$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/FB03B42C927411EF870E655AC4F9AE02.roa File: FB03B42C927411EF870E655AC4F9AE02.roa (raw, json) Hash identifier: 1Pw3F4k0O1ke+ThDTspVWhZWgUjv2zsb15CKjPdj4IQ= Subject key identifier: 96:C6:6B:C1:AD:18:C3:E6:38:4F:71:DA:8C:F8:23:97:81:A9:10:FD Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Certificate serial: 83 Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/FB03B42C927411EF870E655AC4F9AE02.roa Signing time: Tue 01 Jul 2025 07:43:13 +0000 ROA not before: Tue 01 Jul 2025 07:43:13 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38605 IP address blocks: 203.171.4.0/24 maxlen: 24 2001:df0:2ea::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Validity Not Before: Jul 1 07:43:13 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68639191-7ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3f:5b:75:eb:1d:9a:b1:b4:42:8b:ea:2c:a0: c5:96:73:9b:b8:84:69:75:26:74:42:c1:3a:f4:3c: bd:1f:10:8c:2c:2e:ad:0e:e1:62:5b:c4:84:32:8c: ba:85:1b:7d:bb:46:29:50:1a:67:65:72:28:f5:fc: 86:5b:51:95:bf:e2:6e:9c:48:28:f8:80:ca:22:fd: 45:d2:35:58:3f:37:c8:77:b9:88:f2:a3:a8:69:11: 15:ee:f0:9f:e9:02:9f:15:c6:bf:af:c4:59:1a:dd: 4d:b1:a0:2f:c2:d3:7c:45:a6:d4:06:fb:dc:e7:52: f5:53:7d:e0:ce:0f:ca:a1:e2:0b:ec:da:c3:ff:cc: 89:1c:ba:5d:2e:7f:38:11:50:7a:9c:3f:df:6b:75: 04:be:8b:0f:a8:cd:a9:bb:cf:64:73:d6:16:0d:b9: a1:94:3f:8d:49:23:1a:7e:cb:db:05:61:e9:86:4b: 0b:b5:c6:14:04:a5:6f:01:0f:28:50:e2:52:0b:bb: ea:93:bc:1c:86:3a:ea:6c:55:30:d0:e2:90:92:12: 98:91:21:69:db:14:a9:8a:4a:06:35:e7:25:d8:79: ab:57:bb:eb:a8:be:46:bd:83:a3:70:ef:da:29:d7: 9d:01:eb:56:e2:32:74:0e:65:38:90:75:c4:d8:a8: 30:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C6:6B:C1:AD:18:C3:E6:38:4F:71:DA:8C:F8:23:97:81:A9:10:FD X509v3 Authority Key Identifier: keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/FB03B42C927411EF870E655AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.171.4.0/24 IPv6: 2001:df0:2ea::/48 Signature Algorithm: sha256WithRSAEncryption 3b:11:f1:fb:89:16:4d:4d:b0:14:1e:0e:9f:a8:ce:86:99:48: 91:0f:8a:19:82:ce:e5:b0:1b:37:dc:ba:31:55:c0:2a:71:2c: a1:ac:aa:37:9b:4d:c3:7d:ae:ab:d1:89:29:d3:81:00:6b:90: e7:7d:5c:34:52:d2:11:57:30:96:86:ed:c8:15:91:bb:a6:84: 62:31:f6:2b:d6:ac:3d:ac:97:6d:84:23:ee:d6:95:90:0d:4b: 07:ca:d5:93:9d:7c:df:69:94:00:ee:2d:06:5c:4c:e2:52:7b: 99:42:a6:b4:cd:2b:3d:6c:a9:b0:01:d1:6f:f6:21:dc:96:69: ce:00:9e:3b:a9:3f:d4:90:0e:9a:a2:73:93:04:8c:96:cf:bb: a3:64:31:23:72:a1:d3:e6:a4:6e:99:0b:30:35:8a:55:c6:be: 8b:44:50:6e:79:b1:25:02:5f:28:5c:fb:90:13:13:57:8c:f0: b7:6e:0b:d1:90:33:f8:42:12:6a:f2:b6:5d:2d:84:9c:66:69: a0:ce:33:5b:c9:a7:0f:cf:fb:b3:39:e0:4d:d4:73:b5:d4:8a: 48:15:98:f6:29:d9:fd:c4:82:d7:a8:42:bf:b9:d3:bc:c9:28: 6b:ac:70:53:07:64:16:10:8a:48:2a:3b:bf:66:3a:a7:65:c9: 55:55:04:7a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFCNDgxMTAvBgNVBAUTKEE0RTY4Njc5RTY3QkE2MUEyN0Y0Rjg5QkQwOTJBRUU1 QzFGNzIxMzkwHhcNMjUwNzAxMDc0MzEzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzOTE5MS03ZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuz9bdesdmrG0QovqLKDFlnObuIRpdSZ0QsE69Dy9HxCMLC6tDuFiW8SEMoy6 hRt9u0YpUBpnZXIo9fyGW1GVv+JunEgo+IDKIv1F0jVYPzfId7mI8qOoaREV7vCf 6QKfFca/r8RZGt1NsaAvwtN8RabUBvvc51L1U33gzg/KoeIL7NrD/8yJHLpdLn84 EVB6nD/fa3UEvosPqM2pu89kc9YWDbmhlD+NSSMafsvbBWHphksLtcYUBKVvAQ8o UOJSC7vqk7wchjrqbFUw0OKQkhKYkSFp2xSpikoGNecl2HmrV7vrqL5GvYOjcO/a KdedAetW4jJ0DmU4kHXE2KgwwQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJbGa8Gt GMPmOE9x2oz4I5eBqRD9MB8GA1UdIwQYMBaAFKTmhnnme6YaJ/T4m9CSruXB9yE5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUI0OC82NkY1NzY0NDky NzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bob245UGliMEpLdTVjSDNJ VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPYUdlZVo3cGhvbjlQaWIwSkt1NWNIM0lUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTFCNDgvNjZGNTc2NDQ5Mjc0MTFFRkJGODY0QTNEQzRGOUFFMDIvRkIwM0I0MkM5 Mjc0MTFFRjg3MEU2NTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADLqwQwDwQCAAIwCQMHACABDfAC6jANBgkqhkiG9w0BAQsF AAOCAQEAOxHx+4kWTU2wFB4On6jOhplIkQ+KGYLO5bAbN9y6MVXAKnEsoayqN5tN w32uq9GJKdOBAGuQ531cNFLSEVcwlobtyBWRu6aEYjH2K9asPayXbYQj7taVkA1L B8rVk51832mUAO4tBlxM4lJ7mUKmtM0rPWypsAHRb/Yh3JZpzgCeO6k/1JAOmqJz kwSMls+7o2QxI3Kh0+akbpkLMDWKVca+i0RQbnmxJQJfKFz7kBMTV4zwt24L0ZAz +EISavK2XS2EnGZpoM4zW8mnD8/7szngTdRztdSKSBWY9inZ/cSC16hCv7nTvMko a6xwUwdkFhCKSCo7v2Y6p2XJVVUEeg== -----END CERTIFICATE-----Generated at Thu Jul 3 12:18:20 2025 by rpki-client