$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/FA13BAAC504611ED9AE40711C4F9AE02.roa File: FA13BAAC504611ED9AE40711C4F9AE02.roa (raw, json) Hash identifier: ih5APdD+Nurby0NtdsRTrQ51xACa7dPtth9SlQyC+ow= Subject key identifier: 04:C3:01:99:61:49:0E:B3:54:D2:FA:9B:D6:48:0F:0C:98:38:D6:45 Certificate issuer: /CN=A91B5CC0/serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6 Certificate serial: 0218 Authority key identifier: FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/FA13BAAC504611ED9AE40711C4F9AE02.roa Signing time: Thu 21 Aug 2025 02:39:56 +0000 ROA not before: Thu 21 Aug 2025 02:39:56 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150118 IP address blocks: 103.191.19.0/24 maxlen: 26 2001:df0:f4c0::/48 maxlen: 48 2001:df0:f4c0::/49 maxlen: 49 2001:df0:f4c0::/50 maxlen: 50 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 536 (0x218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CC0, serialNumber=FE2E352B42F74F10D576835303A2E978E1C437B6 Validity Not Before: Aug 21 02:39:56 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a686fc-469a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:7b:14:ef:fb:d4:b5:57:f1:9f:54:b9:89: a9:74:87:2a:dd:f4:02:24:28:06:3b:f0:e1:51:63: d5:85:2b:41:0c:38:6d:43:8f:a9:98:84:73:29:c3: 6f:e5:91:f8:28:f7:9f:46:4f:eb:40:57:8e:8c:2e: 61:a9:a3:6b:29:7e:95:ab:b8:89:fe:00:21:5c:78: 5f:17:d7:6c:93:44:2a:2d:78:68:f5:32:52:4b:ec: 83:ed:d0:ab:2a:83:7e:1c:cc:79:24:0b:b1:99:09: ad:36:8f:7d:13:8e:f9:1b:be:f7:96:94:10:26:14: 4c:92:de:88:26:69:31:30:f2:46:4a:65:97:31:2b: 92:fa:90:49:9c:9c:b9:6f:4e:da:60:78:b6:2e:5e: df:77:2b:d7:9c:b3:bd:a6:e0:27:0f:40:f5:52:da: b6:e4:79:94:93:5a:79:c8:72:cc:51:05:09:fd:b4: d3:a8:22:7f:a5:a2:e3:12:a3:36:15:dc:5f:39:c3: 27:5c:54:b5:2c:c2:e3:5e:65:1c:ec:ec:28:4b:76: fd:03:b9:75:ba:44:4c:a5:c1:51:17:44:3e:d0:09: f3:75:31:87:05:2b:b3:a5:66:55:02:aa:92:3e:ec: 80:61:34:f2:b6:f2:c2:94:34:1b:63:a7:c7:40:bc: b7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C3:01:99:61:49:0E:B3:54:D2:FA:9B:D6:48:0F:0C:98:38:D6:45 X509v3 Authority Key Identifier: keyid:FE:2E:35:2B:42:F7:4F:10:D5:76:83:53:03:A2:E9:78:E1:C4:37:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/_i41K0L3TxDVdoNTA6LpeOHEN7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_i41K0L3TxDVdoNTA6LpeOHEN7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CC0/CFA79F1A503F11ED81D0756BC4F9AE02/FA13BAAC504611ED9AE40711C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.19.0/24 IPv6: 