$ rpki-client -vvf rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/305EB30EA98D11EF8C023466C4F9AE02.roa File: 305EB30EA98D11EF8C023466C4F9AE02.roa (raw, json) Hash identifier: mTvWjDqRpjoE4gToiz3x8YclXADkkIN+m00HGh0rTzw= Subject key identifier: 6B:E6:E9:A9:C1:37:7B:F6:E9:F6:FF:FA:E6:73:BC:E0:D7:68:52:90 Certificate issuer: /CN=A91839CF/serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939 Certificate serial: 70 Authority key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/305EB30EA98D11EF8C023466C4F9AE02.roa Signing time: Mon 23 Jun 2025 06:06:15 +0000 ROA not before: Mon 23 Jun 2025 06:06:15 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151661 IP address blocks: 103.253.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939 Validity Not Before: Jun 23 06:06:15 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6858eed7-917d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:91:0b:50:5c:2d:36:70:46:a1:c3:5d:e3:94: 23:90:e8:4e:55:c9:c3:67:44:79:7f:81:15:fc:82: 0a:7e:45:79:aa:25:60:40:15:7b:3b:d7:c5:bb:73: d7:d8:63:c9:eb:73:20:d3:c5:2b:92:6f:85:2a:56: d8:c3:b0:ac:0f:95:6c:31:3b:37:b0:2a:fa:09:f8: 28:4a:c8:c6:e5:d8:b6:3a:1b:e9:ff:2a:9e:ac:f3: 3e:c7:47:ec:19:ef:0f:2d:e5:8e:ce:8d:75:cf:ac: 62:09:b5:6e:21:21:e5:7c:ae:f5:cb:4f:13:8d:78: 38:c0:94:36:8b:28:6e:7d:f0:3d:3b:1f:a2:77:93: 95:e3:af:64:7c:84:50:0d:14:d2:62:36:47:ef:dc: ef:bd:88:c0:f2:18:9f:4d:bd:ff:9b:57:73:8b:28: 42:d8:fa:b2:cb:85:ad:6a:fc:8e:63:41:69:a0:60: a7:89:39:53:47:67:58:fe:f3:2c:df:84:0b:58:c1: 9f:97:78:7b:0d:33:84:80:a1:72:98:b9:e8:c0:45: 60:15:de:74:10:97:b7:f1:72:3a:c2:51:a2:50:19: 6d:16:8a:ab:97:ee:50:84:78:11:52:f5:95:ca:09: 80:28:9b:29:46:9b:f3:3c:52:53:40:4e:b7:11:6d: b7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E6:E9:A9:C1:37:7B:F6:E9:F6:FF:FA:E6:73:BC:E0:D7:68:52:90 X509v3 Authority Key Identifier: keyid:4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/305EB30EA98D11EF8C023466C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.253.179.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:12:8d:c2:f4:72:f8:84:c3:14:9f:0b:20:b4:ba:2b:cb:b9: 5a:f7:c2:fd:2a:f8:f6:ed:68:51:71:92:bd:f8:1f:11:6a:d6: 38:b0:f8:97:57:b7:f8:e0:e2:5b:74:19:1c:a4:bb:05:9b:fe: 05:7b:f9:4e:6b:d7:6a:14:bd:19:ca:3a:d0:eb:10:45:ed:98: 2e:1b:bb:ec:74:44:82:c5:5e:7c:64:89:d6:9a:e2:09:db:98: ab:61:4a:dd:5a:22:d5:c1:da:f0:be:be:77:89:74:81:0f:04: 49:1a:7b:7e:d5:2a:16:b0:98:3a:f9:9a:e6:a0:d3:f5:26:f6: c9:e5:18:74:65:8a:d9:4b:80:3f:6c:9e:26:9d:c6:f6:de:c7: 51:fb:1b:4f:19:42:6a:ca:7a:83:da:6e:3f:78:65:a3:7b:69: 6b:10:8e:de:58:ac:e0:64:45:c5:c4:95:72:3d:47:f5:5b:51: 47:5b:b1:32:fc:25:49:8c:54:27:33:b3:2b:8f:d1:25:b8:db: 61:0b:22:8e:2e:da:5b:8f:8f:8e:54:de:22:80:8a:7f:a8:db: 46:cb:aa:a6:5a:3d:ef:34:6e:89:18:e6:14:2c:ef:ca:67:27: 22:94:60:ff:6e:68:df:85:4e:a2:28:b3:a0:bd:d7:c4:e5:cc: ed:e8:ba:27 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzlDRjExMC8GA1UEBRMoNEE3RDI2QzRDQkYxNjcwMDI0NUQ2N0ZCRjY5NTBCNzEy OTE4OTkzOTAeFw0yNTA2MjMwNjA2MTVaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NThlZWQ3LTkxN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUkQtQXC02cEahw13jlCOQ6E5VycNnRHl/gRX8ggp+RXmqJWBAFXs718W7c9fY Y8nrcyDTxSuSb4UqVtjDsKwPlWwxOzewKvoJ+ChKyMbl2LY6G+n/Kp6s8z7HR+wZ 7w8t5Y7OjXXPrGIJtW4hIeV8rvXLTxONeDjAlDaLKG598D07H6J3k5Xjr2R8hFAN FNJiNkfv3O+9iMDyGJ9Nvf+bV3OLKELY+rLLha1q/I5jQWmgYKeJOVNHZ1j+8yzf hAtYwZ+XeHsNM4SAoXKYuejARWAV3nQQl7fxcjrCUaJQGW0WiquX7lCEeBFS9ZXK CYAomylGm/M8UlNATrcRbbexAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUa+bpqcE3 e/bp9v/65nO84NdoUpAwHwYDVR0jBBgwFoAUSn0mxMvxZwAkXWf79pULcSkYmTkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzOUNGLzRERjJCRTUyQTk4 QzExRUZCQTA2ODg2NEM0RjlBRTAyL1NuMG14TXZ4WndBa1hXZjc5cFVMY1NrWW1U ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU24wbXhNdnhad0FrWFdmNzlwVUxjU2tZbVRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzlDRi80REYyQkU1MkE5OEMxMUVGQkEwNjg4NjRDNEY5QUUwMi8zMDVFQjMwRUE5 OEQxMUVGOEMwMjM0NjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGf9szANBgkqhkiG9w0BAQsFAAOCAQEAjhKNwvRy+ITDFJ8L ILS6K8u5WvfC/Sr49u1oUXGSvfgfEWrWOLD4l1e3+ODiW3QZHKS7BZv+BXv5TmvX ahS9Gco60OsQRe2YLhu77HREgsVefGSJ1priCduYq2FK3Voi1cHa8L6+d4l0gQ8E SRp7ftUqFrCYOvma5qDT9Sb2yeUYdGWK2UuAP2yeJp3G9t7HUfsbTxlCasp6g9pu P3hlo3tpaxCO3lis4GRFxcSVcj1H9VtRR1uxMvwlSYxUJzOzK4/RJbjbYQsiji7a W4+PjlTeIoCKf6jbRsuqplo97zRuiRjmFCzvymcnIpRg/25o34VOoiizoL3XxOXM 7ei6Jw== -----END CERTIFICATE-----Generated at Sun Jul 20 06:27:22 2025 by rpki-client