$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/6CAE0142092E11F094B4703FC4F9AE02.roa File: 6CAE0142092E11F094B4703FC4F9AE02.roa (raw, json) Hash identifier: 763sVU9n15vfyDlANU4yPhpp0twzMm0fTC0WbKuxyJM= Subject key identifier: 41:49:54:D7:B1:12:16:51:E1:F8:52:AE:25:20:65:A3:33:71:7D:B6 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0C4D Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/6CAE0142092E11F094B4703FC4F9AE02.roa Signing time: Tue 26 Aug 2025 00:52:37 +0000 ROA not before: Tue 26 Aug 2025 00:52:37 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 142622 IP address blocks: 43.249.241.0/24 maxlen: 24 45.124.60.0/24 maxlen: 24 45.124.62.0/24 maxlen: 24 103.7.116.0/24 maxlen: 24 103.12.53.0/24 maxlen: 24 103.12.54.0/24 maxlen: 24 103.13.16.0/24 maxlen: 24 103.13.17.0/24 maxlen: 24 103.13.18.0/24 maxlen: 24 103.24.160.0/24 maxlen: 24 103.24.161.0/24 maxlen: 24 103.24.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 19:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3149 (0xc4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Aug 26 00:52:37 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68ad0555-40c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d3:45:18:32:2a:66:0b:ea:d1:82:9b:3d:12: bb:52:90:dd:fb:47:80:a7:0d:e1:6b:11:4b:24:dc: 79:a2:c4:ba:bd:6f:c7:2d:78:b3:e2:98:9b:ad:89: cb:d0:da:f0:3c:69:25:80:66:dc:5d:37:07:65:3f: 47:e6:b8:d6:24:d8:93:ab:94:b8:f1:8f:20:44:6d: b8:7d:bf:45:b2:56:55:b4:40:fa:40:20:82:90:98: 13:e0:54:ac:9f:06:a0:87:a1:ca:03:58:71:3a:cf: 1b:82:22:e0:55:27:63:e0:93:ba:8b:0f:48:1d:9b: da:13:57:4a:6e:76:d0:9b:15:88:81:ea:df:b2:0d: 4f:9a:b0:fa:f4:48:22:1c:4b:c7:5f:c4:8a:ed:45: f6:77:9a:ab:61:27:fd:5e:a0:aa:03:bb:97:38:73: 9a:5c:7f:46:f2:92:1e:69:72:20:4a:6f:fc:fb:96: 47:11:4a:4d:d1:8f:ef:78:72:23:77:81:e1:2a:3d: 77:ee:94:ee:d5:fa:3b:1e:bb:bf:9f:3c:8c:c0:6d: 15:01:c6:01:e8:00:ab:57:73:d6:19:a9:46:c1:cd: 80:82:38:01:73:be:e2:ec:5e:6a:4c:3b:41:13:38: a7:c3:b1:cc:1a:12:47:a8:12:ac:35:d6:24:5c:ca: 6a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:49:54:D7:B1:12:16:51:E1:F8:52:AE:25:20:65:A3:33:71:7D:B6 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/6CAE0142092E11F094B4703FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.241.0/24 45.124.60.0/24 45.124.62.0/24 103.7.116.0/24 103.12.53.0-103.12.54.255 103.13.16.0-103.13.18.255 103.24.160.0-103.24.162.255 Signature Algorithm: sha256WithRSAEncryption 96:2e:ee:7f:b5:ba:43:ff:9f:e8:0c:0a:8b:69:01:29:75:6d: da:7c:66:05:59:09:62:62:ec:71:31:d1:5a:d8:5a:86:70:bd: c6:e0:de:ea:cd:9c:60:cf:c5:de:d1:92:a5:20:de:f8:6d:a8: 0c:cf:56:8e:45:c1:f7:a5:2e:8a:8a:b7:2c:52:27:72:a7:14: 01:38:0b:7a:14:b2:49:96:2b:0d:4b:3e:6e:3d:50:f0:98:f4: 47:4c:c1:63:86:da:76:9d:fd:a1:fc:14:fd:68:99:89:1a:06: e4:43:96:ac:23:58:0c:1f:b2:ef:c8:d4:07:1b:7e:6a:59:08: da:4b:b9:3e:c0:82:b8:61:ac:80:9b:f7:9b:c1:30:5e:20:3a: a0:4a:f5:22:bc:38:08:f5:2a:4f:f7:f1:d4:81:aa:bf:dc:d0: cb:82:1f:d2:b4:be:76:1b:66:b9:99:5c:97:2d:87:5f:54:0b: 40:cf:b1:d1:45:13:3b:13:75:f6:c2:1d:7c:7e:7d:4d:0e:e6: 85:b4:fe:ce:d8:c5:c1:1a:0e:01:83:0d:a2:f2:51:32:01:f2: 69:f2:54:51:92:72:f0:20:1f:59:6c:df:fe:f8:3e:13:5d:6d: 15:3f:b0:86:30:d6:b3:b1:1b:f9:bc:16:37:1e:50:9a:a1:8a: 68:c9:f7:83 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwODI2MDA1MjM3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGFkMDU1NS00MGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytNFGDIqZgvq0YKbPRK7UpDd+0eApw3haxFLJNx5osS6vW/HLXiz4pibrYnL 0NrwPGklgGbcXTcHZT9H5rjWJNiTq5S48Y8gRG24fb9FslZVtED6QCCCkJgT4FSs nwagh6HKA1hxOs8bgiLgVSdj4JO6iw9IHZvaE1dKbnbQmxWIgerfsg1PmrD69Egi HEvHX8SK7UX2d5qrYSf9XqCqA7uXOHOaXH9G8pIeaXIgSm/8+5ZHEUpN0Y/veHIj d4HhKj137pTu1fo7Hru/nzyMwG0VAcYB6ACrV3PWGalGwc2AgjgBc77i7F5qTDtB Ezinw7HMGhJHqBKsNdYkXMpqOwIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFEFJVNex EhZR4fhSriUgZaMzcX22MB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvNkNBRTAxNDIw OTJFMTFGMDk0QjQ3MDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWwYIKwYBBQUHAQcBAf8E TDBKMEgEAgABMEIDBAAr+fEDBAAtfDwDBAAtfD4DBABnB3QwDAMEAGcMNQMEAGcM NjAMAwQEZw0QAwQAZw0SMAwDBAVnGKADBABnGKIwDQYJKoZIhvcNAQELBQADggEB AJYu7n+1ukP/n+gMCotpASl1bdp8ZgVZCWJi7HEx0VrYWoZwvcbg3urNnGDPxd7R kqUg3vhtqAzPVo5FwfelLoqKtyxSJ3KnFAE4C3oUskmWKw1LPm49UPCY9EdMwWOG 2nad/aH8FP1omYkaBuRDlqwjWAwfsu/I1AcbfmpZCNpLuT7AgrhhrICb95vBMF4g OqBK9SK8OAj1Kk/38dSBqr/c0MuCH9K0vnYbZrmZXJcth19UC0DPsdFFEzsTdfbC HXx+fU0O5oW0/s7YxcEaDgGDDaLyUTIB8mnyVFGScvAgH1ls3/74PhNdbRU/sIYw 1rOxG/m8FjceUJqhimjJ94M= -----END CERTIFICATE-----Generated at Sat Sep 6 16:52:49 2025 by rpki-client