$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa File: 7338235CC06011EE882BC34AC4F9AE02.roa (raw, json) Hash identifier: 8U3x6H5bY+5B5oCv6vYfZszgq6gpJHZUkBbn2fzX+3M= Subject key identifier: 12:3F:F5:9B:6B:63:65:27:F1:E8:A6:B7:01:2B:7C:DC:E2:40:64:65 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 152B Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa Signing time: Sat 12 Jul 2025 16:55:43 +0000 ROA not before: Sat 12 Jul 2025 16:55:43 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 135106 IP address blocks: 103.209.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5419 (0x152b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Jul 12 16:55:43 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6872938f-6943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:68:19:b1:54:bf:61:ad:fa:60:4d:f2:73: 0e:19:55:71:d6:62:d8:a1:3e:54:7e:14:c8:49:4c: 4b:79:31:19:b9:61:59:df:f9:44:c8:3f:d2:18:02: 92:42:19:17:3b:d3:ce:34:14:1a:e4:44:21:8d:24: 53:90:f2:2f:1a:91:bb:d0:f6:fc:9a:ca:89:82:9f: 24:b8:b2:60:b8:6f:60:1e:7f:7a:fc:dc:a1:6e:29: e5:98:1d:b4:a7:80:c5:df:67:58:5f:8e:60:73:a8: 51:67:4c:bd:78:40:d4:c8:a3:48:08:43:70:d4:dc: b7:30:68:4e:fc:b3:95:4b:5d:5c:8b:97:9b:0c:49: f1:6e:b9:58:97:e5:f1:d1:21:37:90:bd:2b:39:5f: 19:01:a2:71:1a:ba:31:7d:e2:7b:c3:51:21:0c:08: fb:b8:d2:8d:dd:fe:69:77:9c:e3:06:05:f9:6b:5c: 34:62:42:0a:3e:7a:9f:9b:34:f4:2c:ae:b4:f9:3d: 2b:59:8b:52:4c:68:cf:c7:b5:6c:09:d5:87:ec:72: 1e:88:19:de:86:e4:e0:b8:fe:39:03:6e:02:ab:01: 7d:7c:3d:6f:75:7c:79:7e:ce:99:e8:40:41:e1:28: 16:0f:68:7c:5b:d5:67:5e:24:a6:06:b6:b4:09:32: 9a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3F:F5:9B:6B:63:65:27:F1:E8:A6:B7:01:2B:7C:DC:E2:40:64:65 X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.124.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:7f:e1:d6:41:db:82:83:99:77:a6:d1:94:fb:e9:41:e1:5d: a3:e0:84:4c:74:36:0d:ab:a3:c8:32:76:7d:e1:53:24:0d:2c: 4a:ce:55:5d:d4:be:9a:ea:31:49:25:5e:a3:9e:b5:26:be:74: 54:b1:b9:6d:03:1d:ac:55:29:80:4a:5b:b7:dd:23:45:fd:7b: be:10:13:f7:a0:e0:b8:30:b2:fd:e1:c7:ed:ba:63:95:14:c0: 2a:9c:4a:f1:a9:e0:29:c1:ff:85:75:e3:73:da:e5:f6:c4:f0: 10:c3:73:9e:c7:99:50:04:e9:25:06:3b:77:6e:1f:66:77:18: d1:47:dd:f0:d0:06:b2:f9:8b:47:e3:a9:5a:b6:ef:39:b7:70: e0:d9:8e:de:8f:08:16:e5:86:e5:8b:24:98:80:7b:b1:9f:34: 30:a0:e2:fb:70:23:d2:f5:42:a8:bd:ac:9d:60:40:3a:55:a5: a9:08:1e:18:65:e6:09:8c:ef:1a:da:4e:33:81:24:c0:dc:2d: 08:fa:60:dd:1b:70:2e:5a:a8:22:98:51:53:25:99:c1:63:dc: 1c:c7:c8:3b:a7:6d:a9:b2:aa:13:38:7f:d4:21:00:49:5a:67: 35:da:ef:ad:76:62:73:8c:60:31:6f:4b:ec:f0:71:b5:d3:ad: 88:25:30:57 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjUwNzEyMTY1NTQzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcyOTM4Zi02OTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDloGbFUv2Gt+mBN8nMOGVVx1mLYoT5UfhTISUxLeTEZuWFZ3/lEyD/SGAKS QhkXO9PONBQa5EQhjSRTkPIvGpG70Pb8msqJgp8kuLJguG9gHn96/NyhbinlmB20 p4DF32dYX45gc6hRZ0y9eEDUyKNICENw1Ny3MGhO/LOVS11ci5ebDEnxbrlYl+Xx 0SE3kL0rOV8ZAaJxGroxfeJ7w1EhDAj7uNKN3f5pd5zjBgX5a1w0YkIKPnqfmzT0 LK60+T0rWYtSTGjPx7VsCdWH7HIeiBnehuTguP45A24CqwF9fD1vdXx5fs6Z6EBB 4SgWD2h8W9VnXiSmBra0CTKaqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBI/9Ztr Y2Un8eimtwErfNziQGRlMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzAxRDUvRDRCRTAwRDQ2M0U1MTFFOEI1Q0ZFNDFBQzRGOUFFMDIvNzMzODIzNUND MDYwMTFFRTg4MkJDMzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn0XwwDQYJKoZIhvcNAQELBQADggEBAHt/4dZB24KDmXem 0ZT76UHhXaPghEx0Ng2ro8gydn3hUyQNLErOVV3UvprqMUklXqOetSa+dFSxuW0D HaxVKYBKW7fdI0X9e74QE/eg4Lgwsv3hx+26Y5UUwCqcSvGp4CnB/4V143Pa5fbE 8BDDc57HmVAE6SUGO3duH2Z3GNFH3fDQBrL5i0fjqVq27zm3cODZjt6PCBblhuWL JJiAe7GfNDCg4vtwI9L1Qqi9rJ1gQDpVpakIHhhl5gmM7xraTjOBJMDcLQj6YN0b cC5aqCKYUVMlmcFj3BzHyDunbamyqhM4f9QhAElaZzXa7612YnOMYDFvS+zwcbXT rYglMFc= -----END CERTIFICATE-----Generated at Sun Jul 20 20:40:37 2025 by rpki-client