$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa File: 5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa (raw, json) Hash identifier: /8hy3Bbn1TLOvORzZ60crKTvCR9C6tYBcsWimqCiQa8= Subject key identifier: 20:24:76:5D:2B:35:34:92:13:3E:C1:88:89:E2:F4:62:A4:F6:77:35 Certificate issuer: /CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D Certificate serial: 0597 Authority key identifier: 6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa Signing time: Thu 26 Jun 2025 23:33:34 +0000 ROA not before: Thu 26 Jun 2025 23:33:34 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 136573 IP address blocks: 103.92.204.0/22 maxlen: 22 103.92.204.0/23 maxlen: 23 103.92.204.0/24 maxlen: 24 103.92.205.0/24 maxlen: 24 103.92.206.0/23 maxlen: 23 103.92.206.0/24 maxlen: 24 103.92.207.0/24 maxlen: 24 2401:20c0::/32 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1431 (0x597) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CD2, serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D Validity Not Before: Jun 26 23:33:34 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685dd8ce-9a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:29:1f:49:2e:e8:cb:93:9d:6b:0f:2d:c5: 70:b3:d2:f9:e1:1b:09:99:08:d8:62:8d:6c:3b:bc: 20:ff:50:05:aa:44:48:b6:77:0e:24:f6:b1:4e:11: 8a:cf:2d:b6:9f:21:fd:29:8c:de:f7:4e:aa:0b:b0: b8:18:07:9f:cc:64:20:c8:e4:b1:9d:e7:54:79:49: 3f:1f:90:f2:74:98:fb:b7:63:3e:5c:30:26:73:73: 49:8e:98:cf:e6:11:14:87:b6:0a:47:bb:c7:a9:5c: 44:06:a8:46:67:5f:62:a7:be:bf:ee:a9:da:57:b7: 91:e7:4a:4c:5f:d9:09:a3:88:ce:e3:7b:fe:cd:2e: 2c:ee:06:c3:40:5a:d6:fd:f5:8f:1a:a9:76:a8:4e: 4c:64:a1:5e:4a:bc:cf:dd:39:58:b2:2a:50:30:85: cd:25:85:d8:7b:d3:b7:6c:14:29:34:48:a0:f9:46: f7:74:09:49:67:91:27:79:95:a5:91:56:9e:3a:2c: ec:9a:6b:db:bd:28:46:ec:8f:76:7b:83:60:10:70: 23:32:39:8e:95:f2:89:a5:c1:3a:d9:60:b4:a0:d3: 6e:65:5e:e3:ef:ad:91:f0:87:53:90:56:3a:95:e6: c3:4a:5e:ef:a7:1f:76:31:78:77:c5:bb:91:47:8a: c6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:24:76:5D:2B:35:34:92:13:3E:C1:88:89:E2:F4:62:A4:F6:77:35 X509v3 Authority Key Identifier: keyid:6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.92.204.0/22 IPv6: 2401:20c0::/32 Signature Algorithm: sha256WithRSAEncryption 1f:db:09:8d:73:5c:25:b1:8d:b6:03:91:cd:7a:83:79:d1:67: 9c:2e:c9:db:3f:10:03:3f:74:39:65:9d:16:2f:cd:2c:cf:b3: 5f:1d:51:b8:ea:5e:3d:65:a4:f2:0c:a5:58:20:67:22:ef:46: f2:78:f5:b4:b0:11:68:e5:df:ed:65:1e:fd:ad:c2:c1:6e:59: 87:aa:eb:69:61:06:22:85:92:92:1c:91:b2:86:44:d2:c5:ab: 40:3c:0e:b5:27:b3:07:14:bc:91:a7:a7:57:0f:75:a6:fb:e1: a2:6a:85:a5:83:26:2e:d2:1a:98:eb:36:c3:89:41:5e:66:07: 4e:e3:7f:1e:89:05:20:56:7c:20:46:7e:1e:5a:d9:59:eb:b4: c1:fc:92:a8:18:d2:99:2e:df:46:08:99:73:9a:d2:67:f1:55: a2:a1:eb:72:a8:1d:77:88:38:13:72:a5:24:f7:13:f6:b8:b3: 55:bd:fd:f6:2a:7a:fd:ed:a9:fa:f7:8d:61:fa:73:e0:0b:19: 62:9c:0a:05:76:d9:d1:06:4b:a2:b8:91:b5:81:c8:22:51:ca: 60:6a:e4:ea:1f:1f:a3:cb:c6:9c:33:05:1c:79:6d:fb:d1:c9: 92:7e:0c:65:12:ca:0e:82:b6:cb:a8:d8:48:e2:48:ad:de:ab: 52:9e:25:9e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDRDIxMTAvBgNVBAUTKDZFMzNENTEzOTkyNUMzREI0RDA4NTkzN0NFNjlBQ0Qz N0JFQTc5NEQwHhcNMjUwNjI2MjMzMzM0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVkZDhjZS05YTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjspH0ku6MuTnWsPLcVws9L54RsJmQjYYo1sO7wg/1AFqkRItncOJPaxThGK zy22nyH9KYze906qC7C4GAefzGQgyOSxnedUeUk/H5DydJj7t2M+XDAmc3NJjpjP 5hEUh7YKR7vHqVxEBqhGZ19ip76/7qnaV7eR50pMX9kJo4jO43v+zS4s7gbDQFrW /fWPGql2qE5MZKFeSrzP3TlYsipQMIXNJYXYe9O3bBQpNEig+Ub3dAlJZ5EneZWl kVaeOizsmmvbvShG7I92e4NgEHAjMjmOlfKJpcE62WC0oNNuZV7j762R8IdTkFY6 lebDSl7vpx92MXh3xbuRR4rGwQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCAkdl0r NTSSEz7BiIni9GKk9nc1MB8GA1UdIwQYMBaAFG4z1ROZJcPbTQhZN85prNN76nlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENEMi8wNDNDNkFGNEQ4 RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5dE5DRmszem1tczAzdnFl VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JqUFZFNWtsdzl0TkNGazN6bW1zMDN2cWVVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThDRDIvMDQzQzZBRjREOEU1MTFFQjgwNjg1RDVGQzRGOUFFMDIvNUQxMERFRjBE OEU4MTFFQjhBQ0QzQzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnXMwwDQQCAAIwBwMFACQBIMAwDQYJKoZIhvcNAQELBQAD ggEBAB/bCY1zXCWxjbYDkc16g3nRZ5wuyds/EAM/dDllnRYvzSzPs18dUbjqXj1l pPIMpVggZyLvRvJ49bSwEWjl3+1lHv2twsFuWYeq62lhBiKFkpIckbKGRNLFq0A8 DrUnswcUvJGnp1cPdab74aJqhaWDJi7SGpjrNsOJQV5mB07jfx6JBSBWfCBGfh5a 2VnrtMH8kqgY0pku30YImXOa0mfxVaKh63KoHXeIOBNypST3E/a4s1W9/fYqev3t qfr3jWH6c+ALGWKcCgV22dEGS6K4kbWByCJRymBq5OofH6PLxpwzBRx5bfvRyZJ+ DGUSyg6Ctsuo2EjiSK3eq1KeJZ4= -----END CERTIFICATE-----Generated at Wed Jul 2 15:08:27 2025 by rpki-client