$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/E42A8D9016CB11EF805A073EC4F9AE02.roa File: E42A8D9016CB11EF805A073EC4F9AE02.roa (raw, json) Hash identifier: lXdiATosqgnGw9iwMqgeyMFFlsqTM6dHLhkV++SdnXI= Subject key identifier: 88:04:11:5A:0F:29:16:7B:CD:48:3F:FE:54:21:93:B2:31:57:9C:0A Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 065D Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/E42A8D9016CB11EF805A073EC4F9AE02.roa Signing time: Fri 08 Aug 2025 23:35:33 +0000 ROA not before: Fri 08 Aug 2025 23:35:33 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 142565 IP address blocks: 14.128.8.0/24 maxlen: 24 103.249.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1629 (0x65d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Aug 8 23:35:33 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=689689c5-b30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b7:c6:ab:ee:5a:cf:02:c2:ea:2b:54:ad:ec: 3d:00:6f:eb:d8:0d:15:e7:0e:b9:5d:bd:06:9e:7e: 49:db:80:79:c5:49:b8:5a:5b:4d:a2:92:90:41:cf: c8:1f:47:b3:dd:ee:e2:ab:2d:a6:9e:79:9f:1f:8a: c7:7c:0e:af:e9:51:d1:c0:a4:0d:b1:fc:55:3d:e4: e2:27:8f:a5:e3:b7:dd:ce:f4:61:95:b5:65:73:c1: a7:ed:bd:73:4a:d9:12:32:cd:91:ed:82:75:37:8b: 94:d4:11:2e:27:f5:6f:19:3d:28:ed:f4:02:9b:72: 94:e8:3e:b4:48:28:de:93:60:7d:09:2b:25:e7:db: b0:64:b8:bd:66:b3:dc:9c:99:5e:c7:ac:5c:f3:20: e6:58:17:ae:8b:7d:2f:32:3e:3a:7a:43:75:a0:e3: a5:26:35:f4:ae:c9:b4:ae:a6:ae:01:15:3f:48:95: 25:63:4e:db:aa:5c:ad:f7:66:db:f2:95:c6:0b:46: 55:bc:03:17:f6:a1:5b:ff:21:97:7f:fc:c6:c7:29: d1:d7:df:9e:d1:45:ce:6a:d1:84:d7:98:2d:51:90: 53:2e:dc:bc:cc:0b:64:fc:00:bb:a4:44:bf:bc:f3: 36:31:09:4b:5f:fd:fa:57:85:5f:c3:75:c7:41:db: 5f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:04:11:5A:0F:29:16:7B:CD:48:3F:FE:54:21:93:B2:31:57:9C:0A X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/E42A8D9016CB11EF805A073EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.128.8.0/24 103.249.215.0/24 Signature Algorithm: sha256WithRSAEncryption 20:5c:2f:21:17:95:74:5e:93:a0:88:24:ce:92:20:87:76:fd: 9d:72:72:7a:c5:4a:cc:64:01:39:7a:4b:79:be:65:93:69:88: 44:27:b0:9b:bc:a1:ec:22:73:94:4c:51:ad:a4:f5:34:65:ca: 66:f8:f9:7c:b0:a1:f7:f2:0b:a3:26:d3:8f:74:d8:5a:0a:55: 30:b1:40:26:d5:54:fe:e1:79:b5:da:50:fa:e5:be:4b:f5:30: 62:30:03:fc:2b:90:8b:c2:cf:0c:62:bc:35:ea:b4:6e:91:40: dd:5a:b3:44:e7:6e:bf:cc:67:db:12:da:66:67:2e:8a:98:c9: 85:12:64:05:43:b9:2c:5c:cc:dd:84:ff:20:11:6f:a0:ce:4e: c3:1b:ba:a9:2c:70:43:74:b2:9f:e6:e9:91:90:b5:4f:5b:4f: 9f:97:76:41:0c:3a:5e:6e:87:8a:82:f4:0d:f1:b3:10:29:48: b0:b0:b2:93:86:d8:e8:71:02:79:73:ab:85:50:c4:7c:6c:a5: 0a:e5:47:43:67:92:f6:4f:e5:f5:7c:62:05:5a:3e:af:cb:9a: 09:29:98:7b:70:2d:58:a4:e6:1d:48:93:2a:9f:aa:51:10:44: c9:56:7e:08:a6:fb:c3:d9:88:fd:15:d6:88:83:68:fc:e6:5d: e1:34:62:cb -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUwODA4MjMzNTMzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk2ODljNS1iMzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7fGq+5azwLC6itUrew9AG/r2A0V5w65Xb0Gnn5J24B5xUm4WltNopKQQc/I H0ez3e7iqy2mnnmfH4rHfA6v6VHRwKQNsfxVPeTiJ4+l47fdzvRhlbVlc8Gn7b1z StkSMs2R7YJ1N4uU1BEuJ/VvGT0o7fQCm3KU6D60SCjek2B9CSsl59uwZLi9ZrPc nJlex6xc8yDmWBeui30vMj46ekN1oOOlJjX0rsm0rqauARU/SJUlY07bqlyt92bb 8pXGC0ZVvAMX9qFb/yGXf/zGxynR19+e0UXOatGE15gtUZBTLty8zAtk/AC7pES/ vPM2MQlLX/36V4Vfw3XHQdtfsQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIgEEVoP KRZ7zUg//lQhk7IxV5wKMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ2QjAvMzJFOTg3M0NCRkM4MTFFQkI5RTRFQjZFQzRGOUFFMDIvRTQyQThEOTAx NkNCMTFFRjgwNUEwNzNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAOgAgDBABn+dcwDQYJKoZIhvcNAQELBQADggEBACBcLyEX lXRek6CIJM6SIId2/Z1ycnrFSsxkATl6S3m+ZZNpiEQnsJu8oewic5RMUa2k9TRl ymb4+XywoffyC6Mm04902FoKVTCxQCbVVP7hebXaUPrlvkv1MGIwA/wrkIvCzwxi vDXqtG6RQN1as0Tnbr/MZ9sS2mZnLoqYyYUSZAVDuSxczN2E/yARb6DOTsMbuqks cEN0sp/m6ZGQtU9bT5+XdkEMOl5uh4qC9A3xsxApSLCwspOG2OhxAnlzq4VQxHxs pQrlR0NnkvZP5fV8YgVaPq/LmgkpmHtwLVik5h1IkyqfqlEQRMlWfgim+8PZiP0V 1oiDaPzmXeE0Yss= -----END CERTIFICATE-----Generated at Sun Aug 24 00:27:04 2025 by rpki-client