$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/6279877C58DF11F08A960A36C4F9AE02.roa File: 6279877C58DF11F08A960A36C4F9AE02.roa (raw, json) Hash identifier: pY25qyZGK2wky0uuCy25EnRsi8wVW6eIswyb4KXJkt4= Subject key identifier: 75:10:11:19:CA:63:AC:20:A7:B7:5B:B0:D5:D3:B5:8C:DF:D3:42:4E Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0C07 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/6279877C58DF11F08A960A36C4F9AE02.roa Signing time: Fri 04 Jul 2025 14:01:30 +0000 ROA not before: Fri 04 Jul 2025 14:01:30 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 17408 IP address blocks: 43.251.185.0/24 maxlen: 24 43.251.187.0/24 maxlen: 24 103.15.76.0/24 maxlen: 24 103.15.77.0/24 maxlen: 24 103.15.78.0/24 maxlen: 24 103.21.105.0/24 maxlen: 24 103.21.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 14:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3079 (0xc07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Jul 4 14:01:30 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6867deba-6302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:07:6d:05:47:cd:ed:5c:8e:16:4b:12:ba:98: 33:4a:dd:35:8c:8f:77:f8:2b:31:fc:2e:61:ab:50: 3f:24:3b:fb:a9:43:96:05:f3:65:a7:0c:ac:6d:5b: a0:3b:8b:fe:32:c9:20:59:19:a7:f9:05:75:f4:d7: d9:0a:50:1c:9c:1d:f2:50:39:66:e3:32:60:c5:e4: 0f:ed:1b:92:5f:d6:c5:0a:50:23:de:10:41:aa:66: 58:bb:fa:1c:af:77:b5:ac:98:09:7c:0d:5d:30:3d: 43:04:a0:b3:db:24:8e:fd:62:19:7b:42:24:00:51: 3e:e0:2e:6c:9c:8b:f6:7d:85:aa:ae:51:dc:65:92: b9:73:90:c5:08:e4:99:20:99:19:14:e8:8f:87:eb: a3:98:8a:76:38:63:99:dc:ab:75:87:84:39:25:26: 9b:15:00:1f:e1:09:96:df:12:c2:e9:b2:94:90:7d: 49:60:4e:f8:45:4b:39:b7:60:ab:60:14:74:17:49: 0f:ee:60:94:17:08:33:e9:d6:f6:a8:f9:cc:c1:48: ce:57:ce:04:c0:65:2e:d0:c5:b6:e8:67:81:dc:87: b7:9d:00:f4:e9:e9:45:69:66:bc:a5:92:b2:72:dd: e7:b6:14:6c:5e:0d:a9:0c:05:36:3a:ad:1a:0e:a3: 90:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:10:11:19:CA:63:AC:20:A7:B7:5B:B0:D5:D3:B5:8C:DF:D3:42:4E X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/6279877C58DF11F08A960A36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.185.0/24 43.251.187.0/24 103.15.76.0-103.15.78.255 103.21.105.0/24 103.21.107.0/24 Signature Algorithm: sha256WithRSAEncryption bf:af:e8:ba:1d:11:d6:20:14:d0:f9:3a:23:99:41:74:ec:c9: 67:6c:fb:f1:85:97:1b:d4:11:70:80:6b:74:5a:0b:8c:b9:ae: d6:b6:3b:fa:59:e6:af:e0:3f:aa:a1:31:ac:3d:3f:18:3e:b2: a2:4d:1c:55:0b:d2:41:72:ac:c8:8c:bb:46:c1:e7:b3:d3:4a: e4:a2:4c:ff:80:8b:3e:03:9f:84:9d:d2:3a:f3:dc:f9:86:4c: c4:f2:3f:e9:7f:da:f3:5e:4f:08:50:68:35:27:e6:f3:82:9d: 0a:da:47:d5:0a:8d:65:3f:eb:42:58:69:ba:4b:56:b2:64:81: a6:81:f7:e0:6b:f9:d5:f7:ca:39:e2:29:d8:4b:90:87:1d:66: 96:cf:98:e9:9c:20:3c:31:70:06:00:5a:48:3f:17:46:67:d4: 6a:51:93:ea:4e:f5:b6:24:8e:87:f0:a1:b4:68:21:f1:54:90: c7:af:03:9f:99:73:33:9e:62:ec:ad:95:df:22:ce:82:15:d1: ce:75:48:fe:7d:38:3b:9e:b3:5a:43:60:20:3c:87:56:ec:3e: 37:80:a5:54:f5:e2:62:ac:3c:b9:8a:d1:f2:2b:d8:d6:f7:82: 38:d5:31:cb:af:32:2d:87:cf:e2:de:58:f7:76:37:92:1a:ba: ca:9f:da:85 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICDAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwNzA0MTQwMTMwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODY3ZGViYS02MzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwdtBUfN7VyOFksSupgzSt01jI93+Csx/C5hq1A/JDv7qUOWBfNlpwysbVug O4v+MskgWRmn+QV19NfZClAcnB3yUDlm4zJgxeQP7RuSX9bFClAj3hBBqmZYu/oc r3e1rJgJfA1dMD1DBKCz2ySO/WIZe0IkAFE+4C5snIv2fYWqrlHcZZK5c5DFCOSZ IJkZFOiPh+ujmIp2OGOZ3Kt1h4Q5JSabFQAf4QmW3xLC6bKUkH1JYE74RUs5t2Cr YBR0F0kP7mCUFwgz6db2qPnMwUjOV84EwGUu0MW26GeB3Ie3nQD06elFaWa8pZKy ct3nthRsXg2pDAU2Oq0aDqOQ8QIDAQABo4ICtTCCArEwHQYDVR0OBBYEFHUQERnK Y6wgp7dbsNXTtYzf00JOMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvNjI3OTg3N0M1 OERGMTFGMDhBOTYwQTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMCwEAgABMCYDBAAr+7kDBAAr+7swDAMEAmcPTAMEAGcPTgMEAGcVaQMEAGcV azANBgkqhkiG9w0BAQsFAAOCAQEAv6/ouh0R1iAU0Pk6I5lBdOzJZ2z78YWXG9QR cIBrdFoLjLmu1rY7+lnmr+A/qqExrD0/GD6yok0cVQvSQXKsyIy7RsHns9NK5KJM /4CLPgOfhJ3SOvPc+YZMxPI/6X/a815PCFBoNSfm84KdCtpH1QqNZT/rQlhpuktW smSBpoH34Gv51ffKOeIp2EuQhx1mls+Y6ZwgPDFwBgBaSD8XRmfUalGT6k71tiSO h/ChtGgh8VSQx68Dn5lzM55i7K2V3yLOghXRznVI/n04O56zWkNgIDyHVuw+N4Cl VPXiYqw8uYrR8ivY1veCONUxy68yLYfP4t5Y93Y3khq6yp/ahQ== -----END CERTIFICATE-----Generated at Sun Jul 20 06:24:37 2025 by rpki-client