$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/1D854DF451B911F097C15C49C4F9AE02.roa File: 1D854DF451B911F097C15C49C4F9AE02.roa (raw, json) Hash identifier: xaxaySmnWqQ+K7erniFCyus+l9/HXrQPK69GxtJF7qA= Subject key identifier: 82:4A:2E:67:A0:D3:2C:54:19:40:E7:AB:EA:3E:BF:C3:DA:18:90:61 Certificate issuer: /CN=A91C0C9B/serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Certificate serial: 04E5 Authority key identifier: 49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/1D854DF451B911F097C15C49C4F9AE02.roa Signing time: Wed 25 Jun 2025 11:39:56 +0000 ROA not before: Wed 25 Jun 2025 11:39:56 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 174 IP address blocks: 103.120.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C9B, serialNumber=494202B031E9F427643157A06EFAA4C070C7F3ED Validity Not Before: Jun 25 11:39:56 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=685be00b-f384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8f:d0:bb:c7:c8:9d:4d:5c:02:e7:9e:e1:73: ba:c2:66:5b:5c:2d:a0:22:95:74:65:17:dc:ce:1c: d5:de:8d:a0:16:c3:45:4f:f7:cd:4b:cb:f9:92:28: 25:bc:8a:05:b3:13:3c:e4:53:0c:14:ca:73:8b:77: 03:8d:97:93:b4:2c:63:40:26:56:b8:f7:7a:cc:0b: 45:e8:98:67:53:2d:15:c7:1c:cc:d3:f8:ea:39:32: 6c:b3:0b:dc:b5:1b:fa:82:de:d1:55:d1:8c:1c:b2: 0b:d3:ce:c7:92:dc:19:66:a1:36:8d:12:0a:11:5f: 65:9b:92:29:53:fd:0c:e6:43:8e:86:f9:da:24:d6: f8:d9:5f:8b:b4:7a:8b:be:11:38:cc:73:ea:f1:b4: 95:da:2d:3e:53:7e:f0:d4:1a:f6:a5:34:42:25:ae: 13:61:74:c8:5d:82:50:ff:25:d3:91:95:56:08:be: 2a:d5:b8:5c:8e:db:62:6f:79:17:90:5e:4c:60:e2: c6:87:85:f3:8d:d9:f0:45:28:e3:73:31:98:77:e4: f7:e8:95:b9:8e:68:56:bf:a3:58:a5:d7:1f:f1:21: 7c:f7:e5:fe:3a:94:0d:1f:8b:fc:9c:29:13:78:4d: 24:6d:55:88:48:0b:4b:7d:ee:e4:ce:f4:6f:8e:87: 2f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4A:2E:67:A0:D3:2C:54:19:40:E7:AB:EA:3E:BF:C3:DA:18:90:61 X509v3 Authority Key Identifier: keyid:49:42:02:B0:31:E9:F4:27:64:31:57:A0:6E:FA:A4:C0:70:C7:F3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/SUICsDHp9CdkMVegbvqkwHDH8-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUICsDHp9CdkMVegbvqkwHDH8-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C9B/A46E989A322B11EC97F8CF7CC4F9AE02/1D854DF451B911F097C15C49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.129.0/24 Signature Algorithm: sha256WithRSAEncryption b0:0e:93:a0:f6:d6:b3:db:ad:71:6a:9e:e7:2c:dd:c2:19:41: 55:93:17:0b:96:bd:cf:c8:ea:4d:d4:01:1a:07:21:f8:fb:00: 39:ca:7e:d9:d1:8b:31:df:b2:52:ea:44:4a:d3:46:29:0b:27: 20:8d:4b:ff:f5:9a:55:33:83:5e:35:62:fe:dc:0b:0f:8a:b1: da:80:d8:c0:1f:6e:9e:d6:fe:ba:1d:f9:90:76:2d:34:be:a3: 89:b8:82:84:13:18:de:39:0c:61:38:5c:f3:0f:4a:a9:74:4d: b8:5f:84:19:f0:cd:cd:5d:9e:b7:64:cc:97:28:a9:c0:02:29: 71:de:ab:a4:f3:be:f1:89:3b:41:eb:c5:8c:ba:c8:df:49:bf: aa:da:f3:57:cf:c1:4e:06:f2:f2:7b:25:47:42:84:c3:ee:09: 27:24:e8:d1:ed:c3:7a:7b:16:9c:5f:de:c2:27:c8:38:e5:72: 75:a8:e7:69:f4:4c:eb:91:8c:8d:32:fa:17:41:44:4e:91:2c: ee:cb:06:5d:7a:f1:a0:7f:2f:a2:ec:2f:98:77:90:96:c5:7e: 0a:cd:bd:23:74:d7:16:06:f6:f1:f0:07:74:31:4a:58:15:a2: 99:da:8a:d1:44:73:f6:88:a5:63:c0:d3:a8:c9:19:fb:4f:06: c9:17:8a:50 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDOUIxMTAvBgNVBAUTKDQ5NDIwMkIwMzFFOUY0Mjc2NDMxNTdBMDZFRkFBNEMw NzBDN0YzRUQwHhcNMjUwNjI1MTEzOTU2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODViZTAwYi1mMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6I/Qu8fInU1cAuee4XO6wmZbXC2gIpV0ZRfczhzV3o2gFsNFT/fNS8v5kigl vIoFsxM85FMMFMpzi3cDjZeTtCxjQCZWuPd6zAtF6JhnUy0VxxzM0/jqOTJsswvc tRv6gt7RVdGMHLIL087HktwZZqE2jRIKEV9lm5IpU/0M5kOOhvnaJNb42V+LtHqL vhE4zHPq8bSV2i0+U37w1Br2pTRCJa4TYXTIXYJQ/yXTkZVWCL4q1bhcjttib3kX kF5MYOLGh4XzjdnwRSjjczGYd+T36JW5jmhWv6NYpdcf8SF89+X+OpQNH4v8nCkT eE0kbVWISAtLfe7kzvRvjocvqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIJKLmeg 0yxUGUDnq+o+v8PaGJBhMB8GA1UdIwQYMBaAFElCArAx6fQnZDFXoG76pMBwx/Pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM5Qi9BNDZFOTg5QTMy MkIxMUVDOTdGOENGN0NDNEY5QUUwMi9TVUlDc0RIcDlDZGtNVmVnYnZxa3dIREg4 LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVSUNzREhwOUNka01WZWdidnFrd0hESDgtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzBDOUIvQTQ2RTk4OUEzMjJCMTFFQzk3RjhDRjdDQzRGOUFFMDIvMUQ4NTRERjQ1 MUI5MTFGMDk3QzE1QzQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABneIEwDQYJKoZIhvcNAQELBQADggEBALAOk6D21rPbrXFq nucs3cIZQVWTFwuWvc/I6k3UARoHIfj7ADnKftnRizHfslLqRErTRikLJyCNS//1 mlUzg141Yv7cCw+KsdqA2MAfbp7W/rod+ZB2LTS+o4m4goQTGN45DGE4XPMPSql0 TbhfhBnwzc1dnrdkzJcoqcACKXHeq6TzvvGJO0HrxYy6yN9Jv6ra81fPwU4G8vJ7 JUdChMPuCSck6NHtw3p7Fpxf3sInyDjlcnWo52n0TOuRjI0y+hdBRE6RLO7LBl16 8aB/L6LsL5h3kJbFfgrNvSN01xYG9vHwB3QxSlgVopnaitFEc/aIpWPA06jJGftP BskXilA= -----END CERTIFICATE-----Generated at Tue Jul 1 08:03:26 2025 by rpki-client