$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/9C955450C77E11EB9DF68B6AC4F9AE02.roa File: 9C955450C77E11EB9DF68B6AC4F9AE02.roa (raw, json) Hash identifier: 3VhvbAFpyQFgzK9qGDlGhCPjLIqfMEiNUYNuSiAIv58= Subject key identifier: EF:77:57:8D:77:54:65:30:04:88:85:07:F8:F6:7C:41:32:0F:02:85 Certificate issuer: /CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6 Certificate serial: 05C6 Authority key identifier: BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/9C955450C77E11EB9DF68B6AC4F9AE02.roa Signing time: Thu 26 Jun 2025 22:52:55 +0000 ROA not before: Thu 26 Jun 2025 22:52:55 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135378 IP address blocks: 103.167.120.0/23 maxlen: 23 103.167.120.0/24 maxlen: 24 103.167.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1478 (0x5c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF17B, serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6 Validity Not Before: Jun 26 22:52:55 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685dcf46-b8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:69:25:87:20:a9:03:1e:b6:30:6b:eb:ce:fa: 8c:5c:14:d5:d7:b2:1f:f9:44:9e:95:28:7f:6a:1b: be:7d:b2:0a:31:d8:3d:be:4f:96:1f:4d:88:23:b5: 8b:e2:ff:04:d8:f8:fb:82:11:4f:17:a1:55:fc:c6: 5c:cd:40:23:46:e7:1d:a5:bd:4a:de:7e:cb:ef:e8: 5f:a9:32:1a:32:a0:5d:eb:18:9e:59:7c:4e:9a:58: ad:90:84:59:46:c3:27:3b:1f:42:c7:f2:93:17:11: 98:1b:7e:3f:b6:71:82:a1:14:34:7c:d4:d5:6f:c5: 83:6a:c8:bf:f9:f9:1b:f9:d0:3a:c0:c2:b9:44:40: 10:02:80:e2:77:7f:5c:32:fd:d8:27:98:61:63:08: b2:ad:2b:fe:26:b9:6e:64:5b:cc:b0:95:ad:28:d5: 8f:70:e8:0a:1e:9b:1d:54:fe:1b:cc:e5:b5:38:26: c3:c9:13:1b:67:d5:07:6a:a1:72:97:b9:23:ac:2e: 90:e8:67:f4:14:ce:4d:ac:07:1f:44:30:48:9b:9d: ee:fd:b8:ae:7c:e0:71:04:51:a4:2c:67:22:d3:4b: eb:99:9d:0d:df:0f:c6:f0:c7:1c:4c:7d:5a:17:f4: 43:02:35:26:02:72:5b:90:05:a6:10:1a:f0:ff:aa: e3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:77:57:8D:77:54:65:30:04:88:85:07:F8:F6:7C:41:32:0F:02:85 X509v3 Authority Key Identifier: keyid:BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/9C955450C77E11EB9DF68B6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.120.0/23 Signature Algorithm: sha256WithRSAEncryption b2:22:b5:c2:23:71:e8:b5:8b:a5:a9:1f:96:e6:d3:c3:c7:2c: 39:14:18:15:7d:9f:56:1e:26:ff:93:7f:76:fa:b0:9c:9e:26: be:36:a9:11:aa:fb:9c:75:41:95:0d:ab:89:ed:9e:3a:65:91: ba:9d:61:c8:85:4e:1f:2c:ab:a6:32:d9:93:72:9d:b8:bc:94: 51:0a:8b:79:d5:3b:b4:dc:7c:e7:2d:19:9b:b6:21:64:e5:50: 32:ef:a6:b2:c1:9b:be:14:26:c6:4c:ad:de:85:ae:12:74:17: da:eb:da:90:57:9f:f9:f1:bf:8f:7d:42:de:c0:39:5f:8f:9d: a8:93:ca:3d:60:7e:18:90:b0:10:14:94:42:8c:f0:47:14:17: 9f:6d:ac:3c:f5:7e:db:84:6c:5a:3c:f0:47:a5:ec:4a:b0:f9: 22:d3:d9:cd:39:09:d7:41:8e:ae:23:a5:7d:b7:7a:fc:71:c2: 91:d4:70:ab:a5:9c:46:7d:ee:39:32:7b:d1:e9:fa:f2:b7:74: f9:92:ad:43:d4:00:3b:d8:99:87:a4:3b:c2:42:eb:fb:fd:4c: e5:86:b9:a1:d5:e4:2e:32:e4:a3:76:ee:7c:cb:5a:4e:4e:14: 2b:36:e7:ae:40:63:e6:ab:66:c2:12:53:76:7b:a5:01:af:8a: 39:3c:47:16 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYxN0IxMTAvBgNVBAUTKEJFQjBBMzIyMzREMTk3NkRFM0RFMjI1QTU1MTc4MDJE QjYxM0E4QjYwHhcNMjUwNjI2MjI1MjU1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVkY2Y0Ni1iOGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGklhyCpAx62MGvrzvqMXBTV17If+USelSh/ahu+fbIKMdg9vk+WH02II7WL 4v8E2Pj7ghFPF6FV/MZczUAjRucdpb1K3n7L7+hfqTIaMqBd6xieWXxOmlitkIRZ RsMnOx9Cx/KTFxGYG34/tnGCoRQ0fNTVb8WDasi/+fkb+dA6wMK5REAQAoDid39c Mv3YJ5hhYwiyrSv+JrluZFvMsJWtKNWPcOgKHpsdVP4bzOW1OCbDyRMbZ9UHaqFy l7kjrC6Q6Gf0FM5NrAcfRDBIm53u/biufOBxBFGkLGci00vrmZ0N3w/G8MccTH1a F/RDAjUmAnJbkAWmEBrw/6rjywIDAQABo4IClTCCApEwHQYDVR0OBBYEFO93V413 VGUwBIiFB/j2fEEyDwKFMB8GA1UdIwQYMBaAFL6woyI00Zdt494iWlUXgC22E6i2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjE3Qi9FQjAyNzdGQ0M3 N0ExMUVCQkI4MEI4NzhDNEY5QUUwMi92ckNqSWpUUmwyM2ozaUphVlJlQUxiWVRx TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZyQ2pJalRSbDIzajNpSmFWUmVBTGJZVHFMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYxN0IvRUIwMjc3RkNDNzdBMTFFQkJCODBCODc4QzRGOUFFMDIvOUM5NTU0NTBD NzdFMTFFQjlERjY4QjZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnp3gwDQYJKoZIhvcNAQELBQADggEBALIitcIjcei1i6Wp H5bm08PHLDkUGBV9n1YeJv+Tf3b6sJyeJr42qRGq+5x1QZUNq4ntnjplkbqdYciF Th8sq6Yy2ZNynbi8lFEKi3nVO7TcfOctGZu2IWTlUDLvprLBm74UJsZMrd6FrhJ0 F9rr2pBXn/nxv499Qt7AOV+PnaiTyj1gfhiQsBAUlEKM8EcUF59trDz1ftuEbFo8 8Eel7Eqw+SLT2c05CddBjq4jpX23evxxwpHUcKulnEZ97jkye9Hp+vK3dPmSrUPU ADvYmYekO8JC6/v9TOWGuaHV5C4y5KN27nzLWk5OFCs2565AY+arZsISU3Z7pQGv ijk8RxY= -----END CERTIFICATE-----Generated at Mon Jul 21 06:16:31 2025 by rpki-client