$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/E37002DA5EEC11F08928266FC4F9AE02.roa File: E37002DA5EEC11F08928266FC4F9AE02.roa (raw, json) Hash identifier: bP8QoLrN2cG+x9Zk4VLIpDMpINAZs4gBK6D1Lhe10Us= Subject key identifier: 8D:BF:CE:36:AE:56:BD:A0:3D:20:31:16:10:19:F6:31:B0:46:41:A6 Certificate issuer: /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Certificate serial: 040B Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/E37002DA5EEC11F08928266FC4F9AE02.roa Signing time: Sat 12 Jul 2025 06:55:22 +0000 ROA not before: Sat 12 Jul 2025 06:55:22 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 149485 IP address blocks: 103.181.0.0/23 maxlen: 23 103.181.0.0/24 maxlen: 24 103.181.1.0/24 maxlen: 24 2400:56a0:100::/40 maxlen: 40 2400:56a0:200::/40 maxlen: 40 2400:56a0:300::/40 maxlen: 40 2400:56a0:800::/40 maxlen: 40 2400:56a0:dc01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 00:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1035 (0x40b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Validity Not Before: Jul 12 06:55:22 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=687206da-9527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:57:77:79:af:3e:7e:65:36:a7:c0:c7:99:aa: b6:3b:4b:f2:02:ad:1e:f6:32:f8:26:24:9b:cc:8e: b5:4d:71:73:07:89:99:0e:85:d2:1c:02:c3:c0:81: 73:7c:9a:b9:23:86:c8:36:df:19:be:65:ee:e2:c0: 5f:a4:92:50:d5:75:3b:99:07:3a:80:55:52:70:a1: ed:b9:6f:f0:25:98:82:bb:98:a9:04:0e:b3:f9:ba: e7:6e:9e:67:00:f4:5e:e1:c1:20:c0:34:10:52:23: 4e:85:93:4b:a1:ee:11:ea:5d:6b:2d:f9:99:d9:44: b9:5c:49:ff:eb:c3:28:bb:d1:f4:b2:40:9c:73:14: 53:5a:b0:34:e7:d3:4a:d2:33:16:9e:a7:c1:82:bf: f9:f8:52:d3:56:53:4e:f0:ac:36:24:2a:56:28:bb: ad:89:8a:f8:20:32:f8:7a:fa:83:de:56:d1:31:01: 91:dd:cb:ce:16:8b:58:ac:cb:de:27:20:5b:cc:ba: b8:08:0f:6c:32:e4:f8:c0:a8:f0:69:00:30:50:b5: 0f:c0:0b:00:13:56:0d:49:23:a4:35:3c:b1:0e:f9: 24:f4:fe:38:9d:da:d7:99:40:86:de:07:e6:ad:62: 13:67:8d:a7:da:86:92:b6:07:2d:2a:62:08:e1:e1: dc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:BF:CE:36:AE:56:BD:A0:3D:20:31:16:10:19:F6:31:B0:46:41:A6 X509v3 Authority Key Identifier: keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/E37002DA5EEC11F08928266FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.0.0/23 IPv6: 2400:56a0:100::-2400:56a0:3ff:ffff:ffff:ffff:ffff:ffff 2400:56a0:800::/40 2400:56a0:dc01::/48 Signature Algorithm: sha256WithRSAEncryption 61:0e:1e:ee:46:53:45:a4:41:d7:82:be:90:e4:7e:c8:57:e3: