$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/89BDDA4A2F6F11EEB73F3231C4F9AE02.roa File: 89BDDA4A2F6F11EEB73F3231C4F9AE02.roa (raw, json) Hash identifier: uENUjiP+2EB12uAPnRJ5SygdKhfwJZNgp1BeowbLRj4= Subject key identifier: C0:9A:79:DB:6B:37:4D:80:AA:4C:98:B4:05:89:D7:5C:A9:88:29:4F Certificate issuer: /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Certificate serial: 0199 Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/89BDDA4A2F6F11EEB73F3231C4F9AE02.roa Signing time: Sat 23 Aug 2025 04:09:10 +0000 ROA not before: Sat 23 Aug 2025 04:09:10 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151640 IP address blocks: 103.245.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8 Validity Not Before: Aug 23 04:09:10 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a93ee6-95e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e2:da:f4:6e:b1:8c:02:e5:04:46:75:fa:73: 5c:57:ce:81:e6:f0:cd:56:18:e9:b0:ca:67:de:02: 60:19:82:5b:d0:0f:6a:87:54:df:90:ab:d4:5f:5a: e1:ff:8d:a0:72:7a:3b:9a:3e:e6:1f:9c:9c:51:35: 82:68:12:3a:5a:8a:b9:80:1a:23:98:fc:74:bd:54: d8:a7:c8:19:e4:33:a0:3c:00:6b:5e:bc:56:60:86: c6:79:55:11:e4:8e:67:a1:f0:f8:e3:ff:f6:9c:7d: 53:c4:fe:d7:3b:f5:a3:ea:f4:42:ba:a3:33:0a:b9: 38:12:78:ee:e6:ab:d9:91:ae:9d:fa:89:72:40:9a: 1b:0d:fb:84:19:18:2e:db:dd:de:1e:e0:53:db:cd: 08:8a:56:ba:dc:08:58:25:02:a0:39:5e:0a:b3:2d: e6:9e:e3:8b:e2:c1:52:2d:c6:e7:b0:29:ac:7b:e0: 7a:9a:e9:33:d7:10:a5:d7:2f:cf:ce:db:45:9f:a8: 54:26:94:fd:de:f6:f6:dc:27:38:de:89:d3:34:ef: 16:12:a8:c3:95:7c:30:ce:78:54:95:ab:e1:61:cf: 43:cc:d4:f7:fc:57:72:61:aa:86:8d:dd:d6:dc:b6: 92:c8:d8:58:83:b8:74:5e:d6:e7:9f:5b:7c:24:84: 8f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9A:79:DB:6B:37:4D:80:AA:4C:98:B4:05:89:D7:5C:A9:88:29:4F X509v3 Authority Key Identifier: keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/89BDDA4A2F6F11EEB73F3231C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.245.24.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:fa:63:c1:e0:ad:7c:b8:ae:b4:76:bb:56:76:06:b5:53:b5: 42:47:2f:e4:33:77:74:c7:92:29:32:fa:eb:8f:72:dc:2c:65: 9b:b6:c8:38:3f:93:e3:5c:aa:1a:5d:70:fd:f5:b5:ba:ac:4a: de:3c:92:5a:14:13:55:e9:2f:5f:68:90:0c:8e:a7:5e:f4:51: dc:3a:1d:29:26:2e:fe:66:ea:dd:73:1b:5e:fd:47:89:20:fe: 76:56:73:85:7e:28:3d:c7:0a:5f:52:f6:d1:e3:3c:36:ab:fa: 28:ed:58:56:09:1f:fe:5b:23:3f:63:d6:c7:28:0b:02:f4:7b: aa:90:7e:ea:e2:12:ef:bc:cd:f0:0a:15:79:4a:f5:2c:20:d2: c0:40:75:2f:d8:46:21:35:a4:cb:3b:94:b4:76:8f:e6:86:cd: a4:66:d3:76:66:ad:75:2c:e5:6e:fe:5a:c7:fd:e8:92:1e:e8: 21:85:b5:a2:5e:63:07:1f:de:13:16:11:08:ae:8e:95:fb:4b: d3:1d:35:0e:29:cb:bb:20:30:a1:c4:82:ca:83:2a:74:ab:01: 02:c7:f0:63:4c:e6:0b:61:72:11:f3:6b:e7:58:db:9f:00:ca: 1c:c1:85:d5:94:42:d3:1b:83:3a:d7:5e:22:73:e3:ca:ed:8d: e8:b5:c2:65 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOTkxMTAvBgNVBAUTKEY5QUE2MzZCNUMzRTMwQzdBMEJBOTc0MzAxNUI1QjEy MTA0Q0I3QTgwHhcNMjUwODIzMDQwOTEwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE5M2VlNi05NWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOLa9G6xjALlBEZ1+nNcV86B5vDNVhjpsMpn3gJgGYJb0A9qh1TfkKvUX1rh /42gcno7mj7mH5ycUTWCaBI6Woq5gBojmPx0vVTYp8gZ5DOgPABrXrxWYIbGeVUR 5I5nofD44//2nH1TxP7XO/Wj6vRCuqMzCrk4Enju5qvZka6d+olyQJobDfuEGRgu 293eHuBT280Iila63AhYJQKgOV4Ksy3mnuOL4sFSLcbnsCmse+B6mukz1xCl1y/P zttFn6hUJpT93vb23Cc43onTNO8WEqjDlXwwznhUlavhYc9DzNT3/FdyYaqGjd3W 3LaSyNhYg7h0Xtbnn1t8JISP6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMCaedtr N02AqkyYtAWJ11ypiClPMB8GA1UdIwQYMBaAFPmqY2tcPjDHoLqXQwFbWxIQTLeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5OS8wMjIxRDdDRTJG NjcxMUVFODI0QURDNTlDNEY5QUUwMi8tYXBqYTF3LU1NZWd1cGREQVZ0YkVoQk10 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1hcGphMXctTU1lZ3VwZERBVnRiRWhCTXQ2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUwOTkvMDIyMUQ3Q0UyRjY3MTFFRTgyNEFEQzU5QzRGOUFFMDIvODlCRERBNEEy RjZGMTFFRUI3M0YzMjMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn9RgwDQYJKoZIhvcNAQELBQADggEBAAv6Y8HgrXy4rrR2 u1Z2BrVTtUJHL+Qzd3THkiky+uuPctwsZZu2yDg/k+NcqhpdcP31tbqsSt48kloU E1XpL19okAyOp170Udw6HSkmLv5m6t1zG179R4kg/nZWc4V+KD3HCl9S9tHjPDar +ijtWFYJH/5bIz9j1scoCwL0e6qQfuriEu+8zfAKFXlK9Swg0sBAdS/YRiE1pMs7 lLR2j+aGzaRm03ZmrXUs5W7+Wsf96JIe6CGFtaJeYwcf3hMWEQiujpX7S9MdNQ4p y7sgMKHEgsqDKnSrAQLH8GNM5gthchHza+dY258AyhzBhdWUQtMbgzrXXiJz48rt jei1wmU= -----END CERTIFICATE-----Generated at Sat Aug 23 22:34:52 2025 by rpki-client