$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/6BB6EF78EB5F11ECB4060F86C4F9AE02.roa File: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (raw, json) Hash identifier: bw2KVyHN6CitUBxUyBMWnfwdT8P8OVOkY8BYkur67D8= Subject key identifier: 76:0F:5B:DA:8A:62:A5:A6:29:3A:8B:C9:AA:94:A7:7C:4B:DA:6C:31 Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Certificate serial: 1476 Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/6BB6EF78EB5F11ECB4060F86C4F9AE02.roa Signing time: Mon 21 Jul 2025 22:51:55 +0000 ROA not before: Mon 21 Jul 2025 22:51:55 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 906 IP address blocks: 103.117.100.0/22 maxlen: 24 103.135.248.0/22 maxlen: 22 103.135.248.0/24 maxlen: 24 103.135.249.0/24 maxlen: 24 103.135.250.0/24 maxlen: 24 103.135.251.0/24 maxlen: 24 2403:18c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 17:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5238 (0x1476) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Validity Not Before: Jul 21 22:51:55 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=687ec48b-1f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:1b:07:1c:03:cf:fb:8d:9f:4b:1d:66:d4: 5b:fa:91:0a:13:e7:3b:1c:c0:51:7d:14:4e:8d:74: 5a:13:58:2a:50:ff:be:ee:e4:de:75:3c:d2:48:35: f6:26:a9:85:e8:20:68:06:5d:75:c5:3a:ec:a7:ce: 89:30:b5:6f:20:9d:b6:6b:55:35:67:d8:b1:61:b4: 2d:c0:fa:c3:ae:ee:89:b7:ca:bf:9e:64:27:7b:a0: 1f:1f:a8:a8:1d:81:8f:29:96:5e:08:03:46:6c:bc: e6:6e:e5:d4:70:9b:ac:e7:05:9b:04:26:f1:22:63: 40:72:4f:11:c2:fc:1e:10:7e:e5:6d:c7:3d:1b:ce: f5:6a:3d:3d:49:1f:fb:c1:76:02:11:d6:e1:a4:5f: 94:79:84:79:9c:d9:ab:76:aa:46:88:bb:36:f5:61: 31:e6:f8:1f:6f:e4:f1:0f:ec:5b:cf:01:31:5c:90: a6:88:03:bc:63:a4:38:2e:30:c1:df:4d:7e:af:20: 22:df:98:95:cd:b6:bc:7c:14:4f:ef:18:66:ff:04: 8d:22:6f:74:6c:81:a7:55:4f:0f:f5:6f:95:78:5f: fc:96:05:d0:b6:71:23:ff:91:33:51:86:37:d5:d9: 18:7d:a8:79:78:04:12:45:7a:fb:2f:35:13:76:47: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0F:5B:DA:8A:62:A5:A6:29:3A:8B:C9:AA:94:A7:7C:4B:DA:6C:31 X509v3 Authority Key Identifier: keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/6BB6EF78EB5F11ECB4060F86C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.117.100.0/22 103.135.248.0/22 IPv6: 2403:18c0::/32 Signature Algorithm: sha256WithRSAEncryption 32:be:82:5d:7c:16:ce:80:64:61:50:af:fa:55:75:ce:c2:89: 37:10:1a:d6:96:76:72:15:f2:25:bf:ea:f5:ce:cf:ae:53:73: 16:54:39:1b:43:54:9e:07:f6:94:63:25:6d:57:eb:7c:c9:9f: 54:b7:b9:8d:a8:3d:bd:ac:0a:ea:0e:45:ab:1d:e6:04:71:15: 6d:64:75:cc:da:8c:3e:cd:7c:4f:f0:53:27:a6:a1:27:a8:1a: e6:91:81:a6:02:31:77:d0:c4:35:83:1b:6b:8a:a7:fc:e6:dc: 33:e2:69:c1:7a:4e:78:48:ab:64:21:da:21:03:93:d9:2d:87: 06:52:55:47:85:52:b6:13:de:56:61:80:23:7f:d8:d2:ef:24: 39:89:7a:a2:89:e5:31:4f:65:61:e9:2a:86:f4:3d:e6:d3:14: d5:2f:0b:2b:d4:f8:c3:dc:70:b1:b3:48:09:72:56:e2:0a:b6: 62:3b:29:79:f1:9e:1d:e6:ca:d1:74:b6:20:59:4a:7f:1b:5f: cf:aa:f2:64:ec:84:7e:e6:a4:4b:48:e3:56:31:b7:4e:ff:51: 23:85:5f:8f:7e:b7:b5:46:1b:55:65:cc:25:02:14:92:55:a9: ec:0a:6b:05:f5:f1:04:fa:4c:67:67:45:8e:ce:1f:a9:76:9b: ee:41:c4:93 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICFHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz NzJDN0UyOTIwHhcNMjUwNzIxMjI1MTU1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdlYzQ4Yi0xZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDkbBxwDz/uNn0sdZtRb+pEKE+c7HMBRfRROjXRaE1gqUP++7uTedTzSSDX2 JqmF6CBoBl11xTrsp86JMLVvIJ22a1U1Z9ixYbQtwPrDru6Jt8q/nmQne6AfH6io HYGPKZZeCANGbLzmbuXUcJus5wWbBCbxImNAck8RwvweEH7lbcc9G871aj09SR/7 wXYCEdbhpF+UeYR5nNmrdqpGiLs29WEx5vgfb+TxD+xbzwExXJCmiAO8Y6Q4LjDB 301+ryAi35iVzba8fBRP7xhm/wSNIm90bIGnVU8P9W+VeF/8lgXQtnEj/5EzUYY3 1dkYfah5eAQSRXr7LzUTdkeK3QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFHYPW9qK YqWmKTqLyaqUp3xL2mwxMB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4 M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzU2RkIvRTlGNTEwNDY3ODNBMTFFODkwN0Q1MjFBQzRGOUFFMDIvNkJCNkVGNzhF QjVGMTFFQ0I0MDYwRjg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJndWQDBAJnh/gwDQQCAAIwBwMFACQDGMAwDQYJKoZIhvcN AQELBQADggEBADK+gl18Fs6AZGFQr/pVdc7CiTcQGtaWdnIV8iW/6vXOz65TcxZU ORtDVJ4H9pRjJW1X63zJn1S3uY2oPb2sCuoORasd5gRxFW1kdczajD7NfE/wUyem oSeoGuaRgaYCMXfQxDWDG2uKp/zm3DPiacF6TnhIq2Qh2iEDk9kthwZSVUeFUrYT 3lZhgCN/2NLvJDmJeqKJ5TFPZWHpKob0PebTFNUvCyvU+MPccLGzSAlyVuIKtmI7 KXnxnh3mytF0tiBZSn8bX8+q8mTshH7mpEtI41Yxt07/USOFX49+t7VGG1VlzCUC FJJVqewKawX18QT6TGdnRY7OH6l2m+5BxJM= -----END CERTIFICATE-----Generated at Wed Jul 23 12:05:02 2025 by rpki-client