$ rpki-client -vvf rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/9F9FD574758811EA93AADD3FC4F9AE02.roa File: 9F9FD574758811EA93AADD3FC4F9AE02.roa (raw, json) Hash identifier: bzYatoV9vXAn/TFneZ8B1b8ytRqlQM8seu8F8tZug0k= Subject key identifier: 1A:49:9D:4A:64:45:B8:C3:A6:57:0E:70:D1:8D:22:E6:72:39:D9:6C Certificate issuer: /CN=A91B171C/serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA Certificate serial: 0B55 Authority key identifier: 3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/9F9FD574758811EA93AADD3FC4F9AE02.roa Signing time: Thu 14 Aug 2025 19:59:14 +0000 ROA not before: Thu 14 Aug 2025 19:59:14 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 135312 IP address blocks: 103.116.180.0/22 maxlen: 22 103.116.180.0/23 maxlen: 23 103.116.182.0/23 maxlen: 24 2402:fec0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2901 (0xb55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B171C, serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA Validity Not Before: Aug 14 19:59:14 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=689e4012-98e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ff:58:c4:48:a3:8b:65:ad:e4:66:5e:f3:92: 3b:43:f1:02:8d:39:90:49:93:5c:0b:38:53:82:30: 58:15:2e:93:6f:9c:40:be:bc:ae:fd:1f:dc:23:2e: df:47:87:62:04:e0:ab:19:24:87:ab:74:44:84:dd: 5c:a9:0f:8e:7b:83:57:9b:bc:1e:8f:29:25:66:72: 33:f4:13:c3:25:6c:91:d3:21:8b:60:8c:35:76:34: 92:b7:fb:8a:fb:ae:d5:79:bf:a7:5d:0f:d7:4a:06: b7:b4:d3:26:53:77:94:af:c4:cd:4d:ed:a3:91:06: 4d:18:26:a8:9b:66:63:05:6f:6d:df:71:01:b5:aa: 3d:eb:19:54:9f:f4:b1:df:b6:8e:a7:e8:a5:36:f9: 32:07:42:64:e2:bc:71:0a:32:6c:f8:c6:fb:4d:4e: 0f:56:cb:0d:3c:ac:e0:d5:01:db:22:ad:c2:34:31: d5:6a:4c:27:67:cf:12:96:38:25:7c:63:dc:ff:88: ba:2f:bc:62:52:9b:ca:93:54:fe:92:dc:5c:ed:71: ec:d7:f7:f5:af:17:a2:43:5f:6f:05:6e:eb:d4:52: 26:db:97:f1:44:8f:51:cf:3e:98:54:68:b5:21:ad: 07:e1:b5:8c:81:9d:52:2d:ff:81:eb:53:3c:0c:4b: 16:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:49:9D:4A:64:45:B8:C3:A6:57:0E:70:D1:8D:22:E6:72:39:D9:6C X509v3 Authority Key Identifier: keyid:3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/9F9FD574758811EA93AADD3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.180.0/22 IPv6: 2402:fec0::/32 Signature Algorithm: sha256WithRSAEncryption 71:fc:7b:f6:1b:e4:78:7d:af:1b:54:b1:b7:17:a9:01:ee:b8: 7d:07:0b:74:2e:35:2d:ac:47:25:1a:17:78:d9:e7:0b:03:13: 01:33:88:72:29:c2:89:3a:38:62:f8:d8:79:41:4e:db:02:18: 6e:1c:d9:9f:2e:c6:6b:b4:00:3b:a6:cf:e8:0b:1c:0b:5e:73: a6:2e:1b:1c:5e:bc:a2:e0:87:60:96:72:3a:91:cd:fe:3b:52: 2b:86:c0:e3:b4:bb:ca:e8:b9:58:5f:8c:bf:88:53:d9:ce:9f: e9:1d:9d:dd:22:5f:be:6e:22:7e:f9:11:a7:4d:e2:6c:d7:4c: f4:56:82:81:26:80:c1:c2:27:41:b1:b3:25:46:1f:7e:f8:16: f6:7d:f8:55:ff:b7:03:2c:41:0b:79:55:d3:cd:50:c6:08:e5: ed:51:02:57:50:68:e8:97:76:d9:ff:6d:ee:32:48:c1:97:09: 3f:d9:9c:dc:1e:55:f3:5e:90:7c:73:a6:7a:fc:15:00:98:7b: 46:3f:78:f5:24:f7:76:00:36:c9:7f:01:8c:87:8a:37:98:24: 3b:30:26:29:5b:f2:a9:11:d0:f3:38:af:4c:7a:0d:79:c8:d4: 38:58:2c:df:dd:c8:30:26:cd:06:6a:00:7b:ac:6e:eb:0d:bc: 53:e3:cc:1d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE3MUMxMTAvBgNVBAUTKDNGQjZGNkQwNjY1ODM4NkMyMzdCOEQxNDBEQUQxNUIy ODM4QkI1Q0EwHhcNMjUwODE0MTk1OTE0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODllNDAxMi05OGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvf9YxEiji2Wt5GZe85I7Q/ECjTmQSZNcCzhTgjBYFS6Tb5xAvryu/R/cIy7f R4diBOCrGSSHq3REhN1cqQ+Oe4NXm7wejyklZnIz9BPDJWyR0yGLYIw1djSSt/uK +67Veb+nXQ/XSga3tNMmU3eUr8TNTe2jkQZNGCaom2ZjBW9t33EBtao96xlUn/Sx 37aOp+ilNvkyB0Jk4rxxCjJs+Mb7TU4PVssNPKzg1QHbIq3CNDHVakwnZ88Sljgl fGPc/4i6L7xiUpvKk1T+ktxc7XHs1/f1rxeiQ19vBW7r1FIm25fxRI9Rzz6YVGi1 Ia0H4bWMgZ1SLf+B61M8DEsWfQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBpJnUpk RbjDplcOcNGNIuZyOdlsMB8GA1UdIwQYMBaAFD+29tBmWDhsI3uNFA2tFbKDi7XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTcxQy9FN0VGMDgzNjNF MTUxMUVBQjM3MUE1NDFDNEY5QUUwMi9QN2IyMEdaWU9Hd2plNDBVRGEwVnNvT0x0 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3YjIwR1pZT0d3amU0MFVEYTBWc29PTHRjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjE3MUMvRTdFRjA4MzYzRTE1MTFFQUIzNzFBNTQxQzRGOUFFMDIvOUY5RkQ1NzQ3 NTg4MTFFQTkzQUFERDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJndLQwDQQCAAIwBwMFACQC/sAwDQYJKoZIhvcNAQELBQAD ggEBAHH8e/Yb5Hh9rxtUsbcXqQHuuH0HC3QuNS2sRyUaF3jZ5wsDEwEziHIpwok6 OGL42HlBTtsCGG4c2Z8uxmu0ADumz+gLHAtec6YuGxxevKLgh2CWcjqRzf47UiuG wOO0u8rouVhfjL+IU9nOn+kdnd0iX75uIn75EadN4mzXTPRWgoEmgMHCJ0GxsyVG H374FvZ9+FX/twMsQQt5VdPNUMYI5e1RAldQaOiXdtn/be4ySMGXCT/ZnNweVfNe kHxzpnr8FQCYe0Y/ePUk93YANsl/AYyHijeYJDswJilb8qkR0PM4r0x6DXnI1DhY LN/dyDAmzQZqAHusbusNvFPjzB0= -----END CERTIFICATE-----Generated at Sun Aug 24 05:14:57 2025 by rpki-client