$ rpki-client -vvf rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/E2AD90E813E811E9B287C144C4F9AE02.roa File: E2AD90E813E811E9B287C144C4F9AE02.roa (raw, json) Hash identifier: CwjqOoJS53tpi81tzFuwu956lUr2HE8GT6aAkGCmQ3k= Subject key identifier: 8D:68:88:C6:36:11:70:ED:E4:AA:30:92:45:EC:F6:6D:CA:CB:95:31 Certificate issuer: /CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Certificate serial: 2D64 Authority key identifier: D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/E2AD90E813E811E9B287C144C4F9AE02.roa Signing time: Sun 18 May 2025 16:02:58 +0000 ROA not before: Sun 18 May 2025 16:02:58 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 55651 IP address blocks: 103.24.120.0/24 maxlen: 24 103.24.121.0/24 maxlen: 24 103.24.122.0/24 maxlen: 24 103.24.123.0/24 maxlen: 24 2406:bd00:de00::/48 maxlen: 48 2406:bd00:de50::/48 maxlen: 48 2406:bd00:decd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11620 (0x2d64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C21C7, serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Validity Not Before: May 18 16:02:58 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682a04b2-ba2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:47:d7:8b:f2:2f:3b:61:67:43:d4:a3:ff: d1:77:15:32:34:4e:09:20:d6:a6:96:73:15:d0:6e: 30:93:7c:3e:66:fe:3c:a5:37:72:14:3d:b6:1f:a7: 94:40:17:74:59:f0:a9:6e:bf:e0:10:ec:65:88:45: 39:46:fc:3d:eb:2f:21:d0:9d:70:65:e5:4c:2c:02: 5f:10:a3:93:5a:f2:9b:eb:8f:ad:83:16:f6:e4:1b: 76:61:bb:4b:fc:36:d1:a0:89:31:96:fb:72:1b:b5: 92:d6:95:8f:fe:d6:32:cb:16:f7:b6:42:d4:ac:51: 11:cb:db:e5:b6:b5:2c:83:f1:71:9b:f1:7c:53:2a: 2b:b3:32:8b:3a:99:6c:35:06:0f:1a:d7:1b:4f:4a: 50:73:8e:2c:f8:88:f3:7c:d4:10:6f:03:5e:81:73: 2d:e4:a3:db:ec:e1:0c:fa:be:4b:94:ca:f8:9c:90: ca:88:44:9d:3c:0f:5e:8d:87:71:80:c2:cd:f4:c6: 35:e6:95:5f:a8:6a:16:14:c7:fb:b6:7a:e2:af:b2: da:45:03:af:5d:b9:35:73:4c:01:c8:d5:17:b4:4d: af:6d:e7:79:92:6d:86:01:d6:0f:e0:5a:db:f4:f1: a9:99:ce:19:4c:da:ca:c2:0c:c8:4a:a7:ea:c4:39: 6a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:68:88:C6:36:11:70:ED:E4:AA:30:92:45:EC:F6:6D:CA:CB:95:31 X509v3 Authority Key Identifier: keyid:D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/E2AD90E813E811E9B287C144C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.120.0/22 IPv6: 2406:bd00:de00::/48 2406:bd00:de50::/48 2406:bd00:decd::/48 Signature Algorithm: sha256WithRSAEncryption 44:e6:c8:6e:c1:fd:fa:c1:a3:82:18:0c:8d:0d:c6:fc:14:98: 