$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/618AD7B6638A11F08BC2A840C4F9AE02.roa File: 618AD7B6638A11F08BC2A840C4F9AE02.roa (raw, json) Hash identifier: MwSFvEabk32pabHGDjMhMjg7Y9hSaRRoCFJNVkHfvCo= Subject key identifier: 40:78:24:D6:76:A2:35:66:1D:63:A9:20:25:CE:27:32:5E:77:FB:77 Certificate issuer: /CN=A91CE3A3/serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C Certificate serial: 0C98 Authority key identifier: B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/618AD7B6638A11F08BC2A840C4F9AE02.roa Signing time: Fri 18 Jul 2025 03:50:44 +0000 ROA not before: Fri 18 Jul 2025 03:50:44 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 38716 IP address blocks: 103.241.0.0/22 maxlen: 22 103.241.0.0/24 maxlen: 24 103.241.1.0/24 maxlen: 24 103.241.2.0/24 maxlen: 24 103.241.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 18:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3224 (0xc98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3A3, serialNumber=B4B10E6CB38D5365D054E8DBE90F34F2C388B10C Validity Not Before: Jul 18 03:50:44 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6879c494-f6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:29:dd:87:dd:46:39:ea:ac:da:bd:4c:f7: 0e:e8:f2:40:0a:c1:ae:06:03:f5:d1:25:7a:1c:1f: 9c:6a:ff:e4:b8:2f:52:0e:85:2a:fb:d5:8b:69:0f: c4:ac:76:ed:aa:65:77:68:f4:44:89:69:93:63:36: 8e:4c:0f:81:b5:ed:9a:ec:e4:a5:96:db:ed:60:be: c5:a9:74:9b:9d:d0:a4:2b:d2:f5:00:b8:c9:6e:44: 32:73:3f:f1:c9:0f:c5:9c:e0:ad:a0:2b:83:69:d0: 92:fe:3a:67:db:97:3e:fa:6b:4d:a5:70:9e:00:52: cf:1f:03:f4:a8:ec:a7:32:f3:13:56:2d:90:5c:9d: ee:82:13:5e:e1:42:a3:c7:a6:28:a3:5d:f5:7c:8d: c8:48:0e:e7:bf:aa:cf:26:01:67:9a:8c:d8:a4:13: 6f:a7:26:b5:3e:66:d6:76:b5:a8:b5:ed:f4:fe:9f: 6c:6f:46:21:3f:b5:79:6e:95:e4:34:7d:ca:c0:de: 22:3c:6f:52:0e:c3:d6:9f:c8:5b:74:48:e1:1f:4b: 3c:4c:34:1e:05:3d:9c:46:f0:9e:6b:73:c1:a8:cb: a3:20:90:09:4f:8c:da:69:46:d9:6d:aa:5a:94:0f: d1:a3:00:24:8e:ba:77:7a:31:e5:33:66:cd:df:1c: 01:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:78:24:D6:76:A2:35:66:1D:63:A9:20:25:CE:27:32:5E:77:FB:77 X509v3 Authority Key Identifier: keyid:B4:B1:0E:6C:B3:8D:53:65:D0:54:E8:DB:E9:0F:34:F2:C3:88:B1:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/tLEObLONU2XQVOjb6Q808sOIsQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLEObLONU2XQVOjb6Q808sOIsQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/2091DC8E050111EABD9B202CC4F9AE02/618AD7B6638A11F08BC2A840C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.241.0.0/22 