$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/F9D4AAB87DA911EB8532A559C4F9AE02.roa File: F9D4AAB87DA911EB8532A559C4F9AE02.roa (raw, json) Hash identifier: Ade8trg6T8fAbBeilKEwgc1IQeNfNxxHXLW5aaXt9HU= Subject key identifier: 17:8E:94:31:F6:A0:B9:81:73:B4:33:5C:05:B4:41:93:77:6F:4D:62 Certificate issuer: /CN=A91F5C0D/serialNumber=B5AC6869AFD951F897DD4AA72564FBF2A356D84B Certificate serial: 067D Authority key identifier: B5:AC:68:69:AF:D9:51:F8:97:DD:4A:A7:25:64:FB:F2:A3:56:D8:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taxoaa_ZUfiX3UqnJWT78qNW2Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/F9D4AAB87DA911EB8532A559C4F9AE02.roa Signing time: Sat 31 May 2025 22:31:12 +0000 ROA not before: Sat 31 May 2025 22:31:12 +0000 ROA not after: Wed 01 Oct 2025 00:00:00 +0000 asID: 45773 IP address blocks: 103.139.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.crl rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taxoaa_ZUfiX3UqnJWT78qNW2Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5C0D, serialNumber=B5AC6869AFD951F897DD4AA72564FBF2A356D84B Validity Not Before: May 31 22:31:12 2025 GMT Not After : Oct 1 00:00:00 2025 GMT Subject: CN=683b8330-d6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:42:d3:e8:95:a2:91:04:c6:80:d9:29:0a:34: 44:61:00:ba:f8:63:a3:df:cc:05:f2:b0:61:35:8b: 9f:45:ff:32:32:26:8b:02:83:68:51:a9:8c:d8:bd: 21:67:42:0a:ce:52:2c:49:8a:24:44:37:e6:48:1c: ec:4b:1e:0a:ce:63:be:6a:76:b4:d1:5c:7d:59:0f: 0c:23:9c:ed:e1:89:d5:81:66:49:50:f4:2a:cf:4e: 59:ea:69:fd:da:ff:69:8e:46:c5:de:e1:17:ee:a2: 81:74:2c:5c:89:77:d9:cf:d1:02:01:8c:7e:1b:da: 97:29:ab:dd:5b:3e:29:f0:f1:f4:91:b7:1d:2d:d2: 60:3d:96:4d:bd:f5:74:05:28:59:c8:c9:49:83:bf: 6a:34:f2:16:75:01:0c:f5:6f:ab:09:04:d0:13:99: 35:6a:78:c0:88:fd:5e:43:0c:39:f0:43:5e:67:8f: e1:99:a7:e8:75:70:ae:20:d0:1a:fd:4b:65:04:e8: 7a:53:aa:fa:b2:6c:c8:9b:da:1a:fc:d6:85:32:c4: da:ca:1f:44:a3:03:c5:a0:99:0a:45:5a:9c:f6:35: 48:e4:06:6a:0b:c1:ec:db:28:1b:ea:47:70:0d:4d: bf:7f:00:00:90:24:ef:3e:ac:cb:fb:18:0c:5e:a9: d9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8E:94:31:F6:A0:B9:81:73:B4:33:5C:05:B4:41:93:77:6F:4D:62 X509v3 Authority Key Identifier: keyid:B5:AC:68:69:AF:D9:51:F8:97:DD:4A:A7:25:64:FB:F2:A3:56:D8:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taxoaa_ZUfiX3UqnJWT78qNW2Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/F9D4AAB87DA911EB8532A559C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.122.