$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/2694EA4C3A5011F0B1C5451DC4F9AE02.roa File: 2694EA4C3A5011F0B1C5451DC4F9AE02.roa (raw, json) Hash identifier: dsbkNjB8r9NS6dycnX8NYGX8V7f1CmLJzm5qZaFGorQ= Subject key identifier: 46:08:AF:D8:99:10:63:E6:74:2E:66:1A:55:46:29:C6:92:AB:4D:6E Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 2217 Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/2694EA4C3A5011F0B1C5451DC4F9AE02.roa Signing time: Sat 21 Jun 2025 11:12:52 +0000 ROA not before: Sat 21 Jun 2025 11:12:52 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 834 IP address blocks: 103.111.88.0/24 maxlen: 24 103.111.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8727 (0x2217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Jun 21 11:12:52 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=685693b4-bbe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:41:2b:7f:5e:f5:8a:06:56:48:b2:5c:51: 82:46:1c:ed:ac:62:0f:d4:62:af:53:5e:7b:da:c3: a7:98:0a:26:e7:64:a5:b5:1a:22:d7:7e:bc:7d:70: 95:c5:cf:9e:08:48:1c:9c:d7:11:f5:12:64:b6:3d: 5c:7a:86:79:d5:8c:3a:b9:93:d0:49:e8:73:17:3a: 5d:9b:a6:c8:71:ad:0a:c1:3b:30:b0:83:83:6a:b3: df:08:b0:32:6d:4c:0e:93:c3:a2:d9:75:c2:f3:dc: 79:45:ff:0c:05:c2:b7:9f:b2:c6:bf:50:59:d0:db: 3b:40:8c:39:cf:e8:ef:c6:fb:dc:12:91:f0:3c:0f: 02:df:67:df:55:0d:1b:9e:c5:7b:73:79:64:6e:10: 97:66:e0:b3:7d:a7:8a:15:d0:a8:e9:0e:57:c0:da: 7d:4a:0b:81:4b:42:1e:a6:d3:2f:f4:62:c3:79:4c: 2d:ae:23:88:d4:d6:20:46:5c:dd:b0:64:52:cb:0f: eb:94:e3:a4:be:39:21:36:c8:04:3c:3f:e3:00:35: 7d:18:bc:44:2c:71:b8:8e:46:81:6c:0e:71:8f:4c: 37:63:ec:aa:07:55:a0:4f:a3:5b:84:e1:41:dc:50: 0d:00:26:60:90:b7:1a:fd:2e:51:69:fe:a9:c6:86: 22:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:08:AF:D8:99:10:63:E6:74:2E:66:1A:55:46:29:C6:92:AB:4D:6E X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/2694EA4C3A5011F0B1C5451DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.88.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:29:2d:7f:09:a0:dc:03:39:4f:fa:ee:40:35:d5:6e:ff:14: 18:20:05:2b:6b:6b:b3:bb:1b:c3:53:23:f5:48:15:4b:e0:c1: cb:57:25:cf:0d:12:91:5e:7c:30:ac:ce:d5:4f:91:4f:ab:3d: b8:b2:4a:c0:ad:22:f0:dc:6a:bb:cf:fc:1b:b4:89:85:cc:b6: 17:31:e0:b1:7d:f9:71:e6:2c:50:13:b5:7d:d8:cb:46:e7:06: bf:a4:18:d2:c7:5f:a1:a6:34:20:d1:ae:1e:24:3a:e0:8b:62: b2:0f:51:5f:06:e7:ad:cf:e0:72:22:94:4b:f8:85:b6:eb:15: d7:0f:26:3b:6b:74:0c:1c:db:60:97:d6:a1:97:b2:ee:2c:49: a8:55:eb:13:bb:a8:44:79:f5:44:11:b6:ea:03:34:33:30:71: a5:56:58:c7:20:8b:3e:e9:11:fe:87:d6:ac:63:d3:95:4a:d5: c4:84:9d:21:fb:09:95:f3:a0:03:14:29:6e:8b:4c:1a:1f:d2: c2:f1:d2:e8:4f:d2:0b:ed:dc:b9:ea:64:fc:d3:51:3b:ff:29: b8:ee:b9:c1:0f:89:84:ab:cb:3f:7f:5f:d5:a3:81:bc:11:5d: 3d:ce:a0:89:eb:4c:c9:c5:e8:fc:16:9c:a4:9a:44:da:f3:a9: fa:cd:47:1a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjUwNjIxMTExMjUyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU2OTNiNC1iYmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeNBK39e9YoGVkiyXFGCRhztrGIP1GKvU1572sOnmAom52SltRoi1368fXCV xc+eCEgcnNcR9RJktj1ceoZ51Yw6uZPQSehzFzpdm6bIca0KwTswsIODarPfCLAy bUwOk8Oi2XXC89x5Rf8MBcK3n7LGv1BZ0Ns7QIw5z+jvxvvcEpHwPA8C32ffVQ0b nsV7c3lkbhCXZuCzfaeKFdCo6Q5XwNp9SguBS0IeptMv9GLDeUwtriOI1NYgRlzd sGRSyw/rlOOkvjkhNsgEPD/jADV9GLxELHG4jkaBbA5xj0w3Y+yqB1WgT6NbhOFB 3FANACZgkLca/S5Raf6pxoYiiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEYIr9iZ EGPmdC5mGlVGKcaSq01uMB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ4NDUvNDAwMTUzQjZEMkVCMTFFNUI0RDE1QTRFQzRGOUFFMDIvMjY5NEVBNEMz QTUwMTFGMEIxQzU0NTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnb1gwDQYJKoZIhvcNAQELBQADggEBAG0pLX8JoNwDOU/6 7kA11W7/FBggBStra7O7G8NTI/VIFUvgwctXJc8NEpFefDCsztVPkU+rPbiySsCt IvDcarvP/Bu0iYXMthcx4LF9+XHmLFATtX3Yy0bnBr+kGNLHX6GmNCDRrh4kOuCL YrIPUV8G563P4HIilEv4hbbrFdcPJjtrdAwc22CX1qGXsu4sSahV6xO7qER59UQR tuoDNDMwcaVWWMcgiz7pEf6H1qxj05VK1cSEnSH7CZXzoAMUKW6LTBof0sLx0uhP 0gvt3LnqZPzTUTv/KbjuucEPiYSryz9/X9WjgbwRXT3OoInrTMnF6PwWnKSaRNrz qfrNRxo= -----END CERTIFICATE-----Generated at Thu Jul 3 18:07:18 2025 by rpki-client