cc:17:4c:1b:2f:92:3e:42:32:1b:0c:a4:7f:cc:36:9a:64:19: 4a:40:2c:95:f9:74:ec:c5:f8:83:d9:14:bc:80:7b:d8:0e:8c: a3:65:41:ca:13:55:f8:8b:0a:30:f7:27:d0:a3:aa:0e:c0:1a: d4:d5:df:ed:91:0e:b4:ca:b2:9e:5c:14:1e:36:84:31:76:aa: fa:f0:4f:8e:dc:7c:55:54:fa:cd:b6:b0:fe:a3:3e:61:3d:50: 10:99:4a:f3:1f:30:a9:4c:86:2a:2e:4b:be:63:7d:29:fd:99: a2:0a:61:6d:2b:9d:2b:99:9d:65:79:9c:2b:28:6f:c6:21:5d: 08:1c:9e:d6:86:c8:5c:c3:14:35:02:fc:d3:20:68:77:01:a4: d9:17:c8:43:2a:1a:72:6c:01:e2:f1:01:24:39:0f:8c:c3:7b: 82:4a:a5:17:e0:c6:eb:73:46:e8:4b:88:fa:70:96:61:c7:80: 4b:6f:83:c7:e7:ee:c6:d3:6f:38:c4:8d:b6:60:08:93:e2:e1: 78:f5:d5:58:b6:28:f7:3c:65:58:b2:76:6e:34:49:9c:04:b4: b7:68:6a:44:56:81:02:ce:97:ef:e7:a9:fb:60:5c:06:99:04: c0:c7:68:98 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgICBAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzQjQxMTAvBgNVBAUTKEFFQjgzOUNDQkZBRDVCRDk4QTdBMERBOTA1M0JDMjcy NkYyNjkwNEYwHhcNMjUwNzEyMDY1NTIyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcyMDZkYS05NTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwld3ea8+fmU2p8DHmaq2O0vyAq0e9jL4JiSbzI61TXFzB4mZDoXSHALDwIFz fJq5I4bINt8ZvmXu4sBfpJJQ1XU7mQc6gFVScKHtuW/wJZiCu5ipBA6z+brnbp5n APRe4cEgwDQQUiNOhZNLoe4R6l1rLfmZ2US5XEn/68Mou9H0skCccxRTWrA059NK 0jMWnqfBgr/5+FLTVlNO8Kw2JCpWKLutiYr4IDL4evqD3lbRMQGR3cvOFotYrMve JyBbzLq4CA9sMuT4wKjwaQAwULUPwAsAE1YNSSOkNTyxDvkk9P44ndrXmUCG3gfm rWITZ42n2oaStgctKmII4eHcxQIDAQABo4ICwDCCArwwHQYDVR0OBBYEFI2/zjau Vr2gPSAxFhAZ9jGwRkGmMB8GA1UdIwQYMBaAFK64Ocy/rVvZinoNqQU7wnJvJpBP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODNCNC9FNzlFRDQ5MDgz RjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5bUtlZzJwQlR2Q2NtOG1r RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JyZzV6TC10VzltS2VnMnBCVHZDY204bWtFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTgzQjQvRTc5RUQ0OTA4M0Y3MTFFQ0E0N0E2MjY1QzRGOUFFMDIvRTM3MDAyREE1 RUVDMTFGMDg5MjgyNjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E OzA5MAwEAgABMAYDBAFntQAwKQQCAAIwIzAQAwYAJABWoAEDBgIkAFagAAMGACQA VqAIAwcAJABWoNwBMA0GCSqGSIb3DQEBCwUAA4IBAQBhDh7uRlNFpEHXgr6Q5H7I V+PMF0wbL5I+QjIbDKR/zDaaZBlKQCyV+XTsxfiD2RS8gHvYDoyjZUHKE1X4iwow 9yfQo6oOwBrU1d/tkQ60yrKeXBQeNoQxdqr68E+O3HxVVPrNtrD+oz5hPVAQmUrz HzCpTIYqLku+Y30p/ZmiCmFtK50rmZ1leZwrKG/GIV0IHJ7WhshcwxQ1AvzTIGh3 AaTZF8hDKhpybAHi8QEkOQ+Mw3uCSqUX4Mbrc0boS4j6cJZhx4BLb4PH5+7G0284 xI22YAiT4uF49dVYtij3PGVYsnZuNEmcBLS3aGpEVoECzpfv56n7YFwGmQTAx2iY -----END CERTIFICATE-----Generated at Thu Jul 24 12:05:48 2025 by rpki-client