$ rpki-client -vvf rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/8409527078B011EE8D737723C4F9AE02.roa File: 8409527078B011EE8D737723C4F9AE02.roa (raw, json) Hash identifier: Smslgu7rJqUTUi4Mp8vBgW1QUKGuNL2tLBKb/4Rsvdg= Subject key identifier: 49:B3:D2:71:B5:01:02:56:38:C3:81:AB:87:52:32:86:A3:A3:E7:34 Certificate issuer: /CN=A91B12FB/serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E Certificate serial: 030B Authority key identifier: 59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/8409527078B011EE8D737723C4F9AE02.roa Signing time: Thu 21 Aug 2025 01:38:23 +0000 ROA not before: Thu 21 Aug 2025 01:38:23 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 137443 IP address blocks: 103.189.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B12FB, serialNumber=59118DD753F0530EDC2B8C3BE263BEDB0CCEBC0E Validity Not Before: Aug 21 01:38:23 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68a6788f-4b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6c:7e:76:1d:94:88:e1:5c:c9:78:89:aa:a8: ed:06:52:8f:a9:9d:55:d6:d6:d8:52:eb:6c:ce:8a: 68:67:89:c3:6f:4f:18:ea:22:01:e5:9d:c5:cc:d9: d4:0b:6b:62:ed:52:4e:9b:49:d7:c0:0c:84:91:4e: a1:49:0a:a1:d8:62:5d:9a:a5:cb:92:49:75:3a:87: e8:58:1b:5e:e0:d5:a2:4e:38:3f:5a:4d:b6:9b:07: 4a:da:8c:a6:3b:52:e2:67:08:b3:fe:45:f4:54:9d: e7:81:70:3c:68:ea:e9:74:74:90:bf:60:23:bd:65: 8f:5a:79:fe:b2:4a:04:86:ee:5a:a6:f4:4b:49:24: 73:e8:65:e0:62:e2:ef:74:b5:d6:eb:51:7a:76:e6: e8:ba:3e:9f:3b:40:3b:17:5b:5a:75:cd:a1:7d:ad: 03:68:79:a9:45:05:71:17:fb:12:07:35:ac:16:62: 0d:21:fc:f7:09:8e:20:53:87:b4:ad:37:68:d9:21: 56:ff:d7:d8:02:57:ba:c5:0f:f2:2d:78:5d:88:d2: 4a:55:cb:a8:01:78:b6:1c:2f:f3:8b:a5:c5:0a:5e: ab:b2:18:31:ab:87:74:8d:7d:1b:f2:98:8c:c0:83: 1f:76:f3:be:59:85:81:65:b6:38:b1:ec:58:12:45: 97:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B3:D2:71:B5:01:02:56:38:C3:81:AB:87:52:32:86:A3:A3:E7:34 X509v3 Authority Key Identifier: keyid:59:11:8D:D7:53:F0:53:0E:DC:2B:8C:3B:E2:63:BE:DB:0C:CE:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/WRGN11PwUw7cK4w74mO-2wzOvA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WRGN11PwUw7cK4w74mO-2wzOvA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B12FB/E0D64514ED1D11ECB5FF2B24C4F9AE02/8409527078B011EE8D737723C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.140.0/23 Signature Algorithm: sha256WithRSAEncryption 69:4b:f4:6e:b5:a1:bf:9d:a3:21:d9:53:a3:49:7c:2a:4c:c2: fe:e9:7f:a3:82:de:3a:fc:4b:98:af:15:8c:56:89:d4:82:86: 8b:b5:5b:9d:74:15:51:66:6b:80:24:54:f7:dd:56:5b:4f:fc: 5f:28:eb:d1:e0:1d:c8:79:ec:0e:9e:01:07:b8:c7:5b:f8:ad: 86:c1:d2:30:7c:96:e3:63:0f:8f:2e:8d:b9:d0:b9:dc:f9:61: f7:7b:1f:33:c5:19:51:65:02:8a:6d:9b:e9:e8:e4:66:35:74: c1:cb:fe:95:9f:d1:ec:2e:df:08:fb:48:b9:9b:90:c8:7d:d5: 13:e1:7f:a9:7c:b7:f2:f0:5d:51:a2:ad:07:e5:4e:91:9e:17: b1:69:69:d8:aa:de:e9:86:7a:1f:08:6e:04:39:9e:ed:45:6a: 59:88:9b:ba:bd:9d:40:3b:03:de:ac:c3:8c:94:91:79:0d:7b: fa:ac:5c:95:52:a5:9d:15:50:8e:bb:db:da:6d:a1:cd:80:70: b6:56:8b:cb:22:e8:e7:53:f2:6e:69:d4:90:f4:24:d8:5e:9b: 19:fc:c9:d6:56:6f:a6:74:1a:b5:c5:a3:73:c7:4e:b0:46:29: b2:88:c3:35:95:a2:bb:b5:7f:26:af:fd:47:e9:a4:ea:76:91: 54:24:7c:66 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEyRkIxMTAvBgNVBAUTKDU5MTE4REQ3NTNGMDUzMEVEQzJCOEMzQkUyNjNCRURC MENDRUJDMEUwHhcNMjUwODIxMDEzODIzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2Nzg4Zi00YjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Gx+dh2UiOFcyXiJqqjtBlKPqZ1V1tbYUutszopoZ4nDb08Y6iIB5Z3FzNnU C2ti7VJOm0nXwAyEkU6hSQqh2GJdmqXLkkl1OofoWBte4NWiTjg/Wk22mwdK2oym O1LiZwiz/kX0VJ3ngXA8aOrpdHSQv2AjvWWPWnn+skoEhu5apvRLSSRz6GXgYuLv dLXW61F6dubouj6fO0A7F1tadc2hfa0DaHmpRQVxF/sSBzWsFmINIfz3CY4gU4e0 rTdo2SFW/9fYAle6xQ/yLXhdiNJKVcuoAXi2HC/zi6XFCl6rshgxq4d0jX0b8piM wIMfdvO+WYWBZbY4sexYEkWXIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEmz0nG1 AQJWOMOBq4dSMoajo+c0MB8GA1UdIwQYMBaAFFkRjddT8FMO3CuMO+JjvtsMzrwO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTJGQi9FMEQ2NDUxNEVE MUQxMUVDQjVGRjJCMjRDNEY5QUUwMi9XUkdOMTFQd1V3N2NLNHc3NG1PLTJ3ek92 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSR04xMVB3VXc3Y0s0dzc0bU8tMnd6T3ZBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjEyRkIvRTBENjQ1MTRFRDFEMTFFQ0I1RkYyQjI0QzRGOUFFMDIvODQwOTUyNzA3 OEIwMTFFRThENzM3NzIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnvYwwDQYJKoZIhvcNAQELBQADggEBAGlL9G61ob+doyHZ U6NJfCpMwv7pf6OC3jr8S5ivFYxWidSChou1W510FVFma4AkVPfdVltP/F8o69Hg Hch57A6eAQe4x1v4rYbB0jB8luNjD48ujbnQudz5Yfd7HzPFGVFlAoptm+no5GY1 dMHL/pWf0ewu3wj7SLmbkMh91RPhf6l8t/LwXVGirQflTpGeF7Fpadiq3umGeh8I bgQ5nu1FalmIm7q9nUA7A96sw4yUkXkNe/qsXJVSpZ0VUI6729ptoc2AcLZWi8si 6OdT8m5p1JD0JNhemxn8ydZWb6Z0GrXFo3PHTrBGKbKIwzWVoru1fyav/UfppOp2 kVQkfGY= -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:06 2025 by rpki-client