$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/94A1F97A369711EA866E381CC4F9AE02.roa File: 94A1F97A369711EA866E381CC4F9AE02.roa (raw, json) Hash identifier: FXxg8JbRyxhX/govLjKDj9hLX7J7czh75q9/plpdJE0= Subject key identifier: F5:19:53:5D:53:82:70:0B:15:05:B7:DE:62:86:61:EB:77:3B:90:EE Certificate issuer: /CN=A91589E7/serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA Certificate serial: 17EF Authority key identifier: 45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/94A1F97A369711EA866E381CC4F9AE02.roa Signing time: Sat 14 Jun 2025 17:06:57 +0000 ROA not before: Sat 14 Jun 2025 17:06:57 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 131310 IP address blocks: 103.21.252.0/22 maxlen: 24 103.246.88.0/22 maxlen: 24 2404:6300::/32 maxlen: 126 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6127 (0x17ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7, serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA Validity Not Before: Jun 14 17:06:57 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684dac31-4ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:81:38:29:82:17:4d:70:e9:84:7c:f8:46:54: 23:51:05:5b:42:14:ff:0a:46:ab:2a:6f:bc:cd:ab: d9:55:63:ad:4b:20:a2:4e:81:58:06:2e:5f:c9:c2: e9:3c:fc:83:7a:f9:8e:21:eb:ee:31:5a:bc:56:ee: 3a:8f:ba:95:ee:06:cf:3b:5d:7a:85:5a:ac:c7:e1: 8a:2f:fe:a3:14:5e:c8:99:58:95:27:42:fd:14:d1: 3d:a5:fc:18:52:50:18:69:be:77:84:c5:ec:c2:3e: 1e:9d:94:2b:99:12:94:b1:c9:03:ed:8e:3e:f6:ad: 19:1a:7a:c1:22:07:39:45:04:66:b7:41:e6:ea:62: a4:14:32:b1:ec:90:9d:d0:68:5e:17:ec:3b:31:ff: b4:69:d9:b0:bb:16:1c:40:00:6d:d4:8a:be:8e:7b: 59:f3:91:f0:d9:07:0b:e5:4f:8a:44:30:15:51:df: 69:56:3e:0d:cc:bf:59:44:cb:d9:b7:0b:2b:cc:76: e5:33:a3:c4:b7:31:f5:d5:c8:14:4c:eb:45:68:ac: ec:0a:4b:0a:30:ee:a5:8e:b0:65:e0:e4:00:63:6f: 1a:88:33:a3:19:0d:a1:1d:05:88:a6:f7:da:77:95: 17:b7:cd:e3:2a:b5:d1:4a:ac:9c:2e:a1:a3:97:4a: aa:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:19:53:5D:53:82:70:0B:15:05:B7:DE:62:86:61:EB:77:3B:90:EE X509v3 Authority Key Identifier: keyid:45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/94A1F97A369711EA866E381CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.21.252.0/22 103.246.88.0/22 IPv6: 2404:6300::/32 Signature Algorithm: sha256WithRSAEncryption 5d:ef:da:dd:3c:01:a6:8e:77:27:0e:21:e7:0b:be:81:1c:f8: 91:b8:44:62:53:0d:2f:5e:87:46:00:12:b6:4e:53:2c:e9:30: 70:b1:15:d7:c8:2c:bf:a4:10:a1:40:0f:a4:50:b7:a7:48:fc: d3:ca:27:9e:bf:02:15:40:13:24:27:d3:ec:63:e8:c7:71:dd: 25:9d:a0:4c:7f:2e:f7:c8:c9:e0:df:f7:a6:14:94:23:31:00: 76:97:c3:aa:ab:d7:a5:55:0c:a6:f9:d0:a9:65:e5:47:8d:6a: 75:7b:d3:55:fe:c2:6f:70:d6:f6:63:46:51:b5:31:bd:1c:49: 3b:c8:d2:6c:1f:1d:41:32:80:01:00:6d:e7:8c:df:75:4b:0e: f3:fb:83:d4:3c:4e:cb:ed:dc:e4:c2:a9:b2:97:48:ee:ee:76: 0e:d9:eb:1b:3b:b4:dc:ae:47:50:ec:1b:6c:99:e7:b0:72:5b: 97:80:0f:2e:57:a2:98:04:f5:e4:31:be:e3:b9:04:f4:db:8d: 79:91:5a:52:0a:8d:29:47:be:12:7d:af:58:39:5c:13:71:06: 34:61:eb:8a:b9:2d:9b:d9:f0:48:a3:7b:e9:c4:ac:9e:74:e0: 88:da:36:30:d0:82:ce:c1:f7:e2:d1:f2:48:e3:58:68:a0:b8: 57:88:5b:89 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICF+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDQ1ODA1QjU1ODBENTE1MTk3RDFBNjE1QUQ2NkM4QjlE NDg1NEY1RUEwHhcNMjUwNjE0MTcwNjU3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRkYWMzMS00ZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkoE4KYIXTXDphHz4RlQjUQVbQhT/CkarKm+8zavZVWOtSyCiToFYBi5fycLp PPyDevmOIevuMVq8Vu46j7qV7gbPO116hVqsx+GKL/6jFF7ImViVJ0L9FNE9pfwY UlAYab53hMXswj4enZQrmRKUsckD7Y4+9q0ZGnrBIgc5RQRmt0Hm6mKkFDKx7JCd 0GheF+w7Mf+0admwuxYcQABt1Iq+jntZ85Hw2QcL5U+KRDAVUd9pVj4NzL9ZRMvZ twsrzHblM6PEtzH11cgUTOtFaKzsCksKMO6ljrBl4OQAY28aiDOjGQ2hHQWIpvfa d5UXt83jKrXRSqycLqGjl0qqpwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPUZU11T gnALFQW33mKGYet3O5DuMB8GA1UdIwQYMBaAFEWAW1WA1RUZfRphWtZsi51IVPXq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9GOEZGMTUyMkJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9SWUJiVllEVkZSbDlHbUZhMW15TG5VaFU5 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZQmJWWURWRlJsOUdtRmExbXlMblVoVTllby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTg5RTcvRjhGRjE1MjJCREZCMTFFN0I4NzNGRTI3QzRGOUFFMDIvOTRBMUY5N0Ez Njk3MTFFQTg2NkUzODFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnFfwDBAJn9lgwDQQCAAIwBwMFACQEYwAwDQYJKoZIhvcN AQELBQADggEBAF3v2t08AaaOdycOIecLvoEc+JG4RGJTDS9eh0YAErZOUyzpMHCx FdfILL+kEKFAD6RQt6dI/NPKJ56/AhVAEyQn0+xj6Mdx3SWdoEx/LvfIyeDf96YU lCMxAHaXw6qr16VVDKb50Kll5UeNanV701X+wm9w1vZjRlG1Mb0cSTvI0mwfHUEy gAEAbeeM33VLDvP7g9Q8Tsvt3OTCqbKXSO7udg7Z6xs7tNyuR1DsG2yZ57ByW5eA Dy5XopgE9eQxvuO5BPTbjXmRWlIKjSlHvhJ9r1g5XBNxBjRh64q5LZvZ8Eije+nE rJ504IjaNjDQgs7B9+LR8kjjWGiguFeIW4k= -----END CERTIFICATE-----Generated at Mon Oct 20 21:24:18 2025 by rpki-client