$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EB00A028B61011EC98F3F920C4F9AE02.roa File: EB00A028B61011EC98F3F920C4F9AE02.roa (raw, json) Hash identifier: 6ZykWZfdDyPvfEX73Hl2SyIkblwL50NSU2GVYp0J2U0= Subject key identifier: 43:2D:1B:AB:A3:84:97:64:9B:FD:A7:D5:13:CE:D8:CB:EF:24:0F:31 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4CB2 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EB00A028B61011EC98F3F920C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:52:18 +0000 ROA not before: Thu 28 Aug 2025 14:52:18 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131351 IP address blocks: 103.28.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19634 (0x4cb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:52:18 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d22-54bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:56:cc:4b:13:29:1e:18:ea:6f:6a:f8:27:c9: b6:0f:a6:f4:13:d1:eb:a5:06:79:46:1b:bf:2b:2c: da:11:30:23:e2:e4:d2:4a:e3:50:93:5b:1f:7f:94: 0b:46:d7:e9:5b:eb:c3:6a:85:08:a3:7a:8c:11:92: 91:6f:a8:90:45:c6:39:ef:78:80:6d:a2:94:3c:74: 65:70:99:f7:84:1e:18:e0:f5:8f:72:80:5b:a0:9e: 18:59:2d:32:06:5e:9f:52:1f:6e:34:78:d0:69:b5: ea:c6:16:16:f9:15:4c:2e:ad:52:8a:a3:ef:18:e9: b0:cb:b0:40:5e:cb:38:09:d4:0f:fb:0d:29:11:61: ac:51:fb:f3:26:0e:2c:e2:a8:45:b8:8d:ce:b0:95: dd:4d:21:2f:12:7f:c8:93:86:53:4c:df:15:df:a5: 11:9a:41:c5:84:c5:51:3e:e7:b1:46:5e:53:fe:a1: f7:3a:9d:6e:d2:00:c6:b6:8d:3d:d5:0d:c4:4f:c1: f7:96:66:40:b2:b8:33:62:bb:f3:c3:52:db:81:60: c1:4b:af:91:18:cb:a7:87:61:9c:f4:01:08:f6:d0: 9f:30:8c:f2:34:b4:7e:6c:88:df:25:74:b1:80:cd: d2:27:0a:f8:24:10:32:7d:65:b8:de:f8:bd:ea:c3: aa:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2D:1B:AB:A3:84:97:64:9B:FD:A7:D5:13:CE:D8:CB:EF:24:0F:31 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EB00A028B61011EC98F3F920C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.28.136.0/22 Signature Algorithm: sha256WithRSAEncryption a1:db:7b:33:25:31:93:36:c4:49:d7:3e:88:87:36:27:4d:9b: 65:8f:68:04:7c:fc:37:46:af:9f:6b:64:52:41:47:a7:3b:f3: cf:74:ad:63:21:41:1f:e3:2c:ed:20:ed:a6:11:6e:e0:36:ee: b9:0c:87:f8:5c:f7:60:17:0c:a0:48:e1:3f:ef:5e:de:ac:23: 9a:3c:ec:f3:23:1e:d9:77:e0:fa:38:aa:47:11:e9:9b:aa:41: b4:90:cd:5a:6b:7a:be:3d:0b:0c:c8:93:0f:0f:41:73:b1:ac: d3:72:bc:0a:bd:2f:84:95:5c:2d:39:78:18:82:4f:31:9f:5a: b8:b9:03:8b:6f:c8:b9:a8:2e:85:58:19:3b:3e:04:70:ab:7e: f0:af:46:7b:6d:4d:93:b0:0b:f9:29:ee:52:de:f0:50:61:62: 68:e5:75:02:00:70:a9:b1:44:c7:b8:f1:9f:39:c5:8d:64:3f: fd:25:1b:06:0a:06:fb:05:92:31:89:6c:97:a7:17:c4:06:8a: 67:eb:bc:9a:b2:df:d1:45:2a:88:8d:74:9e:16:28:a2:c1:ba: f1:c3:af:bf:6c:f8:ea:ff:a8:52:ed:b4:df:73:e1:7e:e0:a0: 28:fc:a9:9a:41:b7:d2:89:82:c7:50:f5:3e:27:8e:5f:00:76: b7:74:5b:ec -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICTLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MjE4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQyMi01NGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFbMSxMpHhjqb2r4J8m2D6b0E9HrpQZ5Rhu/KyzaETAj4uTSSuNQk1sff5QL RtfpW+vDaoUIo3qMEZKRb6iQRcY573iAbaKUPHRlcJn3hB4Y4PWPcoBboJ4YWS0y Bl6fUh9uNHjQabXqxhYW+RVMLq1SiqPvGOmwy7BAXss4CdQP+w0pEWGsUfvzJg4s 4qhFuI3OsJXdTSEvEn/Ik4ZTTN8V36URmkHFhMVRPuexRl5T/qH3Op1u0gDGto09 1Q3ET8H3lmZAsrgzYrvzw1LbgWDBS6+RGMunh2Gc9AEI9tCfMIzyNLR+bIjfJXSx gM3SJwr4JBAyfWW43vi96sOq9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEMtG6uj hJdkm/2n1RPO2MvvJA8xMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRUIwMEEwMjhC NjEwMTFFQzk4RjNGOTIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnHIgwDQYJKoZIhvcNAQELBQADggEBAKHbezMlMZM2xEnX PoiHNidNm2WPaAR8/DdGr59rZFJBR6c78890rWMhQR/jLO0g7aYRbuA27rkMh/hc 92AXDKBI4T/vXt6sI5o87PMjHtl34Po4qkcR6ZuqQbSQzVprer49CwzIkw8PQXOx rNNyvAq9L4SVXC05eBiCTzGfWri5A4tvyLmoLoVYGTs+BHCrfvCvRnttTZOwC/kp 7lLe8FBhYmjldQIAcKmxRMe48Z85xY1kP/0lGwYKBvsFkjGJbJenF8QGimfrvJqy 39FFKoiNdJ4WKKLBuvHDr79s+Or/qFLttN9z4X7goCj8qZpBt9KJgsdQ9T4njl8A drd0W+w= -----END CERTIFICATE-----Generated at Mon Sep 8 05:38:35 2025 by rpki-client