$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/25E96E4C2F6511F0A4430347C4F9AE02.roa File: 25E96E4C2F6511F0A4430347C4F9AE02.roa (raw, json) Hash identifier: 1Yct3nRJtVY9HiL2zSbCvIf02xNnDEaRtj5Z7mWSdjk= Subject key identifier: 97:94:C2:E8:18:81:4A:8F:E0:B8:94:C8:71:D8:1E:1B:99:6E:E9:11 Certificate issuer: /CN=A91A05A0/serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Certificate serial: 02 Authority key identifier: A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/25E96E4C2F6511F0A4430347C4F9AE02.roa Signing time: Mon 12 May 2025 19:13:12 +0000 ROA not before: Mon 12 May 2025 19:13:12 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 139225 IP address blocks: 103.140.3.0/24 maxlen: 24 2001:df0:a280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A05A0, serialNumber=A0F9EB6981DC72A278B185289906C1E11C0B35F1 Validity Not Before: May 12 19:13:12 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=68224848-7537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:0e:6e:0d:1e:c5:70:f6:ad:ed:69:da:f6: 21:dc:ec:7a:9e:6b:69:81:6e:09:bd:86:3e:ea:dc: c1:e6:be:84:7e:ab:a8:14:ea:c1:63:96:c2:c0:de: 29:de:6f:4d:95:1a:26:09:1e:0f:e9:5c:db:de:4f: 2a:c9:b6:f6:a1:4e:26:e8:78:46:89:45:c0:bb:db: 25:ff:5c:09:68:e8:17:b3:a2:65:3c:0f:d6:f7:ef: 6b:77:53:2e:4f:f2:d8:2d:f1:7e:e2:45:95:d8:3f: df:fb:a9:71:13:49:e6:6a:44:84:ca:ac:21:cf:4a: 99:d0:06:06:59:77:ca:fb:9b:81:d0:28:bb:a5:4e: f2:03:c0:bb:3d:fc:6d:a1:18:72:91:5b:c5:46:22: aa:b5:30:f2:43:e6:c2:1a:e2:44:58:bf:51:79:f6: 8b:04:7b:df:34:66:a1:2c:e3:ca:c2:65:23:92:43: 96:aa:ae:e9:5e:fd:b6:36:7a:6f:78:2d:2a:f4:59: 4b:fa:33:30:b7:16:c8:98:b9:37:46:ea:9c:c4:21: b5:f1:48:d8:70:9b:2d:b9:38:28:30:4e:51:56:cd: 6a:3d:c2:ac:77:6c:8e:17:d2:89:01:7d:c9:2d:9a: d6:fa:4f:9c:71:2e:1a:7f:0a:df:3f:e4:73:5b:74: 4c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:94:C2:E8:18:81:4A:8F:E0:B8:94:C8:71:D8:1E:1B:99:6E:E9:11 X509v3 Authority Key Identifier: keyid:A0:F9:EB:69:81:DC:72:A2:78:B1:85:28:99:06:C1:E1:1C:0B:35:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/oPnraYHccqJ4sYUomQbB4RwLNfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPnraYHccqJ4sYUomQbB4RwLNfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05A0/9C5371782F6411F0B4F2A245C4F9AE02/25E96E4C2F6511F0A4430347C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.3.0/24 IPv6: 2001:df0:a280::/48 Signature Algorithm: sha256WithRSAEncryption 