$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa File: 195EA596AC8711EEAC4B2427C4F9AE02.roa (raw, json) Hash identifier: ImPy7S1POa8U9HTb3lUMJQCI8t5ncYSuN7VvXCvciPA= Subject key identifier: 19:82:63:37:C3:B5:F2:3A:74:AB:F8:90:6F:98:FF:7E:91:3D:48:0C Certificate issuer: /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424 Certificate serial: 02A2 Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa Signing time: Mon 07 Jul 2025 02:08:09 +0000 ROA not before: Mon 07 Jul 2025 02:08:09 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38136 IP address blocks: 103.188.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 674 (0x2a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91447E7, serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424 Validity Not Before: Jul 7 02:08:09 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686b2c09-c15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8a:55:be:a8:0d:50:75:cb:89:a2:b9:90:87: b6:4c:d8:ce:42:cb:13:5e:ce:ac:f1:f6:1f:33:ab: 08:43:79:54:c5:5d:47:d4:69:43:c6:0e:0b:af:70: b9:76:21:cd:b9:91:10:1e:62:08:2d:7a:2c:92:3e: d5:76:30:1d:09:a2:4a:a5:ef:a6:10:e8:27:a6:9b: 89:b1:10:5d:73:75:e5:7f:56:df:43:ec:eb:25:17: f3:1d:70:e9:47:44:6d:2f:c2:31:d8:cf:0c:ad:bb: a5:33:a1:ea:1a:a4:a6:c1:f2:e9:cb:30:ec:6a:a4: 16:43:87:66:d3:b3:7c:b8:33:ca:6f:c2:f9:ca:2a: 73:25:00:74:a6:75:79:e9:2c:90:95:52:eb:e2:23: af:7e:d8:4b:10:65:bc:d3:04:34:ab:77:c8:88:19: af:60:c6:f6:31:fe:a5:9f:81:3b:f5:1a:de:6d:62: 39:4e:1d:67:6b:75:91:34:6f:52:e5:bb:e6:0b:6a: c5:be:b6:9b:3c:25:3c:99:b3:65:7d:9f:02:87:6d: 6e:21:72:97:86:bd:cc:b2:4c:63:f5:30:75:02:ea: 9c:98:20:ef:9a:78:d8:79:2e:b2:da:1f:13:87:98: fc:51:2d:ba:ea:6e:93:24:2e:33:68:d0:da:ce:00: 6f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:82:63:37:C3:B5:F2:3A:74:AB:F8:90:6F:98:FF:7E:91:3D:48:0C X509v3 Authority Key Identifier: keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.188.234.0/23 Signature Algorithm: sha256WithRSAEncryption 36:b3:c3:75:0a:ad:f2:af:b9:47:e9:12:2a:a1:a4:87:67:8c: dd:99:5d:38:58:5a:8d:0b:0a:1a:cf:86:9d:f7:de:29:c6:47: d3:26:f2:9f:ac:ff:66:a5:f4:91:64:1e:98:2c:b7:a2:25:3a: c9:66:19:e1:dc:d4:54:6c:61:dc:6d:26:58:f2:37:7c:37:10: 0d:31:34:49:9b:a7:d5:99:f0:dc:f1:88:c3:7b:c2:0e:36:c7: 9d:9c:58:25:52:a4:3f:ab:ee:6e:87:1e:fe:88:54:64:8d:11: 15:39:cc:cc:d2:7f:5b:20:70:d0:4d:a0:6a:1c:13:95:d5:dc: 57:c1:4e:90:b1:ea:41:56:3d:e4:83:09:f1:9b:52:3b:6f:07: 1f:28:29:04:82:f9:ea:10:00:37:04:15:ce:30:8a:7d:e5:45: 51:cf:02:45:cc:9a:22:1b:09:a2:12:ca:93:e8:e7:81:23:3c: c9:b3:09:75:4a:c7:b9:0e:40:ff:33:b0:5b:1c:e3:c6:23:13: 83:c1:de:c2:54:21:b8:34:3e:9b:ea:e5:bd:c1:83:eb:35:0c: 84:ad:df:6e:a1:61:04:97:e2:8d:a6:8c:59:82:56:d2:af:97: 9b:41:c0:0f:3d:45:e2:48:0d:9f:7d:4f:e3:d4:ac:4d:13:44: 3b:25:fa:96 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3RTcxMTAvBgNVBAUTKEU3N0I4NzE0NjgwNUUyNjA0QjQ5RUVGMkI0QTQzOENC RDJBNTE0MjQwHhcNMjUwNzA3MDIwODA5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZiMmMwOS1jMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzopVvqgNUHXLiaK5kIe2TNjOQssTXs6s8fYfM6sIQ3lUxV1H1GlDxg4Lr3C5 diHNuZEQHmIILXoskj7VdjAdCaJKpe+mEOgnppuJsRBdc3Xlf1bfQ+zrJRfzHXDp R0RtL8Ix2M8MrbulM6HqGqSmwfLpyzDsaqQWQ4dm07N8uDPKb8L5yipzJQB0pnV5 6SyQlVLr4iOvfthLEGW80wQ0q3fIiBmvYMb2Mf6ln4E79RrebWI5Th1na3WRNG9S 5bvmC2rFvrabPCU8mbNlfZ8Ch21uIXKXhr3Mskxj9TB1AuqcmCDvmnjYeS6y2h8T h5j8US266m6TJC4zaNDazgBv6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBmCYzfD tfI6dKv4kG+Y/36RPUgMMB8GA1UdIwQYMBaAFOd7hxRoBeJgS0nu8rSkOMvSpRQk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDdFNy9GRTQ0NjlEMjEz MDExMUVEQURDRTVDN0RDNEY5QUUwMi81M3VIRkdnRjRtQkxTZTd5dEtRNHk5S2xG Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzdUhGR2dGNG1CTFNlN3l0S1E0eTlLbEZDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDQ3RTcvRkU0NDY5RDIxMzAxMTFFREFEQ0U1QzdEQzRGOUFFMDIvMTk1RUE1OTZB Qzg3MTFFRUFDNEIyNDI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnvOowDQYJKoZIhvcNAQELBQADggEBADazw3UKrfKvuUfp EiqhpIdnjN2ZXThYWo0LChrPhp333inGR9Mm8p+s/2al9JFkHpgst6IlOslmGeHc 1FRsYdxtJljyN3w3EA0xNEmbp9WZ8NzxiMN7wg42x52cWCVSpD+r7m6HHv6IVGSN ERU5zMzSf1sgcNBNoGocE5XV3FfBTpCx6kFWPeSDCfGbUjtvBx8oKQSC+eoQADcE Fc4win3lRVHPAkXMmiIbCaISypPo54EjPMmzCXVKx7kOQP8zsFsc48YjE4PB3sJU Ibg0Ppvq5b3Bg+s1DISt326hYQSX4o2mjFmCVtKvl5tBwA89ReJIDZ99T+PUrE0T RDsl+pY= -----END CERTIFICATE-----Generated at Sun Jul 20 09:43:30 2025 by rpki-client