$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/B9379E74865611F0A52CCA3EC4F9AE02.roa File: B9379E74865611F0A52CCA3EC4F9AE02.roa (raw, json) Hash identifier: UWSF1pfWeO881gCSl6I5ELn4d9ZwwfUgPvvo1upOr+U= Subject key identifier: 71:05:97:2D:EA:AD:BE:8E:9F:39:21:B7:86:0B:CE:5F:85:55:CE:77 Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Certificate serial: 3624 Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/B9379E74865611F0A52CCA3EC4F9AE02.roa Signing time: Tue 02 Sep 2025 15:01:18 +0000 ROA not before: Tue 02 Sep 2025 15:01:18 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138160 IP address blocks: 103.230.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13860 (0x3624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Validity Not Before: Sep 2 15:01:18 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b706be-5170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:d2:72:0c:d2:8c:7f:c3:5d:f2:31:60:02:0c: 7c:f2:a8:28:13:0d:a3:69:35:64:8a:60:81:94:8a: d7:6d:09:f8:c4:5f:e1:a4:26:32:e2:11:17:48:70: 79:50:f5:93:1e:60:71:ab:64:6c:10:dd:e9:a4:c8: 43:69:d9:0b:9a:8c:d6:3d:d5:c2:8b:c9:a0:61:a3: c8:5c:5c:1f:d8:41:66:81:c6:3f:4b:ab:6e:66:b0: c8:30:f9:c8:49:1a:20:c8:1a:3c:56:68:3d:15:e6: 47:e5:0a:48:47:60:9e:16:79:bd:16:57:d3:a5:49: 41:47:9f:f6:95:75:46:bf:d5:f9:c5:29:f9:15:4d: 41:c4:d6:09:b9:b2:f0:11:7f:bd:81:7d:a4:de:6c: af:10:f0:b1:7f:50:ce:8a:1a:ed:68:f5:b3:4a:e8: d0:1e:35:ab:50:58:ba:53:ef:37:4d:0a:7d:4d:b2: 05:71:cb:c5:01:9d:58:f0:53:23:b4:09:24:78:c8: ad:e8:3b:ec:b4:0e:fd:40:a7:12:ad:13:57:58:c5: fa:b6:b8:86:74:00:c5:61:29:64:da:21:2a:32:5d: 25:8c:42:f3:ea:a5:a2:e1:c4:0f:60:53:46:4c:a3: 25:db:1f:44:6f:9c:35:d9:fe:a3:cf:9b:4a:64:3a: ac:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:05:97:2D:EA:AD:BE:8E:9F:39:21:B7:86:0B:CE:5F:85:55:CE:77 X509v3 Authority Key Identifier: keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/B9379E74865611F0A52CCA3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.230.69.0/24 Signature Algorithm: sha256WithRSAEncryption 78:89:2c:22:5b:2d:d8:84:a2:51:a0:8c:a7:ca:11:6f:03:90: d4:14:8f:b4:7a:61:87:16:5e:e8:37:f3:91:ad:ca:aa:b4:8f: 9d:e0:11:27:d1:7c:8e:9a:2b:da:d9:83:96:51:5f:df:31:67: d5:cd:6a:f9:a9:3d:d4:ab:50:01:2d:ca:e2:d1:3a:86:40:6e: 27:fd:fb:72:98:dc:55:1c:af:3e:5c:49:57:8f:52:40:ee:c3: 39:08:f3:5d:f9:eb:39:cc:f0:b1:e3:b4:3a:9e:41:75:54:0b: 4f:2b:c9:c6:68:37:92:45:92:be:a3:94:2d:fd:1c:a3:11:f3: 5d:5b:43:38:ba:e6:75:4d:ed:ab:19:c9:11:0b:7f:8e:bb:ac: 06:51:ea:ff:69:06:59:7c:78:a2:b8:d6:8b:8c:bb:0f:e1:58: be:71:e0:ee:c6:47:96:fe:ec:dc:40:0e:c4:c0:64:4f:e2:37: 81:0f:92:df:0d:2d:d6:7f:9e:4e:bc:2b:4b:6a:0d:6b:e4:7b: e6:dd:0a:4f:e3:4c:5c:8b:88:72:8e:28:38:ef:5c:7f:9d:80: 05:21:3c:0f:dd:ed:68:dd:d2:3a:35:b9:73:d3:1d:09:de:73: d5:ac:40:25:9f:86:10:2f:69:c2:e6:01:77:be:48:3a:9f:a1: 50:9e:d5:60 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0 OTExRjFGNEYwHhcNMjUwOTAyMTUwMTE4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3MDZiZS01MTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+tJyDNKMf8Nd8jFgAgx88qgoEw2jaTVkimCBlIrXbQn4xF/hpCYy4hEXSHB5 UPWTHmBxq2RsEN3ppMhDadkLmozWPdXCi8mgYaPIXFwf2EFmgcY/S6tuZrDIMPnI SRogyBo8Vmg9FeZH5QpIR2CeFnm9FlfTpUlBR5/2lXVGv9X5xSn5FU1BxNYJubLw EX+9gX2k3myvEPCxf1DOihrtaPWzSujQHjWrUFi6U+83TQp9TbIFccvFAZ1Y8FMj tAkkeMit6DvstA79QKcSrRNXWMX6triGdADFYSlk2iEqMl0ljELz6qWi4cQPYFNG TKMl2x9Eb5w12f6jz5tKZDqs0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHEFly3q rb6Onzkht4YLzl+FVc53MB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvQjkzNzlFNzQ4 NjU2MTFGMEE1MkNDQTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn5kUwDQYJKoZIhvcNAQELBQADggEBAHiJLCJbLdiEolGg jKfKEW8DkNQUj7R6YYcWXug385Gtyqq0j53gESfRfI6aK9rZg5ZRX98xZ9XNavmp PdSrUAEtyuLROoZAbif9+3KY3FUcrz5cSVePUkDuwzkI81356znM8LHjtDqeQXVU C08rycZoN5JFkr6jlC39HKMR811bQzi65nVN7asZyRELf467rAZR6v9pBll8eKK4 1ouMuw/hWL5x4O7GR5b+7NxADsTAZE/iN4EPkt8NLdZ/nk68K0tqDWvke+bdCk/j TFyLiHKOKDjvXH+dgAUhPA/d7Wjd0jo1uXPTHQnec9WsQCWfhhAvacLmAXe+SDqf oVCe1WA= -----END CERTIFICATE-----Generated at Fri Sep 5 08:53:43 2025 by rpki-client