$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/733B5018216411EE9D21225AC4F9AE02.roa File: 733B5018216411EE9D21225AC4F9AE02.roa (raw, json) Hash identifier: +1mZTawS8wrVUkvZo4mIKAVm2hu6eqiP4ICNPWnmVCY= Subject key identifier: 02:04:72:34:8D:42:5C:D7:E3:B0:65:5E:C9:BF:A7:AF:D5:58:07:6D Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4D86 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/733B5018216411EE9D21225AC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:55:17 +0000 ROA not before: Thu 28 Aug 2025 14:55:17 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150849 IP address blocks: 103.174.220.0/23 maxlen: 23 2400:16a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19846 (0x4d86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:55:17 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06dd5-7d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f1:9f:7b:75:ab:27:c0:94:39:4c:c4:03:05: 6c:bd:a6:3d:78:a7:4a:bd:85:f2:0f:00:45:8a:47: 5d:97:f5:44:98:0b:ef:67:b3:f9:fa:71:d5:1b:34: 19:79:e9:69:7d:24:10:7a:0a:06:24:62:7a:f0:1e: 30:fe:9e:1d:d1:aa:ee:e6:28:4f:1e:25:2b:d5:c6: 9d:bc:a8:4e:6d:2c:e9:49:59:a4:cc:f1:5e:c0:94: 6f:ff:c9:f9:ed:8e:00:57:50:e0:a6:c4:57:fc:52: 63:75:89:0b:6e:18:3b:37:b1:94:41:d4:3e:f3:4f: 5f:52:18:4d:27:85:a8:a1:17:58:22:0d:cf:3f:70: 3d:da:d6:1d:21:0f:23:5e:b1:08:36:82:f8:95:55: bf:bc:b4:88:ef:bc:9d:5f:d6:4f:89:a9:55:81:6c: df:09:19:ef:df:14:29:71:2e:41:76:bf:76:cc:98: ad:15:44:8b:4c:98:0d:cd:10:8b:e6:10:54:81:e0: c4:ce:05:41:a3:ce:4f:5c:3f:cc:79:5b:90:e4:a7: 4d:5d:4e:34:35:08:cf:d1:67:5a:4b:01:66:6a:ac: 8c:4c:d7:eb:43:23:28:d1:3a:23:7c:37:50:96:a1: df:a7:5b:8f:b7:b9:bb:3e:1a:7f:44:eb:2f:a3:e5: 0d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:04:72:34:8D:42:5C:D7:E3:B0:65:5E:C9:BF:A7:AF:D5:58:07:6D X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/733B5018216411EE9D21225AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.174.220.0/23 IPv6: 2400:16a0::/48 Signature Algorithm: sha256WithRSAEncryption 52:38:b6:36:71:55:c9:94:4b:4c:5c:ea:7e:b4:66:cd:92:5e: 8c:90:b0:e8:26:2d:b2:fd:5d:40:e7:ba:05:06:69:dd:88:4a: 82:c0:ff:c7:25:69:d8:5f:51:13:fd:f9:49:09:4e:04:44:73: c7:29:8a:5a:b6:1a:9f:eb:d5:de:74:2c:2c:56:b3:c1:05:5c: c9:d3:68:84:4b:22:b7:d0:f7:62:15:f1:69:e2:ec:ca:ea:93: 74:dc:f3:fc:bc:b5:0e:8c:a5:b2:f8:d4:0c:2c:1e:3f:ea:04: 0e:c2:4d:72:eb:2f:66:8c:7e:de:df:7b:26:4a:da:6f:c5:9a: ef:45:6e:94:ec:35:ce:03:0f:ab:19:e9:f9:a0:09:a3:f4:e3: 43:d0:c6:b7:54:6e:e6:0d:64:8f:e8:07:56:c2:d3:9b:4f:a4: 74:63:c2:0b:25:99:76:74:e8:d2:f4:b0:6d:9c:91:ed:b7:8b: 2f:0a:b8:6b:73:ea:f8:30:3f:97:9c:96:22:21:b1:69:6d:2d: 3a:68:ae:14:c5:24:4a:cd:5e:5f:da:58:c8:c0:b6:9f:11:06: fe:6c:2d:65:ba:b5:cc:09:6c:fb:1e:0c:b6:46:92:c5:cf:8a: 74:fb:f5:d9:81:d0:1f:a6:a3:55:41:4c:3a:2b:23:05:81:96: d8:a4:fd:ad -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICTYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NTE3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmRkNS03ZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlvGfe3WrJ8CUOUzEAwVsvaY9eKdKvYXyDwBFikddl/VEmAvvZ7P5+nHVGzQZ eelpfSQQegoGJGJ68B4w/p4d0aru5ihPHiUr1cadvKhObSzpSVmkzPFewJRv/8n5 7Y4AV1DgpsRX/FJjdYkLbhg7N7GUQdQ+809fUhhNJ4WooRdYIg3PP3A92tYdIQ8j XrEINoL4lVW/vLSI77ydX9ZPialVgWzfCRnv3xQpcS5Bdr92zJitFUSLTJgNzRCL 5hBUgeDEzgVBo85PXD/MeVuQ5KdNXU40NQjP0WdaSwFmaqyMTNfrQyMo0TojfDdQ lqHfp1uPt7m7Php/ROsvo+UN3QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAIEcjSN QlzX47BlXsm/p6/VWAdtMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNzMzQjUwMTgy MTY0MTFFRTlEMjEyMjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrtwwDwQCAAIwCQMHACQAFqAAADANBgkqhkiG9w0BAQsF AAOCAQEAUji2NnFVyZRLTFzqfrRmzZJejJCw6CYtsv1dQOe6BQZp3YhKgsD/xyVp 2F9RE/35SQlOBERzxymKWrYan+vV3nQsLFazwQVcydNohEsit9D3YhXxaeLsyuqT dNzz/Ly1DoylsvjUDCweP+oEDsJNcusvZox+3t97Jkrab8Wa70VulOw1zgMPqxnp +aAJo/TjQ9DGt1Ru5g1kj+gHVsLTm0+kdGPCCyWZdnTo0vSwbZyR7beLLwq4a3Pq +DA/l5yWIiGxaW0tOmiuFMUkSs1eX9pYyMC2nxEG/mwtZbq1zAls+x4MtkaSxc+K dPv12YHQH6ajVUFMOisjBYGW2KT9rQ== -----END CERTIFICATE-----Generated at Mon Sep 8 05:39:22 2025 by rpki-client