$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/205AD1805C8A11F09D065A67C4F9AE02.roa File: 205AD1805C8A11F09D065A67C4F9AE02.roa (raw, json) Hash identifier: /HSo5jxbj7peidwO9alg4qXB6CLHjHvT7Exk5bMgxFc= Subject key identifier: 6E:C3:BE:D8:31:B8:0D:C5:A2:E2:1C:79:FF:8A:3F:C8:6C:82:E6:28 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 0331 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/205AD1805C8A11F09D065A67C4F9AE02.roa Signing time: Wed 09 Jul 2025 06:01:17 +0000 ROA not before: Wed 09 Jul 2025 06:01:17 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.26.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 817 (0x331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Jul 9 06:01:17 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=686e05ac-0454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:4e:ab:df:b2:8b:6c:23:77:14:e6:9d:f7: 2e:69:e6:a1:10:b1:89:37:0f:7c:20:f0:a3:75:e9: 90:2b:5b:03:5e:8a:dc:e3:60:9c:31:ed:5b:20:52: f9:42:5f:b1:9e:42:c0:b0:da:8c:d0:47:3f:44:45: a8:a2:0a:cd:e9:d3:5c:f3:e8:9c:05:bb:3d:15:53: 6a:87:f4:f5:83:8f:0a:b3:de:68:60:02:b7:da:db: 91:a0:00:58:0c:1d:63:4e:a6:8d:16:e6:9f:e7:e6: f6:ce:58:0c:8d:a6:4f:de:4e:8f:9c:96:41:9b:77: d3:c6:35:88:f6:6f:fc:65:3c:21:0a:d0:ae:f5:74: 3a:52:09:38:2b:8f:68:b4:58:13:f3:cd:2e:dd:b3: 19:21:8a:1f:03:ae:31:e8:66:0a:0a:69:b7:bf:2c: e5:ee:87:6b:9e:eb:bd:08:6b:0f:bf:1f:57:23:1d: 5c:d4:a0:89:d2:ef:23:88:29:66:9e:ad:02:84:31: 0f:ae:77:3f:e0:30:8c:1f:94:f3:8e:72:00:38:da: 3f:26:b5:8b:df:e8:ba:e2:98:94:78:f1:aa:de:46: 27:25:b6:0e:79:88:0f:2b:ed:d6:dd:ae:75:c8:a9: 57:72:6e:4e:f1:7c:0d:12:49:73:f3:ee:23:16:23: f7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C3:BE:D8:31:B8:0D:C5:A2:E2:1C:79:FF:8A:3F:C8:6C:82:E6:28 X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/205AD1805C8A11F09D065A67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.26.9.0/24 Signature Algorithm: sha256WithRSAEncryption 85:54:c0:32:08:9d:83:a6:a1:b0:4a:f3:97:2b:8a:10:6e:e3: 3f:c4:89:d2:cc:72:e5:c3:d5:c8:19:c3:4e:ae:a3:d9:c3:e6: f2:dd:82:be:39:41:64:9a:d3:3b:97:8b:a6:e1:46:73:e8:3e: b1:bc:5b:2c:a0:0c:50:f8:27:da:b3:e8:f5:97:6e:b1:60:14: f3:81:a5:58:14:d2:ff:93:39:cb:f4:4b:90:6f:a4:9f:6e:fc: 55:52:92:29:08:f9:c3:1d:5c:7d:5e:53:cf:ac:31:13:c9:3e: 82:f7:be:f6:6a:f3:0e:23:5f:09:db:93:85:10:f9:c6:b1:21: cf:6e:bf:09:27:bd:18:92:46:fb:61:cf:cc:a6:02:8f:cb:42: a9:fa:2f:c5:b8:94:d6:04:1b:29:22:43:3a:a1:21:31:41:fc: d6:48:93:88:bd:b0:5e:a2:f6:7f:8b:22:50:06:f2:78:97:75: 5c:c9:09:93:88:3a:74:62:a5:24:7b:62:d6:32:f5:c0:cc:fc: 2e:f1:20:bb:79:3a:4a:68:fc:94:8e:29:d1:bc:30:99:e4:d7: eb:61:23:74:d4:3a:b1:cd:8a:94:84:56:e4:d7:88:99:bd:14: 4b:41:23:ac:d3:14:d1:5c:a7:14:3e:c5:e1:84:60:25:1b:cb: 6b:20:48:b3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjUwNzA5MDYwMTE3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZlMDVhYy0wNDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCFOq9+yi2wjdxTmnfcuaeahELGJNw98IPCjdemQK1sDXorc42CcMe1bIFL5 Ql+xnkLAsNqM0Ec/REWoogrN6dNc8+icBbs9FVNqh/T1g48Ks95oYAK32tuRoABY DB1jTqaNFuaf5+b2zlgMjaZP3k6PnJZBm3fTxjWI9m/8ZTwhCtCu9XQ6Ugk4K49o tFgT880u3bMZIYofA64x6GYKCmm3vyzl7odrnuu9CGsPvx9XIx1c1KCJ0u8jiClm nq0ChDEPrnc/4DCMH5TzjnIAONo/JrWL3+i64piUePGq3kYnJbYOeYgPK+3W3a51 yKlXcm5O8XwNEklz8+4jFiP3lQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG7Dvtgx uA3FouIcef+KP8hsguYoMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRFMzIvNzIwOTU5RkMwMUMwMTFFREJEN0M2RjU4QzRGOUFFMDIvMjA1QUQxODA1 QzhBMTFGMDlEMDY1QTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnGgkwDQYJKoZIhvcNAQELBQADggEBAIVUwDIInYOmobBK 85crihBu4z/EidLMcuXD1cgZw06uo9nD5vLdgr45QWSa0zuXi6bhRnPoPrG8Wyyg DFD4J9qz6PWXbrFgFPOBpVgU0v+TOcv0S5BvpJ9u/FVSkikI+cMdXH1eU8+sMRPJ PoL3vvZq8w4jXwnbk4UQ+caxIc9uvwknvRiSRvthz8ymAo/LQqn6L8W4lNYEGyki QzqhITFB/NZIk4i9sF6i9n+LIlAG8niXdVzJCZOIOnRipSR7YtYy9cDM/C7xILt5 Okpo/JSOKdG8MJnk1+thI3TUOrHNipSEVuTXiJm9FEtBI6zTFNFcpxQ+xeGEYCUb y2sgSLM= -----END CERTIFICATE-----Generated at Sun Jul 20 21:19:55 2025 by rpki-client