$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A14437C0FAD311EDBF5E232DC4F9AE02.roa File: A14437C0FAD311EDBF5E232DC4F9AE02.roa (raw, json) Hash identifier: Bez05FWUIMUnrH7SzLlKjPaSBngAUJwCdctudMIfHok= Subject key identifier: E0:AB:75:AB:EB:12:72:09:81:13:EF:8C:FC:FF:1E:3D:3D:9D:D3:25 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4BCE Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A14437C0FAD311EDBF5E232DC4F9AE02.roa Signing time: Sun 20 Jul 2025 09:51:55 +0000 ROA not before: Sun 20 Jul 2025 09:51:55 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135944 IP address blocks: 103.159.54.0/24 maxlen: 24 103.159.55.0/24 maxlen: 24 103.165.144.0/23 maxlen: 23 103.165.144.0/24 maxlen: 24 103.165.145.0/24 maxlen: 24 103.199.8.0/22 maxlen: 22 103.199.8.0/23 maxlen: 23 103.199.8.0/24 maxlen: 24 103.199.9.0/24 maxlen: 24 103.199.11.0/24 maxlen: 24 103.216.124.0/22 maxlen: 24 116.118.64.0/22 maxlen: 24 116.118.88.0/22 maxlen: 24 116.118.92.0/22 maxlen: 24 157.119.248.0/22 maxlen: 22 180.93.172.0/22 maxlen: 24 180.93.176.0/22 maxlen: 24 180.93.180.0/22 maxlen: 24 2001:df7:cc00::/48 maxlen: 48 2404:ef80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 09:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19406 (0x4bce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Jul 20 09:51:55 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=687cbc3b-3ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bb:ec:51:5f:38:84:39:c8:92:24:e3:38:5a: 23:12:ef:7e:dc:b6:94:74:0e:ab:a9:81:85:39:0f: 45:89:51:a7:03:86:ec:45:b1:71:90:29:02:da:5a: af:2b:e5:44:65:a2:9b:87:e5:a1:28:0c:dc:66:ba: 6a:0e:25:61:f0:11:77:bc:83:e3:6a:3a:37:36:8a: 8d:d1:d6:3f:ec:a9:3f:fa:44:2b:4b:2c:e6:8f:9f: 9b:0f:34:f5:39:f3:1c:34:a3:da:38:84:2f:7b:6a: ea:e0:3d:a5:58:56:8d:3c:27:59:e4:db:60:3d:c7: e2:a3:2d:f1:04:4c:28:7d:95:22:1c:6f:7d:c4:fa: e5:2d:a7:dd:08:09:ee:83:7d:10:35:fb:28:30:00: 2e:0a:08:5a:6d:e0:e6:c2:ed:7c:76:44:0a:a4:80: 8e:f3:27:23:05:1b:e8:78:61:25:97:e9:2b:dd:20: b7:b8:16:2f:cf:7e:3c:1f:2b:17:46:a5:95:be:f9: be:5e:bd:a6:8e:c0:82:be:f9:bf:42:e0:b3:e0:55: 23:b9:f2:d7:2a:f0:ac:e5:72:49:71:cf:d0:75:ff: 48:89:6d:ff:cb:a1:14:0c:7e:f3:c8:a4:21:35:df: ab:80:2b:77:ca:a0:67:09:19:4b:2f:ef:3f:db:6c: 30:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AB:75:AB:EB:12:72:09:81:13:EF:8C:FC:FF:1E:3D:3D:9D:D3:25 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A14437C0FAD311EDBF5E232DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.54.0/23 