$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/128DFF02E14611EE80D6C425C4F9AE02.roa File: 128DFF02E14611EE80D6C425C4F9AE02.roa (raw, json) Hash identifier: gD7R9l3u/rGhrD05ZuMK8R9HTGQM3qYyh4Dz8BqVAmo= Subject key identifier: 29:3D:EC:64:26:8E:79:14:EC:FE:9D:6F:8C:62:CD:2F:B0:3E:C9:7E Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 0593 Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/128DFF02E14611EE80D6C425C4F9AE02.roa Signing time: Wed 09 Jul 2025 00:05:02 +0000 ROA not before: Wed 09 Jul 2025 00:05:02 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 142565 IP address blocks: 103.78.28.0/22 maxlen: 22 103.78.28.0/24 maxlen: 24 103.78.29.0/24 maxlen: 24 103.78.30.0/24 maxlen: 24 103.169.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 23:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Jul 9 00:05:02 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686db22d-db46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:a5:2d:b0:07:a5:ce:9e:36:87:f6:5c:06: ea:f3:09:69:86:79:ae:87:15:78:27:1a:78:2a:84: 87:f0:07:f8:63:67:d3:7b:1f:f4:2b:4c:1f:78:03: a4:82:9c:78:dd:40:62:20:d0:db:03:68:68:20:01: 92:03:35:b8:9e:bb:59:3e:ec:8e:9c:b8:8d:1a:5d: 78:90:5d:f8:02:34:89:46:a0:6c:f3:6f:53:b9:8c: 3e:69:76:71:aa:bb:dc:9e:54:e2:a6:a0:f9:31:70: 0d:4c:d7:0a:aa:87:6d:fa:aa:94:95:a0:7a:ca:c0: 4f:be:81:f5:db:4e:09:46:92:37:9b:20:ce:52:18: ed:39:4c:a3:af:39:36:93:fa:dd:3a:16:15:bb:e7: 29:4e:02:ec:65:fa:3a:b6:2b:54:5f:0d:4f:4c:b7: 7d:88:6d:27:43:5a:9e:d9:b4:d9:98:9a:c1:74:54: 47:be:78:bf:1f:b3:53:cd:0f:35:47:06:62:fd:41: 9b:cb:da:8e:8c:20:79:47:18:ef:40:c5:73:51:07: 07:66:21:e8:c2:2c:9f:9a:05:5a:44:f3:83:37:37: 7b:de:77:99:b7:4d:dd:84:58:14:53:37:1e:54:be: f1:72:0e:96:22:03:42:18:5d:c2:39:1b:68:06:f8: d3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3D:EC:64:26:8E:79:14:EC:FE:9D:6F:8C:62:CD:2F:B0:3E:C9:7E X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/128DFF02E14611EE80D6C425C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.78.28.0/22 103.169.66.0/24 Signature Algorithm: sha256WithRSAEncryption c4:4c:d5:50:31:b1:27:8c:07:bd:43:86:b8:90:98:78:ac:a5: 0a:d1:f9:b2:09:17:20:d6:b3:85:d8:fb:92:cf:61:f7:0d:54: b1:00:21:22:eb:a2:b5:1f:04:fe:92:27:18:bf:b1:9a:03:73: e3:3f:12:5f:ee:0e:ac:9e:37:7f:34:94:86:2c:1c:2a:f3:6c: 4f:21:38:44:f5:dc:f4:79:7c:5c:e5:e4:d1:d5:3e:5c:a8:16: e7:9a:d4:87:f4:8b:ab:bc:6c:c1:3a:e9:12:af:5b:d6:b2:55: 84:7f:97:f4:e7:4b:93:e7:6e:13:92:c8:ef:74:5e:53:44:52: 93:1f:7c:7a:df:f6:36:aa:61:34:de:04:35:9d:26:eb:ca:92: 6f:b7:d9:24:cb:86:88:57:06:0c:ce:df:35:62:93:9a:35:07: 08:60:80:ab:64:f6:c1:ee:2d:cf:31:c1:a7:da:00:76:61:58: c2:fd:89:24:ef:db:73:3c:f7:34:df:d2:50:de:3a:e4:0e:c9: c2:4c:03:eb:7e:3a:07:e0:e2:a0:e1:fd:6f:6e:4b:b7:29:97: a7:51:f4:58:71:fa:6b:d8:86:0c:bd:3f:24:9a:c0:5f:e6:be: 9d:eb:2f:7a:8a:19:64:66:97:5d:80:5c:00:e5:c0:da:30:62: 80:68:93:6b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjUwNzA5MDAwNTAyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZkYjIyZC1kYjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu72lLbAHpc6eNof2XAbq8wlphnmuhxV4Jxp4KoSH8Af4Y2fTex/0K0wfeAOk gpx43UBiINDbA2hoIAGSAzW4nrtZPuyOnLiNGl14kF34AjSJRqBs829TuYw+aXZx qrvcnlTipqD5MXANTNcKqodt+qqUlaB6ysBPvoH1204JRpI3myDOUhjtOUyjrzk2 k/rdOhYVu+cpTgLsZfo6titUXw1PTLd9iG0nQ1qe2bTZmJrBdFRHvni/H7NTzQ81 RwZi/UGby9qOjCB5RxjvQMVzUQcHZiHowiyfmgVaRPODNzd73neZt03dhFgUUzce VL7xcg6WIgNCGF3CORtoBvjTewIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCk97GQm jnkU7P6db4xizS+wPsl+MB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURERDUvOEIwRDBGRjJFM0Y4MTFFQjlFMDhEQjE0QzRGOUFFMDIvMTI4REZGMDJF MTQ2MTFFRTgwRDZDNDI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnThwDBABnqUIwDQYJKoZIhvcNAQELBQADggEBAMRM1VAx sSeMB71DhriQmHispQrR+bIJFyDWs4XY+5LPYfcNVLEAISLrorUfBP6SJxi/sZoD c+M/El/uDqyeN380lIYsHCrzbE8hOET13PR5fFzl5NHVPlyoFuea1If0i6u8bME6 6RKvW9ayVYR/l/TnS5PnbhOSyO90XlNEUpMffHrf9jaqYTTeBDWdJuvKkm+32STL hohXBgzO3zVik5o1BwhggKtk9sHuLc8xwafaAHZhWML9iSTv23M89zTf0lDeOuQO ycJMA+t+Ogfg4qDh/W9uS7cpl6dR9Fhx+mvYhgy9PySawF/mvp3rL3qKGWRml12A XADlwNowYoBok2s= -----END CERTIFICATE-----Generated at Thu Jul 24 12:09:58 2025 by rpki-client