$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BA69B6FABC2C11EA96657B4BC4F9AE02.roa File: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (raw, json) Hash identifier: /qSqUUquW8P34EzhMbBxrdao9SE8qOtCjPceo9nPsLE= Subject key identifier: E0:2A:78:6B:41:BE:F7:E2:FA:DD:B2:F6:66:EC:C9:C7:2A:5B:39:A5 Certificate issuer: /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Certificate serial: 08D5 Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BA69B6FABC2C11EA96657B4BC4F9AE02.roa Signing time: Tue 02 Sep 2025 21:11:41 +0000 ROA not before: Tue 02 Sep 2025 21:11:41 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 9311 IP address blocks: 103.240.81.0/24 maxlen: 24 103.240.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2261 (0x8d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7 Validity Not Before: Sep 2 21:11:41 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b75d8c-253c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:35:52:5d:01:e0:b1:ae:bb:90:85:7c:f3:74: e7:7a:67:43:d3:87:3f:9e:34:78:1d:5c:54:98:8a: 20:0a:78:18:96:dc:be:b7:c1:66:ab:db:ae:3e:f6: d7:9f:18:10:c9:46:2a:fa:e7:9b:4b:95:81:19:ed: 40:0e:ff:93:50:54:14:2a:a0:6e:70:5e:4a:90:cf: 2d:70:46:86:a1:ed:bd:74:74:29:38:82:70:d9:6c: 3b:1a:32:a3:4a:10:a7:0f:96:01:03:36:e7:d1:d0: 7a:3c:42:f5:f4:97:e8:87:f1:b3:d3:ee:1d:b5:65: 65:31:7e:d9:c1:2d:5e:fb:d8:99:cc:a1:dd:c0:ab: d4:74:cd:39:f8:2d:88:eb:ab:ca:c4:d8:70:23:51: 7c:cb:2e:3d:3c:57:f6:d1:30:84:86:ae:5a:40:96: af:d2:ea:ae:04:62:ba:e2:a3:41:5f:e3:1b:22:1b: 1f:ca:1e:d3:55:e7:89:85:82:57:6a:d5:b6:23:fc: 49:ed:ca:80:02:0f:19:8f:97:ee:15:cb:99:94:7a: 65:3d:52:73:c9:99:92:09:49:02:d5:b7:08:2f:58: bb:01:26:43:29:a6:4a:1b:a2:37:8d:db:2c:49:6a: f2:af:fe:8b:17:17:17:72:5a:bb:11:e1:0d:57:3a: ea:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2A:78:6B:41:BE:F7:E2:FA:DD:B2:F6:66:EC:C9:C7:2A:5B:39:A5 X509v3 Authority Key Identifier: keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BA69B6FABC2C11EA96657B4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.240.81.0/24 103.240.83.0/24 Signature Algorithm: sha256WithRSAEncryption 39:f5:f7:8c:fe:f8:b3:7d:d6:a9:96:3d:57:f6:2a:7c:a2:f5: 07:5f:0c:08:e9:de:d1:ba:63:ae:45:03:44:4c:a3:29:d1:b5: 06:6b:9c:c4:05:a1:94:63:67:ea:ca:32:e1:55:14:b2:2b:36: c2:72:be:30:66:5b:f9:59:58:5e:cf:07:fc:32:c9:88:0d:e1: f2:45:47:23:4c:20:a3:33:e0:8f:b7:e5:cc:88:6f:9f:f3:e2: b0:f2:7c:31:84:37:e7:6f:4e:30:23:c5:db:b3:c6:63:b2:9f: 7b:1b:96:5d:54:92:a3:3a:56:c8:86:95:e8:70:37:42:39:fe: 87:d0:2d:68:02:bb:c7:4c:b8:5d:46:76:bc:c3:2b:2f:e9:a4: 11:a8:7d:cb:3f:d2:18:c4:24:3d:8b:19:78:2a:be:06:e0:5f: 1e:60:54:f2:95:b7:2b:39:0e:84:bc:25:dd:64:76:81:d7:b6: 54:04:6b:63:8a:76:d3:be:d6:f0:c1:6b:d6:ab:94:96:17:0a: f3:3f:7b:e0:e5:f2:ca:2b:33:af:a7:c7:bd:20:dd:45:f8:02: ea:2f:56:d6:d0:1a:b1:74:b4:ec:70:f7:fe:4a:ba:e0:0b:bf: 22:9c:9c:6a:75:8a:fe:3e:95:49:04:78:61:c4:be:d3:b4:5a: d8:be:b1:e6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExQjQxMTAvBgNVBAUTKDFDMEQyREJBNUFCMzZDMkY5NjcyQzE0REQ4NzdCOUVF QTA2Q0NBQzcwHhcNMjUwOTAyMjExMTQxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3NWQ4Yy0yNTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7TVSXQHgsa67kIV883TnemdD04c/njR4HVxUmIogCngYlty+t8Fmq9uuPvbX nxgQyUYq+uebS5WBGe1ADv+TUFQUKqBucF5KkM8tcEaGoe29dHQpOIJw2Ww7GjKj ShCnD5YBAzbn0dB6PEL19Jfoh/Gz0+4dtWVlMX7ZwS1e+9iZzKHdwKvUdM05+C2I 66vKxNhwI1F8yy49PFf20TCEhq5aQJav0uquBGK64qNBX+MbIhsfyh7TVeeJhYJX atW2I/xJ7cqAAg8Zj5fuFcuZlHplPVJzyZmSCUkC1bcIL1i7ASZDKaZKG6I3jdss SWryr/6LFxcXclq7EeENVzrqLQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOAqeGtB vvfi+t2y9mbsyccqWzmlMB8GA1UdIwQYMBaAFBwNLbpas2wvlnLBTdh3ue6gbMrH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFCNC9CMTk5M0M0MEJD MkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJDLVdjc0ZOMkhlNTdxQnN5 c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBMHR1bHF6YkMtV2NzRk4ySGU1N3FCc3lzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTExQjQvQjE5OTNDNDBCQzJCMTFFQTgyQjY4NzRBQzRGOUFFMDIvQkE2OUI2RkFC QzJDMTFFQTk2NjU3QjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABn8FEDBABn8FMwDQYJKoZIhvcNAQELBQADggEBADn194z+ +LN91qmWPVf2Knyi9QdfDAjp3tG6Y65FA0RMoynRtQZrnMQFoZRjZ+rKMuFVFLIr NsJyvjBmW/lZWF7PB/wyyYgN4fJFRyNMIKMz4I+35cyIb5/z4rDyfDGEN+dvTjAj xduzxmOyn3sbll1UkqM6VsiGlehwN0I5/ofQLWgCu8dMuF1GdrzDKy/ppBGofcs/ 0hjEJD2LGXgqvgbgXx5gVPKVtys5DoS8Jd1kdoHXtlQEa2OKdtO+1vDBa9arlJYX CvM/e+Dl8sorM6+nx70g3UX4AuovVtbQGrF0tOxw9/5KuuALvyKcnGp1iv4+lUkE eGHEvtO0Wti+seY= -----END CERTIFICATE-----Generated at Sat Sep 6 13:36:46 2025 by rpki-client