$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/4257053043A611F0820E8527C4F9AE02.roa File: 4257053043A611F0820E8527C4F9AE02.roa (raw, json) Hash identifier: XbT+3cuif/paCabTkMdc9T61fms2dwiji/AHhYWy82A= Subject key identifier: DE:98:E1:5E:DB:2E:6A:13:7F:8B:0D:F1:60:A5:75:10:B4:58:20:0C Certificate issuer: /CN=A91E96BC/serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB Certificate serial: 010A Authority key identifier: ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/4257053043A611F0820E8527C4F9AE02.roa Signing time: Sat 07 Jun 2025 13:49:41 +0000 ROA not before: Sat 07 Jun 2025 13:49:41 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 139646 IP address blocks: 103.143.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 04:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96BC, serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB Validity Not Before: Jun 7 13:49:41 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68444374-2773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:18:38:12:14:bb:31:9e:c4:01:3a:fa:f3: de:b1:88:1e:42:39:a7:19:24:ec:6f:ac:11:6f:8d: 0c:f4:38:70:8e:cd:1b:26:4f:64:eb:40:c4:88:93: 15:86:68:42:fb:7c:7f:51:cc:86:4d:6f:d1:5b:8d: 12:00:61:af:c7:40:02:09:7f:02:72:93:ba:90:94: 32:72:6e:26:90:fc:74:ae:86:a4:ad:0c:54:10:70: e0:34:da:53:9e:35:3b:8b:e7:8e:6b:d9:ec:42:aa: dc:fe:a0:5a:89:01:3c:0d:d6:70:fd:b5:a2:5b:4c: ea:b8:9f:85:e4:4e:34:e1:66:6c:88:11:41:0b:9f: 80:28:1f:ed:84:3f:8c:28:0a:5a:fe:92:cd:d4:ae: 72:05:ac:73:89:9a:df:23:8e:65:98:45:1f:7d:28: df:aa:6c:3a:12:48:17:19:b9:9d:9d:b1:67:24:5f: c7:47:21:a8:11:73:39:fe:7c:2e:89:43:aa:28:bc: 23:04:e4:09:d2:17:63:4a:4a:51:32:81:d9:b4:f5: 5e:ec:2a:ef:da:7d:db:0d:08:9f:f0:bd:11:94:e5: 6a:dd:f8:f5:42:7a:8c:02:57:82:3f:af:5b:13:bd: 66:f1:3e:db:99:51:dd:c2:29:1a:e0:b2:7e:85:2c: 62:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:98:E1:5E:DB:2E:6A:13:7F:8B:0D:F1:60:A5:75:10:B4:58:20:0C X509v3 Authority Key Identifier: keyid:ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/4257053043A611F0820E8527C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.14.0/23 Signature Algorithm: sha256WithRSAEncryption 32:9a:96:3b:55:22:47:c0:20:66:02:ce:7d:86:9a:62:66:a5: b8:d3:65:bf:f4:77:95:89:27:78:0b:15:99:14:5f:78:b8:6f: e0:bb:46:82:07:b1:de:42:fa:f1:d2:b3:ec:d2:2a:a7:5b:91: a7:72:e0:7c:f9:51:53:49:5c:3f:4d:29:7b:5c:ed:e9:1d:bb: c9:94:e1:77:8c:02:9c:be:a5:b4:69:28:15:a2:6d:27:9e:d3: dc:23:5a:a9:78:b2:88:cd:5e:13:15:43:c9:2b:82:8b:bb:00: da:b5:9a:9d:a2:7c:71:7e:a1:85:90:03:b8:5b:96:81:a2:87: 11:45:84:3a:a9:b2:29:c5:c3:37:c2:a1:76:fa:5f:01:45:59: b7:b8:21:88:1a:ae:69:40:52:c1:88:1e:e6:44:97:b6:99:52: 2a:f3:94:6c:0f:73:21:b5:28:ae:e1:7b:d9:8c:b5:f6:2b:77: 93:8e:40:6c:f4:f7:cc:13:2a:8b:c6:4f:08:7d:e9:fd:7f:27: ec:06:59:6a:62:23:7b:31:c4:b7:85:9e:61:14:b3:af:20:ff: b0:ef:96:4a:c2:dc:6c:1b:fc:c2:6b:1e:ec:ca:45:7c:b8:53: 19:03:18:2c:24:70:70:55:f9:4a:b3:96:57:cf:9a:3f:ab:fb: 3d:01:5a:a1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2QkMxMTAvBgNVBAUTKEVEMTFFQjRDMzQ4MDQxOTlFQTc3NTAwRUREQkJFRUUx MEI3NTQ5QUIwHhcNMjUwNjA3MTM0OTQxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ0NDM3NC0yNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoq8YOBIUuzGexAE6+vPesYgeQjmnGSTsb6wRb40M9Dhwjs0bJk9k60DEiJMV hmhC+3x/UcyGTW/RW40SAGGvx0ACCX8CcpO6kJQycm4mkPx0roakrQxUEHDgNNpT njU7i+eOa9nsQqrc/qBaiQE8DdZw/bWiW0zquJ+F5E404WZsiBFBC5+AKB/thD+M KApa/pLN1K5yBaxziZrfI45lmEUffSjfqmw6EkgXGbmdnbFnJF/HRyGoEXM5/nwu iUOqKLwjBOQJ0hdjSkpRMoHZtPVe7Crv2n3bDQif8L0RlOVq3fj1QnqMAleCP69b E71m8T7bmVHdwika4LJ+hSxiEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN6Y4V7b LmoTf4sN8WCldRC0WCAMMB8GA1UdIwQYMBaAFO0R60w0gEGZ6ndQDt277uELdUmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZCQy82Njg3RUYyMkQx NEQxMUVFOURCNDE4MEZDNEY5QUUwMi83UkhyVERTQVFabnFkMUFPM2J2dTRRdDFT YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSSHJURFNBUVpucWQxQU8zYnZ1NFF0MVNhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk2QkMvNjY4N0VGMjJEMTREMTFFRTlEQjQxODBGQzRGOUFFMDIvNDI1NzA1MzA0 M0E2MTFGMDgyMEU4NTI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjw4wDQYJKoZIhvcNAQELBQADggEBADKaljtVIkfAIGYC zn2GmmJmpbjTZb/0d5WJJ3gLFZkUX3i4b+C7RoIHsd5C+vHSs+zSKqdbkady4Hz5 UVNJXD9NKXtc7ekdu8mU4XeMApy+pbRpKBWibSee09wjWql4sojNXhMVQ8krgou7 ANq1mp2ifHF+oYWQA7hbloGihxFFhDqpsinFwzfCoXb6XwFFWbe4IYgarmlAUsGI HuZEl7aZUirzlGwPcyG1KK7he9mMtfYrd5OOQGz098wTKovGTwh96f1/J+wGWWpi I3sxxLeFnmEUs68g/7DvlkrC3Gwb/MJrHuzKRXy4UxkDGCwkcHBV+UqzllfPmj+r +z0BWqE= -----END CERTIFICATE-----Generated at Mon Jun 9 12:24:46 2025 by rpki-client