$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DEBDCECAC2CF11EFA805380FC4F9AE02.roa File: DEBDCECAC2CF11EFA805380FC4F9AE02.roa (raw, json) Hash identifier: 2LxTPgpro+Cihn4SKSfe0dguFM1LUxB1ef3Mte6K/4U= Subject key identifier: FB:DD:65:30:CE:ED:0F:CE:EA:34:E8:BE:D4:C6:3E:0B:2E:5F:CC:1A Certificate issuer: /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C Certificate serial: 04AB Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DEBDCECAC2CF11EFA805380FC4F9AE02.roa Signing time: Sun 31 Aug 2025 01:17:47 +0000 ROA not before: Sun 31 Aug 2025 01:17:47 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 135046 IP address blocks: 103.152.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C Validity Not Before: Aug 31 01:17:47 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68b3a2bb-c95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:f3:21:20:2a:70:1b:6a:80:52:ae:02:35: 9d:ca:6d:d3:ad:ed:53:46:85:5e:72:06:bd:05:93: 5a:a0:d8:23:55:9e:85:8e:b3:3e:11:c9:9d:7c:94: 6d:cd:86:2c:86:44:f4:69:88:9a:71:32:77:97:fe: c0:64:a0:67:88:06:1e:b4:eb:e2:b8:e0:ea:ad:a2: 9d:0b:15:ca:4a:1d:de:94:14:c9:03:98:1c:cd:ba: d8:2a:4e:4c:25:16:d4:5a:67:7c:71:b7:6b:fc:0b: fc:ec:64:87:77:49:57:83:c1:b1:38:5c:4e:a7:a2: 1e:12:f3:7f:b6:9d:58:78:f5:fa:cc:eb:19:64:20: 1b:b3:82:be:20:3d:57:e3:dc:21:7a:ff:f7:88:a1: 14:61:54:4a:57:17:dd:5b:1c:ee:39:7d:ec:06:c0: 08:5d:f7:c3:f9:b7:07:d9:ea:04:0b:b0:0b:d0:10: 81:52:4d:21:72:42:74:04:9b:cd:c1:7f:5b:fa:10: d8:06:64:02:c3:ea:fa:7b:64:8b:c2:a1:7b:25:23: 8f:01:5a:e4:30:f6:b6:72:28:c1:f3:92:34:73:8c: f3:09:cc:7a:18:97:b5:4f:53:cc:4d:77:6e:61:31: 0b:bb:c8:f1:99:92:78:14:4e:62:11:c7:11:9d:27: a9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DD:65:30:CE:ED:0F:CE:EA:34:E8:BE:D4:C6:3E:0B:2E:5F:CC:1A X509v3 Authority Key Identifier: keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DEBDCECAC2CF11EFA805380FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.116.0/24 Signature Algorithm: sha256WithRSAEncryption 51:18:d3:d3:36:da:7a:9b:77:0e:4d:fb:2e:16:95:e4:91:90: 76:7e:f3:32:c6:12:42:ad:73:75:92:dd:0f:2b:33:9e:68:f0: 62:d4:67:d8:f9:72:21:0e:14:7d:c6:d5:bc:f6:1e:05:8b:86: 26:55:86:7b:19:50:02:a9:38:d6:72:8c:5e:1e:bf:73:e9:f7: d4:62:cf:48:38:6d:14:db:c2:0f:4e:ff:16:88:a3:bc:24:b4: 18:10:e3:0b:e7:6c:49:a4:c4:f6:ac:31:ac:a0:6c:0f:b3:73: 54:3b:d8:1e:f3:55:98:00:b8:fa:e7:e5:41:2f:d4:ee:7d:eb: a5:1c:b7:e6:c1:77:2f:2e:0e:f4:ac:81:01:3c:a0:8b:5d:83: 01:1a:b3:ac:e1:3e:6c:78:2b:4b:39:79:53:8f:a7:c3:3e:4e: 69:37:04:60:a4:99:c7:70:07:be:71:d1:b4:be:f1:43:5d:06: e7:8f:37:f5:39:57:b9:08:5b:04:a0:57:17:21:f0:42:e6:b5: 11:7e:d7:79:29:b4:c4:04:db:59:6b:d3:bf:e1:a9:08:aa:e1: ef:66:0c:94:56:b7:66:9f:88:16:b5:9e:da:57:45:70:9e:cd: 07:fb:09:f3:ec:3a:74:1e:1b:35:62:f6:d7:30:3d:4e:f4:a4: fc:04:2a:3c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFMDYxMTAvBgNVBAUTKDUwNzM5NTFFNUMxNTgyNjkzQTg3MDcyRUU1NDhDNjU0 ODVCMDVBMkMwHhcNMjUwODMxMDExNzQ3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzYTJiYi1jOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrXzISAqcBtqgFKuAjWdym3Tre1TRoVecga9BZNaoNgjVZ6FjrM+EcmdfJRt zYYshkT0aYiacTJ3l/7AZKBniAYetOviuODqraKdCxXKSh3elBTJA5gczbrYKk5M JRbUWmd8cbdr/Av87GSHd0lXg8GxOFxOp6IeEvN/tp1YePX6zOsZZCAbs4K+ID1X 49whev/3iKEUYVRKVxfdWxzuOX3sBsAIXffD+bcH2eoEC7AL0BCBUk0hckJ0BJvN wX9b+hDYBmQCw+r6e2SLwqF7JSOPAVrkMPa2cijB85I0c4zzCcx6GJe1T1PMTXdu YTELu8jxmZJ4FE5iEccRnSep9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPvdZTDO 7Q/O6jTovtTGPgsuX8waMB8GA1UdIwQYMBaAFFBzlR5cFYJpOocHLuVIxlSFsFos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUUwNi8wNTU5RUVBRTVD QkUxMUVDQjI3M0RDN0NDNEY5QUUwMi9VSE9WSGx3VmdtazZod2N1NVVqR1ZJV3dX aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIT1ZIbHdWZ21rNmh3Y3U1VWpHVklXd1dpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVFMDYvMDU1OUVFQUU1Q0JFMTFFQ0IyNzNEQzdDQzRGOUFFMDIvREVCRENFQ0FD MkNGMTFFRkE4MDUzODBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnmHQwDQYJKoZIhvcNAQELBQADggEBAFEY09M22nqbdw5N +y4WleSRkHZ+8zLGEkKtc3WS3Q8rM55o8GLUZ9j5ciEOFH3G1bz2HgWLhiZVhnsZ UAKpONZyjF4ev3Pp99Riz0g4bRTbwg9O/xaIo7wktBgQ4wvnbEmkxPasMaygbA+z c1Q72B7zVZgAuPrn5UEv1O5966Uct+bBdy8uDvSsgQE8oItdgwEas6zhPmx4K0s5 eVOPp8M+Tmk3BGCkmcdwB75x0bS+8UNdBuePN/U5V7kIWwSgVxch8ELmtRF+13kp tMQE21lr07/hqQiq4e9mDJRWt2afiBa1ntpXRXCezQf7CfPsOnQeGzVi9tcwPU70 pPwEKjw= -----END CERTIFICATE-----Generated at Mon Sep 8 06:20:18 2025 by rpki-client