$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/2694EA4C3A5011F0B1C5451DC4F9AE02.roa File: 2694EA4C3A5011F0B1C5451DC4F9AE02.roa (raw, json) Hash identifier: i+D6U66jYq0hRY2atk2pQpTs28w0MJcSmyVG8V2Aw6o= Subject key identifier: E5:C5:1C:6D:ED:8C:E5:F0:00:C7:9C:75:A9:26:A9:F1:2E:02:EF:E4 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 2207 Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/2694EA4C3A5011F0B1C5451DC4F9AE02.roa Signing time: Mon 26 May 2025 16:40:37 +0000 ROA not before: Mon 26 May 2025 16:40:37 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 834 IP address blocks: 103.111.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:51:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8711 (0x2207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: May 26 16:40:37 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68349985-21a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:e5:b0:1c:92:8f:a2:68:bb:05:e2:0d:af: 2b:b8:bd:2c:4e:a1:b6:bc:bc:e5:d2:48:61:5b:84: 86:49:93:c8:e4:5c:6d:25:78:06:2d:3f:d2:ac:0e: 3e:c9:67:47:25:58:dc:12:6a:b6:6c:8e:9f:5d:d4: 14:5f:61:18:7c:1c:11:0d:73:88:18:47:18:01:d3: 3d:63:7a:16:13:01:7b:d0:6f:cd:8d:21:7c:2c:06: 70:30:39:f6:62:9d:0e:f0:d5:23:89:4a:b6:76:c7: f0:a5:b3:f5:91:eb:61:4b:3f:68:65:f2:8c:93:e3: 1b:8b:f9:19:53:ac:9a:dd:f7:fb:8a:7a:4f:c7:20: cb:61:7b:b3:8f:b2:07:07:45:e8:52:9d:13:67:9d: 41:c9:6f:2e:1f:54:7d:62:70:6d:cb:bd:38:f9:b6: 73:a7:61:6b:b3:7d:73:15:64:37:54:0d:83:9e:78: ba:73:85:41:f2:13:d0:f3:3e:5a:d2:29:53:3e:48: 35:e9:0f:20:18:5b:3f:09:56:1f:7f:2a:ba:a8:29: 95:80:e1:71:de:1b:02:7c:76:d3:d7:24:7e:60:b6: ad:f0:b9:c7:83:c0:db:bb:31:24:d5:97:de:b5:94: cb:a7:8d:a7:40:dd:16:95:6c:a7:bc:d5:f2:34:53: 4f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C5:1C:6D:ED:8C:E5:F0:00:C7:9C:75:A9:26:A9:F1:2E:02:EF:E4 X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/2694EA4C3A5011F0B1C5451DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.89.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:59:d9:16:ac:63:ca:f6:3d:51:8e:5d:84:25:13:bb:02:97: 5c:94:18:df:68:5d:47:51:d8:96:12:6c:74:fd:5c:60:c8:81: e3:e5:e5:53:4b:de:f9:3b:09:5a:12:8b:43:0d:eb:b5:42:31: 8e:40:56:69:88:bc:c8:67:fe:df:7e:6d:7d:92:ca:d8:9e:b5: 5a:f0:ee:10:4a:54:d9:88:84:8c:14:86:46:02:fd:0a:8c:ed: aa:80:f9:a8:f0:f1:1d:ec:7b:ac:50:ca:4c:39:41:fb:45:98: fe:62:be:8d:40:ad:21:c6:47:c6:dc:95:87:d9:7c:d5:1b:74: db:32:fb:67:b3:5f:dd:95:19:96:b6:23:ef:53:8c:55:8d:68: 56:71:fd:0b:01:19:78:ff:2a:fd:d6:74:c8:d0:46:1a:20:5f: de:01:80:70:f1:fc:8a:17:c8:9d:4d:28:76:63:f1:a8:4a:52: dd:10:68:c4:64:e9:a7:50:5f:a1:54:8f:18:1d:05:6d:63:0f: c3:e1:70:91:67:2a:72:c8:99:37:9e:49:4b:d1:aa:a1:96:51: 46:5f:bf:31:60:48:4a:c1:a7:11:18:df:f1:03:21:5b:64:18: 21:80:b9:fb:0a:c8:64:41:6b:09:2e:00:76:6d:b5:cf:cd:5b: e7:6f:53:2e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjUwNTI2MTY0MDM3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM0OTk4NS0yMWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GblsBySj6JouwXiDa8ruL0sTqG2vLzl0khhW4SGSZPI5FxtJXgGLT/SrA4+ yWdHJVjcEmq2bI6fXdQUX2EYfBwRDXOIGEcYAdM9Y3oWEwF70G/NjSF8LAZwMDn2 Yp0O8NUjiUq2dsfwpbP1kethSz9oZfKMk+Mbi/kZU6ya3ff7inpPxyDLYXuzj7IH B0XoUp0TZ51ByW8uH1R9YnBty704+bZzp2Frs31zFWQ3VA2Dnni6c4VB8hPQ8z5a 0ilTPkg16Q8gGFs/CVYffyq6qCmVgOFx3hsCfHbT1yR+YLat8LnHg8DbuzEk1Zfe tZTLp42nQN0WlWynvNXyNFNP7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFOXFHG3t jOXwAMecdakmqfEuAu/kMB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ4NDUvNDAwMTUzQjZEMkVCMTFFNUI0RDE1QTRFQzRGOUFFMDIvMjY5NEVBNEMz QTUwMTFGMEIxQzU0NTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnb1kwDQYJKoZIhvcNAQELBQADggEBAJ5Z2RasY8r2PVGO XYQlE7sCl1yUGN9oXUdR2JYSbHT9XGDIgePl5VNL3vk7CVoSi0MN67VCMY5AVmmI vMhn/t9+bX2SytietVrw7hBKVNmIhIwUhkYC/QqM7aqA+ajw8R3se6xQykw5QftF mP5ivo1ArSHGR8bclYfZfNUbdNsy+2ezX92VGZa2I+9TjFWNaFZx/QsBGXj/Kv3W dMjQRhogX94BgHDx/IoXyJ1NKHZj8ahKUt0QaMRk6adQX6FUjxgdBW1jD8PhcJFn KnLImTeeSUvRqqGWUUZfvzFgSErBpxEY3/EDIVtkGCGAufsKyGRBawkuAHZttc/N W+dvUy4= -----END CERTIFICATE-----Generated at Mon Jun 2 07:17:52 2025 by rpki-client