Signature Algorithm: sha256WithRSAEncryption 21:58:99:a8:c8:a7:72:ca:74:c6:70:94:2c:4c:c3:d7:d6:a3: 7b:27:3a:5f:8e:b2:c9:15:f2:bf:72:ad:4e:b3:55:d6:e6:b5: 2a:c6:ae:73:2b:9e:28:50:2e:33:37:de:d5:1c:9c:a1:dd:81: 00:92:36:bf:08:05:4a:32:28:7c:e7:26:c6:20:56:54:4d:0b: c0:1a:f8:3e:8f:00:25:46:05:0f:44:ba:1d:b3:c8:ef:55:ae: a3:59:00:9d:3d:6d:5a:c3:9a:49:c1:38:f3:77:b0:9a:98:67: 21:c7:1b:b8:f2:de:39:4c:a4:b7:0f:c2:8e:d0:cd:2d:36:73: 97:36:08:e3:b3:e4:c3:12:8b:04:bb:30:f6:a7:ff:1d:3b:e9: 36:9a:65:65:4c:bc:4a:39:5c:fa:d3:d4:8d:0d:49:d4:54:34: 8b:d8:60:e6:51:d7:a8:f9:71:e7:b8:0b:5a:ad:da:54:2c:1a: f1:47:e5:c5:73:3d:28:00:bd:1a:77:41:9f:53:0f:c8:b7:98: 1c:0c:e2:5a:c9:fe:f1:10:34:a8:d0:22:5b:ab:ee:e6:75:54: e5:a3:ee:13:62:27:a7:1f:60:aa:bc:68:d8:15:58:45:25:3c: ad:fd:a9:87:ae:85:de:c7:d1:88:bb:da:da:87:0e:17:8a:60: a8:b5:ff:aa -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQTMxMTAvBgNVBAUTKEI0QjEwRTZDQjM4RDUzNjVEMDU0RThEQkU5MEYzNEYy QzM4OEIxMEMwHhcNMjUwNzE4MDM1MDQ0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc5YzQ5NC1mNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuEp3YfdRjnqrNq9TPcO6PJACsGuBgP10SV6HB+cav/kuC9SDoUq+9WLaQ/E rHbtqmV3aPREiWmTYzaOTA+Bte2a7OSlltvtYL7FqXSbndCkK9L1ALjJbkQycz/x yQ/FnOCtoCuDadCS/jpn25c++mtNpXCeAFLPHwP0qOynMvMTVi2QXJ3ughNe4UKj x6Yoo131fI3ISA7nv6rPJgFnmozYpBNvpya1PmbWdrWote30/p9sb0YhP7V5bpXk NH3KwN4iPG9SDsPWn8hbdEjhH0s8TDQeBT2cRvCea3PBqMujIJAJT4zaaUbZbapa lA/RowAkjrp3ejHlM2bN3xwB1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEB4JNZ2 ojVmHWOpICXOJzJed/t3MB8GA1UdIwQYMBaAFLSxDmyzjVNl0FTo2+kPNPLDiLEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8yMDkxREM4RTA1 MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi90TEVPYkxPTlUyWFFWT2piNlE4MDhzT0lz UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMRU9iTE9OVTJYUVZPamI2UTgwOHNPSXNRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0UzQTMvMjA5MURDOEUwNTAxMTFFQUJEOUIyMDJDQzRGOUFFMDIvNjE4QUQ3QjY2 MzhBMTFGMDhCQzJBODQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn8QAwDQYJKoZIhvcNAQELBQADggEBACFYmajIp3LKdMZw lCxMw9fWo3snOl+OsskV8r9yrU6zVdbmtSrGrnMrnihQLjM33tUcnKHdgQCSNr8I BUoyKHznJsYgVlRNC8Aa+D6PACVGBQ9Euh2zyO9VrqNZAJ09bVrDmknBOPN3sJqY ZyHHG7jy3jlMpLcPwo7QzS02c5c2COOz5MMSiwS7MPan/x076TaaZWVMvEo5XPrT 1I0NSdRUNIvYYOZR16j5cee4C1qt2lQsGvFH5cVzPSgAvRp3QZ9TD8i3mBwM4lrJ /vEQNKjQIlur7uZ1VOWj7hNiJ6cfYKq8aNgVWEUlPK39qYeuhd7H0Yi72tqHDheK YKi1/6o= -----END CERTIFICATE-----Generated at Wed Jul 23 12:20:16 2025 by rpki-client