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:df:19:99:f3:95:22:90:aa:22:fb:2d:ac:58:09:95:16:92: 83:08:1b:e2:0b:96:45:f6:72:95:a8:9d:77:38:6a:f8:d8:be: a2:41:59:5c:c7:b6:83:94:a8:9e:20:3b:99:65:b3:1c:88:2d: f6:c6:c0:0e:e7:02:a4:4e:7f:db:51:19:9b:fd:2c:00:ba:fd: ad:28:6f:0f:6a:50:a6:fa:ba:b4:03:7b:b2:89:9b:45:c3:00: 2c:1d:27:a5:5c:45:aa:a3:a0:78:76:42:da:b2:39:8e:03:44: c9:00:1f:e7:0c:82:96:0a:41:a6:54:d5:ec:75:f1:b2:35:12: ad:62:2a:d0:84:d0:5e:6a:63:c2:c4:b8:bf:8a:90:a5:14:bc: dc:56:56:f5:c3:bc:8d:98:59:78:e5:99:32:a8:28:ec:13:44: 0b:51:16:00:8d:9a:68:e7:08:1e:6f:14:ac:d8:72:ec:3f:44: 5a:8b:94:e0:07:3d:d5:e4:f4:35:f5:0c:4a:49:87:6d:6a:58: 5d:47:c6:51:ff:0c:cf:de:a4:d0:d7:be:09:24:5f:12:43:20: df:9f:a7:b0:8d:0b:ae:db:3a:66:65:f3:d1:41:91:64:b4:cf: 34:7b:08:50:7a:b6:4b:d5:40:bc:26:52:51:34:0d:a6:c9:69: 35:7c:79:12 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVDMEQxMTAvBgNVBAUTKEI1QUM2ODY5QUZEOTUxRjg5N0RENEFBNzI1NjRGQkYy QTM1NkQ4NEIwHhcNMjUwNTMxMjIzMTEyWhcNMjUxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNiODMzMC1kNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00LT6JWikQTGgNkpCjREYQC6+GOj38wF8rBhNYufRf8yMiaLAoNoUamM2L0h Z0IKzlIsSYokRDfmSBzsSx4KzmO+ana00Vx9WQ8MI5zt4YnVgWZJUPQqz05Z6mn9 2v9pjkbF3uEX7qKBdCxciXfZz9ECAYx+G9qXKavdWz4p8PH0kbcdLdJgPZZNvfV0 BShZyMlJg79qNPIWdQEM9W+rCQTQE5k1anjAiP1eQww58ENeZ4/hmafodXCuINAa /UtlBOh6U6r6smzIm9oa/NaFMsTayh9EowPFoJkKRVqc9jVI5AZqC8Hs2ygb6kdw DU2/fwAAkCTvPqzL+xgMXqnZbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBeOlDH2 oLmBc7QzXAW0QZN3b01iMB8GA1UdIwQYMBaAFLWsaGmv2VH4l91KpyVk+/KjVthL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUMwRC81RUY3NTE1NDdE QTgxMUVCOUJFODRFNThDNEY5QUUwMi90YXhvYWFfWlVmaVgzVXFuSldUNzhxTlcy RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RheG9hYV9aVWZpWDNVcW5KV1Q3OHFOVzJFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjVDMEQvNUVGNzUxNTQ3REE4MTFFQjlCRTg0RTU4QzRGOUFFMDIvRjlENEFBQjg3 REE5MTFFQjg1MzJBNTU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABni3owDQYJKoZIhvcNAQELBQADggEBAF/fGZnzlSKQqiL7 LaxYCZUWkoMIG+ILlkX2cpWonXc4avjYvqJBWVzHtoOUqJ4gO5llsxyILfbGwA7n AqROf9tRGZv9LAC6/a0obw9qUKb6urQDe7KJm0XDACwdJ6VcRaqjoHh2QtqyOY4D RMkAH+cMgpYKQaZU1ex18bI1Eq1iKtCE0F5qY8LEuL+KkKUUvNxWVvXDvI2YWXjl mTKoKOwTRAtRFgCNmmjnCB5vFKzYcuw/RFqLlOAHPdXk9DX1DEpJh21qWF1HxlH/ DM/epNDXvgkkXxJDIN+fp7CNC67bOmZl89FBkWS0zzR7CFB6tkvVQLwmUlE0DabJ aTV8eRI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:45:40 2025 by rpki-client