$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/0104D0BADB0D11EE88489759C4F9AE02.roa File: 0104D0BADB0D11EE88489759C4F9AE02.roa (raw, json) Hash identifier: LQ0UWeNx88xxb3PwrhtWXJ6OvL3Z0fZQ5Cb8jkErQMM= Subject key identifier: 6F:F8:67:A9:32:35:83:F0:D8:DB:30:8A:54:28:CA:9D:39:FD:F6:C4 Certificate issuer: /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C Certificate serial: 04AC Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/0104D0BADB0D11EE88489759C4F9AE02.roa Signing time: Sun 31 Aug 2025 01:17:48 +0000 ROA not before: Sun 31 Aug 2025 01:17:48 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 136969 IP address blocks: 103.152.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1196 (0x4ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C Validity Not Before: Aug 31 01:17:48 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68b3a2bc-e8bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d4:62:3a:88:02:b6:3c:01:88:55:e0:13:6a: 2f:a9:4b:61:e8:2c:eb:2a:f9:13:23:5f:12:eb:b8: c0:0e:12:88:80:42:43:71:5a:8a:35:2f:f6:1c:07: 3c:14:c0:e1:e9:6b:99:04:0c:62:28:09:c9:d7:bc: b2:b1:07:9d:91:0a:f6:3d:05:d7:8b:36:69:60:01: b5:2e:8d:ac:b9:f0:6f:1f:8b:09:6a:e9:26:10:1a: 78:95:95:6b:5e:35:47:dd:38:c2:87:c0:53:9e:b0: d6:6f:48:19:b2:13:de:2d:8b:c0:91:4d:e0:2a:6c: 93:6e:b3:d7:b6:9a:f7:77:4b:d3:5f:fd:7f:72:6b: 2d:50:d9:0d:81:5e:91:40:44:88:7b:e4:a6:96:73: 81:e3:e6:f1:b7:a9:38:05:15:1b:d5:a4:6c:f8:57: a1:43:03:d5:3c:84:41:86:f3:b7:ff:e0:37:0e:78: 7b:e3:52:b1:02:b2:07:1a:b9:99:ab:cb:e5:6e:ea: 73:37:e2:99:35:b7:a0:72:de:fd:4e:e8:8e:af:6d: 5e:a1:16:07:64:3e:13:57:82:fc:ab:45:80:29:8d: d0:0d:95:f4:64:4c:cd:32:d6:9f:59:12:92:1f:4f: ae:3f:ed:66:3a:66:27:02:cf:00:c9:8c:72:a8:48: 57:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F8:67:A9:32:35:83:F0:D8:DB:30:8A:54:28:CA:9D:39:FD:F6:C4 X509v3 Authority Key Identifier: keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/0104D0BADB0D11EE88489759C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.116.0/24 Signature Algorithm: sha256WithRSAEncryption b4:e4:d2:57:aa:c5:12:e8:43:ab:c5:4d:53:99:06:5b:14:25: fa:39:32:68:ae:c5:8a:7d:53:ab:d6:e2:0d:ae:30:67:93:01: c0:84:d6:b2:e6:2b:6a:8e:8b:a6:8d:46:28:b9:04:e9:61:2f: b3:4f:c9:08:c1:9d:2d:41:66:81:d5:7d:be:92:c7:36:82:e0: c5:8a:aa:5e:4b:62:00:b5:1e:aa:ad:23:e9:7d:00:69:af:62: 5d:71:ba:7f:1d:6c:81:f8:43:13:03:14:52:a6:ee:d7:6d:73: de:2d:bb:ba:e3:a4:32:54:ab:3c:d0:5a:f7:3f:90:85:eb:99: 50:bb:4e:21:91:9d:79:07:71:20:a1:7d:18:0c:88:1f:7f:49: a5:2b:0a:02:d5:81:43:08:09:8b:d0:22:0f:c9:9f:06:27:fd: 4a:b1:d9:59:ff:b0:14:cc:40:dd:ae:74:04:8b:84:bf:66:1e: 7e:1a:5f:0e:4d:dc:7c:44:f6:8a:3f:a8:f0:d9:57:24:43:77: bd:1d:70:1d:94:a5:d4:7d:08:91:ad:71:58:3e:04:e1:69:61: b3:df:20:24:b3:61:71:cd:70:8b:2f:53:89:32:f1:5a:bf:c5: e9:db:6e:67:52:e8:19:26:bb:80:8d:46:d7:4c:67:4c:3a:98: 13:55:a4:19 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMDYxMTAvBgNVBAUTKDUwNzM5NTFFNUMxNTgyNjkzQTg3MDcyRUU1NDhDNjU0 ODVCMDVBMkMwHhcNMjUwODMxMDExNzQ4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzYTJiYy1lOGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dRiOogCtjwBiFXgE2ovqUth6CzrKvkTI18S67jADhKIgEJDcVqKNS/2HAc8 FMDh6WuZBAxiKAnJ17yysQedkQr2PQXXizZpYAG1Lo2sufBvH4sJaukmEBp4lZVr XjVH3TjCh8BTnrDWb0gZshPeLYvAkU3gKmyTbrPXtpr3d0vTX/1/cmstUNkNgV6R QESIe+SmlnOB4+bxt6k4BRUb1aRs+FehQwPVPIRBhvO3/+A3Dnh741KxArIHGrmZ q8vlbupzN+KZNbegct79TuiOr21eoRYHZD4TV4L8q0WAKY3QDZX0ZEzNMtafWRKS H0+uP+1mOmYnAs8AyYxyqEhX0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFG/4Z6ky NYPw2NswilQoyp05/fbEMB8GA1UdIwQYMBaAFFBzlR5cFYJpOocHLuVIxlSFsFos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUwNi8wNTU5RUVBRTVD QkUxMUVDQjI3M0RDN0NDNEY5QUUwMi9VSE9WSGx3VmdtazZod2N1NVVqR1ZJV3dX aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIT1ZIbHdWZ21rNmh3Y3U1VWpHVklXd1dpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVFMDYvMDU1OUVFQUU1Q0JFMTFFQ0IyNzNEQzdDQzRGOUFFMDIvMDEwNEQwQkFE QjBEMTFFRTg4NDg5NzU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnmHQwDQYJKoZIhvcNAQELBQADggEBALTk0leqxRLoQ6vF TVOZBlsUJfo5MmiuxYp9U6vW4g2uMGeTAcCE1rLmK2qOi6aNRii5BOlhL7NPyQjB nS1BZoHVfb6SxzaC4MWKql5LYgC1HqqtI+l9AGmvYl1xun8dbIH4QxMDFFKm7tdt c94tu7rjpDJUqzzQWvc/kIXrmVC7TiGRnXkHcSChfRgMiB9/SaUrCgLVgUMICYvQ Ig/JnwYn/Uqx2Vn/sBTMQN2udASLhL9mHn4aXw5N3HxE9oo/qPDZVyRDd70dcB2U pdR9CJGtcVg+BOFpYbPfICSzYXHNcIsvU4ky8Vq/xenbbmdS6Bkmu4CNRtdMZ0w6 mBNVpBk= -----END CERTIFICATE-----Generated at Sun Sep 7 08:19:26 2025 by rpki-client