABMehnB8FRIQJwau/JgozBhn+iqls9Xtf70YEhxOHhgP7C1WPZpWl6waODZc uJqpPUwv57ExWHXRw5nM34jIffcjB34mvw34SAdDxqY4+PZ6rFIrBLRCS/jDOCWU i9ytWd3Ir2mdmhmc3C+hJUgzdOeSU5O8cuHncHsTZW96suMgDs8QyFMS7/RSd5mj 6m+ZwsT7u6k8hv0Q83yrKPlMoR0vhU4nBBTcDUrcbKSYd/+k98qaPHb4KCQONCkV ncl4q9IXlxN2Zy1YvEqe/MB7VPQbW7XLOBDrRJKrBwKUeEX+OYA0lCBVttJ28RyA B4DUyMDFzE7GLzY61cyFLQg3ySc= -----END CERTIFICATE-----Generated at Wed Jul 23 12:18:13 2025 by rpki-client