$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4C9159E069E211EFB237DF77C4F9AE02.roa File: 4C9159E069E211EFB237DF77C4F9AE02.roa (raw, json) Hash identifier: Cf0C/Xnxp4sIrTq3sUmvwx2bQH9lMfwG2xs2CwpC7AA= Subject key identifier: 45:F7:B8:6C:D9:88:0E:F2:65:A1:C5:C7:44:51:1D:5A:B5:B8:D6:A8 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 296E Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4C9159E069E211EFB237DF77C4F9AE02.roa Signing time: Tue 12 Aug 2025 07:11:58 +0000 ROA not before: Tue 12 Aug 2025 07:11:58 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 38547 IP address blocks: 103.151.27.0/24 maxlen: 24 115.167.72.0/24 maxlen: 24 115.167.74.0/24 maxlen: 24 115.167.75.0/24 maxlen: 24 202.92.16.0/24 maxlen: 24 202.92.17.0/24 maxlen: 24 202.92.18.0/24 maxlen: 24 202.92.19.0/24 maxlen: 24 202.92.23.0/24 maxlen: 24 202.92.24.0/24 maxlen: 24 202.92.24.32/27 maxlen: 27 202.92.25.0/24 maxlen: 24 202.92.27.0/24 maxlen: 24 202.92.28.0/24 maxlen: 24 202.92.29.0/24 maxlen: 24 202.92.30.0/24 maxlen: 24 202.92.31.0/24 maxlen: 24 2400:9560:1::/48 maxlen: 48 2400:9560:5::/48 maxlen: 48 2400:9560:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10606 (0x296e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Aug 12 07:11:58 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=689ae93e-75d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:10:e5:a8:bc:f0:8e:a6:9a:1c:88:a2:e5:45: b6:fd:f8:66:68:48:49:71:36:ca:c2:f2:46:c7:30: 8f:d3:27:37:b0:cd:61:48:58:e6:83:5a:c1:f8:21: 83:8a:2a:10:78:80:36:2e:47:81:2f:4e:41:73:a3: fd:a6:4b:87:08:9e:9b:b1:ff:48:db:a8:14:dd:96: a9:ff:dd:64:28:a5:49:cd:fa:bb:d2:ab:bc:cb:69: da:40:f7:7c:fc:72:99:3e:2e:01:9a:5d:fc:9c:11: 5f:e7:6c:ee:11:1b:1c:8e:36:7e:c5:f3:6e:d3:c4: 71:bc:2d:c9:ac:f2:9b:45:e5:90:99:71:82:a3:4f: ff:dd:21:27:c0:ee:ba:b4:e6:b5:93:13:26:76:31: 7c:b1:8d:24:b7:1c:0b:ab:e7:9d:c8:42:62:b0:ab: 88:9d:f3:b3:bc:fd:e7:19:60:2f:ca:15:87:24:3f: 2f:a7:ee:70:1e:94:7f:68:f3:b6:8c:b6:8a:3e:6f: 77:75:6c:99:6d:dd:43:24:05:04:71:ff:fb:4d:50: f7:f4:90:23:d1:21:3a:9a:bd:e0:8b:a7:c8:81:d2: f5:c5:c5:0f:b2:7a:6b:63:01:8f:fb:d7:45:51:78: 31:b4:24:77:9b:f9:d5:4a:8a:65:ba:98:f4:7b:03: 01:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F7:B8:6C:D9:88:0E:F2:65:A1:C5:C7:44:51:1D:5A:B5:B8:D6:A8 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4C9159E069E211EFB237DF77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.27.0/24 