$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/A9286C0E6D4411E7AF539270C4F9AE02.roa File: A9286C0E6D4411E7AF539270C4F9AE02.roa (raw, json) Hash identifier: BhjSntJM5KeISAX/AXFVMKFsUVqLH2ibjtVSQJsKXQw= Subject key identifier: E7:51:44:2C:49:90:54:DC:F0:8C:1C:01:D1:4B:DF:DD:C6:A9:2B:16 Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Certificate serial: 1A61 Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/A9286C0E6D4411E7AF539270C4F9AE02.roa Signing time: Tue 08 Jul 2025 16:54:46 +0000 ROA not before: Tue 08 Jul 2025 16:54:46 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 15580 IP address blocks: 103.233.172.0/24 maxlen: 24 103.233.173.0/24 maxlen: 24 103.233.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6753 (0x1a61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Validity Not Before: Jul 8 16:54:46 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=686d4d55-71d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:41:91:97:7d:51:c0:0b:81:a0:16:f6:0d:54: 79:96:20:c7:c6:82:a3:68:d9:8a:04:f4:ee:6c:cc: fc:c7:68:39:da:0f:2d:d6:0e:52:b6:27:5a:74:3d: 05:6a:80:e8:0d:25:04:74:fc:11:f9:14:bf:a6:6d: fe:95:00:5e:08:49:e7:1b:b1:73:02:f2:fe:ec:af: 20:51:a2:d3:90:d3:19:dd:9c:2e:dc:fa:b1:d6:e9: ae:f8:24:0a:21:39:1b:b8:32:e4:6a:6f:c0:22:80: c3:a7:b2:a8:61:b6:c5:d0:6e:a9:2a:3a:c4:3a:cd: ea:09:4a:39:07:70:2d:62:7d:fa:14:1a:9d:a1:d4: b0:5d:1a:2f:2a:e8:83:03:0e:2e:03:2b:16:8f:fd: 98:e2:0d:86:c3:4d:19:8f:7a:67:da:48:6c:38:b4: 40:4b:c4:9a:48:57:f4:5c:d2:95:81:78:65:c8:6d: 2b:e1:9f:01:30:3f:01:5a:1b:13:45:86:21:18:90: ea:3d:2f:a6:89:f5:51:79:93:18:56:7c:d1:51:60: ea:8d:b3:27:15:eb:d9:0a:01:9a:25:29:cc:3d:f2: e0:d6:3b:1e:99:5d:f7:8a:d6:62:b1:a4:f9:be:10: af:f5:f6:ed:12:e4:75:a9:90:90:e7:f6:6c:58:55: 3d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:51:44:2C:49:90:54:DC:F0:8C:1C:01:D1:4B:DF:DD:C6:A9:2B:16 X509v3 Authority Key Identifier: keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/A9286C0E6D4411E7AF539270C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.233.172.0/22 Signature Algorithm: sha256WithRSAEncryption 92:17:1c:12:a8:6d:e3:70:38:37:55:9a:e8:e6:79:cd:23:e3: ca:b8:15:ad:c1:6f:25:12:94:2e:4e:7a:e4:89:4a:ab:21:e3: ac:6c:ec:ed:4e:65:f5:ea:44:9b:00:d5:53:65:d8:41:02:c7: 69:ef:3c:2d:d2:9d:26:b0:97:db:03:6f:13:f3:3d:70:17:ff: eb:4b:15:d8:f7:c2:e0:81:7f:61:9d:ba:ca:21:5a:c2:e0:e5: bb:b9:ce:0a:ba:26:ea:54:9b:b6:b2:db:a1:0e:e9:fb:71:79: 33:b3:8c:87:0c:7f:4f:c7:01:d8:30:c3:78:35:7b:d2:4e:44: 8c:1c:2b:ad:57:e5:22:18:ff:69:f8:43:38:8a:f8:83:7a:4a: f5:cf:7c:5f:1a:d1:13:ae:34:7e:0b:ce:f1:01:35:95:4f:b3: 11:4a:59:b7:d2:55:bf:c5:2a:ae:a8:af:4f:da:4d:08:31:81: ef:1b:5b:30:62:bf:da:f5:42:8a:04:5c:65:e6:4b:89:27:a6: 3a:32:4e:4c:6a:a6:40:4e:b3:e7:a7:e7:f0:aa:76:08:ed:7d: 77:f6:87:cb:28:6f:a6:59:fa:ee:19:3c:22:f3:07:46:46:9a: 26:98:a0:f1:e8:59:73:da:49:40:54:13:49:2b:ca:02:1e:27: eb:93:42:f4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQTUxMTAvBgNVBAUTKEQ5RkMxNTVCNkZEQTEwNkM2OTlBNTY5QjEyMDM4NDkw OTU4QUEzMkYwHhcNMjUwNzA4MTY1NDQ2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZkNGQ1NS03MWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEGRl31RwAuBoBb2DVR5liDHxoKjaNmKBPTubMz8x2g52g8t1g5StidadD0F aoDoDSUEdPwR+RS/pm3+lQBeCEnnG7FzAvL+7K8gUaLTkNMZ3Zwu3Pqx1umu+CQK ITkbuDLkam/AIoDDp7KoYbbF0G6pKjrEOs3qCUo5B3AtYn36FBqdodSwXRovKuiD Aw4uAysWj/2Y4g2Gw00Zj3pn2khsOLRAS8SaSFf0XNKVgXhlyG0r4Z8BMD8BWhsT RYYhGJDqPS+mifVReZMYVnzRUWDqjbMnFevZCgGaJSnMPfLg1jsemV33itZisaT5 vhCv9fbtEuR1qZCQ5/ZsWFU9wwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOdRRCxJ kFTc8IwcAdFL393GqSsWMB8GA1UdIwQYMBaAFNn8FVtv2hBsaZpWmxIDhJCViqMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBNS8yNTgwQThENjRC NjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVHeHBtbGFiRWdPRWtKV0tv eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmd1ZXMl9hRUd4cG1sYWJFZ09Fa0pXS295OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjUzQTUvMjU4MEE4RDY0QjY1MTFFN0I0NjlDMDdBQzRGOUFFMDIvQTkyODZDMEU2 RDQ0MTFFN0FGNTM5MjcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn6awwDQYJKoZIhvcNAQELBQADggEBAJIXHBKobeNwODdV mujmec0j48q4Fa3BbyUSlC5OeuSJSqsh46xs7O1OZfXqRJsA1VNl2EECx2nvPC3S nSawl9sDbxPzPXAX/+tLFdj3wuCBf2GdusohWsLg5bu5zgq6JupUm7ay26EO6ftx eTOzjIcMf0/HAdgww3g1e9JORIwcK61X5SIY/2n4QziK+IN6SvXPfF8a0ROuNH4L zvEBNZVPsxFKWbfSVb/FKq6or0/aTQgxge8bWzBiv9r1QooEXGXmS4knpjoyTkxq pkBOs+en5/CqdgjtfXf2h8sob6ZZ+u4ZPCLzB0ZGmiaYoPHoWXPaSUBUE0krygIe J+uTQvQ= -----END CERTIFICATE-----Generated at Sun Jul 20 07:37:24 2025 by rpki-client