$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/FBDB9F4A57F911F0B7986D41C4F9AE02.roa File: FBDB9F4A57F911F0B7986D41C4F9AE02.roa (raw, json) Hash identifier: m14z6Uh4ysiLxJ7zkokYHBwiwVXoe+55LfJcOc7XaG4= Subject key identifier: 97:62:B2:2B:6B:C4:A9:7C:21:DA:42:9C:BE:38:97:9B:FC:3F:44:9C Certificate issuer: /CN=A91BD614/serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0 Certificate serial: 02 Authority key identifier: 4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/FBDB9F4A57F911F0B7986D41C4F9AE02.roa Signing time: Thu 03 Jul 2025 10:39:23 +0000 ROA not before: Thu 03 Jul 2025 10:39:23 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 150797 IP address blocks: 103.109.8.0/23 maxlen: 24 2400:e8a0::/32 maxlen: 32 2400:e8a0::/36 maxlen: 36 2400:e8a0:1000::/36 maxlen: 36 2400:e8a0:2000::/36 maxlen: 36 2400:e8a0:3000::/36 maxlen: 36 2400:e8a0:4000::/36 maxlen: 36 2400:e8a0:5000::/36 maxlen: 36 2400:e8a0:6000::/36 maxlen: 36 2400:e8a0:7000::/36 maxlen: 36 2400:e8a0:8000::/36 maxlen: 36 2400:e8a0:9000::/36 maxlen: 36 2400:e8a0:a000::/36 maxlen: 36 2400:e8a0:b000::/36 maxlen: 36 2400:e8a0:c000::/36 maxlen: 36 2400:e8a0:d000::/36 maxlen: 36 2400:e8a0:e000::/36 maxlen: 36 2400:e8a0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Jul 2025 03:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD614, serialNumber=4B5C1623FBB33D96A241AB35DB0F0BDEB5C39CB0 Validity Not Before: Jul 3 10:39:23 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68665ddb-c835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:35:96:e3:01:1a:78:21:9e:77:09:a3:dc: 11:f8:ee:d2:e7:da:d7:bc:42:f1:e5:53:28:6e:9b: f1:58:d9:ab:3e:e1:fb:3a:c0:1b:f6:56:f7:d4:6e: c5:ab:18:d3:b4:90:72:5d:df:a5:e6:dd:ae:89:03: 15:2d:74:a9:c2:97:df:ad:4e:98:3f:24:f0:ef:34: e3:4e:c7:9c:68:e3:73:3f:80:40:cb:55:48:50:9a: 44:1c:e0:b9:a8:f5:66:25:70:46:92:cc:19:68:6d: e0:39:59:ff:4f:61:cc:ba:b3:66:32:00:5f:ff:3d: b4:ad:a9:0d:97:cc:73:02:12:dd:54:ff:94:36:03: 2d:8e:73:22:40:66:4f:0b:5a:06:db:a2:ef:73:d7: 17:51:f2:49:1c:1e:a1:06:16:73:ea:af:ae:8d:de: 0c:07:86:69:22:04:05:89:26:78:57:9a:c8:93:e3: d5:02:7e:7c:5c:53:be:f6:82:a0:c4:f7:5d:91:36: 0b:98:74:e7:50:79:ec:60:bf:6e:8b:a4:32:82:47: 77:90:5f:5c:3f:1b:41:92:6c:a5:d1:6a:2a:74:6e: 64:5f:27:cd:f8:7a:ec:e4:c7:44:ea:e2:6a:3e:ca: 53:ce:ad:e2:87:ce:67:5b:c6:12:e1:92:b7:80:62: 39:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:62:B2:2B:6B:C4:A9:7C:21:DA:42:9C:BE:38:97:9B:FC:3F:44:9C X509v3 Authority Key Identifier: keyid:4B:5C:16:23:FB:B3:3D:96:A2:41:AB:35:DB:0F:0B:DE:B5:C3:9C:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/S1wWI_uzPZaiQas12w8L3rXDnLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S1wWI_uzPZaiQas12w8L3rXDnLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/FBDB9F4A57F911F0B7986D41C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.109.8.0/23 