$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/C6671418A37A11EFBED1AE3BC4F9AE02.roa File: C6671418A37A11EFBED1AE3BC4F9AE02.roa (raw, json) Hash identifier: RtmiTTWdzbSA6sjEHPl66WT8irnWI6qg0r7cthFL2r8= Subject key identifier: 18:E7:B7:F5:D6:F8:4E:73:85:7A:34:52:E4:BD:7F:1F:41:B3:A2:28 Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Certificate serial: 0A62 Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/C6671418A37A11EFBED1AE3BC4F9AE02.roa Signing time: Sat 28 Jun 2025 19:54:48 +0000 ROA not before: Sat 28 Jun 2025 19:54:48 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 58895 IP address blocks: 103.203.44.0/24 maxlen: 24 116.213.32.0/24 maxlen: 24 116.213.33.0/24 maxlen: 24 116.213.34.0/24 maxlen: 24 116.213.35.0/24 maxlen: 24 123.253.92.0/24 maxlen: 24 123.253.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2658 (0xa62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FCC, serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Validity Not Before: Jun 28 19:54:48 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68604888-61b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4a:3e:10:f8:a5:3b:49:1b:5c:9f:9b:0e:2d: 7f:94:59:77:3c:14:00:f1:d0:39:eb:dd:ed:3a:39: 6f:89:ca:48:50:ca:73:27:d7:01:1d:9d:15:a3:cb: f9:4a:a3:2e:9c:b9:32:90:e9:e2:6a:41:7f:62:65: 17:c7:55:0a:a9:7a:57:8f:91:ae:57:c4:6e:6c:5a: a5:ed:b1:e6:da:ff:27:d3:8b:c6:91:ac:04:7d:ea: be:5a:30:96:3e:b5:50:2b:54:89:5d:a0:cb:52:26: f3:3f:36:aa:64:73:62:21:a8:8c:1b:1b:b6:d9:8e: c4:c2:4d:64:ed:ad:12:7f:31:81:a5:24:af:f7:85: 2e:a1:93:45:95:cf:54:4f:da:2b:d8:77:0d:23:3c: dc:58:9a:78:55:ef:32:a0:63:8e:ba:6f:e8:2e:30: 84:9d:58:43:e4:11:59:25:97:60:f1:b4:27:00:ac: d0:5b:dd:c7:46:b9:55:3d:f8:c0:8c:21:a6:d9:4a: dd:9c:4b:c6:c5:31:66:e7:b1:25:1e:56:5c:74:26: 19:f2:28:c1:80:2b:5c:17:99:09:20:81:c5:2f:1a: e4:57:73:f9:d0:5f:1d:03:5d:78:5a:3c:3c:ba:36: 41:bc:8f:63:79:e6:50:54:34:45:a9:1d:ab:2e:5a: a1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E7:B7:F5:D6:F8:4E:73:85:7A:34:52:E4:BD:7F:1F:41:B3:A2:28 X509v3 Authority Key Identifier: keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/C6671418A37A11EFBED1AE3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.203.44.0/24 116.213.32.0/22 123.253.92.0/24 123.253.94.0/24 Signature Algorithm: sha256WithRSAEncryption 63:72:f8:f9:f1:2c:63:2e:ed:50:48:08:b4:5b:59:82:9c:8c: 13:c1:64:fc:8d:aa:65:0b:c1:04:80:ea:af:11:d0:7a:1c:27: 59:28:b7:bb:3b:59:1b:13:c5:b2:8e:50:f0:cf:0b:3a:c0:82: d5:fa:c3:f6:f3:96:4d:b3:80:76:a6:71:be:45:53:9c:7c:e9: f7:9e:13:f3:70:28:30:94:c9:a6:ce:e1:4c:e2:7b:eb:40:43: b1:50:64:00:d2:0e:ed:47:79:85:c0:48:0c:3e:7f:5f:94:04: ac:0b:d7:46:17:de:35:36:48:1c:61:ba:8a:f1:d0:b1:95:b9: 57:e7:12:15:b3:11:93:a1:72:63:40:62:81:fc:ed:d2:75:dd: 3d:16:de:16:82:c4:07:b7:2c:2b:4f:02:57:7e:de:d3:ef:3a: 3b:7d:4f:a6:dc:14:76:7f:a3:06:47:ac:2f:d1:c1:3b:15:3c: 7c:b9:f1:30:5b:78:83:06:20:8b:ff:56:d6:9a:b4:54:56:be: 56:a2:7c:2e:e2:87:d3:0c:2c:d1:5e:48:3d:2b:75:f5:70:ab: 09:54:5a:d5:61:a8:ee:e0:90:5c:5c:c5:52:c8:5c:bc:c0:43: d0:18:23:d4:a3:3d:72:9f:c9:b0:20:4a:e8:68:b0:37:ec:7c: b6:7c:29:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICCmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy QTM2OTE3QkQwHhcNMjUwNjI4MTk1NDQ4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYwNDg4OC02MWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtko+EPilO0kbXJ+bDi1/lFl3PBQA8dA5693tOjlvicpIUMpzJ9cBHZ0Vo8v5 SqMunLkykOniakF/YmUXx1UKqXpXj5GuV8RubFql7bHm2v8n04vGkawEfeq+WjCW PrVQK1SJXaDLUibzPzaqZHNiIaiMGxu22Y7Ewk1k7a0SfzGBpSSv94UuoZNFlc9U T9or2HcNIzzcWJp4Ve8yoGOOum/oLjCEnVhD5BFZJZdg8bQnAKzQW93HRrlVPfjA jCGm2UrdnEvGxTFm57ElHlZcdCYZ8ijBgCtcF5kJIIHFLxrkV3P50F8dA114Wjw8 ujZBvI9jeeZQVDRFqR2rLlqhLwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFBjnt/XW +E5zhXo0UuS9fx9Bs6IoMB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFGQ0MvQ0RCQzU5ODY3MzA5MTFFQUE4ODIwMDMwQzRGOUFFMDIvQzY2NzE0MThB MzdBMTFFRkJFRDFBRTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABnyywDBAJ01SADBAB7/VwDBAB7/V4wDQYJKoZIhvcNAQEL BQADggEBAGNy+PnxLGMu7VBICLRbWYKcjBPBZPyNqmULwQSA6q8R0HocJ1kot7s7 WRsTxbKOUPDPCzrAgtX6w/bzlk2zgHamcb5FU5x86feeE/NwKDCUyabO4Uzie+tA Q7FQZADSDu1HeYXASAw+f1+UBKwL10YX3jU2SBxhuorx0LGVuVfnEhWzEZOhcmNA YoH87dJ13T0W3haCxAe3LCtPAld+3tPvOjt9T6bcFHZ/owZHrC/RwTsVPHy58TBb eIMGIIv/VtaatFRWvlaifC7ih9MMLNFeSD0rdfVwqwlUWtVhqO7gkFxcxVLIXLzA Q9AYI9SjPXKfybAgSuhosDfsfLZ8KbE= -----END CERTIFICATE-----Generated at Thu Jul 3 08:17:46 2025 by rpki-client