$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6E98B3182D3411ED92165562C4F9AE02.roa File: 6E98B3182D3411ED92165562C4F9AE02.roa (raw, json) Hash identifier: 64gg/L8X7dQV3AAOAv3MN1klInujbmxMEcZ9X63m+I4= Subject key identifier: 96:F9:39:3D:A4:8C:51:54:0C:9D:F9:AC:1D:84:AA:19:A0:D4:19:50 Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Certificate serial: 0241 Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6E98B3182D3411ED92165562C4F9AE02.roa Signing time: Wed 09 Jul 2025 03:08:25 +0000 ROA not before: Wed 09 Jul 2025 03:08:25 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.10.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Validity Not Before: Jul 9 03:08:25 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=686ddd29-a405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7e:e4:70:18:50:2b:2c:6d:00:3d:4c:80:7f: 6a:64:8d:d1:fb:7b:b7:ad:1e:49:b1:fb:1d:18:77: 91:01:41:7f:66:2c:da:f2:4f:63:e5:9f:79:21:ec: 15:e5:d4:e8:2b:05:c6:5f:42:d4:f2:aa:b4:14:4e: 16:4a:92:db:cb:7f:01:c8:48:f2:fd:14:da:44:8b: ab:c4:e0:9a:59:6f:d8:73:13:41:18:96:df:b9:c3: d2:39:82:0b:25:60:a6:35:f9:3f:46:ed:6e:2f:63: b6:28:5f:03:58:18:8b:0f:1a:f3:ec:6d:e6:63:4e: cd:34:b3:ac:36:94:7e:a9:3a:32:72:5d:d2:77:6d: 88:3d:b5:2b:05:d9:5e:8b:14:d7:83:61:95:cf:9b: f0:6f:9b:72:d0:46:99:21:67:3c:ef:30:7e:84:c7: 86:f8:83:10:d2:ac:b0:17:3a:96:1b:5d:9d:78:1e: 37:4f:d4:8e:4d:b5:62:34:0d:7f:a0:16:8a:db:9b: 3f:af:bb:dd:a1:0c:f2:dc:59:5c:38:af:46:d6:23: ca:f6:e1:1d:e0:61:a9:71:47:8c:3d:66:5f:f4:ee: 41:75:93:96:1b:31:49:f8:d6:57:2a:80:fd:61:0e: b5:08:89:13:9f:8d:9d:41:7f:3e:ba:0a:d1:71:5d: ea:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F9:39:3D:A4:8C:51:54:0C:9D:F9:AC:1D:84:AA:19:A0:D4:19:50 X509v3 Authority Key Identifier: keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/6E98B3182D3411ED92165562C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.127.0/24 Signature Algorithm: sha256WithRSAEncryption 99:6e:1e:aa:ff:33:9e:14:ab:c9:b8:6b:00:c0:5e:06:df:5b: e0:fe:16:7d:29:8e:28:9a:de:54:e5:04:21:e0:79:2b:0e:30: 93:ee:63:4c:40:03:4b:22:e7:d5:75:30:e6:bf:42:35:68:e2: f9:51:86:b7:67:5f:14:83:3a:3a:8a:78:d4:a2:e6:36:d1:55: 02:e2:34:b8:26:7c:74:cd:07:aa:2e:de:60:b8:81:a7:3e:aa: aa:23:93:30:c9:dc:c0:ee:e5:c6:82:11:9c:ec:ed:a0:87:f7: 29:8c:55:9d:ac:00:5b:71:5b:cc:ee:4e:e7:68:d1:9c:cc:7e: 4b:c7:43:f7:5f:18:e9:8f:63:03:84:15:a8:ad:12:93:b5:86: 73:fc:dd:d6:7d:d0:1a:4b:4e:18:2b:91:93:e5:70:0b:6e:7a: 55:06:8a:32:a4:e5:8e:fc:eb:a8:62:0e:a4:79:06:75:9c:d9: 84:45:5e:78:89:f0:8d:6b:04:40:a0:e5:d6:ab:bf:7e:a1:6e: 4a:27:90:47:39:62:96:3b:9c:a6:72:26:49:74:de:26:a8:c9: 40:f3:45:01:a4:70:00:54:ac:58:af:5a:04:0d:93:4a:90:fd: 42:97:26:fb:bf:33:06:8a:b7:d2:a4:02:e0:bf:e1:4b:6f:50: 53:65:1f:14 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkExQkUxMTAvBgNVBAUTKDk1MjZBNjcyNDc4QUZBNzU0NDVEOEQwN0RDQzU3QzA1 ODk2NkVGRTIwHhcNMjUwNzA5MDMwODI1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZkZGQyOS1hNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt37kcBhQKyxtAD1MgH9qZI3R+3u3rR5JsfsdGHeRAUF/Ziza8k9j5Z95IewV 5dToKwXGX0LU8qq0FE4WSpLby38ByEjy/RTaRIurxOCaWW/YcxNBGJbfucPSOYIL JWCmNfk/Ru1uL2O2KF8DWBiLDxrz7G3mY07NNLOsNpR+qToycl3Sd22IPbUrBdle ixTXg2GVz5vwb5ty0EaZIWc87zB+hMeG+IMQ0qywFzqWG12deB43T9SOTbViNA1/ oBaK25s/r7vdoQzy3FlcOK9G1iPK9uEd4GGpcUeMPWZf9O5BdZOWGzFJ+NZXKoD9 YQ61CIkTn42dQX8+ugrRcV3qEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJb5OT2k jFFUDJ35rB2Eqhmg1BlQMB8GA1UdIwQYMBaAFJUmpnJHivp1RF2NB9zFfAWJZu/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTFCRS80MTY4RkY3NjJE MzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1uVkVYWTBIM01WOEJZbG03 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTYW1ja2VLLW5WRVhZMEgzTVY4QllsbTctSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkExQkUvNDE2OEZGNzYyRDMyMTFFRDkyQjhCNzYxQzRGOUFFMDIvNkU5OEIzMTgy RDM0MTFFRDkyMTY1NTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnCn8wDQYJKoZIhvcNAQELBQADggEBAJluHqr/M54Uq8m4 awDAXgbfW+D+Fn0pjiia3lTlBCHgeSsOMJPuY0xAA0si59V1MOa/QjVo4vlRhrdn XxSDOjqKeNSi5jbRVQLiNLgmfHTNB6ou3mC4gac+qqojkzDJ3MDu5caCEZzs7aCH 9ymMVZ2sAFtxW8zuTudo0ZzMfkvHQ/dfGOmPYwOEFaitEpO1hnP83dZ90BpLThgr kZPlcAtuelUGijKk5Y7866hiDqR5BnWc2YRFXniJ8I1rBECg5darv36hbkonkEc5 YpY7nKZyJkl03iaoyUDzRQGkcABUrFivWgQNk0qQ/UKXJvu/MwaKt9KkAuC/4Utv UFNlHxQ= -----END CERTIFICATE-----Generated at Mon Jul 21 18:33:06 2025 by rpki-client