$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/78E109F471EE11F090B2AB18C4F9AE02.roa File: 78E109F471EE11F090B2AB18C4F9AE02.roa (raw, json) Hash identifier: ysFQliYbv2mMjNpbLYcTPzRzF6e5HrJI3THvWyXjDxw= Subject key identifier: EF:32:51:27:F1:16:1B:84:8D:9E:66:20:A5:9F:E3:3C:CF:8A:C9:3D Certificate issuer: /CN=A91B3247/serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Certificate serial: 11 Authority key identifier: 0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/78E109F471EE11F090B2AB18C4F9AE02.roa Signing time: Thu 21 Aug 2025 08:40:25 +0000 ROA not before: Thu 21 Aug 2025 08:40:25 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 154112 IP address blocks: 203.9.214.0/24 maxlen: 24 203.9.215.0/24 maxlen: 24 2001:df5:f240::/48 maxlen: 48 2001:df5:f241::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3247, serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Validity Not Before: Aug 21 08:40:25 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68a6db78-a483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:49:7e:99:a0:5f:bb:c9:11:64:ad:4b:13:15: 3d:0e:82:78:99:5c:99:2d:15:dc:63:49:27:c1:9a: b3:5c:03:46:cf:22:cf:0d:01:2a:c6:c1:3c:20:f8: 5f:58:4f:73:43:78:e8:b4:2c:ae:f9:5d:26:75:27: 63:15:5a:8b:c9:af:de:ed:2d:e6:7c:8f:77:a0:d7: 47:4c:53:1d:9e:0e:93:1a:a4:61:8e:63:db:83:85: f3:5e:c4:8b:7d:7e:15:7a:c8:0b:8a:86:0a:00:7b: 33:b7:8c:a2:7f:9b:70:32:01:1a:bc:3c:07:cd:e5: 04:0d:86:e0:ba:1c:a8:91:d6:5a:2a:1d:76:65:0b: d6:1a:4f:d3:2e:e8:81:2c:fd:3c:4d:4b:e7:5d:76: 53:ab:2f:40:d6:4e:81:df:4d:2a:b7:dd:51:02:e7: 8f:da:f4:75:ab:df:46:8f:75:bb:9d:bc:6c:0d:9d: 0c:fd:8c:e9:9a:39:01:5f:6e:47:ab:f4:6e:52:9a: 0f:34:eb:3b:01:5d:bb:57:ab:93:a8:bf:3d:86:74: c1:a9:d8:0d:72:36:5e:3e:7a:bc:a4:f1:bf:ed:ce: 22:bf:38:56:df:bc:5a:d9:38:05:23:f7:9f:6b:b1: 59:f5:7b:f9:1c:d4:86:e4:f7:a2:fc:de:95:59:70: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:32:51:27:F1:16:1B:84:8D:9E:66:20:A5:9F:E3:3C:CF:8A:C9:3D X509v3 Authority Key Identifier: keyid:0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/78E109F471EE11F090B2AB18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.9.214.0/23 IPv6: 2001:df5:f240::/47 Signature Algorithm: sha256WithRSAEncryption 06:0b:64:d3:0b:99:11:80:87:0c:19:b2:43:79:40:8a:89:6c: a4:f3:8f:6f:b8:70:65:4e:4e:dd:d2:7b:4b:e2:e3:cf:14:e4: 69:13:84:19:d7:8b:23:3a:a7:58:b4:18:3e:16:58:a5:e4:a5: 1a:da:06:76:79:2b:6d:88:c3:e2:a0:25:73:5c:a3:40:c3:19: 35:4d:c2:66:21:43:44:3f:45:f5:38:78:62:60:46:27:67:23: 0a:91:e4:5a:54:e7:0b:15:8e:3b:d9:8b:3d:c6:c7:7d:b0:e8: 35:11:41:51:59:a9:a2:bb:59:37:3e:50:ef:4f:23:08:a0:2f: e0:59:93:00:6e:d2:f7:c8:a7:eb:77:e6:3f:c6:0c:5c:40:11: 96:ab:14:d3:ed:9a:d0:85:5b:ca:ff:11:56:c3:c4:f7:23:22: bc:d9:04:89:3a:39:e5:e5:ae:34:f9:e4:8c:32:e8:e2:2d:b9: 9c:87:71:5e:9d:fc:68:77:a0:84:59:b3:cb:d3:f2:a9:11:40: ef:16:71:84:3a:35:ed:56:d7:c1:91:56:88:8a:a2:22:30:62: 94:68:23:6e:ff:99:33:6f:09:10:3e:53:5e:e7:54:a4:16:47: e1:e7:41:c5:fb:78:25:3c:4a:b6:00:46:70:bf:7b:d3:80:0f: bf:78:a4:16 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzI0NzExMC8GA1UEBRMoMEREQUJCRjMxRUVDNjg3NjZFRjY2OUFGOTczNTI0MEMz ODk5MzQ1OTAeFw0yNTA4MjEwODQwMjVaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YTZkYjc4LWE0ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFSX6ZoF+7yRFkrUsTFT0OgniZXJktFdxjSSfBmrNcA0bPIs8NASrGwTwg+F9Y T3NDeOi0LK75XSZ1J2MVWovJr97tLeZ8j3eg10dMUx2eDpMapGGOY9uDhfNexIt9 fhV6yAuKhgoAezO3jKJ/m3AyARq8PAfN5QQNhuC6HKiR1loqHXZlC9YaT9Mu6IEs /TxNS+dddlOrL0DWToHfTSq33VEC54/a9HWr30aPdbudvGwNnQz9jOmaOQFfbker 9G5Smg806zsBXbtXq5Oovz2GdMGp2A1yNl4+eryk8b/tziK/OFbfvFrZOAUj959r sVn1e/kc1Ibk96L83pVZcP3VAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU7zJRJ/EW G4SNnmYgpZ/jPM+KyT0wHwYDVR0jBBgwFoAUDdq78x7saHZu9mmvlzUkDDiZNFkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzMjQ3LzMyMDQ0QkZFNzFF RTExRjA5M0MyMkUxOEM0RjlBRTAyL0RkcTc4eDdzYUhadTltbXZselVrRERpWk5G ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGRxNzh4N3NhSFp1OW1tdmx6VWtERGlaTkZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzI0Ny8zMjA0NEJGRTcxRUUxMUYwOTNDMjJFMThDNEY5QUUwMi83OEUxMDlGNDcx RUUxMUYwOTBCMkFCMThDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAcsJ1jAPBAIAAjAJAwcBIAEN9fJAMA0GCSqGSIb3DQEBCwUA A4IBAQAGC2TTC5kRgIcMGbJDeUCKiWyk849vuHBlTk7d0ntL4uPPFORpE4QZ14sj OqdYtBg+Flil5KUa2gZ2eSttiMPioCVzXKNAwxk1TcJmIUNEP0X1OHhiYEYnZyMK keRaVOcLFY472Ys9xsd9sOg1EUFRWamiu1k3PlDvTyMIoC/gWZMAbtL3yKfrd+Y/ xgxcQBGWqxTT7ZrQhVvK/xFWw8T3IyK82QSJOjnl5a40+eSMMujiLbmch3Fenfxo d6CEWbPL0/KpEUDvFnGEOjXtVtfBkVaIiqIiMGKUaCNu/5kzbwkQPlNe51SkFkfh 50HF+3glPEq2AEZwv3vTgA+/eKQW -----END CERTIFICATE-----Generated at Fri Aug 22 18:57:44 2025 by rpki-client