$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/EB9FE0C2500C11F0AC93B675C4F9AE02.roa File: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (raw, json) Hash identifier: ZEuV8rnSTrAUL1+f9B0DJgZDQV0kGj4jMARqkjlC+9I= Subject key identifier: E5:AD:27:10:E7:D0:07:2B:CA:34:AE:D4:67:DC:89:69:0E:12:D7:83 Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Certificate serial: 03B9 Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/EB9FE0C2500C11F0AC93B675C4F9AE02.roa Signing time: Mon 23 Jun 2025 08:34:47 +0000 ROA not before: Mon 23 Jun 2025 08:34:47 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 8796 IP address blocks: 103.127.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Validity Not Before: Jun 23 08:34:47 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=685911a7-ddc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:f8:16:a2:bf:83:63:c9:08:35:aa:05:49: b3:d3:42:77:74:95:3d:70:64:b3:0c:5f:50:72:11: 19:de:e4:4f:ae:c6:2f:bf:76:33:66:7d:7c:a2:81: cd:38:e9:a1:63:56:39:dd:81:30:9e:14:12:50:48: 14:a5:c9:2b:82:05:2c:b3:5e:c9:2d:36:0a:ad:c8: c0:f4:25:1e:ac:fd:95:e4:1f:ed:53:d8:7a:d1:a9: 86:e9:49:29:1a:4d:9a:f6:49:cc:84:81:8f:a9:6c: 05:71:4c:3c:39:1a:14:24:57:12:f2:e1:28:bf:ea: f8:eb:73:d3:14:62:66:56:37:88:b7:47:5b:53:b9: ff:5e:cc:f1:2e:ad:ce:fc:98:b1:a2:d1:fd:c9:b7: 22:65:a9:f9:87:91:c6:31:13:c9:26:8e:7b:99:33: ba:b1:98:b1:15:4e:6a:0d:6c:67:61:e5:5c:4f:3b: ca:26:3c:56:4b:33:b6:e6:7d:d0:19:6b:26:8a:62: 3a:4b:d8:9b:5f:03:e1:5f:70:66:7f:d0:18:12:36: 24:1d:04:31:28:ad:97:39:23:f4:86:22:5d:7a:c3: c1:69:d2:46:9b:d4:6d:52:eb:12:87:73:f3:08:fb: 99:03:9e:14:8d:f1:aa:b2:63:d8:25:8c:8a:0a:ae: 7c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AD:27:10:E7:D0:07:2B:CA:34:AE:D4:67:DC:89:69:0E:12:D7:83 X509v3 Authority Key Identifier: keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/EB9FE0C2500C11F0AC93B675C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.240.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:82:ed:75:f4:af:67:65:7c:68:96:5c:44:f9:47:78:4e:19: 57:6e:2f:55:f6:5d:b6:bd:ae:ca:14:82:c9:49:d6:14:68:fd: 06:10:c0:89:a3:10:02:1a:41:c9:96:36:6a:01:c6:1e:52:68: ef:8e:2c:a8:6b:34:df:f1:36:0e:01:ad:89:7b:17:40:ee:fe: 3f:eb:c7:e9:c7:b4:96:e9:db:d1:e6:93:cc:ba:bd:c0:2a:a1: 90:e1:71:19:38:fc:e4:e6:d0:67:d8:45:48:f0:0a:6f:a5:74: 4c:55:c2:56:e9:7e:83:97:bb:c1:d4:64:ec:77:86:dd:42:16: 5f:17:dd:af:0c:25:c8:4c:4a:52:3c:de:eb:8f:4c:34:9d:fe: b5:71:4d:98:74:88:ca:b7:4a:2a:2b:f6:c5:e2:e6:1d:e6:e5: c4:0f:e9:3d:6e:26:86:55:80:a1:85:89:d3:77:72:6c:de:43: 1b:4a:59:0c:39:3c:30:2e:28:54:6a:aa:a2:b3:d6:4a:95:7a: 59:be:65:17:e7:ce:4f:b9:e5:0a:d6:26:66:78:b9:92:fc:78: 7e:62:93:12:03:89:5b:5c:9a:2d:10:48:d3:e7:b3:c9:13:fa: 6b:40:5d:8b:c6:18:cc:f5:dd:eb:fc:00:6e:e1:82:3e:27:63: 12:f2:f7:be -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxQUQxMTAvBgNVBAUTKDE1NjU3NzJCN0I0RUJFODUwNDlEMkFGOUIzMkFDQzg3 ODAzMTFBNUQwHhcNMjUwNjIzMDgzNDQ3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODU5MTFhNy1kZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhb4FqK/g2PJCDWqBUmz00J3dJU9cGSzDF9QchEZ3uRPrsYvv3YzZn18ooHN OOmhY1Y53YEwnhQSUEgUpckrggUss17JLTYKrcjA9CUerP2V5B/tU9h60amG6Ukp Gk2a9knMhIGPqWwFcUw8ORoUJFcS8uEov+r463PTFGJmVjeIt0dbU7n/XszxLq3O /JixotH9ybciZan5h5HGMRPJJo57mTO6sZixFU5qDWxnYeVcTzvKJjxWSzO25n3Q GWsmimI6S9ibXwPhX3Bmf9AYEjYkHQQxKK2XOSP0hiJdesPBadJGm9RtUusSh3Pz CPuZA54UjfGqsmPYJYyKCq589wIDAQABo4IClTCCApEwHQYDVR0OBBYEFOWtJxDn 0AcryjSu1GfciWkOEteDMB8GA1UdIwQYMBaAFBVldyt7Tr6FBJ0q+bMqzIeAMRpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFBRC84RkRERjVFODk5 MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3ZvVUVuU3I1c3lyTWg0QXhH bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXVjNLM3RPdm9VRW5TcjVzeXJNaDRBeEdsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUxQUQvOEZEREY1RTg5OTFEMTFFQzgwOTM5QTU0QzRGOUFFMDIvRUI5RkUwQzI1 MDBDMTFGMEFDOTNCNjc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnf/AwDQYJKoZIhvcNAQELBQADggEBAGyC7XX0r2dlfGiW XET5R3hOGVduL1X2Xba9rsoUgslJ1hRo/QYQwImjEAIaQcmWNmoBxh5SaO+OLKhr NN/xNg4BrYl7F0Du/j/rx+nHtJbp29Hmk8y6vcAqoZDhcRk4/OTm0GfYRUjwCm+l dExVwlbpfoOXu8HUZOx3ht1CFl8X3a8MJchMSlI83uuPTDSd/rVxTZh0iMq3Sior 9sXi5h3m5cQP6T1uJoZVgKGFidN3cmzeQxtKWQw5PDAuKFRqqqKz1kqVelm+ZRfn zk+55QrWJmZ4uZL8eH5ikxIDiVtcmi0QSNPns8kT+mtAXYvGGMz13ev8AG7hgj4n YxLy974= -----END CERTIFICATE-----Generated at Mon Jun 30 11:03:20 2025 by rpki-client