$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/1D0BA0FC57EB11F096357F7CC4F9AE02.roa File: 1D0BA0FC57EB11F096357F7CC4F9AE02.roa (raw, json) Hash identifier: Njg0pVJ4I7URnxza7bv42AK9X5Mt3J26B9EOz9eASoo= Subject key identifier: 0C:09:AD:53:22:F7:01:F4:9D:F0:B9:B1:FE:A8:44:10:B3:E9:15:BB Certificate issuer: /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Certificate serial: 0612 Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/1D0BA0FC57EB11F096357F7CC4F9AE02.roa Signing time: Thu 03 Jul 2025 08:52:56 +0000 ROA not before: Thu 03 Jul 2025 08:52:56 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 395793 IP address blocks: 103.146.208.0/24 maxlen: 24 103.146.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1554 (0x612) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B861D, serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Validity Not Before: Jul 3 08:52:56 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=686644e8-b2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:37:52:f4:89:5f:25:cc:89:ea:e5:67:b0: a7:4c:3a:15:b1:f2:50:f0:80:24:f6:54:98:66:d5: 4e:83:9a:1e:7e:96:5f:f6:2e:b4:cb:bf:5f:39:b5: 95:f2:3a:ce:28:8a:c7:6e:c5:ef:9e:3e:08:cd:d1: 67:74:d3:d7:5d:46:e8:bd:f3:83:d4:39:b3:d4:60: c8:a7:56:c2:de:e8:75:89:0a:84:34:96:a9:0c:67: 67:67:ed:2a:0f:08:49:0e:c8:4c:13:bd:11:d7:8f: 08:ed:13:84:2f:d8:f4:3b:c3:55:bb:21:32:1c:48: db:86:59:22:59:f5:4c:85:4c:57:11:fe:6b:f5:ca: b3:11:59:30:d9:10:56:f7:ec:22:5d:23:b9:3e:69: 9c:e8:87:9f:80:ec:52:8f:9f:84:20:e5:f0:7a:64: 0c:dd:c6:c4:08:f9:f3:86:c8:c1:9f:fc:04:03:3e: 65:a6:2e:a3:3c:6b:ad:18:cb:8c:af:ce:be:a3:51: af:f9:33:12:28:c4:37:87:83:8d:5f:8f:b0:9e:83: c5:46:78:bf:1a:df:47:ad:9a:f3:50:25:42:96:1a: b4:f2:19:49:b8:20:7b:f1:2d:60:71:d5:69:4d:c3: 80:64:ce:ce:93:b6:0b:48:98:c9:b2:6c:93:63:49: b4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:09:AD:53:22:F7:01:F4:9D:F0:B9:B1:FE:A8:44:10:B3:E9:15:BB X509v3 Authority Key Identifier: keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/1D0BA0FC57EB11F096357F7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.208.0/23 Signature Algorithm: sha256WithRSAEncryption 88:a5:9b:9c:07:c0:e6:fe:b4:4d:37:d1:b5:9e:42:5c:c1:07: 64:2c:a1:80:61:52:a7:71:94:60:bd:b3:32:b7:25:6b:bd:b0: 90:ae:92:da:e9:f9:58:97:2e:cb:9c:21:e6:e2:61:ab:ef:1d: 33:c3:26:16:bb:2f:78:45:8c:e0:6f:1b:6d:ed:65:7b:9f:55: 3e:b7:70:44:a6:25:cd:40:91:2c:77:95:c2:3c:15:d8:9d:5e: b9:ff:87:ee:e3:a6:01:84:06:9c:e0:ff:fd:41:18:3b:e7:de: b8:43:4c:1b:45:ac:b4:6e:f8:47:87:6d:0f:4f:07:17:f5:12: 06:9b:98:9c:40:36:0d:be:d0:77:b5:81:96:cf:48:07:09:50: 6d:8d:54:ab:51:df:e9:5b:6d:ff:e3:d8:9e:28:60:33:2e:98: 20:9a:93:81:cd:82:c4:ea:5f:0d:de:9b:11:6f:69:06:4d:90: f1:b0:f2:91:66:31:9d:d7:7d:35:cb:99:41:29:9d:47:bd:48: c3:a5:39:8f:f8:01:bb:4f:00:9f:29:8c:97:5d:7d:7d:ef:ff: 6c:05:81:2d:2b:82:5a:64:47:48:16:da:f0:0a:df:6d:d6:34: a6:42:aa:8e:18:60:cd:2d:2a:91:b2:00:b7:36:f7:be:4f:75: 97:e6:79:54 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg2MUQxMTAvBgNVBAUTKEU2MTIzRjQ5RUFFRjY2NEMyMkY5NENENUVCQkFFQUNF RDM4N0ExNkYwHhcNMjUwNzAzMDg1MjU2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY2NDRlOC1iMmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0Q3UvSJXyXMierlZ7CnTDoVsfJQ8IAk9lSYZtVOg5oefpZf9i60y79fObWV 8jrOKIrHbsXvnj4IzdFndNPXXUbovfOD1Dmz1GDIp1bC3uh1iQqENJapDGdnZ+0q DwhJDshME70R148I7ROEL9j0O8NVuyEyHEjbhlkiWfVMhUxXEf5r9cqzEVkw2RBW 9+wiXSO5Pmmc6IefgOxSj5+EIOXwemQM3cbECPnzhsjBn/wEAz5lpi6jPGutGMuM r86+o1Gv+TMSKMQ3h4ONX4+wnoPFRni/Gt9HrZrzUCVClhq08hlJuCB78S1gcdVp TcOAZM7Ok7YLSJjJsmyTY0m06QIDAQABo4IClTCCApEwHQYDVR0OBBYEFAwJrVMi 9wH0nfC5sf6oRBCz6RW7MB8GA1UdIwQYMBaAFOYSP0nq72ZMIvlM1eu66s7Th6Fv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODYxRC9EMjk5N0Y2MEFC RTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlprd2ktVXpWNjdycXp0T0hv VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoSV9TZXJ2Wmt3aS1VelY2N3JxenRPSG9XOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjg2MUQvRDI5OTdGNjBBQkUzMTFFQjlDMkIxMTU2QzRGOUFFMDIvMUQwQkEwRkM1 N0VCMTFGMDk2MzU3RjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnktAwDQYJKoZIhvcNAQELBQADggEBAIilm5wHwOb+tE03 0bWeQlzBB2QsoYBhUqdxlGC9szK3JWu9sJCuktrp+ViXLsucIebiYavvHTPDJha7 L3hFjOBvG23tZXufVT63cESmJc1AkSx3lcI8FdidXrn/h+7jpgGEBpzg//1BGDvn 3rhDTBtFrLRu+EeHbQ9PBxf1EgabmJxANg2+0He1gZbPSAcJUG2NVKtR3+lbbf/j 2J4oYDMumCCak4HNgsTqXw3emxFvaQZNkPGw8pFmMZ3XfTXLmUEpnUe9SMOlOY/4 AbtPAJ8pjJddfX3v/2wFgS0rglpkR0gW2vAK323WNKZCqo4YYM0tKpGyALc2975P dZfmeVQ= -----END CERTIFICATE-----Generated at Sun Jul 20 11:15:44 2025 by rpki-client