$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/FFD6AB1040F411F08D8C204AC4F9AE02.roa File: FFD6AB1040F411F08D8C204AC4F9AE02.roa (raw, json) Hash identifier: 3K4W+7OtVHJgk4srEUcij55PAdGX5TWIA4rxCYWbH/s= Subject key identifier: 5C:DB:AB:4B:D3:83:14:41:01:A1:6F:48:D3:8F:D6:25:A5:5A:D9:42 Certificate issuer: /CN=A91C7672/serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Certificate serial: 10 Authority key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/FFD6AB1040F411F08D8C204AC4F9AE02.roa Signing time: Mon 16 Jun 2025 11:07:22 +0000 ROA not before: Mon 16 Jun 2025 11:07:21 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 135882 IP address blocks: 103.78.252.0/24 maxlen: 24 103.78.253.0/24 maxlen: 24 103.78.254.0/24 maxlen: 24 103.78.255.0/24 maxlen: 24 2400:1140::/32 maxlen: 32 2400:1140::/36 maxlen: 36 2400:1140:1000::/36 maxlen: 36 2400:1140:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 16:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Validity Not Before: Jun 16 11:07:21 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=684ffae9-9354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:94:43:fb:64:2f:0f:a9:84:48:67:49:3d: b1:8f:2c:15:c2:36:7d:ff:d5:91:e8:c7:ee:32:94: 87:44:22:b6:ad:2c:cf:2d:88:e9:5f:1a:92:c5:ee: 45:2a:87:dd:a3:14:57:90:93:ac:26:0d:9f:e5:98: eb:51:e5:d7:45:ab:64:09:e8:0b:1d:95:9f:03:dc: 5e:dd:32:5c:03:2d:40:5b:f2:23:4b:e3:17:48:cf: f8:74:93:0c:eb:48:c8:2e:cb:f1:74:36:32:c8:af: 15:77:70:3a:b7:77:69:ef:49:c6:e9:71:1c:c5:ee: bc:14:d4:cf:b0:3a:49:89:50:a6:16:91:ac:8d:4d: 4e:bf:87:9b:6b:c0:19:e6:6a:11:1b:dd:5d:84:65: 60:91:37:4a:cc:25:ff:51:56:9f:79:79:08:60:82: 78:41:b3:33:d4:57:92:c7:52:87:ea:65:95:0d:c3: 10:f0:dd:1d:91:94:ff:82:6f:e6:1b:77:d0:ff:2c: d3:e2:b5:d6:9b:ec:6e:20:d6:8a:97:52:02:81:d1: e8:7a:b8:f9:f6:d6:ce:4e:1a:55:10:e8:89:6e:38: 9f:40:dd:8e:53:04:c0:19:dc:b1:4b:76:c9:3b:cb: 41:3d:b7:71:53:f0:a9:10:0c:3f:5c:33:41:c1:ef: 70:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DB:AB:4B:D3:83:14:41:01:A1:6F:48:D3:8F:D6:25:A5:5A:D9:42 X509v3 Authority Key Identifier: keyid:6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/FFD6AB1040F411F08D8C204AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.78.252.0/22 IPv6: 2400:1140::/32 Signature Algorithm: sha256WithRSAEncryption 4f:c4:e8:06:f4:c5:8f:6e:b4:44:30:96:e1:86:ef:7c:12:92: f4:71:d8:d5:b1:24:3e:24:2c:cd:2d:3e:10:66:3e:46:2f:23: cb:32:6b:58:e6:b7:e8:aa:5d:74:64:08:b8:08:e0:00:f0:73: 7e:3f:f1:93:85:4e:42:38:4d:f7:53:f6:1e:20:0f:4e:3c:a6: ac:96:4c:b9:c9:09:13:f6:ee:cf:ec:b3:85:cd:93:53:fd:e1: 4f:13:24:ce:d2:c2:d7:3a:73:72:ad:fa:fc:b7:85:26:b5:aa: 60:f5:95:82:e4:53:03:03:a1:e4:a6:d0:fd:6f:83:50:66:1e: 61:2e:05:c0:e3:fa:5b:e2:83:de:84:fe:99:c9:13:35:71:d4: 9f:28:51:cb:ee:cb:32:8b:0a:02:8c:83:3f:d5:db:97:16:1d: b7:38:f4:bb:04:52:a1:29:50:04:5a:84:be:c8:8a:ff:78:3c: 89:19:6f:f1:42:bf:89:bf:bf:49:03:7a:24:a8:fc:11:9e:d0: b1:c1:e0:ab:5c:73:82:e2:1c:98:89:22:cf:5f:61:20:f8:22: 3b:8f:36:e4:5e:ee:fe:a5:72:2f:1a:9a:9a:94:e6:15:2b:b8: 57:fd:25:ce:02:52:d3:a9:6f:3a:73:69:39:4a:eb:88:bc:3a: ab:55:43:cf -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzY3MjExMC8GA1UEBRMoNkM2RDQ3QjExMTRGMkQ1ODFBODIxMjgwNUYxMkMzNzQ3 RjM0QUY4MzAeFw0yNTA2MTYxMTA3MjFaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NGZmYWU5LTkzNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2SZRD+2QvD6mESGdJPbGPLBXCNn3/1ZHox+4ylIdEIratLM8tiOlfGpLF7kUq h92jFFeQk6wmDZ/lmOtR5ddFq2QJ6AsdlZ8D3F7dMlwDLUBb8iNL4xdIz/h0kwzr SMguy/F0NjLIrxV3cDq3d2nvScbpcRzF7rwU1M+wOkmJUKYWkayNTU6/h5trwBnm ahEb3V2EZWCRN0rMJf9RVp95eQhggnhBszPUV5LHUofqZZUNwxDw3R2RlP+Cb+Yb d9D/LNPitdab7G4g1oqXUgKB0eh6uPn21s5OGlUQ6IluOJ9A3Y5TBMAZ3LFLdsk7 y0E9t3FT8KkQDD9cM0HB73B/AgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUXNurS9OD FEEBoW9I04/WJaVa2UIwHwYDVR0jBBgwFoAUbG1HsRFPLVgaghKAXxLDdH80r4Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NjcyLzQzNzY0QkVDRjcy NDExRTZBQkYwMkIzQ0M0RjlBRTAyL2JHMUhzUkZQTFZnYWdoS0FYeExEZEg4MHI0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkcxSHNSRlBMVmdhZ2hLQVh4TERkSDgwcjRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzY3Mi80Mzc2NEJFQ0Y3MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9GRkQ2QUIxMDQw RjQxMUYwOEQ4QzIwNEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAmdO/DANBAIAAjAHAwUAJAARQDANBgkqhkiG9w0BAQsFAAOC AQEAT8ToBvTFj260RDCW4YbvfBKS9HHY1bEkPiQszS0+EGY+Ri8jyzJrWOa36Kpd dGQIuAjgAPBzfj/xk4VOQjhN91P2HiAPTjymrJZMuckJE/buz+yzhc2TU/3hTxMk ztLC1zpzcq36/LeFJrWqYPWVguRTAwOh5KbQ/W+DUGYeYS4FwOP6W+KD3oT+mckT NXHUnyhRy+7LMosKAoyDP9XblxYdtzj0uwRSoSlQBFqEvsiK/3g8iRlv8UK/ib+/ SQN6JKj8EZ7QscHgq1xzguIcmIkiz19hIPgiO4825F7u/qVyLxqampTmFSu4V/0l zgJS06lvOnNpOUrriLw6q1VDzw== -----END CERTIFICATE-----Generated at Sun Jul 27 00:57:21 2025 by rpki-client