$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/F8B64B2A97BB11EF9D4C9647C4F9AE02.roa File: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (raw, json) Hash identifier: pyGqakx6aToXl1NPvkP6t5S+uv8P5F7PIid49DfaOVg= Subject key identifier: FF:09:B2:E0:86:7E:88:0A:8D:54:50:C1:98:6F:CF:9E:8C:C4:26:56 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 01B9 Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/F8B64B2A97BB11EF9D4C9647C4F9AE02.roa Signing time: Fri 11 Jul 2025 04:09:51 +0000 ROA not before: Fri 11 Jul 2025 04:09:51 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 150774 IP address blocks: 103.238.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: Jul 11 04:09:51 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68708e8e-4867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bf:84:2d:d2:b2:bb:68:f8:b4:42:48:2e:a7: 69:eb:4f:6f:56:38:a9:9e:d1:bd:bd:49:45:60:13: c0:43:d5:31:04:d5:aa:2d:5b:d7:ca:55:e5:0b:8c: bb:2d:f2:b0:7b:3b:1b:ab:da:d2:c9:ec:d4:c0:e9: 00:a5:c3:e7:5c:67:1f:05:96:c3:58:a4:a3:4d:67: 4a:7d:fc:3a:8f:fc:14:40:f4:ac:ab:1e:a9:8f:e9: 51:e1:b5:6a:cc:bd:23:31:81:25:50:fa:5a:36:a6: 2d:a1:08:f8:1e:37:1e:7a:48:8a:ec:9d:fe:4f:d4: 86:92:c0:a6:a7:f4:ce:5d:dd:0f:ab:f9:45:b5:7e: 5b:ad:3d:39:f4:f2:89:10:47:a2:b7:a5:fa:4d:73: 55:e7:da:49:e7:c7:97:c9:75:5d:7b:4a:5e:94:a2: c9:8e:c4:7a:81:52:76:c2:4f:3c:29:47:77:10:0f: 34:c5:f1:dc:99:8d:47:20:45:d8:a4:b5:16:c6:99: 16:a3:d2:f8:84:25:61:63:53:db:bb:85:b0:c4:07: 9f:c7:5f:b9:fe:5e:71:a2:96:0c:d6:17:4d:05:7b: 2b:78:7f:66:bc:d4:f2:60:4a:20:86:d4:be:dc:1f: 2c:4e:24:15:b0:6c:70:a3:59:83:5f:87:74:98:93: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:09:B2:E0:86:7E:88:0A:8D:54:50:C1:98:6F:CF:9E:8C:C4:26:56 X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/F8B64B2A97BB11EF9D4C9647C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.238.114.0/24 Signature Algorithm: sha256WithRSAEncryption c5:00:d3:db:6d:a9:08:d6:2f:c5:04:e0:e4:e5:0d:c2:6e:b0: e4:45:cf:33:f0:bf:74:47:95:57:7c:a8:6b:21:60:d1:3f:9f: a1:de:68:10:37:82:f1:ed:69:1d:56:e0:30:91:19:af:24:03: 30:d6:0c:54:23:ac:40:e3:60:c4:14:49:c4:61:35:90:89:7c: 33:95:a4:eb:80:4d:4f:04:ba:73:d8:38:d0:08:be:81:5e:a5: 38:27:ab:4e:3b:ed:07:6d:91:45:dc:57:2f:32:e2:f7:13:46: a7:2b:d3:b3:62:18:a6:07:31:7c:5f:4c:c8:38:d9:46:03:b7: 8b:c6:cc:c9:d9:bb:67:64:e6:3a:c0:91:78:70:9e:2c:a2:a5: 44:c3:39:9d:28:92:84:84:be:04:dc:25:b1:8a:3f:d7:db:e9: 56:68:25:fd:c2:3b:3f:8d:9c:23:18:3b:1e:6b:a0:6b:fe:76: c6:41:91:da:dc:ae:f4:08:3b:93:16:12:65:60:0c:93:1e:61: 9d:ba:ce:c1:69:f6:1b:ed:61:8b:98:68:87:8c:64:57:c6:c3: 06:af:ed:70:6b:b8:5e:bf:49:8c:3c:b9:2c:ed:d5:4a:66:09: 89:1a:f8:27:27:0e:37:f3:f3:33:c1:9a:30:15:4a:29:9d:5b: 1b:e6:be:14 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjUwNzExMDQwOTUxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcwOGU4ZS00ODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57+ELdKyu2j4tEJILqdp609vVjipntG9vUlFYBPAQ9UxBNWqLVvXylXlC4y7 LfKwezsbq9rSyezUwOkApcPnXGcfBZbDWKSjTWdKffw6j/wUQPSsqx6pj+lR4bVq zL0jMYElUPpaNqYtoQj4HjceekiK7J3+T9SGksCmp/TOXd0Pq/lFtX5brT059PKJ EEeit6X6TXNV59pJ58eXyXVde0pelKLJjsR6gVJ2wk88KUd3EA80xfHcmY1HIEXY pLUWxpkWo9L4hCVhY1Pbu4WwxAefx1+5/l5xopYM1hdNBXsreH9mvNTyYEoghtS+ 3B8sTiQVsGxwo1mDX4d0mJM6WwIDAQABo4IClTCCApEwHQYDVR0OBBYEFP8JsuCG fogKjVRQwZhvz56MxCZWMB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDNGOEUvNkM0MDg5QkEyMTZDMTFFRUIyOEJGMjRDQzRGOUFFMDIvRjhCNjRCMkE5 N0JCMTFFRjlENEM5NjQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn7nIwDQYJKoZIhvcNAQELBQADggEBAMUA09ttqQjWL8UE 4OTlDcJusORFzzPwv3RHlVd8qGshYNE/n6HeaBA3gvHtaR1W4DCRGa8kAzDWDFQj rEDjYMQUScRhNZCJfDOVpOuATU8EunPYONAIvoFepTgnq0477QdtkUXcVy8y4vcT Rqcr07NiGKYHMXxfTMg42UYDt4vGzMnZu2dk5jrAkXhwniyipUTDOZ0okoSEvgTc JbGKP9fb6VZoJf3COz+NnCMYOx5roGv+dsZBkdrcrvQIO5MWEmVgDJMeYZ26zsFp 9hvtYYuYaIeMZFfGwwav7XBruF6/SYw8uSzt1UpmCYka+CcnDjfz8zPBmjAVSimd WxvmvhQ= -----END CERTIFICATE-----Generated at Sun Jul 20 03:46:23 2025 by rpki-client