$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/178E201EA51911EDB711B90AC4F9AE02.roa File: 178E201EA51911EDB711B90AC4F9AE02.roa (raw, json) Hash identifier: Fk3FD4AcHMukexgYcFy6H4xmHyHDGU1VOrgDQ2JaHQ0= Subject key identifier: 66:51:1E:DF:AD:ED:04:E0:01:9E:20:DE:F0:BC:23:FC:CE:A3:86:29 Certificate issuer: /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7 Certificate serial: 0698 Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/178E201EA51911EDB711B90AC4F9AE02.roa Signing time: Mon 24 Mar 2025 22:33:23 +0000 ROA not before: Mon 24 Mar 2025 22:33:23 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 139282 IP address blocks: 103.162.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1688 (0x698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D26C6, serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7 Validity Not Before: Mar 24 22:33:23 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67e1ddb3-6e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:5d:ab:8f:5e:00:01:94:96:ee:04:dc:30:e6: e3:b8:b7:44:26:16:b6:f0:40:69:89:48:8d:7f:f2: a9:17:d3:d6:6f:c7:1d:9e:79:f7:96:9f:f6:3e:30: 84:32:fa:45:49:d2:13:58:86:9c:9b:03:b3:f0:c2: 45:b8:dc:25:e1:52:ad:af:d5:d0:8b:1e:c8:8c:d9: 50:da:d2:84:9d:7c:fd:ad:98:42:fe:ea:8a:4f:e6: 06:af:73:84:13:12:f9:bd:7d:2f:87:4a:3a:5e:d6: 5d:f5:eb:3d:9e:2f:62:d0:9a:7c:22:e5:2e:ff:a7: 92:d5:5c:85:27:72:8c:ad:d5:44:a5:60:3c:06:1a: 9d:2d:65:cb:85:ca:c5:97:34:5b:68:8c:e8:10:ab: 61:aa:75:98:ec:e8:75:50:17:0d:05:2c:0b:cf:c6: 9b:75:e7:68:59:2f:af:5e:e3:af:9a:f6:1b:7b:c0: b9:e1:52:11:e2:07:f3:2d:cc:69:81:90:f2:fa:a5: 63:4e:c2:87:82:6a:c4:98:ef:a9:f8:8d:2c:63:94: 5c:13:5d:87:91:e7:19:65:e7:74:ee:68:47:a9:f2: 3a:e4:3f:c8:7f:6a:f2:e0:ee:15:d7:af:93:e6:c4: 48:6f:bf:da:d6:54:62:43:3e:43:88:d2:eb:5d:ad: 77:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:51:1E:DF:AD:ED:04:E0:01:9E:20:DE:F0:BC:23:FC:CE:A3:86:29 X509v3 Authority Key Identifier: keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/178E201EA51911EDB711B90AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.57.0/24 Signature Algorithm: sha256WithRSAEncryption 41:38:c1:ca:d4:97:b1:d1:57:63:a7:a1:de:d0:0f:ef:ce:4e: d8:80:b0:fc:73:3a:10:88:d1:a3:ef:9c:c4:37:3a:34:97:eb: 1e:aa:64:30:b8:da:8d:1a:1f:5a:21:6c:ee:c4:e5:19:70:8e: 52:e3:b2:a1:d2:fb:a1:f2:59:ee:6f:f8:a4:9a:76:90:43:3b: 81:ef:d1:74:83:6f:61:08:d5:41:a6:ca:bf:0a:4f:fb:02:13: 6f:7f:73:90:87:d1:89:cc:4a:f6:b4:44:14:f6:92:c6:30:d8: e8:81:e7:c0:f0:9d:6f:9d:7a:19:1c:c4:d0:7e:ad:f9:20:8f: 20:27:2e:08:00:e0:a6:e5:38:ec:9e:f3:bd:a5:cc:f5:02:c0: c0:c4:47:ad:5f:ef:0a:9a:1d:d5:73:ff:c4:9b:4b:d5:e0:bd: 7d:2b:90:3b:65:77:c8:8b:18:7f:6f:da:31:5f:6d:fa:2d:f8: 2c:e9:89:04:3a:8a:50:46:30:73:a3:9e:33:89:b9:ab:44:3e: 9b:ae:b6:1b:7e:d3:48:7d:6b:58:00:bb:0f:7a:b6:01:7c:02: c4:0d:2d:72:6b:53:47:af:fe:98:f5:9d:17:47:1a:50:45:61: 76:f0:50:f1:d5:41:3e:a7:6d:4d:f4:2a:cd:5b:e7:49:79:ed: 5d:3a:b2:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2QzYxMTAvBgNVBAUTKEQyOUI2NEU2MzQ0NjVBQjQxMzIwNTRCQjdFODNDOUQ1 RjE4MzQ5RjcwHhcNMjUwMzI0MjIzMzIzWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2UxZGRiMy02ZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9F2rj14AAZSW7gTcMObjuLdEJha28EBpiUiNf/KpF9PWb8cdnnn3lp/2PjCE MvpFSdITWIacmwOz8MJFuNwl4VKtr9XQix7IjNlQ2tKEnXz9rZhC/uqKT+YGr3OE ExL5vX0vh0o6XtZd9es9ni9i0Jp8IuUu/6eS1VyFJ3KMrdVEpWA8BhqdLWXLhcrF lzRbaIzoEKthqnWY7Oh1UBcNBSwLz8abdedoWS+vXuOvmvYbe8C54VIR4gfzLcxp gZDy+qVjTsKHgmrEmO+p+I0sY5RcE12HkecZZed07mhHqfI65D/If2ry4O4V16+T 5sRIb7/a1lRiQz5DiNLrXa13KQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGZRHt+t 7QTgAZ4g3vC8I/zOo4YpMB8GA1UdIwQYMBaAFNKbZOY0Rlq0EyBUu36DydXxg0n3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjZDNi81OEU5OUU5NDZG NzkxMUVCQTREMjIyODdDNEY5QUUwMi8wcHRrNWpSR1dyUVRJRlM3Zm9QSjFmR0RT ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBwdGs1alJHV3JRVElGUzdmb1BKMWZHRFNmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI2QzYvNThFOTlFOTQ2Rjc5MTFFQkE0RDIyMjg3QzRGOUFFMDIvMTc4RTIwMUVB NTE5MTFFREI3MTFCOTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnojkwDQYJKoZIhvcNAQELBQADggEBAEE4wcrUl7HRV2On od7QD+/OTtiAsPxzOhCI0aPvnMQ3OjSX6x6qZDC42o0aH1ohbO7E5RlwjlLjsqHS +6HyWe5v+KSadpBDO4Hv0XSDb2EI1UGmyr8KT/sCE29/c5CH0YnMSva0RBT2ksYw 2OiB58DwnW+dehkcxNB+rfkgjyAnLggA4KblOOye872lzPUCwMDER61f7wqaHdVz /8SbS9XgvX0rkDtld8iLGH9v2jFfbfot+CzpiQQ6ilBGMHOjnjOJuatEPpuutht+ 00h9a1gAuw96tgF8AsQNLXJrU0ev/pj1nRdHGlBFYXbwUPHVQT6nbU30Ks1b50l5 7V06slk= -----END CERTIFICATE-----Generated at Mon Oct 20 21:34:13 2025 by rpki-client