$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa File: 6897097E6C6311EDBCFA073FC4F9AE02.roa (raw, json) Hash identifier: lK+kMuCLsShhM34gwZZ5PMShxjGc2oEA6OyzV2OygRI= Subject key identifier: 05:D3:AD:9A:7E:D5:D7:E6:B7:AC:EB:38:29:57:A3:10:4B:71:5D:BB Certificate issuer: /CN=A91BA0AE/serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Certificate serial: 0203 Authority key identifier: B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa Signing time: Thu 14 Aug 2025 21:31:59 +0000 ROA not before: Thu 14 Aug 2025 21:31:59 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140917 IP address blocks: 103.153.110.0/23 maxlen: 23 103.153.110.0/24 maxlen: 24 103.153.111.0/24 maxlen: 24 2001:df4:4180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0AE, serialNumber=B6021EEE683605AA064B06D34BE331A86A8D1E3E Validity Not Before: Aug 14 21:31:59 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=689e55ce-8734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:ca:2e:bd:76:83:f8:95:86:5b:7c:65:94: 93:33:55:7a:25:86:e6:41:2d:03:8b:a7:63:a1:ef: e4:de:f7:99:26:31:41:cb:a9:74:a6:d5:e5:7e:23: 05:fe:fe:57:52:38:60:ec:7c:60:c6:e2:cd:ac:6c: 77:a1:b6:b7:d9:f1:76:d9:a6:e3:71:9f:db:41:dc: 81:75:24:5a:8a:b0:de:2c:c6:05:27:10:f9:9c:6c: 21:d0:78:66:58:ff:88:b0:65:e7:9f:7f:c5:a4:0e: 92:f2:cb:de:dd:94:1a:35:b5:ed:82:3c:d3:84:c0: 34:8e:e0:7b:7c:60:01:f9:9d:03:da:ea:c5:6b:05: 0a:9d:68:ef:c8:bb:6e:78:e2:ef:3d:a2:33:f7:8a: bc:ca:13:03:e0:89:44:68:62:b0:a0:68:85:a8:89: ed:3b:f0:dc:dd:4d:ca:80:55:a0:03:7d:93:9d:3a: 35:28:6f:cd:ec:f7:76:a3:fc:94:2b:d6:74:cd:c0: eb:05:0d:7a:3e:46:2f:4a:ca:3e:5e:91:ba:6b:8c: fe:3b:de:88:6f:24:1d:e6:05:48:cf:33:e1:b8:73: 9e:68:fb:38:e8:07:0e:a0:70:90:98:26:34:c5:cf: 3e:5a:2f:87:19:1f:d1:1f:38:72:95:81:23:bb:d3: 33:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D3:AD:9A:7E:D5:D7:E6:B7:AC:EB:38:29:57:A3:10:4B:71:5D:BB X509v3 Authority Key Identifier: keyid:B6:02:1E:EE:68:36:05:AA:06:4B:06:D3:4B:E3:31:A8:6A:8D:1E:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/tgIe7mg2BaoGSwbTS-MxqGqNHj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgIe7mg2BaoGSwbTS-MxqGqNHj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/6897097E6C6311EDBCFA073FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.110.0/23 IPv6: 2001:df4:4180::/48 Signature Algorithm: sha256WithRSAEncryption 4d:71:a1:d0:e8:fa:45:f4:db:44:04:d2:bb:5b:d1:e2:30:98: