$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/671C31AAC6C811ECA5A9AB33C4F9AE02.roa File: 671C31AAC6C811ECA5A9AB33C4F9AE02.roa (raw, json) Hash identifier: 0dwKgZ8jlIMiRytgvBci6vNzPpvAs9BdKSq60BEmluY= Subject key identifier: 94:08:2F:C9:93:BA:6B:DB:EC:3A:D4:A3:01:01:82:AD:3A:CB:30:4B Certificate issuer: /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Certificate serial: 0349 Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/671C31AAC6C811ECA5A9AB33C4F9AE02.roa Signing time: Thu 03 Jul 2025 01:36:22 +0000 ROA not before: Thu 03 Jul 2025 01:36:22 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132742 IP address blocks: 45.121.56.0/22 maxlen: 24 103.61.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6DB3, serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5 Validity Not Before: Jul 3 01:36:22 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6865de96-d547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:91:b4:61:a5:29:3d:8c:d7:0f:2a:09:db: f2:3e:87:b8:fb:74:5a:84:bf:23:70:3e:1d:69:ab: 9a:81:5c:5e:e5:4f:93:20:9b:e3:1e:7c:2d:5c:35: 56:7d:0a:a6:6c:1f:23:15:52:c6:30:15:40:01:4f: f0:75:13:58:05:59:dc:f3:c7:f8:db:5a:f2:5e:ac: 2e:fc:f9:8d:d4:0e:0a:88:58:d3:89:4b:e3:56:49: 9f:b5:57:1e:58:cb:ea:31:04:0b:f1:19:ca:2c:f5: ae:d7:05:3d:e9:8b:2f:46:5f:db:25:cf:41:68:e7: 8a:c8:b5:9b:e4:f1:5d:1b:4f:19:67:71:3b:ba:16: 7f:58:53:0c:ea:2a:16:c1:18:b9:e0:a3:c9:1c:54: 4b:4a:c3:c5:f2:dc:a7:32:58:4d:e6:a1:d3:75:8f: 23:ef:f8:87:2f:ca:28:48:ba:03:ce:25:50:4d:94: 4f:c4:54:2f:db:ef:12:db:df:90:32:c6:ec:3e:f1: 2a:d3:ec:ce:86:9b:ab:93:5b:3b:61:57:b7:29:52: 68:ef:da:d4:86:81:43:00:8a:76:61:6b:35:cb:b0: 30:16:63:92:81:7c:bc:6c:52:01:3e:36:14:f1:6b: 90:80:e4:9d:d3:53:3a:e8:35:45:e2:33:57:29:64: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:08:2F:C9:93:BA:6B:DB:EC:3A:D4:A3:01:01:82:AD:3A:CB:30:4B X509v3 Authority Key Identifier: keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/671C31AAC6C811ECA5A9AB33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.56.0/22 103.61.144.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:aa:4a:3c:a5:fe:5a:83:13:8e:e0:66:06:33:66:89:cc:2c: d0:92:a2:8d:e1:9c:33:80:ef:d9:3d:ef:22:6f:c6:1b:bc:ab: d4:28:b0:86:be:d4:21:b2:23:ba:cf:c7:e6:be:c4:06:8b:77: ab:07:b1:01:b2:88:8e:5c:d5:c4:9b:a8:ee:b4:73:1c:57:2f: c1:ad:f4:86:e3:f5:cf:7f:63:57:b0:e0:67:04:39:5b:47:f5: 23:75:d2:df:17:52:a9:d1:08:58:1a:98:be:c2:98:e3:61:c2: 2e:d2:e1:57:bc:44:14:37:5f:5b:12:1e:15:df:12:de:fb:54: c2:a5:5e:14:d9:c9:62:f9:cc:67:ed:3b:51:71:6e:e5:7a:c0: 87:bd:c9:0d:9e:d6:43:64:35:80:00:cf:41:c1:c5:b3:b7:91: cb:e5:3f:e3:a8:50:04:79:75:1d:a9:65:1b:45:44:94:62:d8: 16:b8:3a:57:71:f4:af:73:a2:b4:bb:83:d8:55:91:4d:b6:53: 74:83:60:a0:96:0c:ef:cf:66:7c:91:30:a3:76:95:29:95:0e: 08:83:f1:b1:c1:40:10:ec:3f:e0:fb:8b:77:e3:52:d6:78:04: 9f:60:8b:c3:98:7f:ff:20:44:bb:12:63:cc:f6:48:37:6a:ee: e7:fe:bb:5b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZEQjMxMTAvBgNVBAUTKDAzNzI0NkQ1MTRCODIzNDBFREUwNjI4OUJGMUJDOEM0 NTlEQkZDRTUwHhcNMjUwNzAzMDEzNjIyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1ZGU5Ni1kNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+uRtGGlKT2M1w8qCdvyPoe4+3RahL8jcD4daauagVxe5U+TIJvjHnwtXDVW fQqmbB8jFVLGMBVAAU/wdRNYBVnc88f421ryXqwu/PmN1A4KiFjTiUvjVkmftVce WMvqMQQL8RnKLPWu1wU96YsvRl/bJc9BaOeKyLWb5PFdG08ZZ3E7uhZ/WFMM6ioW wRi54KPJHFRLSsPF8tynMlhN5qHTdY8j7/iHL8ooSLoDziVQTZRPxFQv2+8S29+Q MsbsPvEq0+zOhpurk1s7YVe3KVJo79rUhoFDAIp2YWs1y7AwFmOSgXy8bFIBPjYU 8WuQgOSd01M66DVF4jNXKWQyWQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJQIL8mT umvb7DrUowEBgq06yzBLMB8GA1UdIwQYMBaAFANyRtUUuCNA7eBiib8byMRZ2/zl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkRCMy81M0FBMUJENEM2 MDgxMUVDOUIzMTQ0NkRDNEY5QUUwMi9BM0pHMVJTNEkwRHQ0R0tKdnh2SXhGbmJf T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzSkcxUlM0STBEdDRHS0p2eHZJeEZuYl9PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTZEQjMvNTNBQTFCRDRDNjA4MTFFQzlCMzE0NDZEQzRGOUFFMDIvNjcxQzMxQUFD NkM4MTFFQ0E1QTlBQjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIteTgDBAJnPZAwDQYJKoZIhvcNAQELBQADggEBAB2qSjyl /lqDE47gZgYzZonMLNCSoo3hnDOA79k97yJvxhu8q9QosIa+1CGyI7rPx+a+xAaL d6sHsQGyiI5c1cSbqO60cxxXL8Gt9Ibj9c9/Y1ew4GcEOVtH9SN10t8XUqnRCFga mL7CmONhwi7S4Ve8RBQ3X1sSHhXfEt77VMKlXhTZyWL5zGftO1FxbuV6wIe9yQ2e 1kNkNYAAz0HBxbO3kcvlP+OoUAR5dR2pZRtFRJRi2Ba4Oldx9K9zorS7g9hVkU22 U3SDYKCWDO/PZnyRMKN2lSmVDgiD8bHBQBDsP+D7i3fjUtZ4BJ9gi8OYf/8gRLsS Y8z2SDdq7uf+u1s= -----END CERTIFICATE-----Generated at Sun Jul 20 09:45:12 2025 by rpki-client