$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/316ABBEA854611F0AF075D70C4F9AE02.roa File: 316ABBEA854611F0AF075D70C4F9AE02.roa (raw, json) Hash identifier: VYKklQ7sC0GnSlFJLoi6ilrtCn1QqOw+2GAk4IP7i50= Subject key identifier: 61:2F:96:EE:89:85:41:A6:E1:30:39:3E:B5:5B:DA:41:0E:44:A5:A6 Certificate issuer: /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Certificate serial: 0595 Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/316ABBEA854611F0AF075D70C4F9AE02.roa Signing time: Sat 30 Aug 2025 02:09:07 +0000 ROA not before: Sat 30 Aug 2025 02:09:07 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 138910 IP address blocks: 103.167.254.0/24 maxlen: 24 103.167.255.0/24 maxlen: 24 2401:e420::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Validity Not Before: Aug 30 02:09:07 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68b25d43-3309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:70:87:43:b3:9e:2e:ff:7c:b7:b5:8a:86:ce: ba:44:9a:a0:1c:2c:33:ed:20:50:d0:c0:d0:7b:91: f7:44:60:a8:45:e5:fb:a6:e2:44:2f:72:13:9f:bb: 8a:d8:b1:ac:4f:83:74:6e:e5:79:60:c4:f4:f2:27: 85:74:fb:52:31:a8:05:ea:91:1a:14:cc:d2:6a:48: b6:2a:79:85:f4:88:23:17:b4:94:99:ab:f7:7f:4a: 94:07:e6:45:6a:98:1e:6f:95:8a:0b:ce:8c:dd:0d: 56:ec:f7:60:fa:16:a1:a7:7e:35:20:b2:8a:9c:1f: f3:b4:f1:99:e4:44:69:ce:89:52:06:b9:0d:89:02: ad:ba:68:1a:6d:0b:d5:5b:9d:4d:c3:16:4e:6c:92: 3e:27:16:9a:7b:2b:ec:5e:02:df:6e:48:08:d8:ac: 1d:0e:cc:4f:2d:7c:0f:be:85:90:12:81:2f:a7:05: 3c:59:b9:bf:a2:dd:18:09:11:5c:69:6c:18:02:6e: 2c:94:fa:ce:a6:17:b5:cf:9e:3c:1e:38:ed:b0:93: cb:ac:6e:dc:83:cf:78:25:4d:8e:bd:ef:9d:0a:71: 65:51:8c:eb:5f:b5:e7:24:9f:28:e6:00:51:bd:54: ca:90:13:11:78:cb:82:17:23:39:3a:a0:35:38:9c: a9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2F:96:EE:89:85:41:A6:E1:30:39:3E:B5:5B:DA:41:0E:44:A5:A6 X509v3 Authority Key Identifier: keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/316ABBEA854611F0AF075D70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.254.0/23 IPv6: 2401:e420::/32 Signature Algorithm: sha256WithRSAEncryption 3c:42:c3:87:63:5b:5f:a8:02:42:30:89:8f:db:cd:d6:50:cb: ca:44:5c:87:af:a9:19:b3:5b:8c:a9:14:3a:91:67:74:54:c9: 02:3e:14:ef:f4:21:7a:bd:b6:92:e3:2c:a1:18:ad:a1:62:b0: 7b:c3:44:ec:a9:2c:17:a7:5e:bf:18:ed:f0:cd:71:23:e6:4a: 69:7e:f5:64:ff:38:25:ce:83:49:a5:90:86:ce:b2:93:cb:c0: bc:59:98:df:a6:de:00:29:29:2e:79:6d:67:1a:a0:c7:0f:47: bd:07:e3:c5:45:11:73:4c:a2:e6:25:a9:4a:3e:75:47:81:6f: a8:20:76:8e:7e:de:d4:43:de:a9:e4:9a:c4:59:0d:a5:ab:ce: 43:40:f9:75:57:53:0f:39:59:8f:d4:fa:4e:a8:3a:90:7c:68: 07:30:52:34:c5:2a:46:79:28:23:a3:69:2d:31:b2:1a:a4:c0: ef:0b:8a:6a:ad:0e:25:3c:2d:2a:d8:d4:be:b3:77:22:70:42: a7:f0:52:78:57:3b:ce:64:49:bc:b2:be:73:b2:10:84:d9:aa: 14:16:52:1b:c9:e3:85:59:67:6e:7a:ae:f4:ba:e5:aa:22:c2: 1a:d7:1f:d9:6d:d8:18:66:c3:0e:50:14:db:52:fc:bc:7d:23: 81:49:cb:ac -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE2QUMxMTAvBgNVBAUTKEZFNUYxQzc1MDA0OEJCNTRFMDEzNzNBQzNFREQ0Qjc3 N0Q4ODhFNzkwHhcNMjUwODMwMDIwOTA3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIyNWQ0My0zMzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXCHQ7OeLv98t7WKhs66RJqgHCwz7SBQ0MDQe5H3RGCoReX7puJEL3ITn7uK 2LGsT4N0buV5YMT08ieFdPtSMagF6pEaFMzSaki2KnmF9IgjF7SUmav3f0qUB+ZF apgeb5WKC86M3Q1W7Pdg+hahp341ILKKnB/ztPGZ5ERpzolSBrkNiQKtumgabQvV W51NwxZObJI+JxaaeyvsXgLfbkgI2KwdDsxPLXwPvoWQEoEvpwU8Wbm/ot0YCRFc aWwYAm4slPrOphe1z548HjjtsJPLrG7cg894JU2Ove+dCnFlUYzrX7XnJJ8o5gBR vVTKkBMReMuCFyM5OqA1OJypdQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGEvlu6J hUGm4TA5PrVb2kEORKWmMB8GA1UdIwQYMBaAFP5fHHUASLtU4BNzrD7dS3d9iI55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTZBQy8zOEQyMzcyMkY2 MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUxVGdFM09zUHQxTGQzMklq bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sOGNkUUJJdTFUZ0UzT3NQdDFMZDMySWpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE2QUMvMzhEMjM3MjJGNjE3MTFFQkIyMEYxQTRFQzRGOUFFMDIvMzE2QUJCRUE4 NTQ2MTFGMEFGMDc1RDcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnp/4wDQQCAAIwBwMFACQB5CAwDQYJKoZIhvcNAQELBQAD ggEBADxCw4djW1+oAkIwiY/bzdZQy8pEXIevqRmzW4ypFDqRZ3RUyQI+FO/0IXq9 tpLjLKEYraFisHvDROypLBenXr8Y7fDNcSPmSml+9WT/OCXOg0mlkIbOspPLwLxZ mN+m3gApKS55bWcaoMcPR70H48VFEXNMouYlqUo+dUeBb6ggdo5+3tRD3qnkmsRZ DaWrzkNA+XVXUw85WY/U+k6oOpB8aAcwUjTFKkZ5KCOjaS0xshqkwO8LimqtDiU8 LSrY1L6zdyJwQqfwUnhXO85kSbyyvnOyEITZqhQWUhvJ44VZZ256rvS65aoiwhrX H9lt2Bhmww5QFNtS/Lx9I4FJy6w= -----END CERTIFICATE-----Generated at Sun Sep 7 14:54:41 2025 by rpki-client