$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa File: AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa (raw, json) Hash identifier: Hj2ed/vfEs3kfitU1w0BAdoi0iJDtRaYFfE12UdPkyo= Subject key identifier: 09:20:93:79:0E:0E:45:FA:1B:7E:00:5B:2A:69:F6:E2:B4:E9:69:B8 Certificate issuer: /CN=A91C6CD5/serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627 Certificate serial: 03F8 Authority key identifier: 4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa Signing time: Thu 13 Mar 2025 00:25:49 +0000 ROA not before: Thu 13 Mar 2025 00:25:49 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 149415 IP address blocks: 103.178.238.0/23 maxlen: 24 2001:df0:4240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1016 (0x3f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CD5, serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627 Validity Not Before: Mar 13 00:25:49 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67d2260d-4279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:f5:ac:e4:7f:41:fc:31:b8:b0:a8:f1:52: ad:39:db:26:54:91:e7:47:04:c1:d7:f2:ad:15:ad: 5e:c9:15:f5:b3:2d:d5:b7:2a:b1:3d:e8:14:5c:af: e0:19:2d:a9:85:6e:cd:90:2d:87:ea:36:27:fd:3c: c0:33:18:64:ac:12:41:41:9c:6e:0f:4d:c2:6e:16: fa:9a:2e:a6:b5:1b:50:0e:bc:f9:5c:57:85:a8:8d: 4d:91:91:e1:df:1a:f9:ec:f7:de:21:26:44:05:6a: 5e:8a:da:d3:ad:f5:47:4a:d5:1a:68:8f:5b:d0:14: c0:ee:27:9f:9b:da:fa:e7:b1:5c:c0:f7:cb:66:5e: 0b:32:4c:c0:d5:3c:c2:cf:1a:e9:64:e4:97:fe:66: 7b:a9:12:c1:22:24:b4:f0:c1:40:3a:d7:90:b5:3b: 39:49:7c:18:29:e0:7a:1c:07:45:6f:89:80:42:aa: 69:50:f3:60:00:f2:29:f9:31:29:4d:94:7d:f7:1d: 3c:72:54:c9:46:aa:83:e5:9b:2c:68:47:51:e4:38: 3c:27:75:ee:31:5b:68:5a:90:0f:03:ec:23:4c:ad: 2b:a1:1c:45:44:1b:d4:bf:2b:03:bb:32:54:18:21: 1d:75:66:94:b2:d1:1c:5e:53:61:e9:3c:5d:a2:05: 53:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:20:93:79:0E:0E:45:FA:1B:7E:00:5B:2A:69:F6:E2:B4:E9:69:B8 X509v3 Authority Key Identifier: keyid:4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.178.238.0/23 IPv6: 2001:df0:4240::/48 Signature Algorithm: sha256WithRSAEncryption 0f:eb:0a:5f:df:80:8b:b0:17:9a:4d:0e:2a:a2:c2:ac:23:a0: 3b:38:af:f1:7f:a0:4e:56:a4:ad:de:db:f9:fc:36:94:3e:b2: 9c:79:c1:13:13:7e:57:72:b6:f2:aa:7f:3e:a2:7f:3b:d1:32: 97:49:79:4c:60:6b:2c:8c:e8:4b:f6:40:3b:f7:b1:20:a9:9d: fa:36:02:86:1c:27:e9:97:88:3b:f3:4f:42:7e:f3:01:33:7f: e8:79:85:65:af:f0:ba:2a:9b:c4:9f:67:a0:5a:22:aa:68:08: cb:f0:71:d6:28:1a:e1:21:5f:e4:cc:09:37:f2:ec:f5:28:cb: 14:42:99:fe:a5:7c:53:61:79:ec:34:e7:58:1a:87:45:b4:c2: a6:b7:60:9a:48:5f:bd:3d:25:36:71:db:14:f4:65:c3:df:bc: 02:c2:12:ab:09:62:80:e9:a8:d4:4a:68:87:65:d7:03:b9:35: 4d:3b:5a:5c:1e:59:af:f7:9f:25:f0:77:e3:ef:a5:69:47:42: e1:9e:68:99:3b:cd:bb:bc:b1:e2:7b:2e:45:85:95:40:cc:fe: cc:56:76:e1:03:49:3b:3c:1d:87:b4:e8:f8:17:e6:78:93:f5: 02:92:2d:e5:df:fd:73:7c:a3:24:eb:90:a7:77:e9:1b:f8:dd: 77:17:90:e7 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDRDUxMTAvBgNVBAUTKDRCNEMzQUNDNzYyMENBOEQyNjlGNzdDMkY4QkU2Q0Ew REEyMTc2MjcwHhcNMjUwMzEzMDAyNTQ5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2QyMjYwZC00Mjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3n1rOR/QfwxuLCo8VKtOdsmVJHnRwTB1/KtFa1eyRX1sy3VtyqxPegUXK/g GS2phW7NkC2H6jYn/TzAMxhkrBJBQZxuD03Cbhb6mi6mtRtQDrz5XFeFqI1NkZHh 3xr57PfeISZEBWpeitrTrfVHStUaaI9b0BTA7iefm9r657FcwPfLZl4LMkzA1TzC zxrpZOSX/mZ7qRLBIiS08MFAOteQtTs5SXwYKeB6HAdFb4mAQqppUPNgAPIp+TEp TZR99x08clTJRqqD5ZssaEdR5Dg8J3XuMVtoWpAPA+wjTK0roRxFRBvUvysDuzJU GCEddWaUstEcXlNh6TxdogVTgwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAkgk3kO DkX6G34AWypp9uK06Wm4MB8GA1UdIwQYMBaAFEtMOsx2IMqNJp93wvi+bKDaIXYn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNENS84MDRCMUU5MjZB REExMUVDQUNBN0E1MzBDNEY5QUUwMi9TMHc2ekhZZ3lvMG1uM2ZDLUw1c29Ob2hk aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwdzZ6SFlneW8wbW4zZkMtTDVzb05vaGRpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZDRDUvODA0QjFFOTI2QURBMTFFQ0FDQTdBNTMwQzRGOUFFMDIvQUUwQUZFODQ2 QURFMTFFQ0FERjJGRTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnsu4wDwQCAAIwCQMHACABDfBCQDANBgkqhkiG9w0BAQsF AAOCAQEAD+sKX9+Ai7AXmk0OKqLCrCOgOziv8X+gTlakrd7b+fw2lD6ynHnBExN+ V3K28qp/PqJ/O9Eyl0l5TGBrLIzoS/ZAO/exIKmd+jYChhwn6ZeIO/NPQn7zATN/ 6HmFZa/wuiqbxJ9noFoiqmgIy/Bx1iga4SFf5MwJN/Ls9SjLFEKZ/qV8U2F57DTn WBqHRbTCprdgmkhfvT0lNnHbFPRlw9+8AsISqwligOmo1Epoh2XXA7k1TTtaXB5Z r/efJfB34++laUdC4Z5omTvNu7yx4nsuRYWVQMz+zFZ24QNJOzwdh7To+BfmeJP1 ApIt5d/9c3yjJOuQp3fpG/jddxeQ5w== -----END CERTIFICATE-----Generated at Wed Nov 5 13:04:48 2025 by rpki-client