$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/F1C77A3C73E711ECA415F87FC4F9AE02.roa File: F1C77A3C73E711ECA415F87FC4F9AE02.roa (raw, json) Hash identifier: azq2/w0vOg+2swjHdLzDRr5hvzTCb3H9CNSdtAvO6hc= Subject key identifier: 7B:5F:61:2A:DF:84:7F:01:12:29:9D:9A:07:36:ED:DE:7F:EC:50:AE Certificate issuer: /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D Certificate serial: 0537 Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/F1C77A3C73E711ECA415F87FC4F9AE02.roa Signing time: Sat 05 Jul 2025 00:06:28 +0000 ROA not before: Sat 05 Jul 2025 00:06:28 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 63473 IP address blocks: 103.167.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 23:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1335 (0x537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE352, serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D Validity Not Before: Jul 5 00:06:28 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68686c84-458e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:3c:7f:7f:39:60:14:fa:6d:65:57:78:e0:7e: 13:34:ac:3f:14:a8:4a:44:55:84:0c:34:31:9a:2e: 87:e5:d6:60:4f:79:59:f0:9b:3f:f3:35:25:ed:5b: 1a:b3:fc:cb:07:85:21:4f:b0:d8:eb:0d:c9:2d:1f: 23:1b:f3:18:12:e1:04:bc:6c:e1:90:0c:81:18:e3: fd:f5:8e:34:e4:fb:af:26:25:17:78:1e:ad:59:fb: 02:e0:91:61:21:f2:d9:57:c2:d5:af:f8:3d:6f:b6: 22:83:78:e0:1f:5d:db:de:64:61:42:84:d1:9e:86: 54:9b:7b:c0:59:04:0b:5f:5b:d8:82:24:13:f1:35: 11:8f:b2:10:c6:09:92:2e:07:a8:c7:f0:dc:93:c4: d1:ae:3c:e0:85:5e:59:82:98:2d:2d:5f:3c:65:2f: 1e:1e:5a:7e:0e:39:e6:af:f3:e7:5e:43:d0:67:1b: f6:2f:88:82:f7:0e:a3:4a:4a:6d:1f:f8:9c:d1:c3: d6:a6:41:0a:c7:77:7e:6b:cf:9f:db:73:00:6b:b1: 6a:20:69:e5:4e:f3:15:4b:5f:b9:a4:df:d8:48:cc: 80:cd:53:fb:35:28:da:86:88:01:5d:ef:50:0b:1b: 2d:92:44:09:e2:2b:4f:80:61:d0:23:31:37:b5:a2: 07:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5F:61:2A:DF:84:7F:01:12:29:9D:9A:07:36:ED:DE:7F:EC:50:AE X509v3 Authority Key Identifier: keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/F1C77A3C73E711ECA415F87FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.150.0/23 Signature Algorithm: sha256WithRSAEncryption df:a7:42:2c:64:ba:90:4e:25:b1:4a:0c:ab:b3:e0:23:2f:70: b6:4d:5c:82:79:f7:72:a6:b8:74:48:67:c3:13:05:cb:ab:0a: 90:3b:83:9f:6e:4f:c1:2c:16:b1:14:48:bd:0e:cd:4f:08:60: cf:15:7c:93:c3:e8:21:5e:39:2c:35:c0:ee:09:ea:bf:fd:a4: 6c:5f:98:10:04:4a:ca:ec:e2:94:60:ef:ed:18:aa:06:75:6a: f2:04:9b:dd:8e:40:9c:bf:df:85:62:f4:23:81:fd:c6:92:a9: 02:4c:a7:dd:57:4c:36:e7:b4:ed:ad:b8:f7:34:e7:8e:ef:64: 38:2c:0a:05:4c:6e:fa:e7:1f:82:76:b3:0a:93:d0:a2:95:5b: 3d:56:e7:31:3a:28:7e:88:fb:5c:14:85:79:3a:51:b7:a2:08: f1:e9:cf:ad:c7:2a:07:2f:98:3d:97:1d:11:2d:0d:dd:34:9c: 96:bb:5e:c3:14:33:9e:ab:88:ce:6e:3d:1a:70:88:e4:26:de: 2d:7a:bb:18:a3:d1:eb:5e:39:10:f5:24:32:55:36:47:de:6c: e7:6b:e3:d0:52:d8:b3:20:fc:56:3c:9f:21:6a:d4:36:8b:a7: 7f:64:19:06:b7:2f:6d:77:a7:f2:f5:3f:bf:f0:2a:2d:df:b2: 7b:c4:18:80 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUzNTIxMTAvBgNVBAUTKENBQTZFQjk5QjNGRTBFRkI2NUQzOEYxNUIyQUFFNERD MzlEQUIzMUQwHhcNMjUwNzA1MDAwNjI4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4NmM4NC00NThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Tx/fzlgFPptZVd44H4TNKw/FKhKRFWEDDQxmi6H5dZgT3lZ8Js/8zUl7Vsa s/zLB4UhT7DY6w3JLR8jG/MYEuEEvGzhkAyBGOP99Y405PuvJiUXeB6tWfsC4JFh IfLZV8LVr/g9b7Yig3jgH13b3mRhQoTRnoZUm3vAWQQLX1vYgiQT8TURj7IQxgmS Lgeox/Dck8TRrjzghV5ZgpgtLV88ZS8eHlp+Djnmr/PnXkPQZxv2L4iC9w6jSkpt H/ic0cPWpkEKx3d+a8+f23MAa7FqIGnlTvMVS1+5pN/YSMyAzVP7NSjahogBXe9Q CxstkkQJ4itPgGHQIzE3taIHLwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHtfYSrf hH8BEimdmgc27d5/7FCuMB8GA1UdIwQYMBaAFMqm65mz/g77ZdOPFbKq5Nw52rMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTM1Mi9DOEUyMkU4QTAx MTYxMUVDOUNDREU3MjJDNEY5QUUwMi95cWJybWJQLUR2dGwwNDhWc3FyazNEbmFz eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxYnJtYlAtRHZ0bDA0OFZzcXJrM0RuYXN4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REUzNTIvQzhFMjJFOEEwMTE2MTFFQzlDQ0RFNzIyQzRGOUFFMDIvRjFDNzdBM0M3 M0U3MTFFQ0E0MTVGODdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnp5YwDQYJKoZIhvcNAQELBQADggEBAN+nQixkupBOJbFK DKuz4CMvcLZNXIJ593KmuHRIZ8MTBcurCpA7g59uT8EsFrEUSL0OzU8IYM8VfJPD 6CFeOSw1wO4J6r/9pGxfmBAESsrs4pRg7+0YqgZ1avIEm92OQJy/34Vi9COB/caS qQJMp91XTDbntO2tuPc0547vZDgsCgVMbvrnH4J2swqT0KKVWz1W5zE6KH6I+1wU hXk6UbeiCPHpz63HKgcvmD2XHREtDd00nJa7XsMUM56riM5uPRpwiOQm3i16uxij 0eteORD1JDJVNkfebOdr49BS2LMg/FY8nyFq1DaLp39kGQa3L213p/L1P7/wKi3f snvEGIA= -----END CERTIFICATE-----Generated at Sat Jul 26 03:24:25 2025 by rpki-client