$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/B43088B457F311F099129754C4F9AE02.roa File: B43088B457F311F099129754C4F9AE02.roa (raw, json) Hash identifier: neooxR8eYiH5c48fCKHo/Zt+4JOQJJQFlv5sgInMvhM= Subject key identifier: 20:2C:21:4D:FF:45:52:37:C7:E2:10:23:59:90:AC:06:CC:55:86:BB Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0C19 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/B43088B457F311F099129754C4F9AE02.roa Signing time: Sat 19 Jul 2025 14:04:39 +0000 ROA not before: Sat 19 Jul 2025 14:04:39 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 5065 IP address blocks: 43.230.52.0/24 maxlen: 24 43.230.53.0/24 maxlen: 24 43.246.198.0/24 maxlen: 24 43.249.242.0/24 maxlen: 24 45.115.33.0/24 maxlen: 24 103.7.117.0/24 maxlen: 24 103.7.118.0/24 maxlen: 24 103.7.119.0/24 maxlen: 24 103.13.19.0/24 maxlen: 24 103.15.32.0/24 maxlen: 24 103.15.33.0/24 maxlen: 24 103.15.34.0/24 maxlen: 24 103.15.35.0/24 maxlen: 24 103.248.150.0/24 maxlen: 24 103.248.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 14:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3097 (0xc19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Jul 19 14:04:39 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=687ba5f6-16fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:1f:cf:26:2e:b4:09:67:b4:c9:ea:62:37: e4:30:d5:64:da:04:a3:a1:fa:e7:50:8f:0b:29:59: a4:88:3c:14:7a:49:f7:02:fc:e6:98:63:63:8f:3d: e8:68:0d:8f:a9:1c:58:e9:98:5a:f6:18:9b:b5:81: 00:20:fd:74:02:0a:7c:82:04:22:58:9f:d4:52:27: 37:19:e2:29:81:be:d5:64:96:a3:08:83:ac:af:80: f1:26:ef:45:d3:64:c0:d3:5c:40:40:88:bb:74:9c: a2:7e:7a:30:ad:2b:ce:0a:25:61:7c:3f:70:66:79: a7:e1:50:1b:83:32:ce:4b:03:2c:c4:4f:06:05:a3: fb:aa:49:07:12:d4:6b:79:86:32:6d:05:ee:27:2a: 7d:02:0d:5c:ee:3e:37:88:2a:9d:f1:25:ef:f5:14: d3:ec:f9:d9:57:75:47:6b:e7:6a:19:f4:15:27:18: 1c:c2:e7:25:63:ae:7f:74:fa:4f:e2:32:5d:b3:0e: dc:af:a9:4c:10:5e:55:71:01:46:22:ed:e4:2a:c7: 2f:17:82:58:9d:73:bd:8f:6b:a5:1e:78:66:c0:3c: 75:88:b5:8f:37:7f:17:d8:59:6c:82:73:36:1d:53: 6f:31:5b:19:cd:5e:30:43:7c:1d:c8:91:ea:90:bb: 2b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2C:21:4D:FF:45:52:37:C7:E2:10:23:59:90:AC:06:CC:55:86:BB X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/B43088B457F311F099129754C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.52.0/23 43.246.198.0/24 43.249.242.0/24 45.115.33.0/24 103.7.117.0-103.7.119.255 103.13.19.0/24 103.15.32.0/22 103.248.150.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:f9:77:79:98:82:c1:cb:c0:b2:dd:1e:ed:d2:f4:71:ce:37: 67:89:fa:b7:58:63:2d:b2:20:d9:bf:e1:7c:9b:bf:7d:e8:37: 0c:9b:d2:c8:3c:e5:c3:df:95:48:26:55:e5:5d:9b:5e:05:c7: 23:d1:42:76:c3:da:b7:5e:c4:9d:8d:3d:b6:49:d1:63:19:4b: 89:97:06:e3:00:fe:f6:41:71:9d:a1:c9:d1:35:a9:60:ca:03: 4e:26:cf:da:29:6c:09:0f:a3:08:4d:a9:98:38:5d:43:97:e1: ed:10:6f:38:84:68:21:1b:e2:35:e9:d1:1d:f3:09:9b:e6:49: 56:46:45:3a:60:56:90:b2:7f:88:3f:83:5b:55:28:0a:0e:f0: 97:86:e2:7d:50:f0:42:be:40:eb:4d:c8:61:9a:46:f3:df:59: 52:5e:ef:0f:d9:11:3d:c7:5c:1a:26:ad:a9:ff:53:60:ea:97: 87:c1:41:24:5a:2a:9b:ff:11:fd:7d:11:1d:3c:db:8f:91:4b: c9:6a:7c:c9:21:f6:58:03:bb:19:04:3e:66:22:a6:41:3c:d2: ad:26:3b:7f:5e:d4:a1:e9:dc:e7:3c:47:5a:62:ff:c2:31:00: ca:9c:4c:0d:b5:91:67:3f:da:2f:97:15:ec:14:48:b7:9d:ce: f1:50:f6:67 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICDBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwNzE5MTQwNDM5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODdiYTVmNi0xNmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSsfzyYutAlntMnqYjfkMNVk2gSjofrnUI8LKVmkiDwUekn3AvzmmGNjjz3o aA2PqRxY6Zha9hibtYEAIP10Agp8ggQiWJ/UUic3GeIpgb7VZJajCIOsr4DxJu9F 02TA01xAQIi7dJyifnowrSvOCiVhfD9wZnmn4VAbgzLOSwMsxE8GBaP7qkkHEtRr eYYybQXuJyp9Ag1c7j43iCqd8SXv9RTT7PnZV3VHa+dqGfQVJxgcwuclY65/dPpP 4jJdsw7cr6lMEF5VcQFGIu3kKscvF4JYnXO9j2ulHnhmwDx1iLWPN38X2FlsgnM2 HVNvMVsZzV4wQ3wdyJHqkLsrNQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFCAsIU3/ RVI3x+IQI1mQrAbMVYa7MB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvQjQzMDg4QjQ1 N0YzMTFGMDk5MTI5NzU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgABMDgDBAEr5jQDBAAr9sYDBAAr+fIDBAAtcyEwDAMEAGcHdQMEA2cH cAMEAGcNEwMEAmcPIAMEAWf4ljANBgkqhkiG9w0BAQsFAAOCAQEAKvl3eZiCwcvA st0e7dL0cc43Z4n6t1hjLbIg2b/hfJu/feg3DJvSyDzlw9+VSCZV5V2bXgXHI9FC dsPat17EnY09tknRYxlLiZcG4wD+9kFxnaHJ0TWpYMoDTibP2ilsCQ+jCE2pmDhd Q5fh7RBvOIRoIRviNenRHfMJm+ZJVkZFOmBWkLJ/iD+DW1UoCg7wl4bifVDwQr5A 603IYZpG899ZUl7vD9kRPcdcGiatqf9TYOqXh8FBJFoqm/8R/X0RHTzbj5FLyWp8 ySH2WAO7GQQ+ZiKmQTzSrSY7f17Uoenc5zxHWmL/wjEAypxMDbWRZz/aL5cV7BRI t53O8VD2Zw== -----END CERTIFICATE-----Generated at Sun Jul 20 06:44:28 2025 by rpki-client