$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1E6B12EC049F11F0AD5C7C33C4F9AE02.roa File: 1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (raw, json) Hash identifier: V1nVjcRX5R04AqVfR5w5cXlLTGnKcZ3YhA/Vr4DbC7g= Subject key identifier: 98:6A:B1:20:55:1E:2B:E0:22:A0:3C:E5:0A:74:38:D3:87:AE:BC:64 Certificate issuer: /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Certificate serial: 0B53 Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1E6B12EC049F11F0AD5C7C33C4F9AE02.roa Signing time: Tue 02 Sep 2025 19:39:25 +0000 ROA not before: Tue 02 Sep 2025 19:39:25 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 38082 IP address blocks: 103.14.164.0/24 maxlen: 24 103.14.165.0/24 maxlen: 24 103.14.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 19:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2899 (0xb53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Validity Not Before: Sep 2 19:39:25 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b747ed-a0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b0:07:c2:d1:67:ec:a9:e2:f5:c2:0c:3e:5c: 10:71:24:8e:98:3d:52:75:36:0c:0a:34:4b:90:b2: fe:00:40:54:8e:90:58:05:ad:33:6c:e4:04:3b:ba: 8a:f1:09:af:e2:bd:c3:64:6a:07:24:ab:5f:50:ee: 5b:f1:ef:c4:57:1c:01:30:43:97:71:a0:15:0d:6a: 10:54:3a:8f:ff:6b:b8:69:f0:c4:f8:c1:5a:95:36: d5:71:b4:89:89:f3:70:43:ab:03:34:dd:12:30:88: a5:2e:41:26:29:61:da:d7:d4:5e:55:ee:5a:cd:0b: 18:b6:4c:22:35:a6:ea:14:69:32:ac:11:26:77:ff: d9:1f:d8:14:bf:0d:0c:15:c4:4d:21:ac:97:a4:81: a5:b8:f5:87:a4:5e:1e:d4:47:22:7e:32:91:0a:5d: 52:99:18:1b:2e:bf:64:ed:1e:55:32:84:18:ba:9f: 90:c0:d7:04:09:06:34:8c:a5:34:97:fa:47:d9:86: a4:a7:54:c7:32:6e:a6:1c:2f:be:25:19:5a:d6:8f: 1c:a9:ae:43:0f:26:7a:fd:ab:d6:c6:e7:a5:59:a8: c7:67:52:ec:fd:e4:a9:71:1d:54:e6:c1:da:9b:60: 6d:0b:9b:e8:d9:f0:11:57:53:09:45:24:a2:01:68: 0f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6A:B1:20:55:1E:2B:E0:22:A0:3C:E5:0A:74:38:D3:87:AE:BC:64 X509v3 Authority Key Identifier: keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1E6B12EC049F11F0AD5C7C33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.14.164.0-103.14.166.255 Signature Algorithm: sha256WithRSAEncryption 25:01:76:a1:b4:ec:a7:6e:42:a6:fe:c1:8c:bc:b6:b0:38:80: d2:73:62:bf:0d:9e:df:cf:46:54:bf:11:11:41:67:26:27:bc: af:4a:1e:89:bc:52:e0:48:39:af:38:ca:dc:96:71:74:37:a5: ea:b8:24:a6:3b:3c:fe:ff:b7:83:12:38:65:a2:50:4b:33:66: d2:d6:29:28:54:fa:f5:14:a3:97:1c:73:5c:e0:92:f7:43:23: 0b:0b:fb:94:7d:d0:5b:d3:5d:f7:7b:5d:19:d2:27:1e:aa:83: 0b:e7:b5:13:f5:e7:47:ab:20:70:7d:d6:47:11:d7:3e:ad:e1: 51:92:31:ad:98:52:8b:92:98:76:d8:81:77:30:29:7c:b4:0b: c5:6a:40:9a:59:7a:35:52:aa:cc:73:09:2f:13:d0:20:9b:8d: fb:f8:7d:7d:af:e6:66:d7:2c:25:10:1c:a9:a3:a2:c0:18:b5: a5:11:8d:1f:98:97:4a:1e:56:dd:17:0d:5e:cd:60:39:7d:81: 45:a6:d1:c3:32:cb:0c:c0:33:b8:c5:d5:ef:b5:a2:db:f4:0d: e3:c8:31:55:63:5e:e7:00:cb:04:d8:91:45:11:76:bf:bc:b5: f4:47:dd:03:87:f7:0a:e3:ee:67:43:f3:0e:a9:98:6a:e7:98: c3:1c:de:6a -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICC1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0NzUxMTAvBgNVBAUTKEQ1MEMwQUQzQjRBRDgxRDU1NTk0NUNDN0YzRjFFRTFD MUZBREU2MTcwHhcNMjUwOTAyMTkzOTI1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3NDdlZC1hMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bAHwtFn7Kni9cIMPlwQcSSOmD1SdTYMCjRLkLL+AEBUjpBYBa0zbOQEO7qK 8Qmv4r3DZGoHJKtfUO5b8e/EVxwBMEOXcaAVDWoQVDqP/2u4afDE+MFalTbVcbSJ ifNwQ6sDNN0SMIilLkEmKWHa19ReVe5azQsYtkwiNabqFGkyrBEmd//ZH9gUvw0M FcRNIayXpIGluPWHpF4e1EcifjKRCl1SmRgbLr9k7R5VMoQYup+QwNcECQY0jKU0 l/pH2Yakp1THMm6mHC++JRla1o8cqa5DDyZ6/avWxuelWajHZ1Ls/eSpcR1U5sHa m2BtC5vo2fARV1MJRSSiAWgPSQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFJhqsSBV HivgIqA85Qp0ONOHrrxkMB8GA1UdIwQYMBaAFNUMCtO0rYHVVZRcx/Px7hwfreYX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQ3NS8yMDhGQjczMDQx NzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdkVlZsRnpIOF9IdUhCLXQ1 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRd0swN1N0Z2RWVmxGekg4X0h1SEItdDVoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI0NzUvMjA4RkI3MzA0MTcyMTFFQTk4QTM2ODZEQzRGOUFFMDIvMUU2QjEyRUMw NDlGMTFGMEFENUM3QzMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAmcOpAMEAGcOpjANBgkqhkiG9w0BAQsFAAOCAQEAJQF2 obTsp25Cpv7BjLy2sDiA0nNivw2e389GVL8REUFnJie8r0oeibxS4Eg5rzjK3JZx dDel6rgkpjs8/v+3gxI4ZaJQSzNm0tYpKFT69RSjlxxzXOCS90MjCwv7lH3QW9Nd 93tdGdInHqqDC+e1E/XnR6sgcH3WRxHXPq3hUZIxrZhSi5KYdtiBdzApfLQLxWpA mll6NVKqzHMJLxPQIJuN+/h9fa/mZtcsJRAcqaOiwBi1pRGNH5iXSh5W3RcNXs1g OX2BRabRwzLLDMAzuMXV77Wi2/QN48gxVWNe5wDLBNiRRRF2v7y19EfdA4f3CuPu Z0PzDqmYaueYwxzeag== -----END CERTIFICATE-----Generated at Sun Sep 7 14:54:16 2025 by rpki-client