$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/8224E55C345F11F0BD514C6CC4F9AE02.roa File: 8224E55C345F11F0BD514C6CC4F9AE02.roa (raw, json) Hash identifier: 5yssRnHiNxYbvC97ouK3PFQvut2qP5qu+yNWhWZqjDg= Subject key identifier: 00:04:8D:E8:9C:72:A3:9C:C0:9A:91:B8:87:31:91:80:D6:F2:B9:B3 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 1168 Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/8224E55C345F11F0BD514C6CC4F9AE02.roa Signing time: Wed 20 Aug 2025 17:57:29 +0000 ROA not before: Wed 20 Aug 2025 17:57:29 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 152918 IP address blocks: 103.149.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4456 (0x1168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Aug 20 17:57:29 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68a60c89-cda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:16:db:78:2c:4a:50:ed:a5:c1:40:f0:24:0b: 65:56:1e:b5:4d:7f:aa:44:3d:24:dd:86:78:7e:b1: 2f:25:e4:e5:72:98:1c:81:82:26:a9:a0:12:9b:b2: 86:1c:16:62:fb:7b:41:d1:3c:b4:de:95:36:21:ff: 93:12:c9:36:66:6f:16:46:7a:73:5c:c1:93:82:3a: b2:3c:11:81:12:fe:36:86:5c:11:ed:5b:1d:74:5f: 5f:02:89:46:fa:cb:32:f3:d3:bc:01:2f:e8:6d:b3: 8b:ab:17:83:50:6d:95:89:de:7c:e1:dd:20:ea:a8: 8a:84:3d:4f:78:7a:9d:01:34:86:6b:68:a7:6f:7b: 76:ae:04:78:f8:b3:bc:90:c6:13:4d:3f:4b:ac:1c: 75:e4:62:f8:a9:57:a8:31:b5:f1:1c:fd:a1:0f:ff: b2:6e:ea:05:64:7e:3c:71:f0:c2:79:e4:0b:87:1f: 48:24:6b:61:3e:15:02:f3:a1:22:c3:57:e4:b8:99: ea:26:91:0c:00:bf:aa:b6:e2:23:c6:f5:69:d9:6f: b3:ab:e0:0c:11:04:ea:ae:cd:97:fd:f4:66:42:ee: fc:de:59:99:6f:d7:57:f6:05:79:94:d7:8f:97:94: eb:9d:f9:ab:94:56:be:5b:81:39:b2:d4:94:f1:67: e8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:04:8D:E8:9C:72:A3:9C:C0:9A:91:B8:87:31:91:80:D6:F2:B9:B3 X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/8224E55C345F11F0BD514C6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.144.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:8a:6b:5e:27:30:1b:7a:f0:2d:e0:01:bd:02:ef:5a:ef:68: 8d:bf:2f:0f:50:0a:c1:6f:3b:e4:87:eb:4c:b8:6e:7e:56:c3: 86:79:08:20:00:d9:4e:3a:30:11:7e:fc:5e:b3:42:2c:72:59: 1a:de:51:ca:8f:d5:aa:e4:d9:b7:fd:ea:63:0a:ba:17:36:92: 88:62:7b:93:1c:9a:ce:32:0d:45:3f:0a:be:06:0d:af:fe:6d: 15:ec:cc:7c:55:91:e8:db:f2:0c:68:03:ef:55:a8:24:6f:be: 18:6b:7a:8c:f8:ae:3d:a2:0c:1e:3e:e8:cf:cc:54:75:16:ae: 63:e9:7d:9d:95:0f:96:00:7e:a1:74:55:79:0a:45:f9:9d:4a: 91:b4:26:4d:ef:3c:8d:23:0e:41:ac:88:90:7e:ee:f3:9a:1e: 47:c7:4c:dd:f6:c2:3d:88:96:fe:90:d6:8a:43:6f:80:54:e3: bf:8c:da:b7:53:5a:99:e4:40:ff:23:ed:4c:73:61:96:22:95: 14:c1:4d:35:f1:71:98:04:a5:88:bd:ee:9d:64:b8:f7:92:67: 25:de:0f:18:fd:a7:ce:33:ec:4a:34:33:43:b2:ee:56:70:da: b8:11:4c:95:44:a9:5a:0f:34:7d:84:64:40:ed:d5:eb:3b:a9: ef:13:35:b2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjUwODIwMTc1NzI5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2MGM4OS1jZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hbbeCxKUO2lwUDwJAtlVh61TX+qRD0k3YZ4frEvJeTlcpgcgYImqaASm7KG HBZi+3tB0Ty03pU2If+TEsk2Zm8WRnpzXMGTgjqyPBGBEv42hlwR7VsddF9fAolG +ssy89O8AS/obbOLqxeDUG2Vid584d0g6qiKhD1PeHqdATSGa2inb3t2rgR4+LO8 kMYTTT9LrBx15GL4qVeoMbXxHP2hD/+ybuoFZH48cfDCeeQLhx9IJGthPhUC86Ei w1fkuJnqJpEMAL+qtuIjxvVp2W+zq+AMEQTqrs2X/fRmQu783lmZb9dX9gV5lNeP l5TrnfmrlFa+W4E5stSU8WfobwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAAEjeic cqOcwJqRuIcxkYDW8rmzMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvODIyNEU1NUMz NDVGMTFGMEJENTE0QzZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnlZAwDQYJKoZIhvcNAQELBQADggEBAH6Ka14nMBt68C3g Ab0C71rvaI2/Lw9QCsFvO+SH60y4bn5Ww4Z5CCAA2U46MBF+/F6zQixyWRreUcqP 1ark2bf96mMKuhc2kohie5Mcms4yDUU/Cr4GDa/+bRXszHxVkejb8gxoA+9VqCRv vhhreoz4rj2iDB4+6M/MVHUWrmPpfZ2VD5YAfqF0VXkKRfmdSpG0Jk3vPI0jDkGs iJB+7vOaHkfHTN32wj2Ilv6Q1opDb4BU47+M2rdTWpnkQP8j7UxzYZYilRTBTTXx cZgEpYi97p1kuPeSZyXeDxj9p84z7Eo0M0Oy7lZw2rgRTJVEqVoPNH2EZEDt1es7 qe8TNbI= -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:43 2025 by rpki-client