$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/5A65F048F19211EFA4D9CD34C4F9AE02.roa File: 5A65F048F19211EFA4D9CD34C4F9AE02.roa (raw, json) Hash identifier: Eq9RfRmXNQJ0DpOxPprX1uYytoSWsaD6FPPswPb3mMc= Subject key identifier: 27:82:BF:0A:DD:1B:ED:66:DE:68:41:07:12:EC:03:2B:87:68:7D:71 Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Certificate serial: F3 Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/5A65F048F19211EFA4D9CD34C4F9AE02.roa Signing time: Tue 01 Jul 2025 06:12:00 +0000 ROA not before: Tue 01 Jul 2025 06:12:00 +0000 ROA not after: Thu 30 Oct 2025 00:00:00 +0000 asID: 133766 IP address blocks: 103.40.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC Validity Not Before: Jul 1 06:12:00 2025 GMT Not After : Oct 30 00:00:00 2025 GMT Subject: CN=68637c30-575b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:13:16:db:6a:00:85:a3:ee:64:28:0d:c5:1d: 01:03:d4:3f:d5:81:4a:04:b6:e0:84:48:1e:b2:fd: 70:45:a6:a1:83:4a:aa:46:39:bc:20:cc:fa:4e:ed: 47:8a:bc:f0:e2:64:77:b9:41:2b:7d:81:4d:01:3d: 25:c0:64:f2:d0:30:79:a3:5e:db:22:02:89:25:0c: af:94:54:e6:bb:54:6f:ab:35:61:cf:4a:63:fd:48: d5:76:fe:10:5e:f2:e7:8f:0f:19:5e:89:eb:c5:d4: 8b:1a:5d:83:74:9e:93:63:73:f0:77:99:a2:c2:54: 9c:ca:2a:e1:d6:c8:84:c1:a0:ee:51:ed:ee:97:9d: fa:3c:77:8f:2c:a2:de:1c:df:7f:1a:5a:60:72:08: 87:2d:eb:7e:a1:58:4e:0e:96:7e:c9:99:f1:63:98: d5:72:9d:94:a2:5d:f7:75:fc:f5:f8:13:64:e6:db: 07:5e:a9:d9:dd:4f:97:f2:16:58:01:2e:4c:83:94: 83:49:36:10:83:2c:bb:8b:93:ca:2d:e0:6f:b1:cb: 44:59:88:6a:03:a4:2b:51:2b:7d:d6:77:5d:7b:fc: bd:10:8b:5c:e6:45:9a:bb:5f:bf:cd:92:df:0b:1c: 71:2e:57:ae:78:85:c9:21:d1:8e:b5:33:7f:44:2a: 86:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:82:BF:0A:DD:1B:ED:66:DE:68:41:07:12:EC:03:2B:87:68:7D:71 X509v3 Authority Key Identifier: keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/5A65F048F19211EFA4D9CD34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.166.0/24 Signature Algorithm: sha256WithRSAEncryption 14:0c:3e:a5:d6:d2:a7:b1:9c:a6:b4:4e:8c:5b:b0:d2:00:1e: f8:fc:d5:94:e1:24:2c:5c:59:44:ee:6a:63:46:7f:3b:da:c8: fc:79:e4:a5:9c:f6:0d:ec:46:45:30:77:cc:9f:68:ea:c4:1d: b4:83:2f:5e:4e:df:f0:d0:bc:b7:bd:cc:43:30:11:ba:f7:e4: 73:e8:80:c0:da:8a:a6:a7:e0:87:92:40:45:5a:b0:73:4f:2c: 84:8e:f3:50:2d:91:d9:22:d8:28:ea:d1:94:0c:c8:ca:f5:01: 7e:46:ec:d5:5c:42:f5:ca:47:ba:f0:3a:a9:1a:95:09:6b:b5: f4:80:9f:cd:80:a6:9c:dd:72:75:87:40:0a:37:98:43:e8:22: f8:81:36:5d:bf:f7:77:30:0a:db:92:e0:73:92:b9:07:21:f1: f6:63:fa:24:2b:35:be:47:ca:fa:ac:8d:67:e0:eb:1c:7e:1e: ee:d8:bd:11:11:dc:76:ea:d8:6f:ca:a0:d2:cf:62:bc:dc:3b: 16:65:c7:5d:f9:80:7a:58:df:d8:d6:38:d3:a1:56:03:76:2a: 57:37:54:65:af:90:56:df:7d:50:48:ee:d4:99:ad:b0:0e:b5: 90:83:cf:5e:18:d8:54:5f:83:5a:dc:62:fe:44:81:3e:c7:10: 71:d6:33:ec -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIwMDIxMTAvBgNVBAUTKDlFRjNFNjA0QTYzRjJDRUY0QkRERTM3RENBODkwRDA0 NTE5NjdBRUMwHhcNMjUwNzAxMDYxMjAwWhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzN2MzMC01NzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9BMW22oAhaPuZCgNxR0BA9Q/1YFKBLbghEgesv1wRaahg0qqRjm8IMz6Tu1H irzw4mR3uUErfYFNAT0lwGTy0DB5o17bIgKJJQyvlFTmu1RvqzVhz0pj/UjVdv4Q XvLnjw8ZXonrxdSLGl2DdJ6TY3Pwd5miwlScyirh1siEwaDuUe3ul536PHePLKLe HN9/GlpgcgiHLet+oVhODpZ+yZnxY5jVcp2Uol33dfz1+BNk5tsHXqnZ3U+X8hZY AS5Mg5SDSTYQgyy7i5PKLeBvsctEWYhqA6QrUSt91ndde/y9EItc5kWau1+/zZLf CxxxLleueIXJIdGOtTN/RCqGHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCeCvwrd G+1m3mhBBxLsAyuHaH1xMB8GA1UdIwQYMBaAFJ7z5gSmPyzvS93jfcqJDQRRlnrs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjAwMi9FMjRGODIzNDAy MkUxMUVGODU2RjUxMzJDNEY5QUUwMi9udlBtQktZX0xPOUwzZU45eW9rTkJGR1dl dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL252UG1CS1lfTE85TDNlTjl5b2tOQkZHV2V1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUIwMDIvRTI0RjgyMzQwMjJFMTFFRjg1NkY1MTMyQzRGOUFFMDIvNUE2NUYwNDhG MTkyMTFFRkE0RDlDRDM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnKKYwDQYJKoZIhvcNAQELBQADggEBABQMPqXW0qexnKa0 ToxbsNIAHvj81ZThJCxcWUTuamNGfzvayPx55KWc9g3sRkUwd8yfaOrEHbSDL15O 3/DQvLe9zEMwEbr35HPogMDaiqan4IeSQEVasHNPLISO81Atkdki2Cjq0ZQMyMr1 AX5G7NVcQvXKR7rwOqkalQlrtfSAn82AppzdcnWHQAo3mEPoIviBNl2/93cwCtuS 4HOSuQch8fZj+iQrNb5HyvqsjWfg6xx+Hu7YvRER3Hbq2G/KoNLPYrzcOxZlx135 gHpY39jWONOhVgN2Klc3VGWvkFbffVBI7tSZrbAOtZCDz14Y2FRfg1rcYv5EgT7H EHHWM+w= -----END CERTIFICATE-----Generated at Thu Jul 3 10:03:21 2025 by rpki-client