$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/9ED423000B1211F08F4E1E7EC4F9AE02.roa File: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (raw, json) Hash identifier: +fAen0eLm96Uw52DW70NMmBaXk/iGot7yVNxCoQPaiI= Subject key identifier: 1C:93:AF:1B:EE:39:94:95:97:FA:9B:9C:68:BC:02:2B:E2:C0:95:6B Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 03C4 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/9ED423000B1211F08F4E1E7EC4F9AE02.roa Signing time: Tue 24 Jun 2025 11:28:19 +0000 ROA not before: Tue 24 Jun 2025 11:28:19 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 55933 IP address blocks: 103.151.4.0/23 maxlen: 23 103.151.5.0/24 maxlen: 24 103.178.56.0/23 maxlen: 23 103.178.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 964 (0x3c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Jun 24 11:28:19 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=685a8bd3-7f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:20:d8:ec:36:a9:23:57:e8:60:fd:8f:d0: 18:a6:fd:f5:62:a5:ee:df:84:db:3c:bf:85:57:16: 31:62:77:8d:48:03:e1:0d:1b:53:08:77:69:b0:f5: fd:59:1e:85:72:d1:2c:6a:19:62:c7:d7:71:6f:39: cd:96:2e:6a:7f:f7:07:0e:5b:36:47:4e:2e:7c:b7: c4:c8:57:63:b4:c5:04:1a:5d:c0:d9:6b:c1:c9:7d: 05:c4:88:81:f3:70:f6:f3:80:96:35:85:7e:32:d0: 76:13:60:b9:08:78:2b:fc:14:86:f8:70:17:ed:86: 77:5a:41:2d:c1:2c:ba:9c:6b:4d:95:11:da:9a:b3: cb:83:be:ef:70:78:da:9a:63:76:2c:a0:ea:69:6c: 2b:87:a9:02:8a:ca:5c:fa:f1:e1:53:6a:94:8f:d3: 5c:c3:8d:8e:35:7c:84:5a:1c:71:41:4f:ba:99:f1: 2c:5a:3f:c7:80:65:d8:a4:b8:6c:e4:c5:3a:7f:c9: 47:14:57:a7:cf:10:11:99:c9:9b:ce:00:f6:45:d0: 97:a6:b5:7b:4e:0f:4b:fb:fd:3e:a5:1b:95:50:af: 1d:ab:1e:3d:80:06:ea:92:1e:a2:c2:7d:d0:ee:a6: 86:44:3f:af:9a:d3:49:b1:af:ff:6d:a1:1f:03:bf: a1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:93:AF:1B:EE:39:94:95:97:FA:9B:9C:68:BC:02:2B:E2:C0:95:6B X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/9ED423000B1211F08F4E1E7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.4.0/23 103.178.56.0/23 Signature Algorithm: sha256WithRSAEncryption 23:87:b7:dc:72:3e:5d:a6:d0:6a:8f:24:a7:32:09:de:d2:5b: 9e:9f:41:70:56:db:f0:05:11:41:37:f7:44:34:45:b5:b9:d6: d5:03:5f:27:97:85:c1:a3:d6:ab:5e:24:8e:d4:bd:eb:bb:25: 85:21:fc:f5:c5:ff:1b:23:10:f9:9e:03:95:8a:c2:b5:12:80: e4:cb:ba:e0:a9:ed:60:ac:6c:7d:a7:75:fa:ff:a8:83:80:c2: 1f:65:24:bc:c2:74:da:d9:52:0f:3b:01:37:1c:05:4c:91:4b: 30:92:ea:0a:28:0d:ea:a8:3b:df:d8:16:55:86:ff:e2:29:e0: aa:da:89:92:91:3d:c4:be:e4:ca:05:fc:ed:ad:39:a2:a8:df: 19:30:d8:a7:3f:08:a7:d6:59:c3:fd:d9:3e:8f:f7:da:c1:02: 9e:1e:62:75:1a:fb:25:ff:b8:d2:eb:8d:00:33:65:c4:2d:b6: 82:95:5d:dc:88:fd:8a:46:63:97:40:18:5e:2a:d5:ac:04:19: 96:e4:31:e2:17:5c:b6:bf:61:c7:a7:71:70:60:86:00:1e:93: 2e:e4:28:1d:5e:a7:7e:f7:fc:b4:f4:3b:21:8a:64:af:31:1a: 60:a5:d8:c8:87:19:cc:26:b7:f6:01:d8:ad:fb:38:fa:ba:30: 47:7b:2d:c4 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjUwNjI0MTEyODE5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVhOGJkMy03Zjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswsg2Ow2qSNX6GD9j9AYpv31YqXu34TbPL+FVxYxYneNSAPhDRtTCHdpsPX9 WR6FctEsahlix9dxbznNli5qf/cHDls2R04ufLfEyFdjtMUEGl3A2WvByX0FxIiB 83D284CWNYV+MtB2E2C5CHgr/BSG+HAX7YZ3WkEtwSy6nGtNlRHamrPLg77vcHja mmN2LKDqaWwrh6kCispc+vHhU2qUj9Ncw42ONXyEWhxxQU+6mfEsWj/HgGXYpLhs 5MU6f8lHFFenzxARmcmbzgD2RdCXprV7Tg9L+/0+pRuVUK8dqx49gAbqkh6iwn3Q 7qaGRD+vmtNJsa//baEfA7+hfwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFByTrxvu OZSVl/qbnGi8AiviwJVrMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkRDRjEvRUI1OTExMjJBODNDMTFFQ0EzQTRGMzI1QzRGOUFFMDIvOUVENDIzMDAw QjEyMTFGMDhGNEUxRTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnlwQDBAFnsjgwDQYJKoZIhvcNAQELBQADggEBACOHt9xy Pl2m0GqPJKcyCd7SW56fQXBW2/AFEUE390Q0RbW51tUDXyeXhcGj1qteJI7Uveu7 JYUh/PXF/xsjEPmeA5WKwrUSgOTLuuCp7WCsbH2ndfr/qIOAwh9lJLzCdNrZUg87 ATccBUyRSzCS6gooDeqoO9/YFlWG/+Ip4KraiZKRPcS+5MoF/O2tOaKo3xkw2Kc/ CKfWWcP92T6P99rBAp4eYnUa+yX/uNLrjQAzZcQttoKVXdyI/YpGY5dAGF4q1awE GZbkMeIXXLa/YcencXBghgAeky7kKB1ep373/LT0OyGKZK8xGmCl2MiHGcwmt/YB 2K37OPq6MEd7LcQ= -----END CERTIFICATE-----Generated at Thu Jul 3 09:26:04 2025 by rpki-client