$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/2E809260BFC511EBAD79ED25C4F9AE02.roa File: 2E809260BFC511EBAD79ED25C4F9AE02.roa (raw, json) Hash identifier: UYRwr7mrGPcB3M4JZ+3w5dX5RLWsIV6TVX8sVBNCGfw= Subject key identifier: A7:84:24:57:00:13:62:8C:1A:F2:1C:56:B7:34:A4:E6:74:61:73:27 Certificate issuer: /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Certificate serial: 05F2 Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/2E809260BFC511EBAD79ED25C4F9AE02.roa Signing time: Fri 04 Jul 2025 23:35:38 +0000 ROA not before: Fri 04 Jul 2025 23:35:38 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135345 IP address blocks: 103.166.248.0/24 maxlen: 24 103.166.249.0/24 maxlen: 24 2407:5dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1522 (0x5f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F60A7, serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Validity Not Before: Jul 4 23:35:38 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6868654a-2eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2d:81:80:ee:7f:6f:a4:26:0c:ea:1b:e0:70: bd:77:b1:5d:5f:87:de:4a:4a:3c:a4:b8:f9:38:e7: a9:25:f7:f7:70:22:63:75:c8:5a:3a:8e:25:c1:d8: 10:cd:25:b2:21:61:fa:d7:27:cd:07:ef:61:b2:d4: 5d:e0:8a:93:8c:56:63:ef:f4:15:55:39:9c:0b:2c: b0:a3:55:ae:ac:d3:37:95:ce:73:f5:51:bb:8b:e1: af:3d:c8:72:fa:9a:a6:a6:31:fb:8c:b8:bb:72:5d: fc:fc:e2:13:9d:04:35:41:85:9f:d2:01:bc:dd:a0: 0d:75:1e:1a:ef:08:3c:b8:02:60:0b:97:5e:b4:3e: e5:be:a9:aa:c7:0b:6e:6a:e7:99:b7:95:88:32:09: 6d:61:33:1d:04:c5:f3:ee:ff:f3:60:46:a4:9c:48: 58:f2:ab:2a:8a:2f:1f:1d:83:87:38:b5:3d:80:10: 2b:58:38:fe:ce:e4:4e:af:1a:12:ba:d8:8c:cf:13: 38:cb:3c:ea:f4:ff:0a:69:c6:fb:75:0f:c4:62:6e: 1a:3c:4d:61:b2:57:1b:2b:92:71:cc:d5:49:f6:81: a8:51:d7:b9:b0:4f:92:c7:f3:c8:66:90:6c:7d:c6: 82:47:a9:67:2d:9d:4b:2e:07:e6:2a:f1:8c:f8:fd: 2d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:84:24:57:00:13:62:8C:1A:F2:1C:56:B7:34:A4:E6:74:61:73:27 X509v3 Authority Key Identifier: keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/2E809260BFC511EBAD79ED25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.248.0/23 IPv6: 2407:5dc0::/32 Signature Algorithm: sha256WithRSAEncryption 74:5b:23:e2:ae:12:93:18:39:e5:d5:7a:90:dd:db:c2:7e:98: 7f:95:1f:ee:10:6b:3a:ad:d4:58:b2:37:c9:37:7c:7f:f5:d3: 84:7f:eb:87:22:86:d0:59:6b:d9:87:95:7e:f5:58:16:97:02: 20:fd:d7:02:f3:2b:9a:6e:6f:2b:c6:3d:6a:3f:b3:96:9a:33: bf:c0:79:ea:c2:99:06:43:77:47:7e:59:3f:bc:5b:90:86:cb: 5e:34:0c:95:ed:a4:32:a4:e7:8c:a5:5e:42:2b:dc:3f:ac:c9: f0:08:1b:a3:b7:ad:fe:63:c4:63:83:80:bd:4e:75:37:5f:f7: 20:53:ab:66:54:32:04:09:17:f1:68:00:e1:aa:cc:47:c0:c5: 03:00:a8:be:0c:ff:6d:85:35:5b:66:17:8a:5d:a8:a2:8d:25: 19:01:ad:ad:1c:1d:8c:f1:f8:87:29:8f:09:22:db:34:17:c2: 19:e0:95:28:20:4e:2d:67:8b:90:18:e1:89:9d:35:19:6c:da: 31:ba:98:1d:0f:4c:6c:f9:84:63:79:59:9c:21:5a:03:65:d1: 42:1f:16:90:2f:ee:99:ea:b6:6c:5c:2b:ae:6a:d6:8a:27:e3: 72:21:cc:de:3e:d3:64:cc:38:1c:9e:e2:ed:a2:4a:b6:ff:ed: f2:7d:a5:60 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwQTcxMTAvBgNVBAUTKDQ4RjEzMjc2MzJEN0RCRUYzMzFDMEUyNDg5RUVFM0Y1 QkVGQjg0NTIwHhcNMjUwNzA0MjMzNTM4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4NjU0YS0yZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6S2BgO5/b6QmDOob4HC9d7FdX4feSko8pLj5OOepJff3cCJjdchaOo4lwdgQ zSWyIWH61yfNB+9hstRd4IqTjFZj7/QVVTmcCyywo1WurNM3lc5z9VG7i+GvPchy +pqmpjH7jLi7cl38/OITnQQ1QYWf0gG83aANdR4a7wg8uAJgC5detD7lvqmqxwtu aueZt5WIMgltYTMdBMXz7v/zYEaknEhY8qsqii8fHYOHOLU9gBArWDj+zuROrxoS utiMzxM4yzzq9P8Kacb7dQ/EYm4aPE1hslcbK5JxzNVJ9oGoUde5sE+Sx/PIZpBs fcaCR6lnLZ1LLgfmKvGM+P0tcwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFKeEJFcA E2KMGvIcVrc0pOZ0YXMnMB8GA1UdIwQYMBaAFEjxMnYy19vvMxwOJInu4/W++4RS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjBBNy80RTAwRkU5QUJE MUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDItOHpIQTRraWU3ajliNzdo RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQRXlkakxYMi04ekhBNGtpZTdqOWI3N2hGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjYwQTcvNEUwMEZFOUFCRDFEMTFFQjlBRDg1RDQ1QzRGOUFFMDIvMkU4MDkyNjBC RkM1MTFFQkFENzlFRDI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnpvgwDQQCAAIwBwMFACQHXcAwDQYJKoZIhvcNAQELBQAD ggEBAHRbI+KuEpMYOeXVepDd28J+mH+VH+4Qazqt1FiyN8k3fH/104R/64cihtBZ a9mHlX71WBaXAiD91wLzK5pubyvGPWo/s5aaM7/AeerCmQZDd0d+WT+8W5CGy140 DJXtpDKk54ylXkIr3D+syfAIG6O3rf5jxGODgL1OdTdf9yBTq2ZUMgQJF/FoAOGq zEfAxQMAqL4M/22FNVtmF4pdqKKNJRkBra0cHYzx+Icpjwki2zQXwhnglSggTi1n i5AY4YmdNRls2jG6mB0PTGz5hGN5WZwhWgNl0UIfFpAv7pnqtmxcK65q1oon43Ih zN4+02TMOBye4u2iSrb/7fJ9pWA= -----END CERTIFICATE-----Generated at Sun Jul 20 13:37:31 2025 by rpki-client