2001:df0:f4c0::/48 Signature Algorithm: sha256WithRSAEncryption 06:1d:87:0f:5b:c3:07:00:ef:1b:76:95:1e:9a:c7:93:18:b2: 9f:da:a1:a9:69:78:c8:7f:09:fa:83:ad:50:ce:27:bc:61:ad: 2c:a7:45:33:27:de:e1:18:5a:33:e5:55:cc:73:47:d0:c6:d3: 15:74:fc:89:64:f3:dd:b8:fe:20:d1:e5:4a:26:50:09:6e:c0: be:2f:5a:3e:2f:dd:3d:7b:9c:da:84:70:42:88:81:d6:e7:05: 4f:aa:76:f8:5d:bc:96:3a:7c:dd:41:84:00:18:07:bd:be:43: 35:f2:17:d0:d2:cb:a8:bd:ef:58:c8:63:04:8a:d9:3e:48:df: 25:00:9c:22:ac:f4:c9:92:4a:40:b7:6c:62:74:ac:17:36:ab: 48:40:c9:49:56:25:86:67:2f:0a:8b:99:22:27:64:cf:a2:34: d7:14:75:fe:63:7b:ce:a5:4e:8c:42:a0:9a:2b:10:29:56:3e: 57:e2:4f:88:6e:27:4b:d1:05:c7:c5:01:fc:bc:60:d8:40:9b: 36:cd:b9:0c:c3:8d:77:e1:68:db:91:98:f6:f7:43:d8:1a:99: 0b:54:a1:f0:a0:ce:e5:3b:75:c9:4c:be:48:99:74:da:a4:c0: 85:93:71:73:81:7d:b8:01:4b:79:7b:75:6b:67:2a:7c:ae:99: a5:e4:ee:da -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDQzAxMTAvBgNVBAUTKEZFMkUzNTJCNDJGNzRGMTBENTc2ODM1MzAzQTJFOTc4 RTFDNDM3QjYwHhcNMjUwODIxMDIzOTU2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2ODZmYy00NjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwM17FO/71LVX8Z9UuYmpdIcq3fQCJCgGO/DhUWPVhStBDDhtQ4+pmIRzKcNv 5ZH4KPefRk/rQFeOjC5hqaNrKX6Vq7iJ/gAhXHhfF9dsk0QqLXho9TJSS+yD7dCr KoN+HMx5JAuxmQmtNo99E475G773lpQQJhRMkt6IJmkxMPJGSmWXMSuS+pBJnJy5 b07aYHi2Ll7fdyvXnLO9puAnD0D1Utq25HmUk1p5yHLMUQUJ/bTTqCJ/paLjEqM2 FdxfOcMnXFS1LMLjXmUc7OwoS3b9A7l1ukRMpcFRF0Q+0AnzdTGHBSuzpWZVAqqS PuyAYTTytvLClDQbY6fHQLy3ZwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFATDAZlh SQ6zVNL6m9ZIDwyYONZFMB8GA1UdIwQYMBaAFP4uNStC908Q1XaDUwOi6XjhxDe2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNDMC9DRkE3OUYxQTUw M0YxMUVEODFEMDc1NkJDNEY5QUUwMi9faTQxSzBMM1R4RFZkb05UQTZMcGVPSEVO N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19pNDFLMEwzVHhEVmRvTlRBNkxwZU9IRU43WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVDQzAvQ0ZBNzlGMUE1MDNGMTFFRDgxRDA3NTZCQzRGOUFFMDIvRkExM0JBQUM1 MDQ2MTFFRDlBRTQwNzExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnvxMwDwQCAAIwCQMHACABDfD0wDANBgkqhkiG9w0BAQsF AAOCAQEABh2HD1vDBwDvG3aVHprHkxiyn9qhqWl4yH8J+oOtUM4nvGGtLKdFMyfe 4RhaM+VVzHNH0MbTFXT8iWTz3bj+INHlSiZQCW7Avi9aPi/dPXuc2oRwQoiB1ucF T6p2+F28ljp83UGEABgHvb5DNfIX0NLLqL3vWMhjBIrZPkjfJQCcIqz0yZJKQLds YnSsFzarSEDJSVYlhmcvCouZIidkz6I01xR1/mN7zqVOjEKgmisQKVY+V+JPiG4n S9EFx8UB/Lxg2ECbNs25DMONd+Fo25GY9vdD2BqZC1Sh8KDO5Tt1yUy+SJl02qTA hZNxc4F9uAFLeXt1a2cqfK6ZpeTu2g== -----END CERTIFICATE-----Generated at Sun Aug 24 07:55:46 2025 by rpki-client