38:d2:9b:7e:6d:42:d5:3c:e8:63:e9:2f:dd:96:50:dd:4b:b6: b2:a4:e9:b6:b7:f8:98:bb:b1:9d:27:b8:01:9b:2f:08:76:75: 8a:8e:cc:16:95:40:32:53:fe:a3:06:f2:46:aa:70:b6:84:b2: 3d:04:85:35:62:c8:5e:6d:4f:7c:c1:c9:5f:74:b5:e3:d7:17: c4:43:60:c2:2f:bd:3c:7f:a4:8d:16:86:4a:56:c3:7d:b1:b7: 92:b4:20:85:58:f8:eb:54:6c:20:aa:7b:7b:d9:49:d6:9f:84: 3a:56:2e:d5:87:81:7e:9c:c1:26:75:48:81:7e:df:be:57:09: b4:f8:24:a4:73:5d:c8:70:6c:3c:94:87:07:e5:ac:df:f1:40: f9:4e:9c:04:c6:b0:23:44:35:37:a8:ab:ab:24:8b:5c:7f:a4: 75:96:92:d2:69:c8:b5:bc:53:f5:57:0a:a1:ed:b8:19:61:68: 31:27:fc:83:89:1d:5e:01:20:5d:0c:57:a9:0f:39:54:f7:d0: 90:db:26:16:97:ab:a7:9c:2a:b6:bb:c1:3d:49:0a:e9:f4:c7: 38:37:b0:2c:ac:93:1a:4f:9a:28:71:fa:bc:ac:e9:9d:04:9e: 9a:da:21:bb:7e:d1:5c:0b:fb:bc:06:a8:c8:3a:f4:20:46:6e: 11:4b:60:e2 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDVBMDExMC8GA1UEBRMoQTBGOUVCNjk4MURDNzJBMjc4QjE4NTI4OTkwNkMxRTEx QzBCMzVGMTAeFw0yNTA1MTIxOTEzMTJaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MjI0ODQ4LTc1MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRWQ5uDR7FcPat7Wna9iHc7Hqea2mBbgm9hj7q3MHmvoR+q6gU6sFjlsLA3ine b02VGiYJHg/pXNveTyrJtvahTiboeEaJRcC72yX/XAlo6BezomU8D9b372t3Uy5P 8tgt8X7iRZXYP9/7qXETSeZqRITKrCHPSpnQBgZZd8r7m4HQKLulTvIDwLs9/G2h GHKRW8VGIqq1MPJD5sIa4kRYv1F59osEe980ZqEs48rCZSOSQ5aqrule/bY2em94 LSr0WUv6MzC3FsiYuTdG6pzEIbXxSNhwmy25OCgwTlFWzWo9wqx3bI4X0okBfckt mtb6T5xxLhp/Ct8/5HNbdEyPAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUl5TC6BiB So/guJTIcdgeG5lu6REwHwYDVR0jBBgwFoAUoPnraYHccqJ4sYUomQbB4RwLNfEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwNUEwLzlDNTM3MTc4MkY2 NDExRjBCNEYyQTI0NUM0RjlBRTAyL29QbnJhWUhjY3FKNHNZVW9tUWJCNFJ3TE5m RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1BucmFZSGNjcUo0c1lVb21RYkI0UndMTmZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDVBMC85QzUzNzE3ODJGNjQxMUYwQjRGMkEyNDVDNEY5QUUwMi8yNUU5NkU0QzJG NjUxMUYwQTQ0MzAzNDdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAGeMAzAPBAIAAjAJAwcAIAEN8KKAMA0GCSqGSIb3DQEBCwUA A4IBAQA40pt+bULVPOhj6S/dllDdS7aypOm2t/iYu7GdJ7gBmy8IdnWKjswWlUAy U/6jBvJGqnC2hLI9BIU1YshebU98wclfdLXj1xfEQ2DCL708f6SNFoZKVsN9sbeS tCCFWPjrVGwgqnt72UnWn4Q6Vi7Vh4F+nMEmdUiBft++Vwm0+CSkc13IcGw8lIcH 5azf8UD5TpwExrAjRDU3qKurJItcf6R1lpLSaci1vFP1Vwqh7bgZYWgxJ/yDiR1e ASBdDFepDzlU99CQ2yYWl6unnCq2u8E9SQrp9Mc4N7AsrJMaT5oocfq8rOmdBJ6a 2iG7ftFcC/u8BqjIOvQgRm4RS2Di -----END CERTIFICATE-----Generated at Mon Jun 2 07:10:37 2025 by rpki-client