$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/A6C9934CA74111E88B3EAB2BC4F9AE02.roa File: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (raw, json) Hash identifier: Ps2kpMcHFW9xZn4cXtCxGzuJfkKA6kvJeaElditES+M= Subject key identifier: B2:8A:E8:27:98:FB:70:8A:DB:E1:E8:82:67:9D:A9:E6:44:77:34:81 Certificate issuer: /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Certificate serial: 1394 Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/A6C9934CA74111E88B3EAB2BC4F9AE02.roa Signing time: Fri 20 Jun 2025 16:59:11 +0000 ROA not before: Fri 20 Jun 2025 16:59:11 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 136397 IP address blocks: 103.98.238.0/24 maxlen: 24 2001:df2:e700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5012 (0x1394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF8DB, serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Validity Not Before: Jun 20 16:59:11 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6855935f-4f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:77:28:a7:a4:02:d0:f9:b9:2e:57:56:c8:8d: dc:27:c3:25:53:02:f9:b7:b4:99:0c:dd:56:01:90: 59:76:20:b8:91:2f:41:ec:da:95:36:a9:f2:73:4b: 34:00:fa:a7:ac:da:11:49:b2:ae:4c:34:65:f4:e2: e9:44:31:41:b5:cb:83:e0:41:13:69:10:af:88:19: e5:af:84:e6:0c:eb:05:99:c6:2e:c6:2d:19:a6:5b: 29:0c:2f:f1:7a:8d:bb:78:a1:86:1a:5a:d2:53:75: e0:5d:a9:04:5a:d4:18:8e:c8:6c:84:9c:3b:2a:a9: 5b:6d:55:45:37:82:0b:6d:21:53:c4:7a:85:ad:23: e5:76:5f:87:f2:f4:b8:3a:20:cf:cd:f9:9b:f6:9b: 5f:fd:ef:2c:53:78:70:8b:25:b6:a1:0a:24:39:2d: a4:05:a0:fb:3c:8d:7b:2b:05:79:49:8b:00:eb:97: 42:ae:a9:ce:52:ea:27:3f:50:e7:c1:b9:0a:f6:2a: fe:6d:cc:21:62:5b:93:62:80:c1:76:8a:b3:81:a0: df:07:7b:45:72:e5:f5:9e:78:7f:8b:5d:8b:8e:06: 3f:5d:9a:3d:30:bf:e0:80:66:a2:77:1c:76:db:22: 86:c2:2a:b8:2e:f3:f2:43:47:ce:93:aa:70:1b:ea: 07:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8A:E8:27:98:FB:70:8A:DB:E1:E8:82:67:9D:A9:E6:44:77:34:81 X509v3 Authority Key Identifier: keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/A6C9934CA74111E88B3EAB2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.98.238.0/24 IPv6: 2001:df2:e700::/48 Signature Algorithm: sha256WithRSAEncryption 9f:e6:49:f7:79:6c:66:44:da:a3:ac:be:13:87:99:d1:c6:fe: bc:44:c6:52:3c:fe:b0:81:7a:6f:c6:63:b7:9d:6b:e9:ed:7b: 2c:5b:4a:7d:33:2a:eb:a6:6d:e0:13:41:42:f0:cb:0f:b9:d8: c0:02:f9:7e:33:46:7f:49:f3:f1:3c:ce:06:78:d6:90:c6:27: 79:7b:a4:7a:b8:b6:9f:ac:39:43:87:1e:06:ed:57:92:b7:b1: a8:a7:ee:28:16:1a:4e:c3:2c:c6:05:fa:c2:a1:b5:61:f8:23: d6:12:33:54:0d:f0:d1:e0:60:3b:8c:9d:cb:4e:41:35:94:47: 2d:1c:60:1d:2e:ac:88:22:2b:04:42:f4:46:70:5c:b4:1f:20: 96:c9:98:b8:2d:85:cd:b8:1a:39:27:98:be:76:64:bf:1a:bf: 42:9d:39:3f:b0:08:06:91:90:81:50:28:39:19:f6:0b:92:a3: 70:c9:2a:5e:84:c8:c3:c7:5b:08:16:06:89:2f:d5:bc:e1:08: 68:69:1c:c9:b3:86:05:fc:7e:0b:53:c4:e0:5e:11:a5:a0:04: 0a:b0:68:8b:91:00:72:45:4a:62:3b:2d:6a:12:da:81:d9:37: 5e:a9:ce:48:ae:f1:14:10:e7:c1:95:c4:e3:1b:33:30:a8:ca: 2e:0e:a4:3a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICE5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4REIxMTAvBgNVBAUTKDk3RDI5QjBEMzI0NTVCQjVDNkYxMjU3ODVGNDBGNUJD MjcwOUY3RDQwHhcNMjUwNjIwMTY1OTExWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU1OTM1Zi00ZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13cop6QC0Pm5LldWyI3cJ8MlUwL5t7SZDN1WAZBZdiC4kS9B7NqVNqnyc0s0 APqnrNoRSbKuTDRl9OLpRDFBtcuD4EETaRCviBnlr4TmDOsFmcYuxi0ZplspDC/x eo27eKGGGlrSU3XgXakEWtQYjshshJw7KqlbbVVFN4ILbSFTxHqFrSPldl+H8vS4 OiDPzfmb9ptf/e8sU3hwiyW2oQokOS2kBaD7PI17KwV5SYsA65dCrqnOUuonP1Dn wbkK9ir+bcwhYluTYoDBdoqzgaDfB3tFcuX1nnh/i12LjgY/XZo9ML/ggGaidxx2 2yKGwiq4LvPyQ0fOk6pwG+oHjwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLKK6CeY +3CK2+HogmedqeZEdzSBMB8GA1UdIwQYMBaAFJfSmw0yRVu1xvEleF9A9bwnCffU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjhEQi82NTc5Mzc4Qzk5 MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3WEc4U1Y0WDBEMXZDY0o5 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5S2JEVEpGVzdYRzhTVjRYMEQxdkNjSjk5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY4REIvNjU3OTM3OEM5OTM0MTFFOEEwMzczNzI0QzRGOUFFMDIvQTZDOTkzNENB NzQxMTFFODhCM0VBQjJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnYu4wDwQCAAIwCQMHACABDfLnADANBgkqhkiG9w0BAQsF AAOCAQEAn+ZJ93lsZkTao6y+E4eZ0cb+vETGUjz+sIF6b8Zjt51r6e17LFtKfTMq 66Zt4BNBQvDLD7nYwAL5fjNGf0nz8TzOBnjWkMYneXukeri2n6w5Q4ceBu1Xkrex qKfuKBYaTsMsxgX6wqG1Yfgj1hIzVA3w0eBgO4ydy05BNZRHLRxgHS6siCIrBEL0 RnBctB8glsmYuC2FzbgaOSeYvnZkvxq/Qp05P7AIBpGQgVAoORn2C5KjcMkqXoTI w8dbCBYGiS/VvOEIaGkcybOGBfx+C1PE4F4RpaAECrBoi5EAckVKYjstahLagdk3 XqnOSK7xFBDnwZXE4xszMKjKLg6kOg== -----END CERTIFICATE-----Generated at Fri Jul 4 22:10:09 2025 by rpki-client