bd:fa:70:6d:0a:60:49:12:93:9a:1c:e0:fe:f4:13:b0:83:56: ad:10:97:b0:a5:fe:b4:db:a5:33:0c:fd:65:ce:fd:bc:a2:95: 07:f9:b3:e1:99:ff:4e:d0:88:bf:de:3b:d0:a5:8b:03:65:38: 86:f7:e8:59:0c:93:4a:b5:3f:de:49:08:74:f8:f4:c4:47:51: d5:ba:4c:c9:15:13:36:ef:a4:26:57:23:bc:13:98:3f:0c:09: 8e:fc:be:9d:10:f4:55:21:33:9e:03:17:fe:0b:29:f8:6e:64: 8e:d8:64:3c:d1:28:e9:d8:ca:e5:15:48:83:b4:d7:85:b2:5f: fa:1e:a7:be:12:db:ec:8f:13:4d:ce:78:01:0f:88:3a:22:82: f2:a0:6e:1e:67:5a:5b:e7:0c:57:c3:d7:fc:61:e9:44:ea:0a: fc:af:d8:29:e0:7a:6f:2a:54:73:f0:1e:38:3d:23:9c:dd:8b: 93:6a:bc:db:e1:40:96:e7:29:3d:c6:e9:60:9c:1e:fc:31:c6: e6:17:cd:0c:4d:ea:51:34:71:df:a6:b7:34:e4:b6:4a:cf:b0: 79:b9:7d:cf:8e:0f:13:d3:81:5a:a6:64:e8:22:4b:73:b5:e3: 74:df:ee:d2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwQUUxMTAvBgNVBAUTKEI2MDIxRUVFNjgzNjA1QUEwNjRCMDZEMzRCRTMzMUE4 NkE4RDFFM0UwHhcNMjUwODE0MjEzMTU5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODllNTVjZS04NzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoTKLr12g/iVhlt8ZZSTM1V6JYbmQS0Di6djoe/k3veZJjFBy6l0ptXlfiMF /v5XUjhg7HxgxuLNrGx3oba32fF22abjcZ/bQdyBdSRairDeLMYFJxD5nGwh0Hhm WP+IsGXnn3/FpA6S8sve3ZQaNbXtgjzThMA0juB7fGAB+Z0D2urFawUKnWjvyLtu eOLvPaIz94q8yhMD4IlEaGKwoGiFqIntO/Dc3U3KgFWgA32TnTo1KG/N7Pd2o/yU K9Z0zcDrBQ16PkYvSso+XpG6a4z+O96IbyQd5gVIzzPhuHOeaPs46AcOoHCQmCY0 xc8+Wi+HGR/RHzhylYEju9MzsQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAXTrZp+ 1dfmt6zrOClXoxBLcV27MB8GA1UdIwQYMBaAFLYCHu5oNgWqBksG00vjMahqjR4+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBBRS8zN0VCMEM2NkM5 NjQxMUVBQTEwNkU4NTlDNEY5QUUwMi90Z0llN21nMkJhb0dTd2JUUy1NeHFHcU5I ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnSWU3bWcyQmFvR1N3YlRTLU14cUdxTkhqNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkEwQUUvMzdFQjBDNjZDOTY0MTFFQUExMDZFODU5QzRGOUFFMDIvNjg5NzA5N0U2 QzYzMTFFREJDRkEwNzNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmW4wDwQCAAIwCQMHACABDfRBgDANBgkqhkiG9w0BAQsF AAOCAQEATXGh0Oj6RfTbRATSu1vR4jCYvfpwbQpgSRKTmhzg/vQTsINWrRCXsKX+ tNulMwz9Zc79vKKVB/mz4Zn/TtCIv9470KWLA2U4hvfoWQyTSrU/3kkIdPj0xEdR 1bpMyRUTNu+kJlcjvBOYPwwJjvy+nRD0VSEzngMX/gsp+G5kjthkPNEo6djK5RVI g7TXhbJf+h6nvhLb7I8TTc54AQ+IOiKC8qBuHmdaW+cMV8PX/GHpROoK/K/YKeB6 bypUc/AeOD0jnN2Lk2q82+FAlucpPcbpYJwe/DHG5hfNDE3qUTRx36a3NOS2Ss+w ebl9z44PE9OBWqZk6CJLc7XjdN/u0g== -----END CERTIFICATE-----Generated at Sun Aug 24 00:46:26 2025 by rpki-client