$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/EADAF6B2743E11F0ABAB020EC4F9AE02.roa File: EADAF6B2743E11F0ABAB020EC4F9AE02.roa (raw, json) Hash identifier: DO6Lqvv7scio2IxWyOXEPbCtP6wMb/dg39O5KOuqeJ0= Subject key identifier: 8A:5A:B9:06:90:B4:9B:5C:DD:14:88:7E:67:B6:96:C5:E0:13:D9:5E Certificate issuer: /CN=A91A6ABE/serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44 Certificate serial: 02 Authority key identifier: 6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/EADAF6B2743E11F0ABAB020EC4F9AE02.roa Signing time: Fri 08 Aug 2025 10:03:23 +0000 ROA not before: Fri 08 Aug 2025 10:03:23 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 58690 IP address blocks: 103.15.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6ABE, serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44 Validity Not Before: Aug 8 10:03:23 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6895cb6a-6877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:21:f3:c3:2d:5f:b7:aa:9c:40:f7:9d:56:6c: ec:4f:47:d8:75:0a:bf:33:ae:d3:4b:5d:2a:df:6f: da:30:cd:8a:0a:57:e3:dc:de:2f:67:b1:04:f3:77: f1:25:1c:cb:22:a3:4f:c7:15:27:a7:ae:48:15:53: 19:aa:e2:4c:3a:76:f2:1c:d6:c4:bd:e0:6e:dc:cc: 67:25:7f:af:dc:6e:2a:08:32:72:21:40:9b:ef:74: a0:58:b6:a3:47:d6:c8:65:83:83:09:67:9d:9b:81: 35:4b:90:12:9e:e7:ed:fb:0d:d7:ab:d7:04:2c:84: b6:79:fa:c9:ba:2c:e2:4f:9d:99:d1:98:bc:15:1c: 55:63:92:7d:13:35:24:27:aa:31:2a:df:e7:c3:63: 26:8a:cb:5d:dd:c9:ce:cb:ca:32:f7:e1:38:1b:69: cb:35:d1:03:5c:38:15:cc:a6:d2:5d:53:f4:39:04: ef:0e:1b:8b:0c:34:f5:d8:b6:9a:a9:15:79:e2:ae: 4c:8a:a8:21:38:73:fd:6b:89:6e:02:c0:3c:2a:15: e3:4f:05:72:de:63:87:1d:19:07:7b:2a:b3:d5:e0: 5b:58:79:d0:58:46:50:59:68:c3:cc:da:16:98:9d: 45:dc:ee:c3:f4:39:31:3a:f9:b9:e7:25:e1:ee:2f: 55:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5A:B9:06:90:B4:9B:5C:DD:14:88:7E:67:B6:96:C5:E0:13:D9:5E X509v3 Authority Key Identifier: keyid:6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/EADAF6B2743E11F0ABAB020EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.15.144.0/22 Signature Algorithm: sha256WithRSAEncryption a6:20:3a:ec:34:cd:e0:80:86:5f:ac:44:b1:64:cd:c9:6a:00: 12:8a:05:7e:9d:f0:ee:28:b8:a4:32:41:98:e3:b1:eb:21:fd: b5:d4:d6:a7:26:16:45:ee:97:74:51:fb:9d:0c:d0:39:ef:7b: 42:b1:37:25:84:59:e8:21:17:89:7b:2f:b8:9f:dc:f3:0a:9e: 95:66:3e:33:22:8d:f1:56:6c:d9:90:1b:6c:0b:b4:5c:ed:7f: ad:65:6f:1e:8f:b5:d4:1b:14:6a:3c:b0:0f:a1:e4:80:39:81: 19:a2:c4:e7:55:42:29:8e:94:43:63:bf:20:90:9d:9b:71:57: cc:6e:1f:27:ea:6e:0d:46:01:0e:c9:d9:67:2f:98:5b:5c:32: 6b:b4:5c:ff:5b:07:c0:ad:4a:4d:07:bb:4b:4b:4c:be:28:23: 80:1f:14:5a:ed:06:25:ce:bf:21:a0:db:e3:91:a0:68:7a:e5: ba:ac:65:7f:8f:5c:a9:ce:d4:92:41:56:2c:a4:40:4c:8f:68: 9f:6d:f9:34:e8:8b:a5:99:40:e3:b8:15:12:e6:8c:3e:9c:82: 8c:7d:1c:da:a1:2f:58:24:d9:e2:84:80:81:af:fe:f1:2f:42: 7f:2f:84:a1:1a:54:15:1d:5d:d4:79:f7:25:49:6b:df:d3:aa: e1:c6:a9:72 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkFCRTExMC8GA1UEBRMoNkIyMkY5MDc5MTA1QTRERUJDQjA5Q0MxQjkwMDk2MDg1 QzY2MkQ0NDAeFw0yNTA4MDgxMDAzMjNaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4OTVjYjZhLTY4NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkIfPDLV+3qpxA951WbOxPR9h1Cr8zrtNLXSrfb9owzYoKV+Pc3i9nsQTzd/El HMsio0/HFSenrkgVUxmq4kw6dvIc1sS94G7czGclf6/cbioIMnIhQJvvdKBYtqNH 1shlg4MJZ52bgTVLkBKe5+37Dder1wQshLZ5+sm6LOJPnZnRmLwVHFVjkn0TNSQn qjEq3+fDYyaKy13dyc7LyjL34Tgbacs10QNcOBXMptJdU/Q5BO8OG4sMNPXYtpqp FXnirkyKqCE4c/1riW4CwDwqFeNPBXLeY4cdGQd7KrPV4FtYedBYRlBZaMPM2haY nUXc7sP0OTE6+bnnJeHuL1XBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUilq5BpC0 m1zdFIh+Z7aWxeAT2V4wHwYDVR0jBBgwFoAUayL5B5EFpN68sJzBuQCWCFxmLUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QUJFLzE1RjVDMTBDNzQz RTExRjA5NEE3QkYwOUM0RjlBRTAyL2F5TDVCNUVGcE42OHNKekJ1UUNXQ0Z4bUxV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYXlMNUI1RUZwTjY4c0p6QnVRQ1dDRnhtTFVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkFCRS8xNUY1QzEwQzc0M0UxMUYwOTRBN0JGMDlDNEY5QUUwMi9FQURBRjZCMjc0 M0UxMUYwQUJBQjAyMEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmcPkDANBgkqhkiG9w0BAQsFAAOCAQEApiA67DTN4ICGX6xE sWTNyWoAEooFfp3w7ii4pDJBmOOx6yH9tdTWpyYWRe6XdFH7nQzQOe97QrE3JYRZ 6CEXiXsvuJ/c8wqelWY+MyKN8VZs2ZAbbAu0XO1/rWVvHo+11BsUajywD6HkgDmB GaLE51VCKY6UQ2O/IJCdm3FXzG4fJ+puDUYBDsnZZy+YW1wya7Rc/1sHwK1KTQe7 S0tMvigjgB8UWu0GJc6/IaDb45GgaHrluqxlf49cqc7UkkFWLKRATI9on235NOiL pZlA47gVEuaMPpyCjH0c2qEvWCTZ4oSAga/+8S9Cfy+EoRpUFR1d1Hn3JUlr39Oq 4capcg== -----END CERTIFICATE-----Generated at Sun Aug 24 04:54:15 2025 by rpki-client