$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/9AE082EC318D11F0A159DF79C4F9AE02.roa File: 9AE082EC318D11F0A159DF79C4F9AE02.roa (raw, json) Hash identifier: dj/LmQc2hRVWA4GM8f+Wg6owa5LOjJ859j6JGTqOjXo= Subject key identifier: 88:0C:09:AF:94:9C:B4:0B:32:41:AB:B5:60:88:D8:60:DE:83:57:AA Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Certificate serial: 0738 Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/9AE082EC318D11F0A159DF79C4F9AE02.roa Signing time: Fri 30 May 2025 09:01:21 +0000 ROA not before: Fri 30 May 2025 09:01:21 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 142044 IP address blocks: 103.165.158.0/24 maxlen: 24 202.94.165.0/24 maxlen: 24 2407:4ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 22:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848 (0x738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Validity Not Before: May 30 09:01:21 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=683973e1-8ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:36:ce:a8:21:88:24:1c:a2:b3:20:57:e3:e5: 1f:2d:c4:d2:4c:db:ab:29:5b:9c:a1:4b:23:bc:79: 1c:dc:4f:2b:21:91:97:0c:57:56:c8:97:71:f5:13: 83:2d:f2:6a:df:bc:19:46:55:87:7d:5b:62:47:4d: c2:a9:b4:11:8c:b5:cb:fc:ea:45:1a:f6:c9:72:a4: a9:e4:3c:56:bf:da:5c:b6:af:b6:b8:7d:45:a2:2b: f4:de:e9:d1:d8:64:d3:86:29:2d:c1:5b:8b:5c:ad: 8f:a0:23:fe:7a:df:d0:41:49:9b:3d:34:23:16:c5: f6:ff:ad:45:4a:ce:2c:03:d4:6c:df:4a:dc:f4:ff: 67:30:cd:64:b6:75:4a:79:17:5c:7b:11:14:2a:02: a6:56:d4:96:ae:15:08:33:50:46:de:07:43:b2:ff: a0:7e:73:2c:71:18:1d:87:35:c2:13:40:70:05:57: 00:bf:d7:1e:14:98:84:46:54:13:0a:0e:51:e1:ee: 83:44:25:8b:bb:d9:46:e9:53:69:51:66:6f:7d:5d: 9b:2c:0c:29:fd:e6:53:73:84:2d:84:0b:1f:a2:dd: da:d3:ce:da:d4:72:72:a2:41:d3:fc:af:c2:9d:4c: bf:c1:b1:54:7e:76:aa:12:1f:f9:15:bd:e4:9a:06: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0C:09:AF:94:9C:B4:0B:32:41:AB:B5:60:88:D8:60:DE:83:57:AA X509v3 Authority Key Identifier: keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/9AE082EC318D11F0A159DF79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.158.0/24 202.94.165.0/24 IPv6: 2407:4ac0::/32 Signature Algorithm: sha256WithRSAEncryption bd:8d:cd:fe:86:62:be:2e:93:42:f7:0d:be:56:9f:16:67:35: c2:4a:43:22:ce:2e:98:18:ea:de:f8:5a:62:ad:10:f0:f7:96: 2e:75:7e:0f:b3:f3:1c:32:4d:79:4b:47:8a:e2:9f:ed:51:02: dd:bf:2d:01:96:b8:c3:50:56:bd:9d:a7:f3:f9:ed:60:ad:d8: b3:60:4b:96:e8:f9:bd:65:fd:74:c5:45:05:04:19:a4:c7:44: 16:b1:02:7f:34:25:f5:7e:3e:75:af:0d:50:97:c5:70:84:d0: 02:a0:c5:6f:e1:59:f1:1c:72:89:ab:39:62:b6:b0:b6:bf:c0: 8e:d6:2e:f1:ef:21:8e:ed:4f:67:95:20:4f:f5:4e:82:84:8b: 27:ce:93:08:05:19:dc:76:f0:89:34:8b:87:f7:42:7d:9b:7b: c8:1f:de:1a:a6:a8:71:bd:7e:66:da:a3:c4:f7:6b:54:b6:38: a4:ed:6a:cc:0c:e3:e7:cd:2c:bf:c8:49:80:bc:3f:3f:87:4f: 06:43:88:86:c6:e9:83:97:45:b0:b6:8b:b2:59:86:42:4c:23: d0:f7:93:c1:9f:a9:68:89:7f:8f:89:80:d0:2d:a7:6e:73:ea: 8f:a0:7d:49:46:dd:eb:45:13:6b:57:d0:c8:f1:36:ba:af:9e: b9:0e:11:1e -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2QjcxMTAvBgNVBAUTKDgzRDk2RjFERUE3MkE5OUQyMzRCNDQ1NkQ2RjY2NzVE QzdFNjA2MUUwHhcNMjUwNTMwMDkwMTIxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM5NzNlMS04YWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjbOqCGIJByisyBX4+UfLcTSTNurKVucoUsjvHkc3E8rIZGXDFdWyJdx9ROD LfJq37wZRlWHfVtiR03CqbQRjLXL/OpFGvbJcqSp5DxWv9pctq+2uH1Foiv03unR 2GTThiktwVuLXK2PoCP+et/QQUmbPTQjFsX2/61FSs4sA9Rs30rc9P9nMM1ktnVK eRdcexEUKgKmVtSWrhUIM1BG3gdDsv+gfnMscRgdhzXCE0BwBVcAv9ceFJiERlQT Cg5R4e6DRCWLu9lG6VNpUWZvfV2bLAwp/eZTc4QthAsfot3a087a1HJyokHT/K/C nUy/wbFUfnaqEh/5Fb3kmgZ/WwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFIgMCa+U nLQLMkGrtWCI2GDeg1eqMB8GA1UdIwQYMBaAFIPZbx3qcqmdI0tEVtb2Z13H5gYe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZCNy85NUVGN0RCQTk2 N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFaMGpTMFJXMXZablhjZm1C aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c5bHZIZXB5cVowalMwUlcxdlpuWGNmbUJoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU2QjcvOTVFRjdEQkE5NjdEMTFFQkFERDUwRDJDQzRGOUFFMDIvOUFFMDgyRUMz MThEMTFGMEExNTlERjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnpZ4DBADKXqUwDQQCAAIwBwMFACQHSsAwDQYJKoZIhvcN AQELBQADggEBAL2Nzf6GYr4uk0L3Db5WnxZnNcJKQyLOLpgY6t74WmKtEPD3li51 fg+z8xwyTXlLR4rin+1RAt2/LQGWuMNQVr2dp/P57WCt2LNgS5bo+b1l/XTFRQUE GaTHRBaxAn80JfV+PnWvDVCXxXCE0AKgxW/hWfEccomrOWK2sLa/wI7WLvHvIY7t T2eVIE/1ToKEiyfOkwgFGdx28Ik0i4f3Qn2be8gf3hqmqHG9fmbao8T3a1S2OKTt aswM4+fNLL/ISYC8Pz+HTwZDiIbG6YOXRbC2i7JZhkJMI9D3k8GfqWiJf4+JgNAt p25z6o+gfUlG3etFE2tX0MjxNrqvnrkOER4= -----END CERTIFICATE-----Generated at Thu Jun 5 20:00:20 2025 by rpki-client