$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/9AE082EC318D11F0A159DF79C4F9AE02.roa File: 9AE082EC318D11F0A159DF79C4F9AE02.roa (raw, json) Hash identifier: Oyh0Hiv3Vf5S5+UetNdK3rc6KfUP/uHh89s91fbOt9U= Subject key identifier: C8:E3:B6:56:87:97:40:3C:E3:70:01:F3:38:08:09:7D:D8:8F:11:42 Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Certificate serial: 074C Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/9AE082EC318D11F0A159DF79C4F9AE02.roa Signing time: Sat 28 Jun 2025 22:41:22 +0000 ROA not before: Sat 28 Jun 2025 22:41:21 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142044 IP address blocks: 103.165.158.0/24 maxlen: 24 202.94.165.0/24 maxlen: 24 2407:4ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1868 (0x74c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Validity Not Before: Jun 28 22:41:21 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68606f91-85b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:85:a1:2f:af:20:3f:b9:f6:7a:f8:f6:ab:d7: 43:cd:4e:1f:42:65:53:1c:05:31:7c:e3:4a:7c:27: eb:8b:7c:1d:84:c0:30:1f:39:5e:8d:68:19:51:b8: b0:56:ea:c4:40:68:f7:54:b7:f9:27:97:30:65:91: e4:2e:bb:12:a0:45:ec:8a:74:ba:1f:96:92:3d:17: e3:88:58:1e:3d:f1:b6:7b:91:94:c1:9f:e1:42:7b: 04:b2:44:1c:b7:8c:b8:de:1a:60:b6:52:e2:6b:b6: 8a:25:95:ab:48:c9:18:a2:7a:95:cf:29:90:c6:e0: c5:4e:ec:03:86:5c:df:80:c6:7d:74:de:e1:e8:72: 9a:26:24:3a:93:9f:ab:2d:6d:2b:ae:3a:23:26:0e: 3a:51:75:e8:23:b6:bb:a7:07:55:aa:a0:b2:52:65: 15:3e:3e:08:a4:1f:0e:08:5c:a9:b7:52:15:9c:58: 69:1b:f5:9f:b8:58:af:77:ad:09:d1:54:69:8f:48: 88:52:c8:43:17:78:9b:93:85:93:49:3c:60:04:c2: 81:bd:64:c1:b3:05:ae:fc:b8:c3:be:f8:df:76:e5: 4c:ae:89:ae:df:45:c4:86:bc:1b:f3:09:a0:26:bb: b1:ce:24:a1:b1:1e:15:6e:e6:98:bc:5c:9f:65:a0: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E3:B6:56:87:97:40:3C:E3:70:01:F3:38:08:09:7D:D8:8F:11:42 X509v3 Authority Key Identifier: keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/9AE082EC318D11F0A159DF79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.158.0/24 202.94.165.0/24 IPv6: 2407:4ac0::/32 Signature Algorithm: sha256WithRSAEncryption 9c:83:c8:08:40:96:96:8d:d1:30:6f:1b:23:30:99:5c:93:08: 83:18:a5:1d:80:88:88:f2:ce:97:f7:ec:fa:94:52:85:71:0a: 5b:7a:f5:8f:80:48:3d:10:93:b1:79:48:b9:3d:98:ca:fc:3d: 86:0d:4f:69:6c:5c:0c:f4:d7:02:7b:81:18:3b:b8:e0:77:0e: a1:3d:86:1b:70:46:60:0b:13:37:d6:2a:68:bb:cb:b8:b5:6c: bf:ea:c7:e7:1c:fb:b1:86:e2:d7:e5:e6:db:01:fd:a0:bd:08: dd:68:86:62:f3:c7:b3:f3:f4:4c:56:7d:eb:57:7c:5d:39:52: 53:c7:a1:f4:42:67:1a:ff:cb:e7:94:b5:8a:13:27:d3:95:89: 06:f3:65:34:f8:30:fe:70:d8:4d:4b:91:c6:ad:49:d0:94:87: b4:2e:77:ba:1e:b0:1e:66:6c:07:a6:4d:9b:cb:74:e2:e3:4c: e4:1d:70:fd:7c:3a:47:80:54:fe:5a:b4:a8:ab:7b:92:ce:13: 0f:09:ab:7a:1c:8a:32:09:96:e9:4a:7c:f4:14:60:4e:f4:a0: 73:fa:69:d0:95:b1:6b:d5:6e:84:0e:91:24:9d:b7:b1:48:ab: a1:8d:bd:62:11:22:d5:db:ec:dd:2d:6a:42:1f:c9:72:5f:2a: 26:88:c0:5d -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICB0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2QjcxMTAvBgNVBAUTKDgzRDk2RjFERUE3MkE5OUQyMzRCNDQ1NkQ2RjY2NzVE QzdFNjA2MUUwHhcNMjUwNjI4MjI0MTIxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYwNmY5MS04NWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4WhL68gP7n2evj2q9dDzU4fQmVTHAUxfONKfCfri3wdhMAwHzlejWgZUbiw VurEQGj3VLf5J5cwZZHkLrsSoEXsinS6H5aSPRfjiFgePfG2e5GUwZ/hQnsEskQc t4y43hpgtlLia7aKJZWrSMkYonqVzymQxuDFTuwDhlzfgMZ9dN7h6HKaJiQ6k5+r LW0rrjojJg46UXXoI7a7pwdVqqCyUmUVPj4IpB8OCFypt1IVnFhpG/WfuFivd60J 0VRpj0iIUshDF3ibk4WTSTxgBMKBvWTBswWu/LjDvvjfduVMromu30XEhrwb8wmg JruxziShsR4VbuaYvFyfZaAe1wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMjjtlaH l0A843AB8zgICX3YjxFCMB8GA1UdIwQYMBaAFIPZbx3qcqmdI0tEVtb2Z13H5gYe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZCNy85NUVGN0RCQTk2 N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFaMGpTMFJXMXZablhjZm1C aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c5bHZIZXB5cVowalMwUlcxdlpuWGNmbUJoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU2QjcvOTVFRjdEQkE5NjdEMTFFQkFERDUwRDJDQzRGOUFFMDIvOUFFMDgyRUMz MThEMTFGMEExNTlERjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnpZ4DBADKXqUwDQQCAAIwBwMFACQHSsAwDQYJKoZIhvcN AQELBQADggEBAJyDyAhAlpaN0TBvGyMwmVyTCIMYpR2AiIjyzpf37PqUUoVxClt6 9Y+ASD0Qk7F5SLk9mMr8PYYNT2lsXAz01wJ7gRg7uOB3DqE9hhtwRmALEzfWKmi7 y7i1bL/qx+cc+7GG4tfl5tsB/aC9CN1ohmLzx7Pz9ExWfetXfF05UlPHofRCZxr/ y+eUtYoTJ9OViQbzZTT4MP5w2E1LkcatSdCUh7Qud7oesB5mbAemTZvLdOLjTOQd cP18OkeAVP5atKire5LOEw8Jq3ocijIJlulKfPQUYE70oHP6adCVsWvVboQOkSSd t7FIq6GNvWIRItXb7N0takIfyXJfKiaIwF0= -----END CERTIFICATE-----Generated at Thu Jul 3 03:13:03 2025 by rpki-client