$ rpki-client -vvf rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/39397B6C69BE11EFA850E254C4F9AE02.roa File: 39397B6C69BE11EFA850E254C4F9AE02.roa (raw, json) Hash identifier: GHWxrMyj8cTLBR3x3Zxqpb0ny9iM0klScYyqOL/kuUM= Subject key identifier: C4:30:6F:58:74:7D:29:BD:D3:61:8A:B7:6F:A6:16:FF:79:D7:06:4C Certificate issuer: /CN=A91279C4/serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Certificate serial: 05AA Authority key identifier: 26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/39397B6C69BE11EFA850E254C4F9AE02.roa Signing time: Fri 11 Jul 2025 00:05:55 +0000 ROA not before: Fri 11 Jul 2025 00:05:54 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 131341 IP address blocks: 103.69.124.0/22 maxlen: 22 103.69.124.0/23 maxlen: 24 103.69.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1450 (0x5aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91279C4, serialNumber=26EF6C79BB0FEB84DAFCEB740F396E573CFBF4DF Validity Not Before: Jul 11 00:05:54 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68705562-37ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:67:89:d3:28:08:47:11:63:e7:3f:8b:9e:16: 6a:4c:54:95:88:87:63:a0:c6:f9:19:c9:14:71:0c: e9:2b:61:a6:61:be:44:3d:b6:09:93:6e:84:e8:8b: 83:f0:a2:f6:c4:9e:a8:5b:a4:97:f2:28:41:c9:1d: 79:b7:a1:e2:28:74:50:bf:12:49:29:6f:be:21:0d: 78:d4:eb:d9:1e:f5:53:a8:11:af:af:7a:3d:2d:f7: 0c:ab:b8:10:31:82:5a:f8:23:f3:68:ea:0e:c5:ee: 18:49:07:b8:a7:6e:bf:9a:28:8b:97:72:ce:36:2c: 41:db:1a:7c:88:8b:46:8b:3d:4c:52:14:3c:e6:6d: 1f:93:ee:ca:e1:30:58:0a:da:73:7d:85:55:3e:ef: e1:9d:be:ed:4a:81:75:61:eb:3f:81:46:06:0c:1b: 28:2e:59:7f:92:45:54:46:20:cc:62:7f:cc:33:23: 2f:4a:5d:9f:bc:d5:b4:9e:36:e6:b2:42:4d:3e:53: ac:1a:1e:e0:2d:c0:e0:79:d7:cc:0d:af:56:95:ea: 85:90:f0:31:51:2a:d8:9c:8b:20:c9:e5:ed:53:fe: 84:8e:a0:02:10:02:1b:11:89:d3:e4:7f:44:4c:71: a0:b8:2b:97:0e:6f:65:37:77:73:94:32:8d:0b:e4: 43:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:30:6F:58:74:7D:29:BD:D3:61:8A:B7:6F:A6:16:FF:79:D7:06:4C X509v3 Authority Key Identifier: keyid:26:EF:6C:79:BB:0F:EB:84:DA:FC:EB:74:0F:39:6E:57:3C:FB:F4:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/Ju9sebsP64Ta_Ot0DzluVzz79N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ju9sebsP64Ta_Ot0DzluVzz79N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91279C4/8B89A42AD8C411EBBBD9AE7DC4F9AE02/39397B6C69BE11EFA850E254C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.69.124.0/22 