$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/B9D00D3C195A11EE83248835C4F9AE02.roa File: B9D00D3C195A11EE83248835C4F9AE02.roa (raw, json) Hash identifier: TDlTkXNyk/OE7AIzmPKhh2DU+PZI5hEvSUbR0akOStU= Subject key identifier: 59:B5:9D:45:F8:A5:AD:FE:DB:CF:F2:9D:53:ED:65:51:2A:65:3B:5E Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: 021B Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/B9D00D3C195A11EE83248835C4F9AE02.roa Signing time: Fri 22 Aug 2025 10:24:48 +0000 ROA not before: Fri 22 Aug 2025 10:24:48 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 150671 IP address blocks: 103.52.34.0/24 maxlen: 24 103.52.35.0/24 maxlen: 24 2001:df1:ac40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Validity Not Before: Aug 22 10:24:48 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68a84570-9c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a6:f2:3d:58:2d:73:f7:a6:2e:d1:5a:70:88: 24:1a:b0:2b:88:91:31:b4:53:fb:b1:a5:a7:de:d9: 52:c5:0a:25:4a:e4:ca:35:58:13:36:22:95:b1:3f: 31:ba:bf:9f:eb:29:a8:24:d4:0c:bc:17:a3:00:ef: 0d:3b:97:7e:d3:0b:b6:d3:33:62:5f:3d:9f:88:43: c9:4e:c8:22:03:0a:5f:48:c7:37:9d:bc:33:27:0a: 1c:07:ce:ec:66:4b:28:98:20:42:67:50:b4:16:f1: 17:ed:9d:60:8c:7a:15:50:56:1a:57:1a:ed:34:e7: 2d:92:be:62:c9:9b:67:df:12:e5:bc:90:e7:44:ef: 52:73:28:79:65:b7:5c:1a:ff:81:ef:3d:ab:2f:5a: 14:48:21:a3:1e:f0:a5:f1:12:2d:13:6d:64:c1:bf: 30:0e:0d:f5:93:24:d9:74:94:2d:4c:c9:1a:49:79: 5c:bc:b0:ce:1e:87:a0:cd:c1:79:05:2a:5f:99:99: d1:92:ca:11:46:f3:23:82:43:da:0f:8f:71:5a:49: 76:a2:b1:21:40:d5:11:d5:61:90:a3:bf:22:6e:88: e7:fa:d3:5f:89:04:a9:7c:2f:00:01:9d:2a:d9:99: d2:05:8c:1c:4a:1e:d3:db:d0:6e:05:eb:57:4c:b5: be:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B5:9D:45:F8:A5:AD:FE:DB:CF:F2:9D:53:ED:65:51:2A:65:3B:5E X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/B9D00D3C195A11EE83248835C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.52.34.0/23 IPv6: 2001:df1:ac40::/48 Signature Algorithm: sha256WithRSAEncryption 0f:ae:c8:53:af:ea:3b:bc:fe:93:b9:a8:98:85:5c:67:6a:85: cb:51:7b:7d:6e:d7:c5:37:43:b8:8e:a9:81:fe:42:6e:ed:00: 5f:93:9f:a4:df:c5:d2:d4:3a:0d:d2:e6:54:70:52:25:c6:ec: 4c:e7:52:5d:c9:6e:3d:27:4a:8e:08:6b:22:43:39:dd:fd:f3: 82:4a:75:ab:b4:8e:19:28:3b:ec:77:73:d1:b1:97:da:c6:94: 59:a8:38:3a:b7:2f:a8:4a:77:84:e0:f6:eb:a9:0c:10:4c:c0: e2:0a:9e:d3:9d:e6:bc:3f:bf:1f:99:e4:b6:2c:5f:86:66:d6: b0:ac:09:10:0d:1b:2f:bb:55:cb:6b:d8:b6:02:c3:87:7d:40: f8:8d:82:8b:26:6b:ad:e7:48:da:7d:c7:3e:68:ff:2d:5a:e1: 46:4d:f5:49:9e:d0:79:e3:a7:50:d2:42:d3:44:55:ad:39:c8: 2d:43:6f:07:a3:ea:d9:50:b7:b6:f5:8b:9b:78:7b:2a:f6:81: 9c:60:8c:fe:42:19:e4:e8:6b:11:e9:03:d9:d8:23:72:63:07: 87:a0:9c:51:ec:d0:06:dd:54:95:24:ad:42:92:d3:fd:83:6d: ee:be:09:8e:18:fc:0e:f7:b8:82:a8:bc:80:80:d1:be:fe:71: 01:d0:e1:91 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjUwODIyMTAyNDQ4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE4NDU3MC05YzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvabyPVgtc/emLtFacIgkGrAriJExtFP7saWn3tlSxQolSuTKNVgTNiKVsT8x ur+f6ymoJNQMvBejAO8NO5d+0wu20zNiXz2fiEPJTsgiAwpfSMc3nbwzJwocB87s ZksomCBCZ1C0FvEX7Z1gjHoVUFYaVxrtNOctkr5iyZtn3xLlvJDnRO9Scyh5Zbdc Gv+B7z2rL1oUSCGjHvCl8RItE21kwb8wDg31kyTZdJQtTMkaSXlcvLDOHoegzcF5 BSpfmZnRksoRRvMjgkPaD49xWkl2orEhQNUR1WGQo78ibojn+tNfiQSpfC8AAZ0q 2ZnSBYwcSh7T29BuBetXTLW+AQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFm1nUX4 pa3+28/ynVPtZVEqZTteMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA4NDgvNjREOEIxREU3N0U0MTFFRDk3RjU5MzREQzRGOUFFMDIvQjlEMDBEM0Mx OTVBMTFFRTgzMjQ4ODM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnNCIwDwQCAAIwCQMHACABDfGsQDANBgkqhkiG9w0BAQsF AAOCAQEAD67IU6/qO7z+k7momIVcZ2qFy1F7fW7XxTdDuI6pgf5Cbu0AX5OfpN/F 0tQ6DdLmVHBSJcbsTOdSXcluPSdKjghrIkM53f3zgkp1q7SOGSg77Hdz0bGX2saU Wag4OrcvqEp3hOD266kMEEzA4gqe053mvD+/H5nktixfhmbWsKwJEA0bL7tVy2vY tgLDh31A+I2CiyZrredI2n3HPmj/LVrhRk31SZ7QeeOnUNJC00RVrTnILUNvB6Pq 2VC3tvWLm3h7KvaBnGCM/kIZ5OhrEekD2dgjcmMHh6CcUezQBt1UlSStQpLT/YNt 7r4Jjhj8Dve4gqi8gIDRvv5xAdDhkQ== -----END CERTIFICATE-----Generated at Sun Aug 24 01:26:54 2025 by rpki-client