115.167.72.0/24 115.167.74.0/23 202.92.16.0/22 202.92.23.0-202.92.25.255 202.92.27.0-202.92.31.255 IPv6: 2400:9560:1::/48 2400:9560:5::/48 2400:9560:9::/48 Signature Algorithm: sha256WithRSAEncryption 13:c3:49:1c:63:95:54:57:70:ba:0d:ca:c7:e4:90:40:9a:85: ea:bd:88:ef:05:1b:2f:39:1a:a2:b9:fd:68:3b:67:f3:fd:04: 77:2a:8d:23:9c:24:4e:48:db:30:4f:8b:92:d2:45:2c:87:23: 6c:cc:09:12:ef:94:54:db:e8:2d:a2:cb:ae:ee:91:37:71:cc: c5:ae:c1:36:c7:9c:57:98:8c:cf:03:52:32:6a:29:58:ea:37: b5:8e:5c:a4:8b:fa:32:79:8a:9a:16:cc:6f:4d:ff:cc:a4:bb: 47:2a:0d:bc:00:2b:0a:d3:3e:e9:e1:51:8d:c1:6d:c8:10:89: 3e:02:6d:7b:fb:8b:6d:80:84:c9:00:09:be:cd:54:40:8f:2f: d4:b7:5c:ee:4b:9a:84:dd:24:eb:d1:d1:61:e8:bb:1c:a0:cf: f8:87:9c:1a:3c:fb:4d:e4:fe:15:37:ee:0e:89:a4:2f:4c:e5: 7d:ba:bc:2b:31:b4:81:63:81:c3:97:44:88:d6:0c:92:69:90: 19:53:2f:70:6e:c1:78:9f:bf:1b:4f:a6:03:a4:ba:0c:f8:04: 03:af:23:b5:c8:41:a7:e7:d5:c4:88:65:8a:b6:e0:6b:04:9d: cc:44:51:76:ea:14:ce:55:ca:dd:28:38:39:b4:1b:3f:49:7a: cf:57:3e:a1 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgICKW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjUwODEyMDcxMTU4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODlhZTkzZS03NWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxDlqLzwjqaaHIii5UW2/fhmaEhJcTbKwvJGxzCP0yc3sM1hSFjmg1rB+CGD iioQeIA2LkeBL05Bc6P9pkuHCJ6bsf9I26gU3Zap/91kKKVJzfq70qu8y2naQPd8 /HKZPi4Bml38nBFf52zuERscjjZ+xfNu08RxvC3JrPKbReWQmXGCo0//3SEnwO66 tOa1kxMmdjF8sY0ktxwLq+edyEJisKuInfOzvP3nGWAvyhWHJD8vp+5wHpR/aPO2 jLaKPm93dWyZbd1DJAUEcf/7TVD39JAj0SE6mr3gi6fIgdL1xcUPsnprYwGP+9dF UXgxtCR3m/nVSoplupj0ewMBgwIDAQABo4IC5jCCAuIwHQYDVR0OBBYEFEX3uGzZ iA7yZaHFx0RRHVq1uNaoMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNEM5MTU5RTA2 OUUyMTFFRkIyMzdERjc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwcAYIKwYBBQUHAQcBAf8E YTBfMDoEAgABMDQDBABnlxsDBABzp0gDBAFzp0oDBALKXBAwDAMEAMpcFwMEAcpc GDAMAwQAylwbAwQFylwAMCEEAgACMBsDBwAkAJVgAAEDBwAkAJVgAAUDBwAkAJVg AAkwDQYJKoZIhvcNAQELBQADggEBABPDSRxjlVRXcLoNysfkkECaheq9iO8FGy85 GqK5/Wg7Z/P9BHcqjSOcJE5I2zBPi5LSRSyHI2zMCRLvlFTb6C2iy67ukTdxzMWu wTbHnFeYjM8DUjJqKVjqN7WOXKSL+jJ5ipoWzG9N/8yku0cqDbwAKwrTPunhUY3B bcgQiT4CbXv7i22AhMkACb7NVECPL9S3XO5LmoTdJOvR0WHouxygz/iHnBo8+03k /hU37g6JpC9M5X26vCsxtIFjgcOXRIjWDJJpkBlTL3BuwXifvxtPpgOkugz4BAOv I7XIQafn1cSIZYq24GsEncxEUXbqFM5Vyt0oODm0Gz9Jes9XPqE= -----END CERTIFICATE-----Generated at Sat Aug 23 17:02:42 2025 by rpki-client