$ rpki-client -vvf rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/6944587246B311F090CDB927C4F9AE02.roa File: 6944587246B311F090CDB927C4F9AE02.roa (raw, json) Hash identifier: N5DJ/lWFfI48sdx6BvFVpFHkaPP8kCCAOxZfmLMaFUw= Subject key identifier: 20:B4:98:89:CE:A1:14:24:FD:9A:BC:FA:3F:35:03:EA:D8:D8:FC:C5 Certificate issuer: /CN=A91323E4/serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF Certificate serial: 07FD Authority key identifier: 40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/6944587246B311F090CDB927C4F9AE02.roa Signing time: Thu 28 Aug 2025 21:43:37 +0000 ROA not before: Thu 28 Aug 2025 21:43:37 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 21859 IP address blocks: 103.152.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2045 (0x7fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91323E4, serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF Validity Not Before: Aug 28 21:43:37 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68b0cd88-db96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:c2:c0:5c:d5:22:58:a1:7c:41:75:5e:21: fc:2c:1e:38:d7:20:36:42:17:b5:2d:8e:f2:80:38: 1d:66:6b:9d:a8:9a:0e:02:57:96:2e:48:c0:63:e7: 0a:0a:9b:ed:54:9c:bc:f7:d1:0a:4e:73:bb:c6:2f: a5:24:65:fa:d3:1e:2a:75:d0:d1:22:37:cc:2f:af: 05:73:ee:35:4b:a7:00:06:dc:53:31:3e:e8:82:6f: ab:f4:8a:c9:89:15:32:a8:b5:3c:da:f4:14:e0:ec: 5e:16:e9:3c:96:ed:b4:8b:e2:59:0f:cb:e8:f3:5a: 46:d7:ae:27:c6:d5:5d:e7:a9:8c:22:d4:c4:e3:71: 14:44:b2:32:17:c5:a4:bf:b3:af:e2:d0:8e:ca:6b: 9c:81:45:cb:14:7c:6e:47:9b:c6:37:c9:51:d3:23: 9e:16:7c:af:88:97:88:93:56:d0:ac:f8:fe:aa:02: dd:1d:59:9e:2b:e8:ec:47:47:53:02:58:06:9e:08: 66:5b:28:b4:24:21:25:64:84:4d:0d:1a:4c:da:5e: 6a:0f:4a:09:9c:c5:b8:76:2e:6a:30:11:5b:63:ac: 7b:b6:93:07:3f:88:5f:90:f0:46:64:0f:38:e8:51: 28:2f:9b:d9:b2:f5:7b:d8:ba:60:7f:46:e1:2b:f0: 23:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B4:98:89:CE:A1:14:24:FD:9A:BC:FA:3F:35:03:EA:D8:D8:FC:C5 X509v3 Authority Key Identifier: keyid:40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/6944587246B311F090CDB927C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.82.0/24 Signature Algorithm: sha256WithRSAEncryption 41:23:05:f5:57:5a:2f:eb:f0:fa:4f:2c:7a:42:48:8f:a2:83: f8:c1:a6:32:72:78:ae:e0:c7:03:cf:33:a2:7b:39:94:26:0b: 2a:02:fa:9d:31:c0:5e:35:9f:6c:d1:7e:bf:9b:49:ee:a8:77: 8f:a9:86:f7:c5:82:2d:2c:28:d5:4e:ae:5d:e1:70:f4:fc:85: d0:88:75:b3:0d:49:a5:18:a7:65:14:21:40:6b:1e:b1:4e:11: 03:7c:ac:0c:3b:b1:a7:95:05:35:54:5a:dc:bb:4c:a3:8e:f5: 10:5e:fc:4f:2e:10:23:79:56:34:cc:a1:cb:d0:87:df:a2:53: 07:fe:63:31:fc:5d:c1:6b:61:0e:bb:b9:b9:d7:a8:3f:27:e9: cf:15:32:58:93:01:91:6c:bb:b6:31:da:4e:56:3f:95:aa:bb: cf:e9:15:9e:05:76:89:9b:74:40:e7:45:1b:6e:1a:0d:41:a5: d3:51:a9:c5:80:14:41:9d:45:a7:87:35:38:a1:05:e4:5e:06: cc:75:86:3b:b2:4a:e4:58:11:22:f3:bc:e8:37:a3:eb:08:a8: 65:0a:d5:be:ce:38:6c:28:80:c8:7d:b5:67:5d:18:32:64:46: c7:c5:4d:84:31:ce:e9:6d:2a:78:87:7d:2d:30:64:83:6e:27: 0c:c7:2c:01 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzIzRTQxMTAvBgNVBAUTKDQwMTRCQ0I0QUY5QjE4MTk2NEQ3QjdBNDBEMUJGOUQ2 Rjg5RTA4RkYwHhcNMjUwODI4MjE0MzM3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwY2Q4OC1kYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyX7CwFzVIlihfEF1XiH8LB441yA2Qhe1LY7ygDgdZmudqJoOAleWLkjAY+cK CpvtVJy899EKTnO7xi+lJGX60x4qddDRIjfML68Fc+41S6cABtxTMT7ogm+r9IrJ iRUyqLU82vQU4OxeFuk8lu20i+JZD8vo81pG164nxtVd56mMItTE43EURLIyF8Wk v7Ov4tCOymucgUXLFHxuR5vGN8lR0yOeFnyviJeIk1bQrPj+qgLdHVmeK+jsR0dT AlgGnghmWyi0JCElZIRNDRpM2l5qD0oJnMW4di5qMBFbY6x7tpMHP4hfkPBGZA84 6FEoL5vZsvV72Lpgf0bhK/Aj8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFCC0mInO oRQk/Zq8+j81A+rY2PzFMB8GA1UdIwQYMBaAFEAUvLSvmxgZZNe3pA0b+db4ngj/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjNFNC8xOTBCMEQwNkYy NjIxMUVBQTUyMjM0NUFDNEY5QUUwMi9RQlM4dEstYkdCbGsxN2VrRFJ2NTF2aWVD UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCUzh0Sy1iR0JsazE3ZWtEUnY1MXZpZUNQOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzIzRTQvMTkwQjBEMDZGMjYyMTFFQUE1MjIzNDVBQzRGOUFFMDIvNjk0NDU4NzI0 NkIzMTFGMDkwQ0RCOTI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnmFIwDQYJKoZIhvcNAQELBQADggEBAEEjBfVXWi/r8PpP LHpCSI+ig/jBpjJyeK7gxwPPM6J7OZQmCyoC+p0xwF41n2zRfr+bSe6od4+phvfF gi0sKNVOrl3hcPT8hdCIdbMNSaUYp2UUIUBrHrFOEQN8rAw7saeVBTVUWty7TKOO 9RBe/E8uECN5VjTMocvQh9+iUwf+YzH8XcFrYQ67ubnXqD8n6c8VMliTAZFsu7Yx 2k5WP5Wqu8/pFZ4FdombdEDnRRtuGg1BpdNRqcWAFEGdRaeHNTihBeReBsx1hjuy SuRYESLzvOg3o+sIqGUK1b7OOGwogMh9tWddGDJkRsfFTYQxzultKniHfS0wZINu JwzHLAE= -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:55 2025 by rpki-client