IPv6: 2400:e8a0::/32 Signature Algorithm: sha256WithRSAEncryption 04:d7:bd:c5:c7:71:cc:62:e7:3d:e6:82:c1:21:3f:d8:52:f3: 58:7c:f1:74:9f:2b:dc:a6:59:cc:e7:5a:32:69:a9:0d:68:96: 04:36:4c:6c:eb:52:a6:78:c1:3a:d9:7f:5c:11:7a:3d:3e:df: 4c:81:99:81:3e:4a:30:11:21:ff:57:86:34:13:e9:0a:59:7f: 19:bd:f8:20:33:27:94:32:53:2a:72:0f:3e:cf:df:a6:71:0c: 21:48:0a:59:fb:28:a1:ac:d6:e7:76:8d:ce:e2:1e:a5:26:2b: 86:08:6d:f1:c5:c0:e6:dd:9f:0c:b3:12:eb:a8:e5:72:25:35: 44:0b:78:1e:13:35:df:5d:84:0a:83:73:e8:d8:e0:c6:d6:7c: 62:ce:ae:48:fa:09:e0:22:4b:a7:dd:14:6c:42:d8:32:2f:35: f6:60:f9:c9:a4:b0:87:83:7c:2e:d3:d1:be:63:36:a6:f9:fa: e2:a2:03:d2:9b:5c:99:85:cd:e2:8f:11:63:3f:de:d4:08:77: 83:77:4c:25:f4:22:8f:60:25:fe:2b:36:8f:e8:10:44:f5:17: 80:2a:bf:f5:f3:40:b7:d5:5f:4d:ea:39:ec:c5:16:fb:07:5a: 0a:5c:6c:d6:5d:1b:a4:70:d9:f3:3b:20:4d:44:8b:89:d4:28: 9b:40:ce:14 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDYxNDExMC8GA1UEBRMoNEI1QzE2MjNGQkIzM0Q5NkEyNDFBQjM1REIwRjBCREVC NUMzOUNCMDAeFw0yNTA3MDMxMDM5MjNaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NjY1ZGRiLWM4MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoSDWW4wEaeCGedwmj3BH47tLn2te8QvHlUyhum/FY2as+4fs6wBv2VvfUbsWr GNO0kHJd36Xm3a6JAxUtdKnCl9+tTpg/JPDvNONOx5xo43M/gEDLVUhQmkQc4Lmo 9WYlcEaSzBlobeA5Wf9PYcy6s2YyAF//PbStqQ2XzHMCEt1U/5Q2Ay2OcyJAZk8L Wgbbou9z1xdR8kkcHqEGFnPqr66N3gwHhmkiBAWJJnhXmsiT49UCfnxcU772gqDE 912RNguYdOdQeexgv26LpDKCR3eQX1w/G0GSbKXRaip0bmRfJ834euzkx0Tq4mo+ ylPOreKHzmdbxhLhkreAYjmjAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUl2KyK2vE qXwh2kKcvjiXm/w/RJwwHwYDVR0jBBgwFoAUS1wWI/uzPZaiQas12w8L3rXDnLAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJENjE0LzFERjA3NUUyQkVE QzExRUQ4RTBBREQ4MEM0RjlBRTAyL1Mxd1dJX3V6UFphaVFhczEydzhMM3JYRG5M QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzF3V0lfdXpQWmFpUWFzMTJ3OEwzclhEbkxBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDYxNC8xREYwNzVFMkJFREMxMUVEOEUwQUREODBDNEY5QUUwMi9GQkRCOUY0QTU3 RjkxMUYwQjc5ODZENDFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAWdtCDANBAIAAjAHAwUAJADooDANBgkqhkiG9w0BAQsFAAOC AQEABNe9xcdxzGLnPeaCwSE/2FLzWHzxdJ8r3KZZzOdaMmmpDWiWBDZMbOtSpnjB Otl/XBF6PT7fTIGZgT5KMBEh/1eGNBPpCll/Gb34IDMnlDJTKnIPPs/fpnEMIUgK WfsooazW53aNzuIepSYrhght8cXA5t2fDLMS66jlciU1RAt4HhM1312ECoNz6Njg xtZ8Ys6uSPoJ4CJLp90UbELYMi819mD5yaSwh4N8LtPRvmM2pvn64qID0ptcmYXN 4o8RYz/e1Ah3g3dMJfQij2Al/is2j+gQRPUXgCq/9fNAt9VfTeo57MUW+wdaClxs 1l0bpHDZ8zsgTUSLidQom0DOFA== -----END CERTIFICATE-----Generated at Mon Jul 7 14:22:19 2025 by rpki-client