$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/C443D86A55A311E7896BED09C4F9AE02.roa File: C443D86A55A311E7896BED09C4F9AE02.roa (raw, json) Hash identifier: iAz8qRk3/H7vOgPRojw19iFmTjtRy8EuUxq8QG7UtTs= Subject key identifier: 48:B9:A9:3F:BF:54:AD:B5:51:A5:B0:31:F1:AA:6B:AF:E3:89:E3:58 Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Certificate serial: 1A62 Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/C443D86A55A311E7896BED09C4F9AE02.roa Signing time: Tue 08 Jul 2025 16:54:47 +0000 ROA not before: Tue 08 Jul 2025 16:54:47 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 8360 IP address blocks: 103.85.135.0/24 maxlen: 24 103.119.72.0/23 maxlen: 23 103.233.172.0/23 maxlen: 24 103.233.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6754 (0x1a62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Validity Not Before: Jul 8 16:54:47 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=686d4d56-1cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:1b:c3:0c:e0:5f:17:3f:85:a0:84:84:83: 64:3e:94:1b:90:43:7e:31:32:44:c9:96:fd:17:b6: fd:9f:81:1b:3c:4a:bd:1b:96:40:32:bd:94:1b:f4: de:74:22:63:83:4c:cc:ec:b4:11:5d:47:69:90:d4: bf:e4:3b:e6:18:3b:8c:82:f5:ab:60:b5:16:a7:be: d3:9b:eb:ef:27:8c:2b:fb:f6:11:c9:dd:98:9b:f3: ad:47:51:38:62:c2:6d:e9:fb:d3:99:cb:3f:db:da: cb:d8:f7:28:05:86:7e:a8:48:e1:f6:33:98:c0:7b: 13:aa:81:8f:9e:8e:6b:23:06:50:0a:dc:e0:70:b1: fc:b9:b2:53:d4:8a:7a:ed:78:8d:08:49:1a:de:b9: 77:b3:04:0f:16:7f:d6:83:db:d6:e9:7c:a4:d5:ec: da:4c:d2:6a:5d:78:64:05:20:46:03:25:64:e2:12: 45:be:9e:53:3c:b7:11:b1:82:ec:42:e6:51:14:b7: 55:a2:23:3b:bc:a1:1b:bf:ba:8d:f4:d0:d2:47:cc: 0e:05:00:31:dd:3f:2a:12:11:29:95:f9:c0:43:ff: 65:c4:a0:94:6a:b0:9b:60:76:63:e0:7b:73:81:c8: ad:9e:1a:f6:cb:99:50:64:39:dd:6e:52:d1:3f:8c: 7c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B9:A9:3F:BF:54:AD:B5:51:A5:B0:31:F1:AA:6B:AF:E3:89:E3:58 X509v3 Authority Key Identifier: keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/C443D86A55A311E7896BED09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.135.0/24 103.119.72.0/23 103.233.172.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:2a:2f:5e:68:d4:78:74:b1:6d:33:79:77:a7:fa:8a:00:ad: f6:34:29:9f:62:a9:0d:da:60:40:72:6d:bd:a8:42:00:cc:b3: 2f:f4:1c:6f:ab:a2:d7:5d:fe:a1:b4:0a:66:a6:e0:4e:67:30: 69:5d:63:95:8d:57:33:c9:59:de:59:b1:eb:43:92:bd:70:d3: 9a:28:20:51:ea:65:27:7d:db:bf:9d:c5:6f:9d:82:20:5c:ed: 6f:f7:0a:09:af:28:4c:a9:ba:8d:43:50:bc:31:3e:15:d4:fa: 03:32:01:9b:62:e3:df:07:81:ff:7f:30:c8:0e:04:7c:32:39: b0:b9:fa:5f:77:28:24:07:bd:d5:bb:69:6d:1e:d7:61:53:71: b0:3b:32:12:e6:b8:bc:7d:ae:21:0f:7b:4d:15:57:b3:6d:f8: a3:61:62:c9:ef:f9:90:f3:fb:31:0e:d7:1d:5a:80:2d:f3:b7: 24:30:92:e9:26:a4:87:80:2c:0b:71:7e:f0:0e:ff:63:be:51: 68:34:26:f3:45:d2:cf:0a:fe:81:8d:e6:95:41:47:c5:b9:f1: 24:2e:40:fa:64:43:52:99:bc:3f:bc:29:d3:7a:84:2e:73:d6: dc:34:62:92:43:9d:32:00:ce:96:b4:b3:cc:22:5a:db:de:da: 00:b3:85:49 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICGmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQTUxMTAvBgNVBAUTKEQ5RkMxNTVCNkZEQTEwNkM2OTlBNTY5QjEyMDM4NDkw OTU4QUEzMkYwHhcNMjUwNzA4MTY1NDQ3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZkNGQ1Ni0xY2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudcbwwzgXxc/haCEhINkPpQbkEN+MTJEyZb9F7b9n4EbPEq9G5ZAMr2UG/Te dCJjg0zM7LQRXUdpkNS/5DvmGDuMgvWrYLUWp77Tm+vvJ4wr+/YRyd2Ym/OtR1E4 YsJt6fvTmcs/29rL2PcoBYZ+qEjh9jOYwHsTqoGPno5rIwZQCtzgcLH8ubJT1Ip6 7XiNCEka3rl3swQPFn/Wg9vW6Xyk1ezaTNJqXXhkBSBGAyVk4hJFvp5TPLcRsYLs QuZRFLdVoiM7vKEbv7qN9NDSR8wOBQAx3T8qEhEplfnAQ/9lxKCUarCbYHZj4Htz gcitnhr2y5lQZDndblLRP4x8fwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFEi5qT+/ VK21UaWwMfGqa6/jieNYMB8GA1UdIwQYMBaAFNn8FVtv2hBsaZpWmxIDhJCViqMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBNS8yNTgwQThENjRC NjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVHeHBtbGFiRWdPRWtKV0tv eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmd1ZXMl9hRUd4cG1sYWJFZ09Fa0pXS295OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjUzQTUvMjU4MEE4RDY0QjY1MTFFN0I0NjlDMDdBQzRGOUFFMDIvQzQ0M0Q4NkE1 NUEzMTFFNzg5NkJFRDA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnVYcDBAFnd0gDBAJn6awwDQYJKoZIhvcNAQELBQADggEB AAoqL15o1Hh0sW0zeXen+ooArfY0KZ9iqQ3aYEBybb2oQgDMsy/0HG+rotdd/qG0 Cmam4E5nMGldY5WNVzPJWd5ZsetDkr1w05ooIFHqZSd927+dxW+dgiBc7W/3Cgmv KEypuo1DULwxPhXU+gMyAZti498Hgf9/MMgOBHwyObC5+l93KCQHvdW7aW0e12FT cbA7MhLmuLx9riEPe00VV7Nt+KNhYsnv+ZDz+zEO1x1agC3ztyQwkukmpIeALAtx fvAO/2O+UWg0JvNF0s8K/oGN5pVBR8W58SQuQPpkQ1KZvD+8KdN6hC5z1tw0YpJD nTIAzpa0s8wiWtve2gCzhUk= -----END CERTIFICATE-----Generated at Sun Jul 20 07:38:26 2025 by rpki-client