$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/213E93FE8E0B11F088E57287C4F9AE02.roa File: 213E93FE8E0B11F088E57287C4F9AE02.roa (raw, json) Hash identifier: XvQlmCL/lUe7ZYDky8HxuV3wqFx2+yxYoZ/we9Jj4bk= Subject key identifier: 9E:94:79:DA:19:4B:CF:2F:87:51:B3:A7:BF:BE:A5:FE:6B:D6:09:F6 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 04E8 Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/213E93FE8E0B11F088E57287C4F9AE02.roa Signing time: Wed 10 Sep 2025 05:58:10 +0000 ROA not before: Wed 10 Sep 2025 05:58:10 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 56224 IP address blocks: 103.150.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: Sep 10 05:58:10 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68c11372-3a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:63:d3:53:a4:7a:a5:85:d7:24:ee:57:10:05: 72:4e:8a:f4:1c:12:61:f6:48:71:53:1f:90:f4:09: 00:ca:15:aa:72:92:32:1c:cd:9d:ac:c1:ed:e2:79: 28:c9:92:b2:d5:1b:a8:3f:69:c3:aa:e4:8c:05:a3: 3b:88:a6:6f:ea:92:79:fa:b5:49:8c:72:9e:c4:a7: 1b:59:2a:8b:15:11:2c:8b:9b:f4:1a:37:6f:d7:e8: 30:81:15:a3:bb:dc:ee:88:9d:1e:dd:f1:66:d8:9a: 7d:ac:20:91:8d:9d:a0:aa:11:97:bf:c2:2b:99:db: b1:1a:c8:b5:21:fd:ff:be:1e:1e:5b:1f:84:0a:ae: b6:f6:99:ac:6a:3e:ca:39:8d:66:96:f6:69:3a:0e: ac:b4:c4:97:9b:1b:88:48:47:87:75:71:72:b4:6c: 6d:00:a1:30:9e:c4:86:ba:08:b0:62:92:11:02:e6: 0c:50:00:4b:01:b2:4d:d2:ae:97:55:ed:ce:d6:7e: d6:66:0f:bb:fa:99:ad:2d:a2:a0:9b:ac:30:33:6b: 33:2c:0c:4f:5f:4d:f7:bf:1c:0d:e4:3d:df:3c:fa: fd:c4:c3:48:e2:d5:29:83:fe:6a:00:d3:1d:56:c9: d2:71:04:9f:e9:d5:f1:d8:8a:f2:66:d9:9a:c1:f9: ec:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:94:79:DA:19:4B:CF:2F:87:51:B3:A7:BF:BE:A5:FE:6B:D6:09:F6 X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/213E93FE8E0B11F088E57287C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.153.0/24 Signature Algorithm: sha256WithRSAEncryption 88:b1:e7:da:ec:54:1c:a7:75:2a:d3:f7:3a:44:e6:3a:d8:23: ae:13:a0:f6:22:06:a1:59:67:bd:51:75:45:5e:12:61:5b:f8: e0:a6:7e:9c:c2:4a:d2:0f:e3:5a:01:c6:5f:da:94:1a:fc:d7: 90:2c:4e:08:8d:2f:81:94:15:83:c2:0d:b4:0d:8b:cb:84:3c: d8:4f:b1:17:29:ab:96:56:67:4f:b4:ff:eb:42:19:d1:c5:ca: e6:55:dc:a9:cb:a3:c7:97:e1:44:6f:33:03:9d:49:36:70:49: ed:e8:63:ab:25:ab:3c:49:cc:f3:90:a2:6b:e4:0d:fa:52:df: 83:c0:f5:1e:dd:9f:a6:87:ae:1a:29:72:f5:f4:82:ab:d7:4c: b0:24:1e:05:8c:0f:d1:f8:74:3d:10:1f:e0:80:63:a0:37:a9: 18:20:5c:32:b1:e1:97:cd:20:e7:dc:1a:35:47:5c:05:3c:42: 7c:78:16:a6:2a:f9:ef:26:bb:07:bc:75:47:ec:98:69:68:67: ab:25:2b:60:74:50:76:1c:9c:ed:f4:55:c7:2e:94:f5:1b:b0: 09:f0:b0:3c:bc:eb:76:87:2b:02:c3:0d:b2:5a:1a:d9:8c:1d: 89:c2:45:74:c4:8e:74:4a:5e:58:05:e5:86:19:fa:b1:e8:65: f2:4c:33:83 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjUwOTEwMDU1ODEwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGMxMTM3Mi0zYTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02PTU6R6pYXXJO5XEAVyTor0HBJh9khxUx+Q9AkAyhWqcpIyHM2drMHt4nko yZKy1RuoP2nDquSMBaM7iKZv6pJ5+rVJjHKexKcbWSqLFREsi5v0Gjdv1+gwgRWj u9zuiJ0e3fFm2Jp9rCCRjZ2gqhGXv8IrmduxGsi1If3/vh4eWx+ECq629pmsaj7K OY1mlvZpOg6stMSXmxuISEeHdXFytGxtAKEwnsSGugiwYpIRAuYMUABLAbJN0q6X Ve3O1n7WZg+7+pmtLaKgm6wwM2szLAxPX033vxwN5D3fPPr9xMNI4tUpg/5qANMd VsnScQSf6dXx2IryZtmawfnscwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ6UedoZ S88vh1Gzp7++pf5r1gn2MB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk0NjcvNzcwQjRGMUE1MjZGMTFFQ0JDNTBFQjE3QzRGOUFFMDIvMjEzRTkzRkU4 RTBCMTFGMDg4RTU3Mjg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnlpkwDQYJKoZIhvcNAQELBQADggEBAIix59rsVByndSrT 9zpE5jrYI64ToPYiBqFZZ71RdUVeEmFb+OCmfpzCStIP41oBxl/alBr815AsTgiN L4GUFYPCDbQNi8uEPNhPsRcpq5ZWZ0+0/+tCGdHFyuZV3KnLo8eX4URvMwOdSTZw Se3oY6slqzxJzPOQomvkDfpS34PA9R7dn6aHrhopcvX0gqvXTLAkHgWMD9H4dD0Q H+CAY6A3qRggXDKx4ZfNIOfcGjVHXAU8Qnx4FqYq+e8muwe8dUfsmGloZ6slK2B0 UHYcnO30VcculPUbsAnwsDy863aHKwLDDbJaGtmMHYnCRXTEjnRKXlgF5YYZ+rHo ZfJMM4M= -----END CERTIFICATE-----Generated at Thu Sep 18 22:07:38 2025 by rpki-client