$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/804FEC802F6711EEB6EECA5BC4F9AE02.roa File: 804FEC802F6711EEB6EECA5BC4F9AE02.roa (raw, json) Hash identifier: XBdp98NfSrH2eLdNGkQsz15bbs9O8Colh/0iTNrP6Zs= Subject key identifier: 77:96:6E:65:4C:F7:6E:8A:97:21:28:E7:65:C3:6A:D3:54:25:87:46 Certificate issuer: /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Certificate serial: 019A Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/804FEC802F6711EEB6EECA5BC4F9AE02.roa Signing time: Sat 23 Aug 2025 04:09:11 +0000 ROA not before: Sat 23 Aug 2025 04:09:11 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 55933 IP address blocks: 103.245.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Validity Not Before: Aug 23 04:09:11 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a93ee7-5b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:89:fc:72:85:40:95:84:ec:3a:64:80:a3: 2b:c6:eb:c4:28:cc:45:9e:a3:25:7e:10:0f:b9:77: bf:8c:cd:60:43:4f:5c:5f:8f:3c:d1:3d:40:a4:d9: c2:61:c8:53:95:c4:c0:0b:5a:9a:11:72:28:fe:fb: 45:4b:68:25:d1:e3:cb:c6:21:0c:80:8c:75:fc:c3: 90:ef:c4:2c:65:9c:94:72:9e:ee:86:0b:0e:f3:89: 06:82:a2:5b:f4:24:fa:a9:3a:b2:d1:18:5b:f9:43: 3c:b0:60:bc:b6:95:94:41:40:78:ca:da:27:3b:ed: 5d:fe:05:15:b7:a8:0b:23:85:ce:72:3b:84:7e:b7: 43:51:72:ae:34:d7:6f:75:96:2c:80:e2:6f:a6:7a: 9f:e0:89:8d:1f:77:68:1d:dc:9a:7b:30:bd:1f:e3: 0c:da:0c:ce:46:78:77:13:4d:6a:d0:8b:a9:14:d2: e9:8e:fd:2f:8e:da:93:10:55:1b:01:75:12:81:9d: 95:2d:1c:27:06:de:cb:60:e1:52:9c:9b:15:7d:92: 1a:c7:51:1c:7c:0d:ec:37:33:f0:fc:fb:98:47:c2: 04:87:4a:75:ed:34:ec:54:fd:a8:1a:fb:0f:42:68: 31:aa:e5:1e:fe:5a:c9:53:d9:02:0a:f5:a1:1a:be: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:96:6E:65:4C:F7:6E:8A:97:21:28:E7:65:C3:6A:D3:54:25:87:46 X509v3 Authority Key Identifier: keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/804FEC802F6711EEB6EECA5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.245.24.0/23 Signature Algorithm: sha256WithRSAEncryption 21:fa:21:e1:65:cf:75:69:af:7f:27:4a:92:8e:38:84:74:c9: a7:d8:4a:e7:28:a9:8b:85:01:a3:b4:24:04:b3:ff:c0:ca:9a: 0c:2b:c3:f5:e1:9f:fd:33:52:82:1e:21:6b:c4:85:d4:e1:33: da:34:a7:ae:f1:6a:00:c7:13:ad:85:11:69:f7:2a:bb:1e:12: 94:7d:15:9f:78:a6:c6:23:59:df:1d:ab:b4:7d:59:96:f4:09: 9c:33:b8:fc:84:7c:f2:61:cb:e8:60:31:9b:38:20:0f:7f:bf: 2a:dc:9c:e0:46:03:f0:c3:7d:14:e7:29:d3:40:7d:53:45:be: 16:4f:67:eb:3b:74:f0:d7:43:ac:77:f7:2a:59:59:2f:49:e4: 51:ea:42:43:73:ed:42:26:53:c4:19:7b:34:bc:c9:3b:ae:8f: b6:31:12:02:dc:cc:b0:ec:4c:48:16:cb:a8:25:5a:eb:28:e4: 8b:01:b3:58:1e:18:45:ad:33:f8:10:6c:75:6e:da:7b:e1:50: 1a:85:8e:69:54:46:36:bc:a9:1c:47:7f:79:7d:c6:fa:6c:4e: 74:2e:f3:d5:df:f1:b3:ce:ea:fd:bd:e0:4a:d7:a0:aa:06:dd: 20:c5:d4:40:cb:d2:1d:07:d7:e6:a9:23:a1:5e:a9:37:bc:d8: 76:bc:77:9e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOTkxMTAvBgNVBAUTKEY5QUE2MzZCNUMzRTMwQzdBMEJBOTc0MzAxNUI1QjEy MTA0Q0I3QTgwHhcNMjUwODIzMDQwOTExWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE5M2VlNy01YjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2+J/HKFQJWE7DpkgKMrxuvEKMxFnqMlfhAPuXe/jM1gQ09cX4880T1ApNnC YchTlcTAC1qaEXIo/vtFS2gl0ePLxiEMgIx1/MOQ78QsZZyUcp7uhgsO84kGgqJb 9CT6qTqy0Rhb+UM8sGC8tpWUQUB4ytonO+1d/gUVt6gLI4XOcjuEfrdDUXKuNNdv dZYsgOJvpnqf4ImNH3doHdyaezC9H+MM2gzORnh3E01q0IupFNLpjv0vjtqTEFUb AXUSgZ2VLRwnBt7LYOFSnJsVfZIax1EcfA3sNzPw/PuYR8IEh0p17TTsVP2oGvsP QmgxquUe/lrJU9kCCvWhGr48sQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHeWbmVM 926KlyEo52XDatNUJYdGMB8GA1UdIwQYMBaAFPmqY2tcPjDHoLqXQwFbWxIQTLeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5OS8wMjIxRDdDRTJG NjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1NZWd1cGREQVZ0YkVoQk10 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1hcGphMXctTU1lZ3VwZERBVnRiRWhCTXQ2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwOTkvMDIyMUQ3Q0UyRjY3MTFFRTgyNEFEQzU5QzRGOUFFMDIvODA0RkVDODAy RjY3MTFFRUI2RUVDQTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn9RgwDQYJKoZIhvcNAQELBQADggEBACH6IeFlz3Vpr38n SpKOOIR0yafYSucoqYuFAaO0JASz/8DKmgwrw/Xhn/0zUoIeIWvEhdThM9o0p67x agDHE62FEWn3KrseEpR9FZ94psYjWd8dq7R9WZb0CZwzuPyEfPJhy+hgMZs4IA9/ vyrcnOBGA/DDfRTnKdNAfVNFvhZPZ+s7dPDXQ6x39ypZWS9J5FHqQkNz7UImU8QZ ezS8yTuuj7YxEgLczLDsTEgWy6glWuso5IsBs1geGEWtM/gQbHVu2nvhUBqFjmlU Rja8qRxHf3l9xvpsTnQu89Xf8bPO6v294ErXoKoG3SDF1EDL0h0H1+apI6FeqTe8 2Ha8d54= -----END CERTIFICATE-----Generated at Sat Aug 23 13:43:01 2025 by rpki-client