13:26:c1:b3:20:94:32:e3:37:36:85:44:07:63:9f:a9:c7:c4: d8:3b:7c:90:dc:3e:ce:63:6b:a5:ff:1a:5c:c6:c7:dc:7e:f2: e7:a6:24:6a:14:6e:47:19:df:2e:f1:27:ef:7a:fa:1b:97:6a: a4:73:0d:1d:3d:2c:51:4f:97:1f:65:25:bf:57:64:5d:37:ae: b7:91:b0:f2:5d:27:ed:1b:ed:43:b8:47:2d:be:8b:77:92:4f: ab:08:84:d3:71:a4:25:04:c7:14:33:c5:87:46:08:f0:ce:4c: a4:e8:2b:a5:ed:e5:1e:e0:00:c1:b0:ca:86:7e:8a:49:e7:09: 70:9d:f9:41:c0:4a:23:b6:aa:58:a4:64:cf:74:b4:e5:71:70: 4a:13:bd:18:bf:e3:ce:16:6f:f8:e5:d0:5f:bd:33:5d:8b:b4: 1b:e0:57:b3:e2:3d:89:cd:ce:aa:0c:0b:c6:39:61:fd:87:da: 6e:ad:c3:2b:2e:18:68:03:45:90:79:c0:6f:2e:71:c8:ce:24: d3:44:48:7c:9e:76:1a:78:70:74:25:c3:bd:2d:b6:c0:64:80: 35:f9:56:82:cd:da:34:b8:09:a5:71:ec:9e:68:75:79:ba:15: cc:2a:3a:3c -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICLWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxQzcxMTAvBgNVBAUTKEQyQkMyQkNDMEYzODlFM0E1QzUzM0NDNDczQTdDNDM2 QkIxQjc0RDkwHhcNMjUwNTE4MTYwMjU4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJhMDRiMi1iYTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArp1H14vyLzthZ0PUo//RdxUyNE4JINamlnMV0G4wk3w+Zv48pTdyFD22H6eU QBd0WfCpbr/gEOxliEU5Rvw96y8h0J1wZeVMLAJfEKOTWvKb64+tgxb25Bt2YbtL /DbRoIkxlvtyG7WS1pWP/tYyyxb3tkLUrFERy9vltrUsg/Fxm/F8UyorszKLOpls NQYPGtcbT0pQc44s+IjzfNQQbwNegXMt5KPb7OEM+r5LlMr4nJDKiESdPA9ejYdx gMLN9MY15pVfqGoWFMf7tnrir7LaRQOvXbk1c0wByNUXtE2vbed5km2GAdYP4Frb 9PGpmc4ZTNrKwgzISqfqxDlqLwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFI1oiMY2 EXDt5KowkkXs9m3Ky5UxMB8GA1UdIwQYMBaAFNK8K8wPOJ46XFM8xHOnxDa7G3TZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjFDNy81NDIyMkZEMDhG QUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5qcGNVenpFYzZmRU5yc2Jk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzByd3J6QTg0bmpwY1V6ekVjNmZFTnJzYmROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzIxQzcvNTQyMjJGRDA4RkFCMTFFMzkzNjJFRjM1NTkxMUVBMzIvRTJBRDkwRTgx M0U4MTFFOUIyODdDMTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMAwEAgABMAYDBAJnGHgwIQQCAAIwGwMHACQGvQDeAAMHACQGvQDeUAMHACQG vQDezTANBgkqhkiG9w0BAQsFAAOCAQEARObIbsH9+sGjghgMjQ3G/BSYEybBsyCU MuM3NoVEB2OfqcfE2Dt8kNw+zmNrpf8aXMbH3H7y56YkahRuRxnfLvEn73r6G5dq pHMNHT0sUU+XH2Ulv1dkXTeut5Gw8l0n7RvtQ7hHLb6Ld5JPqwiE03GkJQTHFDPF h0YI8M5MpOgrpe3lHuAAwbDKhn6KSecJcJ35QcBKI7aqWKRkz3S05XFwShO9GL/j zhZv+OXQX70zXYu0G+BXs+I9ic3OqgwLxjlh/Yfabq3DKy4YaANFkHnAby5xyM4k 00RIfJ52GnhwdCXDvS22wGSANflWgs3aNLgJpXHsnmh1eboVzCo6PA== -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:26 2025 by rpki-client