$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DB7F5AFA606B11F094C9F26EC4F9AE02.roa File: DB7F5AFA606B11F094C9F26EC4F9AE02.roa (raw, json) Hash identifier: r4ZWoDBR/Ef0KmdOfgGhPiKuksNCw/T64lsuvpBQv+I= Subject key identifier: 1B:22:60:E0:1B:B7:D1:D5:36:C9:F6:D1:E6:92:14:B6:78:72:3B:8A Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4BB8 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DB7F5AFA606B11F094C9F26EC4F9AE02.roa Signing time: Mon 14 Jul 2025 04:34:41 +0000 ROA not before: Mon 14 Jul 2025 04:34:41 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 45538 IP address blocks: 43.239.224.0/22 maxlen: 24 45.117.164.0/22 maxlen: 24 103.15.48.0/22 maxlen: 24 103.54.248.0/22 maxlen: 24 103.118.30.0/23 maxlen: 24 103.130.56.0/22 maxlen: 24 103.234.36.0/22 maxlen: 24 103.237.148.0/22 maxlen: 24 103.249.100.0/22 maxlen: 24 112.78.0.0/20 maxlen: 24 125.253.112.0/20 maxlen: 24 2401:75a0::/48 maxlen: 48 2405:7bc0::/48 maxlen: 48 2405:9d80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19384 (0x4bb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Jul 14 04:34:41 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=687488e1-cb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f5:de:89:c5:d2:49:0c:d7:67:10:fd:97:db: 69:6c:e2:07:b9:42:58:f0:52:eb:d5:40:8c:05:e4: 46:ee:7e:dd:ef:c4:b2:fe:02:a1:3b:b6:26:ae:cb: 47:4e:13:10:b9:bd:58:5c:ac:09:2c:71:1e:29:7d: 5e:f3:cc:28:96:61:43:d0:87:6e:0e:96:05:c3:7f: af:9c:76:d6:c4:9c:76:77:66:45:93:b7:47:8b:38: 5d:cf:86:3d:bf:fd:21:07:58:c3:83:a2:a8:ee:1f: af:f5:63:76:f6:14:6b:42:a1:28:37:f6:c8:98:dc: c4:9f:f7:23:dc:f0:26:07:f7:68:d0:fe:07:b8:04: 6a:18:4c:b3:31:37:49:0d:db:b9:77:04:31:58:32: 59:1c:5b:ed:1b:6d:9b:2a:9b:da:8e:a0:b2:7e:88: 41:7e:0e:26:8e:ec:67:2a:4d:c0:7b:16:eb:35:db: b6:ad:62:49:65:33:c4:a4:3e:dd:e1:56:69:bf:9b: 4f:a7:a7:fd:53:a1:ff:db:e2:50:7b:89:9d:48:e6: c6:88:69:c2:a6:24:cc:fe:35:f2:32:ba:de:a9:59: 87:77:9e:db:f6:06:f9:1c:ef:94:07:ca:d9:f3:c7: 77:9d:1b:6c:82:fa:63:24:cb:e9:13:d1:ca:01:ea: 0c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:22:60:E0:1B:B7:D1:D5:36:C9:F6:D1:E6:92:14:B6:78:72:3B:8A X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DB7F5AFA606B11F094C9F26EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.224.0/22 45.117.164.0/22 103.15.48.0/22 103.54.248.0/22 103.118.30.0/23 103.130.56.0/22 103.234.36.0/22 