$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/FCA6CE3221DE11EBA27D251CC4F9AE02.roa File: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (raw, json) Hash identifier: jlvb+etwEPHqA46PNwyWWQuRbCH2ZSbsGy74EBHEsOU= Subject key identifier: 9E:2D:25:40:AF:45:29:5E:D7:C7:F5:4F:E3:A7:A8:33:77:11:E3:56 Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Certificate serial: 0943 Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/FCA6CE3221DE11EBA27D251CC4F9AE02.roa Signing time: Wed 02 Jul 2025 20:59:26 +0000 ROA not before: Wed 02 Jul 2025 20:59:26 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135386 IP address blocks: 103.151.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2371 (0x943) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Validity Not Before: Jul 2 20:59:26 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68659dae-ff65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:91:52:c2:78:dc:cc:51:55:a3:33:40:0f: 72:03:87:7c:37:32:88:15:f4:b9:76:17:e0:b6:1a: e5:f0:bf:ce:c8:f3:86:37:23:d1:96:4f:0b:17:5e: 40:43:1d:c0:5e:54:76:c0:10:56:ef:a6:dc:d5:e6: b4:06:0a:ba:d5:59:3d:da:81:69:ad:bf:42:07:30: 3b:9d:1c:a6:66:65:a2:1d:f7:54:52:62:d7:86:6f: 46:50:c9:93:fc:47:c0:fd:23:19:4b:45:b9:00:67: 9c:e4:39:2c:96:15:c1:59:66:8a:3c:9e:53:81:cc: 85:7b:65:51:5e:ca:90:64:dd:6f:64:67:7b:f9:c0: 01:fb:29:c8:02:2d:e5:42:88:ff:62:10:ef:8a:69: 3a:cd:38:b8:81:0a:0a:64:50:1d:fa:35:2b:61:bc: c6:8f:19:01:6a:ec:69:bd:13:4e:43:0f:d5:ef:30: c6:dc:fd:99:8f:f1:91:34:90:c6:28:6f:f6:de:c8: 1a:75:8b:ed:b1:f1:3a:e0:58:f0:6c:57:e5:ad:54: 8f:bc:26:14:9b:7a:42:cf:98:d5:0c:f2:17:1a:fa: 1d:e7:74:9b:b3:2d:0f:c8:d3:bb:e3:31:86:eb:a1: 42:70:cb:99:c0:0e:44:2c:6f:45:8d:92:ad:3d:4e: c0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2D:25:40:AF:45:29:5E:D7:C7:F5:4F:E3:A7:A8:33:77:11:E3:56 X509v3 Authority Key Identifier: keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/FCA6CE3221DE11EBA27D251CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.216.0/23 Signature Algorithm: sha256WithRSAEncryption f2:12:f9:76:8a:b7:a5:25:41:28:26:41:7b:e1:be:c7:b5:f3: e0:c1:6d:6b:8a:a2:0d:13:7b:31:a1:9a:43:d4:fa:69:c1:43: b1:42:39:60:01:c9:a5:02:24:ba:32:6d:54:f5:81:48:1f:a6: fd:33:16:5e:05:e2:92:d9:54:0e:31:0b:c1:e7:5b:4f:4f:a6: 0a:c2:f2:39:22:aa:75:de:a3:c4:b8:20:03:e3:90:a1:94:dd: 36:13:ed:ce:03:91:8f:22:6c:5d:c6:ca:ae:79:e5:d5:4d:45: 80:e6:c8:2f:98:00:cb:b9:0c:2f:22:83:98:d5:07:c4:dd:ca: 0d:5d:6e:a0:cd:cd:49:e9:ef:02:fc:ec:fc:8c:e0:fc:99:23: 26:e8:cc:78:bc:e3:ea:d0:c0:5c:8b:88:9b:09:36:ec:cc:3b: 22:8e:59:ce:e4:bf:7f:60:d6:b5:70:e8:34:fb:e7:be:e7:dd: 4e:57:77:a5:31:fe:93:14:64:a6:a6:98:90:52:4d:29:fd:a5: e4:d6:d3:70:68:64:15:f8:5e:58:1d:22:58:c6:6e:f9:5d:a6: e7:6c:b8:2e:97:ff:55:70:83:f3:93:ab:05:2c:16:dc:11:5a: e8:93:d2:61:8e:fd:0c:d8:e2:f2:d7:3f:fd:f1:d1:75:8c:8e: e1:24:54:2a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0MxMTAvBgNVBAUTKEMwQTU0MzQ5MzdBQzI5MDA2ODI5MTZBNUZCRUUxNTQz Q0UwQjA4QTcwHhcNMjUwNzAyMjA1OTI2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1OWRhZS1mZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwORUsJ43MxRVaMzQA9yA4d8NzKIFfS5dhfgthrl8L/OyPOGNyPRlk8LF15A Qx3AXlR2wBBW76bc1ea0Bgq61Vk92oFprb9CBzA7nRymZmWiHfdUUmLXhm9GUMmT /EfA/SMZS0W5AGec5DkslhXBWWaKPJ5TgcyFe2VRXsqQZN1vZGd7+cAB+ynIAi3l Qoj/YhDvimk6zTi4gQoKZFAd+jUrYbzGjxkBauxpvRNOQw/V7zDG3P2Zj/GRNJDG KG/23sgadYvtsfE64FjwbFflrVSPvCYUm3pCz5jVDPIXGvod53Sbsy0PyNO74zGG 66FCcMuZwA5ELG9FjZKtPU7AOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ4tJUCv RSle18f1T+OnqDN3EeNWMB8GA1UdIwQYMBaAFMClQ0k3rCkAaCkWpfvuFUPOCwin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczQy9FRDA2OEJCOEE0 OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tRQm9LUmFsLS00VlE4NExD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLVkRTVGVzS1FCb0tSYWwtLTRWUTg0TENLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUY3M0MvRUQwNjhCQjhBNDkxMTFFQUIyNTc5NDJEQzRGOUFFMDIvRkNBNkNFMzIy MURFMTFFQkEyN0QyNTFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnl9gwDQYJKoZIhvcNAQELBQADggEBAPIS+XaKt6UlQSgm QXvhvse18+DBbWuKog0TezGhmkPU+mnBQ7FCOWAByaUCJLoybVT1gUgfpv0zFl4F 4pLZVA4xC8HnW09PpgrC8jkiqnXeo8S4IAPjkKGU3TYT7c4DkY8ibF3Gyq555dVN RYDmyC+YAMu5DC8ig5jVB8Tdyg1dbqDNzUnp7wL87PyM4PyZIybozHi84+rQwFyL iJsJNuzMOyKOWc7kv39g1rVw6DT7577n3U5Xd6Ux/pMUZKammJBSTSn9peTW03Bo ZBX4XlgdIljGbvldpudsuC6X/1Vwg/OTqwUsFtwRWuiT0mGO/QzY4vLXP/3x0XWM juEkVCo= -----END CERTIFICATE-----Generated at Sun Jul 6 00:11:49 2025 by rpki-client