$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/ACEBFE04E7E511EFBC775C0EC4F9AE02.roa File: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (raw, json) Hash identifier: KypfxpsYSUZAZe6pLsx6D3j38tcpQYPu6XyVBPdIPY4= Subject key identifier: 73:24:47:39:30:54:90:AF:51:DF:2B:C8:47:4B:4C:82:E6:FF:80:46 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0CBC Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/ACEBFE04E7E511EFBC775C0EC4F9AE02.roa Signing time: Fri 20 Jun 2025 18:42:56 +0000 ROA not before: Fri 20 Jun 2025 18:42:56 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 150696 IP address blocks: 103.115.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3260 (0xcbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Jun 20 18:42:56 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6855abaf-7579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:73:7e:66:dc:58:e3:f5:13:db:ac:30:8a:a0: e6:1a:c6:13:f4:7b:58:8f:a1:f6:d8:21:d7:b9:1b: 26:b0:b5:fc:fc:69:5e:88:e7:fc:63:bc:17:f3:71: e4:1c:08:be:e9:74:67:98:32:df:b5:f3:05:c8:8d: d2:bf:ef:66:7c:63:de:4e:51:bf:56:81:58:97:aa: 32:70:5e:ff:11:1c:af:d6:b3:f3:28:3d:b7:4d:8c: ea:cb:02:c6:0e:38:68:b8:6d:7e:e5:0b:24:97:06: 31:fd:df:73:54:d1:e9:c0:30:5a:00:b9:78:12:86: 69:dc:a0:79:44:5d:1c:b8:8c:d2:b7:6e:5d:8e:91: 9d:3b:49:97:80:1b:55:e3:2e:a9:01:84:15:94:c0: 09:35:c5:02:68:9b:1a:bb:97:67:7d:fd:5c:13:9b: 0d:4b:b9:84:e6:b4:50:48:61:6c:61:07:7b:6c:82: c9:5a:1d:29:f5:4c:04:dc:b4:05:8f:67:6d:67:7e: e1:2c:27:07:40:11:ad:9e:51:d3:5f:c4:15:58:ec: c4:96:2f:22:01:c1:e9:14:2d:5c:17:64:9a:ed:b8: 10:0c:3e:c8:64:90:6d:55:11:ef:9f:ca:9e:09:50: 63:4c:b9:72:c1:48:77:0b:68:2f:e1:cd:c9:21:18: df:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:24:47:39:30:54:90:AF:51:DF:2B:C8:47:4B:4C:82:E6:FF:80:46 X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/ACEBFE04E7E511EFBC775C0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.159.0/24 Signature Algorithm: sha256WithRSAEncryption 68:e3:90:7b:a5:8f:62:1c:94:26:7b:16:20:8c:96:0d:f4:60: 6d:51:63:47:fc:ce:eb:b6:fa:10:9b:ac:87:37:80:08:ee:08: e4:6f:d8:71:bf:f7:01:f9:8a:dd:f4:a2:fa:4b:f3:32:93:41: 92:d6:6f:9a:b6:82:10:5b:09:2d:f2:14:d2:c9:9d:4e:f5:9f: ec:f4:48:88:6c:41:fb:9d:d7:83:7d:cf:56:83:61:f7:ec:11: 18:23:66:a3:6f:f2:d9:e9:7d:5e:3a:df:73:57:ce:92:0b:f7: 2d:c6:e9:24:70:ad:40:18:e4:b5:f3:7e:c1:0d:f7:3c:0e:2c: 5b:4b:2d:0b:53:70:13:9b:75:cc:a5:2f:f7:9f:be:3b:af:f7: 6a:29:ff:6f:2f:68:5f:c6:c6:90:a9:38:2c:c9:f4:b2:04:89: 58:3a:14:15:95:25:82:95:be:b4:00:05:39:25:41:61:48:c0: 1c:70:5c:74:a1:e1:d7:c5:f9:5c:cb:83:e1:c0:63:d6:50:74: ea:84:8b:0e:21:ec:41:8e:98:aa:d5:3f:67:6c:39:39:36:cd: 0f:88:3f:06:a7:95:cc:fa:01:98:25:80:9b:87:f8:ff:0d:48: f1:59:5e:ad:83:d6:78:db:82:fc:6c:31:5f:19:76:66:8f:f4: 1e:d3:ab:28 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUwNjIwMTg0MjU2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU1YWJhZi03NTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXN+ZtxY4/UT26wwiqDmGsYT9HtYj6H22CHXuRsmsLX8/GleiOf8Y7wX83Hk HAi+6XRnmDLftfMFyI3Sv+9mfGPeTlG/VoFYl6oycF7/ERyv1rPzKD23TYzqywLG DjhouG1+5QsklwYx/d9zVNHpwDBaALl4EoZp3KB5RF0cuIzSt25djpGdO0mXgBtV 4y6pAYQVlMAJNcUCaJsau5dnff1cE5sNS7mE5rRQSGFsYQd7bILJWh0p9UwE3LQF j2dtZ37hLCcHQBGtnlHTX8QVWOzEli8iAcHpFC1cF2Sa7bgQDD7IZJBtVRHvn8qe CVBjTLlywUh3C2gv4c3JIRjf3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHMkRzkw VJCvUd8ryEdLTILm/4BGMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQ2MTQvMUM5NDg5OUFGNEYwMTFFOUFDMjAyQjFEQzRGOUFFMDIvQUNFQkZFMDRF N0U1MTFFRkJDNzc1QzBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnc58wDQYJKoZIhvcNAQELBQADggEBAGjjkHulj2IclCZ7 FiCMlg30YG1RY0f8zuu2+hCbrIc3gAjuCORv2HG/9wH5it30ovpL8zKTQZLWb5q2 ghBbCS3yFNLJnU71n+z0SIhsQfud14N9z1aDYffsERgjZqNv8tnpfV4633NXzpIL 9y3G6SRwrUAY5LXzfsEN9zwOLFtLLQtTcBObdcylL/efvjuv92op/28vaF/GxpCp OCzJ9LIEiVg6FBWVJYKVvrQABTklQWFIwBxwXHSh4dfF+VzLg+HAY9ZQdOqEiw4h 7EGOmKrVP2dsOTk2zQ+IPwanlcz6AZglgJuH+P8NSPFZXq2D1njbgvxsMV8ZdmaP 9B7Tqyg= -----END CERTIFICATE-----Generated at Thu Jul 3 22:56:07 2025 by rpki-client