103.165.144.0/23 103.199.8.0/22 103.216.124.0/22 116.118.64.0/22 116.118.88.0/21 157.119.248.0/22 180.93.172.0-180.93.183.255 IPv6: 2001:df7:cc00::/48 2404:ef80::/48 Signature Algorithm: sha256WithRSAEncryption 45:70:8c:ce:d1:98:e9:88:d7:30:aa:bc:36:19:f8:6b:a7:94: da:37:b6:d6:de:9d:8f:18:81:db:43:bd:d6:08:cb:fd:91:ed: 30:71:ea:cd:28:4d:8a:3d:de:d0:60:a9:32:a8:96:a7:ad:1f: 35:13:05:d0:03:7c:e8:bc:34:37:8e:28:fa:08:42:5a:c5:7c: 3c:a7:4e:13:da:2c:ed:9d:09:c9:f8:ca:65:91:73:8d:a5:5b: 83:5a:b2:90:51:1a:04:0c:74:75:3d:ba:e9:b8:5a:2c:98:94: 93:dc:6d:fe:79:ec:55:b3:fa:63:d9:b2:6d:5e:21:4a:ed:25: 5e:cc:75:80:e7:de:58:7e:48:db:8c:1a:09:b0:4f:29:49:e4: 35:46:b2:16:44:60:4c:e6:a0:f2:0f:d9:9b:13:ea:7e:67:55: dd:02:a4:fa:f8:b0:55:c0:95:f3:10:db:1d:02:78:41:87:1b: 74:52:70:ec:18:5f:e0:a4:89:33:ba:1e:40:9f:93:88:26:fb: 5d:18:3e:19:3c:ba:ed:30:b6:5d:62:67:2e:6b:72:82:6f:47: 57:ba:8f:2c:c1:93:d8:3e:e7:6e:e7:21:43:6e:1a:c8:1f:8a: 51:1d:2c:fb:70:16:59:55:58:12:a5:19:4e:53:f0:df:5b:a3: de:5d:98:b8 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgICS84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwNzIwMDk1MTU1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdjYmMzYi0zZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7vsUV84hDnIkiTjOFojEu9+3LaUdA6rqYGFOQ9FiVGnA4bsRbFxkCkC2lqv K+VEZaKbh+WhKAzcZrpqDiVh8BF3vIPjajo3NoqN0dY/7Kk/+kQrSyzmj5+bDzT1 OfMcNKPaOIQve2rq4D2lWFaNPCdZ5NtgPcfioy3xBEwofZUiHG99xPrlLafdCAnu g30QNfsoMAAuCghabeDmwu18dkQKpICO8ycjBRvoeGEll+kr3SC3uBYvz348HysX RqWVvvm+Xr2mjsCCvvm/QuCz4FUjufLXKvCs5XJJcc/Qdf9IiW3/y6EUDH7zyKQh Nd+rgCt3yqBnCRlLL+8/22wwZQIDAQABo4IC4TCCAt0wHQYDVR0OBBYEFOCrdavr EnIJgRPvjPz/Hj09ndMlMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTE0NDM3QzBG QUQzMTFFREJGNUUyMzJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwawYIKwYBBQUHAQcBAf8E XDBaMD4EAgABMDgDBAFnnzYDBAFnpZADBAJnxwgDBAJn2HwDBAJ0dkADBAN0dlgD BAKdd/gwDAMEArRdrAMEA7RdsDAYBAIAAjASAwcAIAEN98wAAwcAJATvgAAAMA0G CSqGSIb3DQEBCwUAA4IBAQBFcIzO0ZjpiNcwqrw2Gfhrp5TaN7bW3p2PGIHbQ73W CMv9ke0wcerNKE2KPd7QYKkyqJanrR81EwXQA3zovDQ3jij6CEJaxXw8p04T2izt nQnJ+MplkXONpVuDWrKQURoEDHR1PbrpuFosmJST3G3+eexVs/pj2bJtXiFK7SVe zHWA595YfkjbjBoJsE8pSeQ1RrIWRGBM5qDyD9mbE+p+Z1XdAqT6+LBVwJXzENsd AnhBhxt0UnDsGF/gpIkzuh5An5OIJvtdGD4ZPLrtMLZdYmcua3KCb0dXuo8swZPY Pudu5yFDbhrIH4pRHSz7cBZZVVgSpRlOU/DfW6PeXZi4 -----END CERTIFICATE-----Generated at Thu Jul 24 11:51:01 2025 by rpki-client