$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/A292E3529E9711EEB6899B1CC4F9AE02.roa File: A292E3529E9711EEB6899B1CC4F9AE02.roa (raw, json) Hash identifier: Ogu9kxXrFRJanE7jcwo9P/mePv/PXm/3vRabACePad8= Subject key identifier: 99:9A:8F:B6:65:B3:D7:17:D6:CA:9C:B5:9F:FC:9A:1E:96:25:12:D8 Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Certificate serial: 09BC Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/A292E3529E9711EEB6899B1CC4F9AE02.roa Signing time: Sat 28 Jun 2025 19:55:39 +0000 ROA not before: Sat 28 Jun 2025 19:55:39 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 140607 IP address blocks: 103.150.242.0/24 maxlen: 24 103.150.243.0/24 maxlen: 24 2400:d860::/32 maxlen: 32 2400:d860::/43 maxlen: 43 2400:d860:20::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2492 (0x9bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Validity Not Before: Jun 28 19:55:39 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=686048bb-4dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:10:22:bc:bf:05:67:84:9e:b4:67:7f:5e:cb: 75:3d:29:28:65:aa:e8:be:f0:ef:f1:20:28:c5:10: 17:16:cd:02:93:c4:09:cc:01:fd:9a:66:d6:91:fa: bd:fa:b0:4b:b7:b8:7b:6f:7e:ca:71:40:43:0b:0b: a7:d0:dd:83:4b:e3:f9:09:b5:e7:9b:ff:f8:fc:53: c3:eb:1f:06:65:3b:6a:de:fe:3f:9a:a8:72:1c:d6: 53:fb:1f:18:aa:7f:73:8b:43:0e:3d:25:6d:a5:86: ec:a7:9c:fb:45:f5:89:53:2b:f2:18:4f:ad:4a:b1: 0a:f1:17:de:24:84:71:21:8c:a0:93:21:65:eb:b5: c3:7a:22:4f:07:4a:e7:1a:6c:71:02:09:4a:2e:4d: ec:a8:bf:75:68:a8:8c:87:64:84:c5:c9:e2:44:30: 37:f1:68:f3:e3:7e:fc:32:f2:8c:d6:40:f3:02:33: 14:20:a8:5c:c9:33:4a:2e:c2:dd:f5:24:ff:ae:c9: 57:2b:7e:3a:2a:04:11:d5:61:0c:6f:1a:d3:4b:12: 9e:61:8f:64:32:b7:d7:32:d9:23:01:60:16:8c:5e: 5d:5a:14:73:dd:a7:20:d8:71:10:33:b2:ce:d0:b2: 87:78:45:b0:8b:f1:1d:1d:dc:62:88:65:47:8f:5c: ab:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9A:8F:B6:65:B3:D7:17:D6:CA:9C:B5:9F:FC:9A:1E:96:25:12:D8 X509v3 Authority Key Identifier: keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/A292E3529E9711EEB6899B1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.242.0/23 IPv6: 2400:d860::/32 Signature Algorithm: sha256WithRSAEncryption 2f:93:de:2e:70:72:bd:d7:35:2a:74:c6:78:5a:c5:0b:21:83: 1a:92:24:cc:4f:43:85:69:ea:ac:9d:b5:3a:45:58:46:9c:64: 65:b1:d1:f6:57:22:55:12:e8:43:10:a1:29:af:4d:44:31:87: 37:0e:74:f1:ea:5c:5e:35:bb:93:be:91:ee:ff:56:95:fb:c0: f0:af:f9:21:a5:7c:e6:0d:3d:28:65:69:ef:97:13:35:96:75: e6:70:ae:af:19:8f:b8:fe:91:fb:bf:65:30:98:64:49:09:6f: ed:2c:72:eb:d0:52:8f:8b:87:ad:32:9d:ad:f8:78:cc:2d:1c: c9:07:13:df:3b:20:bb:eb:0f:2b:52:13:b3:2c:95:e8:c2:71: 89:d6:fd:5e:dd:7b:f3:5e:bb:f5:3a:89:af:87:b1:55:35:e4: cf:07:aa:81:6b:7b:aa:21:4d:55:88:19:f0:7a:84:04:ce:d7: 7b:8a:f5:f6:a1:98:04:9b:55:d1:5b:d6:b7:43:60:80:ed:d3: 97:75:22:4f:c7:4d:81:e5:43:02:b4:3f:20:e7:23:8e:54:2d: ce:f1:d7:5b:43:a0:49:4a:70:42:24:ff:5b:30:47:82:62:71: e4:4c:77:dc:72:3d:80:92:f9:0a:80:06:e3:18:f8:26:a6:0d: 57:a5:a5:b5 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdDMUQxMTAvBgNVBAUTKEE4QUVBOUIyOTMwQTYxNEQ1Q0EzMUFCOUY3RTg0Mzc5 MzYxQTJGNDMwHhcNMjUwNjI4MTk1NTM5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYwNDhiYi00ZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxAivL8FZ4SetGd/Xst1PSkoZarovvDv8SAoxRAXFs0Ck8QJzAH9mmbWkfq9 +rBLt7h7b37KcUBDCwun0N2DS+P5CbXnm//4/FPD6x8GZTtq3v4/mqhyHNZT+x8Y qn9zi0MOPSVtpYbsp5z7RfWJUyvyGE+tSrEK8RfeJIRxIYygkyFl67XDeiJPB0rn GmxxAglKLk3sqL91aKiMh2SExcniRDA38Wjz4378MvKM1kDzAjMUIKhcyTNKLsLd 9ST/rslXK346KgQR1WEMbxrTSxKeYY9kMrfXMtkjAWAWjF5dWhRz3acg2HEQM7LO 0LKHeEWwi/EdHdxiiGVHj1yrIQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJmaj7Zl s9cX1sqctZ/8mh6WJRLYMB8GA1UdIwQYMBaAFKiuqbKTCmFNXKMauffoQ3k2Gi9D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0MxRC9BODA3MEFGMjhB RjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lVMWNveHE1OS1oRGVUWWFM ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLNnBzcE1LWVUxY294cTU5LWhEZVRZYUwwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDdDMUQvQTgwNzBBRjI4QUYwMTFFQUE5NTI4MzA5QzRGOUFFMDIvQTI5MkUzNTI5 RTk3MTFFRUI2ODk5QjFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnlvIwDQQCAAIwBwMFACQA2GAwDQYJKoZIhvcNAQELBQAD ggEBAC+T3i5wcr3XNSp0xnhaxQshgxqSJMxPQ4Vp6qydtTpFWEacZGWx0fZXIlUS 6EMQoSmvTUQxhzcOdPHqXF41u5O+ke7/VpX7wPCv+SGlfOYNPShlae+XEzWWdeZw rq8Zj7j+kfu/ZTCYZEkJb+0scuvQUo+Lh60yna34eMwtHMkHE987ILvrDytSE7Ms lejCcYnW/V7de/Neu/U6ia+HsVU15M8HqoFre6ohTVWIGfB6hATO13uK9fahmASb VdFb1rdDYIDt05d1Ik/HTYHlQwK0PyDnI45ULc7x11tDoElKcEIk/1swR4JiceRM d9xyPYCS+QqABuMY+CamDVelpbU= -----END CERTIFICATE-----Generated at Fri Jul 4 15:38:09 2025 by rpki-client