Signature Algorithm: sha256WithRSAEncryption ca:b7:90:5b:d3:d0:36:d6:d1:a8:77:9a:73:96:e9:9e:c7:2a: 7e:5c:a1:c0:7b:97:35:7c:ac:10:18:00:7c:13:f6:15:c7:c5: 18:a5:b7:79:f1:f2:66:3e:ce:e8:55:90:a6:2c:18:8a:9e:9b: 43:86:1e:93:6e:41:35:65:ea:fa:1c:b2:92:3f:e2:c4:bd:12: 43:bb:54:bd:40:6e:db:a9:52:19:98:e1:f0:40:96:e7:ef:b9: 31:91:2e:d7:b5:75:ed:c6:0e:6f:df:09:19:97:6c:07:14:bc: 27:b9:8f:26:7e:f4:8a:3a:0d:dd:5b:be:96:a9:a3:37:27:eb: 63:46:9c:26:30:98:3f:51:c4:58:f1:d4:86:1a:26:78:a5:88: d7:db:bd:cc:21:e2:c5:b0:16:e1:2b:4e:2a:3f:c1:e3:6e:88: bf:f9:4b:2b:17:37:b9:1c:c4:4b:60:1d:fa:4a:50:48:33:c6: e0:d2:52:e8:7e:35:c4:1e:7d:3f:b2:18:ed:9e:57:1e:4c:30: 31:7a:c3:61:8d:0e:e8:20:35:48:46:b8:6c:09:c7:00:f2:6e: 86:13:14:fb:e5:f4:57:06:d7:9f:22:27:31:c6:74:55:c5:2e: 3a:0b:25:34:2b:ee:ba:01:3d:58:6e:b6:df:bf:f3:4c:a8:a8: d2:38:9c:4b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc5QzQxMTAvBgNVBAUTKDI2RUY2Qzc5QkIwRkVCODREQUZDRUI3NDBGMzk2RTU3 M0NGQkY0REYwHhcNMjUwNzExMDAwNTU0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcwNTU2Mi0zN2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAomeJ0ygIRxFj5z+LnhZqTFSViIdjoMb5GckUcQzpK2GmYb5EPbYJk26E6IuD 8KL2xJ6oW6SX8ihByR15t6HiKHRQvxJJKW++IQ141OvZHvVTqBGvr3o9LfcMq7gQ MYJa+CPzaOoOxe4YSQe4p26/miiLl3LONixB2xp8iItGiz1MUhQ85m0fk+7K4TBY CtpzfYVVPu/hnb7tSoF1Yes/gUYGDBsoLll/kkVURiDMYn/MMyMvSl2fvNW0njbm skJNPlOsGh7gLcDgedfMDa9WleqFkPAxUSrYnIsgyeXtU/6EjqACEAIbEYnT5H9E THGguCuXDm9lN3dzlDKNC+RDjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMQwb1h0 fSm902GKt2+mFv951wZMMB8GA1UdIwQYMBaAFCbvbHm7D+uE2vzrdA85blc8+/Tf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzlDNC84Qjg5QTQyQUQ4 QzQxMUVCQkJEOUFFN0RDNEY5QUUwMi9KdTlzZWJzUDY0VGFfT3QwRHpsdVZ6ejc5 TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p1OXNlYnNQNjRUYV9PdDBEemx1Vnp6NzlOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjc5QzQvOEI4OUE0MkFEOEM0MTFFQkJCRDlBRTdEQzRGOUFFMDIvMzkzOTdCNkM2 OUJFMTFFRkE4NTBFMjU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnRXwwDQYJKoZIhvcNAQELBQADggEBAMq3kFvT0DbW0ah3 mnOW6Z7HKn5cocB7lzV8rBAYAHwT9hXHxRilt3nx8mY+zuhVkKYsGIqem0OGHpNu QTVl6vocspI/4sS9EkO7VL1AbtupUhmY4fBAlufvuTGRLte1de3GDm/fCRmXbAcU vCe5jyZ+9Io6Dd1bvpapozcn62NGnCYwmD9RxFjx1IYaJniliNfbvcwh4sWwFuEr Tio/weNuiL/5SysXN7kcxEtgHfpKUEgzxuDSUuh+NcQefT+yGO2eVx5MMDF6w2GN DuggNUhGuGwJxwDyboYTFPvl9FcG158iJzHGdFXFLjoLJTQr7roBPVhutt+/80yo qNI4nEs= -----END CERTIFICATE-----Generated at Sun Jul 20 07:56:48 2025 by rpki-client