$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/2A4EE13E7CFD11F08A91EE21C4F9AE02.roa File: 2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (raw, json) Hash identifier: p6on445lkdVNXMMWjoYeri4k3QXBG09nZNuaYw4s6Gc= Subject key identifier: F0:9B:4E:B8:81:70:C5:07:83:6F:3F:E7:EA:1C:85:D8:F4:FC:71:C0 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 1162 Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/2A4EE13E7CFD11F08A91EE21C4F9AE02.roa Signing time: Wed 20 Aug 2025 17:57:24 +0000 ROA not before: Wed 20 Aug 2025 17:57:24 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 0 IP address blocks: 103.140.8.0/23 maxlen: 23 103.149.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4450 (0x1162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Aug 20 17:57:24 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68a60c83-a287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:0c:63:54:4a:f2:b7:4d:64:dd:19:ff:94: 97:c5:11:37:52:71:1a:4e:76:e0:89:18:49:35:fc: 38:56:70:83:2f:04:a5:90:cc:36:e1:7f:61:d7:99: 92:2c:64:cd:a7:19:03:9d:e9:6e:0b:e0:6d:0b:9c: de:84:9e:a3:b5:ec:87:76:9e:16:16:2f:34:d2:c9: 14:eb:1e:0c:2a:96:1c:26:ac:9c:f7:28:6b:d2:0a: 34:31:fc:32:b4:9e:b0:41:10:38:6c:00:f6:6c:8a: 83:ad:65:16:c2:97:10:45:e2:78:bc:48:f7:94:37: 18:b6:b0:60:8d:94:f4:be:b1:25:05:0b:87:a6:2d: bc:6f:44:1c:ab:ab:56:7a:85:d1:03:06:ff:57:45: 1d:c7:c5:81:cb:8b:4f:d7:72:d7:65:97:36:70:7c: 3c:63:5c:d0:b2:3c:fc:84:a2:83:6b:fa:d4:22:2b: 4f:a1:8c:8f:30:82:d4:9d:15:cc:f2:f8:e9:c3:a6: 9c:c6:4f:aa:51:8e:f2:eb:fc:52:ce:96:dc:04:fe: 5e:06:58:40:d0:a6:77:19:c4:71:8e:15:56:7e:ef: 37:79:34:6b:e8:3c:ed:15:57:37:60:83:6b:dd:1f: a8:e4:82:a8:2b:7e:50:c6:a3:4c:63:47:a5:bf:ed: dd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9B:4E:B8:81:70:C5:07:83:6F:3F:E7:EA:1C:85:D8:F4:FC:71:C0 X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/2A4EE13E7CFD11F08A91EE21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.8.0/23 103.149.144.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:b7:b0:48:6d:23:1b:50:26:5e:8d:98:d8:1d:34:5f:db:f0: 5d:a6:0b:de:a7:17:62:ab:55:7a:98:e0:fb:19:13:e9:33:6f: 73:ef:46:68:84:26:5c:e3:66:24:2d:b0:7f:3a:58:87:3b:f1: e2:e7:03:da:4d:8e:e2:49:ae:c7:e3:da:02:1f:0a:87:87:4f: 41:fe:39:cf:2c:24:38:52:98:d1:80:8c:2f:c8:1e:6d:60:3f: ce:51:d5:0c:15:a0:65:84:4d:e3:ec:39:a0:d9:34:30:cf:2e: 33:29:b0:5f:bd:48:4d:2f:2d:2e:a6:ad:57:53:5c:4a:a5:5b: 7a:02:4a:22:88:97:4c:e9:4f:4d:0f:68:b9:ba:69:e0:fd:09: 48:78:f4:b1:00:2b:83:fc:56:7d:7c:30:b8:f3:34:e7:65:9c: 43:4b:95:ba:53:08:3d:64:bc:24:89:7a:05:6f:f6:4c:46:f6: 3e:ad:d7:e1:1b:cf:9a:79:11:01:9b:ba:75:b9:6b:2b:1a:58: ed:63:5d:e2:5a:98:72:98:64:de:e9:86:6f:fb:42:bb:5d:78: ff:c2:01:e7:86:14:ee:1d:6f:2f:da:6a:1b:b6:38:d2:be:bb: 1c:34:b0:ef:f4:58:b2:de:41:f8:62:f7:37:8d:4c:0a:fe:a0: 50:19:53:06 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICEWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjUwODIwMTc1NzI0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2MGM4My1hMjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjMMY1RK8rdNZN0Z/5SXxRE3UnEaTnbgiRhJNfw4VnCDLwSlkMw24X9h15mS LGTNpxkDneluC+BtC5zehJ6jteyHdp4WFi800skU6x4MKpYcJqyc9yhr0go0Mfwy tJ6wQRA4bAD2bIqDrWUWwpcQReJ4vEj3lDcYtrBgjZT0vrElBQuHpi28b0Qcq6tW eoXRAwb/V0Udx8WBy4tP13LXZZc2cHw8Y1zQsjz8hKKDa/rUIitPoYyPMILUnRXM 8vjpw6acxk+qUY7y6/xSzpbcBP5eBlhA0KZ3GcRxjhVWfu83eTRr6DztFVc3YINr 3R+o5IKoK35QxqNMY0elv+3deQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPCbTriB cMUHg28/5+ochdj0/HHAMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvMkE0RUUxM0U3 Q0ZEMTFGMDhBOTFFRTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnjAgDBAFnlZAwDQYJKoZIhvcNAQELBQADggEBAH63sEht IxtQJl6NmNgdNF/b8F2mC96nF2KrVXqY4PsZE+kzb3PvRmiEJlzjZiQtsH86WIc7 8eLnA9pNjuJJrsfj2gIfCoeHT0H+Oc8sJDhSmNGAjC/IHm1gP85R1QwVoGWETePs OaDZNDDPLjMpsF+9SE0vLS6mrVdTXEqlW3oCSiKIl0zpT00PaLm6aeD9CUh49LEA K4P8Vn18MLjzNOdlnENLlbpTCD1kvCSJegVv9kxG9j6t1+Ebz5p5EQGbunW5aysa WO1jXeJamHKYZN7phm/7QrtdeP/CAeeGFO4dby/aahu2ONK+uxw0sO/0WLLeQfhi 9zeNTAr+oFAZUwY= -----END CERTIFICATE-----Generated at Sat Aug 23 07:10:45 2025 by rpki-client