$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/9694E5F050E311F08B08231BC4F9AE02.roa File: 9694E5F050E311F08B08231BC4F9AE02.roa (raw, json) Hash identifier: 5CgN7FIvEpNpHCGRCJcHy85PN3cLvODwNDO+xufh/6w= Subject key identifier: 09:21:31:93:D3:93:4C:6F:59:83:39:4B:39:C4:E6:C4:BD:74:F4:13 Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Certificate serial: A5 Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/9694E5F050E311F08B08231BC4F9AE02.roa Signing time: Tue 24 Jun 2025 10:11:26 +0000 ROA not before: Tue 24 Jun 2025 10:11:26 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 26658 IP address blocks: 103.198.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Validity Not Before: Jun 24 10:11:26 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=685a79ce-db8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f4:89:af:c4:dc:53:e5:3d:f2:61:11:85:8f: 5e:d6:58:9f:16:a0:47:72:32:47:0b:64:c1:6d:2d: 0e:39:55:3f:fe:9c:d2:d1:50:64:9f:e1:c4:33:f9: 62:0a:79:78:e3:ef:e4:16:4e:4d:4a:c8:ce:80:89: 72:b6:2d:1b:e2:e3:71:2b:ee:d7:f6:8f:51:a8:fe: 6c:69:42:2c:6f:56:af:4e:9b:62:19:f3:91:42:5a: 38:94:24:6e:a4:e7:84:1f:eb:83:3f:c8:9d:4f:9d: 98:12:63:b0:1b:c3:93:2d:27:67:2d:e0:c8:9f:1a: 04:8b:e6:fd:35:b9:29:f0:ba:95:e0:50:c1:ae:9f: 22:24:9f:b2:d5:d0:6c:8f:76:9a:b4:3a:7e:bb:d4: 1a:16:82:67:09:1a:9a:24:d2:73:48:03:bf:f7:cc: ea:d9:a9:0d:31:b3:bc:7b:d0:85:38:a7:bd:67:49: 79:fc:d5:06:41:86:45:03:9e:c4:a1:16:b5:88:a7: aa:c0:a2:dc:a7:cb:ec:47:e5:26:fc:53:9f:56:15: 47:f8:df:de:88:77:31:b2:fa:e5:dd:aa:1d:4b:7f: 75:16:51:de:ba:f0:72:32:b8:76:66:a1:fa:74:bb: 06:c5:5e:bb:4f:74:f0:46:4d:90:fa:31:99:1a:0e: 62:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:21:31:93:D3:93:4C:6F:59:83:39:4B:39:C4:E6:C4:BD:74:F4:13 X509v3 Authority Key Identifier: keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/9694E5F050E311F08B08231BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.198.204.0/22 Signature Algorithm: sha256WithRSAEncryption 25:9c:88:5c:95:5b:d2:4a:a5:3b:11:47:b5:42:83:95:0e:99: d6:68:c8:05:a3:ec:22:01:d4:15:a1:96:8d:02:ce:b5:04:32: 6e:4b:8f:db:f4:35:89:5e:66:f3:d4:86:2e:5a:f9:95:07:b7: 34:17:b6:93:e1:a5:4a:e0:9d:7e:02:3d:af:0e:30:19:42:9c: 90:9d:b1:6c:fa:06:1a:82:40:17:d8:d5:ca:36:6c:40:6d:56: c5:46:6f:85:69:0a:a4:1e:1d:65:b1:89:bb:69:eb:6a:5c:e5: 59:40:0f:25:65:64:c2:1a:91:07:78:f9:04:43:7c:1c:8c:e6: d8:49:5d:0c:d8:3f:74:31:bb:8c:eb:b7:f0:b5:8b:b5:4b:25: 76:cb:ec:db:ea:e7:0a:87:16:ba:d3:57:fa:12:b7:64:69:7e: ce:16:1d:03:dd:7e:7e:9f:15:4b:3b:9d:79:41:e5:8f:79:b4: 57:f2:42:d3:29:d3:5e:c7:9f:49:69:b5:48:0e:77:e6:4e:ee: 32:3f:d2:65:2d:86:1c:f7:55:c6:45:eb:a2:b6:ef:ae:b6:37: 00:15:96:c1:39:8c:c4:93:0a:c8:ec:82:56:09:04:4f:f6:8e: 8f:6b:14:39:d2:22:26:b3:3e:7d:fb:9f:e1:46:92:7e:85:80: e3:da:8d:de -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2OTAxMTAvBgNVBAUTKDAyQ0ZGNzc5OEYwNTNFOUM4MUZEQ0NFRDc5NjJFQ0JC NzZDMUQyMUEwHhcNMjUwNjI0MTAxMTI2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVhNzljZS1kYjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfSJr8TcU+U98mERhY9e1lifFqBHcjJHC2TBbS0OOVU//pzS0VBkn+HEM/li Cnl44+/kFk5NSsjOgIlyti0b4uNxK+7X9o9RqP5saUIsb1avTptiGfORQlo4lCRu pOeEH+uDP8idT52YEmOwG8OTLSdnLeDInxoEi+b9Nbkp8LqV4FDBrp8iJJ+y1dBs j3aatDp+u9QaFoJnCRqaJNJzSAO/98zq2akNMbO8e9CFOKe9Z0l5/NUGQYZFA57E oRa1iKeqwKLcp8vsR+Um/FOfVhVH+N/eiHcxsvrl3aodS391FlHeuvByMrh2ZqH6 dLsGxV67T3TwRk2Q+jGZGg5iSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAkhMZPT k0xvWYM5SznE5sS9dPQTMB8GA1UdIwQYMBaAFALP93mPBT6cgf3M7Xli7Lt2wdIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY5MC80MDlDOTcwQTVB RTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBweUJfY3p0ZVdMc3UzYkIw aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ2OTAvNDA5Qzk3MEE1QUUwMTFFRjg1ODI3MDdGQzRGOUFFMDIvOTY5NEU1RjA1 MEUzMTFGMDhCMDgyMzFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnxswwDQYJKoZIhvcNAQELBQADggEBACWciFyVW9JKpTsR R7VCg5UOmdZoyAWj7CIB1BWhlo0CzrUEMm5Lj9v0NYleZvPUhi5a+ZUHtzQXtpPh pUrgnX4CPa8OMBlCnJCdsWz6BhqCQBfY1co2bEBtVsVGb4VpCqQeHWWxibtp62pc 5VlADyVlZMIakQd4+QRDfByM5thJXQzYP3Qxu4zrt/C1i7VLJXbL7Nvq5wqHFrrT V/oSt2Rpfs4WHQPdfn6fFUs7nXlB5Y95tFfyQtMp017Hn0lptUgOd+ZO7jI/0mUt hhz3VcZF66K27662NwAVlsE5jMSTCsjsglYJBE/2jo9rFDnSIiazPn37n+FGkn6F gOPajd4= -----END CERTIFICATE-----Generated at Thu Jul 3 17:53:33 2025 by rpki-client