$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/45E6E5BA06DC11EA9B939B64C4F9AE02.roa File: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (raw, json) Hash identifier: nAQt65Vo4I28B6tS+aP265JJYDV2v18a7Aw0+rjqSvo= Subject key identifier: D7:67:6C:6C:87:FE:2D:06:B7:37:56:40:57:E1:3B:F9:51:52:1A:D8 Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Certificate serial: 0C47 Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/45E6E5BA06DC11EA9B939B64C4F9AE02.roa Signing time: Sat 14 Jun 2025 18:32:09 +0000 ROA not before: Sat 14 Jun 2025 18:32:09 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137579 IP address blocks: 103.114.20.0/22 maxlen: 24 2402:c8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3143 (0xc47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D921D, serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Validity Not Before: Jun 14 18:32:09 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=684dc028-1682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:97:89:74:3d:69:79:a2:54:30:5c:da:c6: 0e:20:35:0f:fe:82:2a:6f:c2:7c:5f:66:35:ab:15: 18:fe:52:9c:95:24:e5:f5:1d:7c:b6:82:0a:1b:56: ea:c7:5b:69:2c:b5:aa:7c:e7:a9:6d:6e:48:7c:e6: ab:08:d0:59:49:23:60:c2:5d:b1:48:0b:30:24:cc: b9:a9:6b:df:f9:7d:97:6b:98:77:1e:7d:87:d5:1f: 52:2a:95:7b:e8:fb:5c:66:89:1a:47:79:67:12:1c: 9a:10:63:c7:9a:21:f7:ce:f0:f5:e4:77:e8:79:4a: 84:80:54:c0:e3:78:a7:90:e3:c6:04:90:73:da:ea: 23:74:6a:77:ca:a8:32:db:91:6c:69:5a:fe:72:ab: 6f:7a:4b:03:34:67:84:5d:14:98:ea:a7:c6:65:a1: 47:dd:3d:aa:48:3e:78:ca:fb:a5:bb:de:ba:c8:6c: eb:d9:21:d6:59:36:43:73:a1:1c:0f:bb:d3:a7:a2: d4:f4:a7:5f:13:8f:65:12:20:a0:21:ae:3c:8f:7e: ac:95:cb:68:64:b9:42:29:db:22:06:e5:7f:41:6f: c0:e5:75:29:7c:4e:cf:97:36:ee:75:2f:c8:71:f0: 01:5a:5e:ef:5a:83:9d:ed:75:66:d3:84:d5:b6:1c: ea:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:67:6C:6C:87:FE:2D:06:B7:37:56:40:57:E1:3B:F9:51:52:1A:D8 X509v3 Authority Key Identifier: keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/45E6E5BA06DC11EA9B939B64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.114.20.0/22 IPv6: 2402:c8c0::/32 Signature Algorithm: sha256WithRSAEncryption a8:e3:4c:6a:36:51:0c:06:45:35:88:b3:28:96:3c:a3:42:c3: 1b:28:ee:53:6e:dd:5e:a5:a7:e2:bf:35:b6:dc:43:66:c8:5a: 74:44:ac:d2:46:99:17:b4:5c:5b:2b:77:8f:e0:0c:a4:84:d2: 74:17:e7:78:27:00:51:39:4e:48:ec:93:29:0b:f1:45:95:8b: 09:96:48:f2:14:7c:df:72:1e:0a:4f:26:1a:95:55:43:b9:3d: a7:c6:30:f1:20:7e:c0:fc:3a:30:ae:02:88:10:09:ed:a7:01: 4c:e0:aa:ea:e1:77:30:58:ab:e0:24:6b:5f:db:05:39:a4:43: 95:19:3f:13:b8:40:c3:a4:25:0a:8e:66:c6:17:0c:fb:95:ed: dc:41:8e:dd:22:e9:ef:f9:0a:72:6f:ef:a6:d6:96:9d:2d:a2: 67:f5:74:17:5b:b8:b3:d2:f4:93:ff:b1:31:76:53:92:0a:7e: b6:39:7a:3c:84:3d:3b:9c:08:41:82:a8:53:0f:54:d4:62:8a: 40:36:f2:c9:7a:0b:3d:97:8d:32:29:02:c0:1b:d9:bb:98:7f: 9c:9d:66:5b:c6:2e:24:b1:97:72:10:66:cb:64:2b:51:04:a6: a9:16:39:3e:43:d0:a0:32:4d:d6:4b:e0:0a:ce:2b:9d:09:1f: f4:51:da:a5 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyMUQxMTAvBgNVBAUTKENDRENDNzhDOTY0NDc1NkIzMkIwMzNBMjFFMEYwMEM0 NEZEMjJGODEwHhcNMjUwNjE0MTgzMjA5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRkYzAyOC0xNjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAro6XiXQ9aXmiVDBc2sYOIDUP/oIqb8J8X2Y1qxUY/lKclSTl9R18toIKG1bq x1tpLLWqfOepbW5IfOarCNBZSSNgwl2xSAswJMy5qWvf+X2Xa5h3Hn2H1R9SKpV7 6PtcZokaR3lnEhyaEGPHmiH3zvD15HfoeUqEgFTA43inkOPGBJBz2uojdGp3yqgy 25FsaVr+cqtveksDNGeEXRSY6qfGZaFH3T2qSD54yvulu966yGzr2SHWWTZDc6Ec D7vTp6LU9KdfE49lEiCgIa48j36slctoZLlCKdsiBuV/QW/A5XUpfE7PlzbudS/I cfABWl7vWoOd7XVm04TVthzqpQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNdnbGyH /i0GtzdWQFfhO/lRUhrYMB8GA1UdIwQYMBaAFMzcx4yWRHVrMrAzoh4PAMRP0i+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTIxRC82RTNFQ0VFODA2 REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRXc3lzRE9pSGc4QXhFX1NM NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOekhqSlpFZFdzeXNET2lIZzhBeEVfU0w0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDkyMUQvNkUzRUNFRTgwNkRCMTFFQTk1MjkzQzYzQzRGOUFFMDIvNDVFNkU1QkEw NkRDMTFFQTlCOTM5QjY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnchQwDQQCAAIwBwMFACQCyMAwDQYJKoZIhvcNAQELBQAD ggEBAKjjTGo2UQwGRTWIsyiWPKNCwxso7lNu3V6lp+K/NbbcQ2bIWnRErNJGmRe0 XFsrd4/gDKSE0nQX53gnAFE5TkjskykL8UWViwmWSPIUfN9yHgpPJhqVVUO5PafG MPEgfsD8OjCuAogQCe2nAUzgqurhdzBYq+Aka1/bBTmkQ5UZPxO4QMOkJQqOZsYX DPuV7dxBjt0i6e/5CnJv76bWlp0tomf1dBdbuLPS9JP/sTF2U5IKfrY5ejyEPTuc CEGCqFMPVNRiikA28sl6Cz2XjTIpAsAb2buYf5ydZlvGLiSxl3IQZstkK1EEpqkW OT5D0KAyTdZL4ArOK50JH/RR2qU= -----END CERTIFICATE-----Generated at Wed Jul 2 16:36:45 2025 by rpki-client