103.237.148.0/22 103.249.100.0/22 112.78.0.0/20 125.253.112.0/20 IPv6: 2401:75a0::/48 2405:7bc0::/48 2405:9d80::/32 Signature Algorithm: sha256WithRSAEncryption aa:3a:d7:d6:c8:4f:0e:d0:27:11:98:15:e3:e3:da:68:40:3f: 56:cd:2a:77:3a:60:26:4e:5c:83:32:ae:dc:0a:40:d9:aa:d1: 67:e8:77:d9:44:17:89:5c:4e:ec:aa:8b:00:be:79:e1:8c:09: 61:5d:31:7e:20:df:36:31:92:37:ef:52:f1:6f:46:6f:bc:09: d7:af:73:dd:06:7b:01:47:38:52:6e:89:b0:e5:61:0a:33:0a: 97:9d:f3:6f:e5:71:58:04:e9:7b:96:aa:69:08:ff:bd:f8:99: 13:cc:b3:3f:2c:14:fe:f7:c3:2f:a3:1a:3e:37:65:50:a1:7b: 4b:5c:74:19:69:aa:d6:40:04:d5:46:f0:50:87:f0:a4:17:97: 6a:17:cf:3b:e4:7e:8e:b9:ec:56:50:e9:f1:60:9e:1e:cf:4f: 95:d1:eb:ab:8c:89:b3:86:87:bb:15:1f:4d:ec:c9:21:ec:bb: 68:fb:0f:90:3b:d3:fc:48:95:2c:28:0d:99:07:21:08:52:c4: f8:b4:f2:e0:7b:b7:f7:91:6a:7b:56:55:e1:44:11:bb:cf:ff: c0:76:19:c9:9a:41:19:42:90:da:04:c1:08:86:e2:8b:fb:78: b7:e1:6d:44:d6:b4:52:48:41:1f:ec:51:68:ca:36:82:ed:cb: fa:13:d2:29 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgICS7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwNzE0MDQzNDQxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc0ODhlMS1jYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPXeicXSSQzXZxD9l9tpbOIHuUJY8FLr1UCMBeRG7n7d78Sy/gKhO7YmrstH ThMQub1YXKwJLHEeKX1e88wolmFD0IduDpYFw3+vnHbWxJx2d2ZFk7dHizhdz4Y9 v/0hB1jDg6Ko7h+v9WN29hRrQqEoN/bImNzEn/cj3PAmB/do0P4HuARqGEyzMTdJ Ddu5dwQxWDJZHFvtG22bKpvajqCyfohBfg4mjuxnKk3AexbrNdu2rWJJZTPEpD7d 4VZpv5tPp6f9U6H/2+JQe4mdSObGiGnCpiTM/jXyMrreqVmHd57b9gb5HO+UB8rZ 88d3nRtsgvpjJMvpE9HKAeoMNQIDAQABo4IC8jCCAu4wHQYDVR0OBBYEFBsiYOAb t9HVNsn20eaSFLZ4cjuKMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvREI3RjVBRkE2 MDZCMTFGMDk0QzlGMjZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwfAYIKwYBBQUHAQcBAf8E bTBrMEgEAgABMEIDBAIr7+ADBAItdaQDBAJnDzADBAJnNvgDBAFndh4DBAJngjgD BAJn6iQDBAJn7ZQDBAJn+WQDBARwTgADBAR9/XAwHwQCAAIwGQMHACQBdaAAAAMH ACQFe8AAAAMFACQFnYAwDQYJKoZIhvcNAQELBQADggEBAKo619bITw7QJxGYFePj 2mhAP1bNKnc6YCZOXIMyrtwKQNmq0Wfod9lEF4lcTuyqiwC+eeGMCWFdMX4g3zYx kjfvUvFvRm+8Cdevc90GewFHOFJuibDlYQozCped82/lcVgE6XuWqmkI/734mRPM sz8sFP73wy+jGj43ZVChe0tcdBlpqtZABNVG8FCH8KQXl2oXzzvkfo657FZQ6fFg nh7PT5XR66uMibOGh7sVH03sySHsu2j7D5A70/xIlSwoDZkHIQhSxPi08uB7t/eR antWVeFEEbvP/8B2GcmaQRlCkNoEwQiG4ov7eLfhbUTWtFJIQR/sUWjKNoLty/oT 0ik= -----END CERTIFICATE-----Generated at Tue Jul 22 04:22:13 2025 by rpki-client