$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/6C153768CE5511EB9DD80C30C4F9AE02.roa File: 6C153768CE5511EB9DD80C30C4F9AE02.roa (raw, json) Hash identifier: FB/I0gTgEb20qtL8a4Y3PnJsdj8cSocHpg/e5FisnJk= Subject key identifier: 6E:B7:4B:CA:81:36:19:1E:29:88:DF:C1:C3:A7:B0:99:C5:2A:D8:CD Certificate issuer: /CN=A91D8E2C/serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4 Certificate serial: 0E52 Authority key identifier: 96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/6C153768CE5511EB9DD80C30C4F9AE02.roa Signing time: Thu 10 Jul 2025 18:27:11 +0000 ROA not before: Thu 10 Jul 2025 18:27:11 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 142423 IP address blocks: 103.139.208.0/23 maxlen: 23 103.139.208.0/24 maxlen: 24 103.139.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3666 (0xe52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8E2C, serialNumber=9690C5D609FCE442C35B9916D563F9F187B68AD4 Validity Not Before: Jul 10 18:27:11 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=687005ff-34b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:6e:a1:10:7f:e0:c3:fb:9a:72:72:ef:ed: fc:4b:0a:59:d3:0e:41:21:4d:d2:79:5d:9f:27:e4: af:fc:0e:70:36:27:19:20:e5:ed:79:38:54:99:a0: b3:04:af:d3:d5:53:8c:13:16:0f:93:ee:c0:e6:6c: dc:70:36:50:1c:c1:13:73:ae:05:2d:8d:82:05:7e: 40:23:be:3f:cc:02:a1:43:29:7a:73:67:5a:5e:4d: 4c:4f:a2:f5:cc:ea:ce:ed:ca:87:11:4c:24:26:03: 93:5f:75:4d:52:2b:4c:60:e7:34:0c:45:70:45:07: 1b:26:d5:13:31:f5:4c:bd:7f:91:7e:74:e6:e9:e4: 88:8e:6f:c9:1f:8b:2a:80:74:cb:b9:e7:bf:76:bf: 4a:ee:0e:6d:d8:e6:fd:a2:1d:4d:bb:9d:42:ae:29: 67:8d:5c:02:9c:cd:a0:41:77:6f:73:1f:55:78:ff: cf:fc:8d:01:88:6c:57:d8:d6:dc:be:f5:cc:7f:95: 66:13:53:21:d8:7a:0a:77:77:a1:c8:6c:1b:62:ce: 6d:cf:bc:cb:26:d6:a6:64:9b:e5:e9:6d:93:ca:64: 7d:df:32:5b:ad:bc:82:c6:67:0f:71:b6:41:62:76: ec:01:c4:e1:5a:e5:b7:04:8c:b3:c5:7d:02:f5:bc: d2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B7:4B:CA:81:36:19:1E:29:88:DF:C1:C3:A7:B0:99:C5:2A:D8:CD X509v3 Authority Key Identifier: keyid:96:90:C5:D6:09:FC:E4:42:C3:5B:99:16:D5:63:F9:F1:87:B6:8A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/lpDF1gn85ELDW5kW1WP58Ye2itQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpDF1gn85ELDW5kW1WP58Ye2itQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8E2C/0FE1ED06A2FB11E9A526A57EC4F9AE02/6C153768CE5511EB9DD80C30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.208.0/23 Signature Algorithm: sha256WithRSAEncryption 24:ff:78:08:7a:33:de:7a:18:7e:16:d4:f2:78:94:50:77:4f: 93:fa:34:4c:df:88:a9:be:ba:4b:87:de:e4:59:5d:93:2f:eb: 17:3c:9e:83:b4:ff:9d:60:c9:10:f6:6f:7d:bd:b9:ef:81:f9: ae:16:65:39:8f:81:19:69:69:db:a9:39:5d:9c:97:52:75:4b: 05:2c:5e:fe:4e:ca:d9:52:33:c0:e8:79:4a:ba:66:e7:ae:b7: ca:cd:12:25:a7:5f:6e:99:41:e2:cf:5d:c1:4c:bb:11:a8:0b: fc:79:0f:a7:50:d2:2e:34:98:4a:00:f4:be:2a:cd:82:a5:e2: 29:f2:7c:1a:b4:be:50:dc:80:67:1c:23:c3:1b:a8:e0:48:04: 11:9b:bd:eb:b9:cf:32:0e:d4:a9:a2:ac:57:81:63:39:5c:35: 8b:06:b6:bb:b3:34:79:18:2c:a0:81:3c:5a:35:36:3d:af:ef: 0d:c2:7d:72:bf:de:e2:cc:64:63:c6:ef:f8:da:f1:76:f2:51: 0a:45:f8:9a:bc:9f:a6:82:50:9d:65:ff:10:f8:08:ed:58:c6: f5:b4:a9:70:cb:aa:6c:b0:1b:eb:29:6d:e2:e1:06:0f:d5:87: 40:66:c0:55:08:36:2c:e8:cf:d2:c8:85:04:ed:07:4d:7e:37: 5f:f8:bf:a8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhFMkMxMTAvBgNVBAUTKDk2OTBDNUQ2MDlGQ0U0NDJDMzVCOTkxNkQ1NjNGOUYx ODdCNjhBRDQwHhcNMjUwNzEwMTgyNzExWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcwMDVmZi0zNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqk9uoRB/4MP7mnJy7+38SwpZ0w5BIU3SeV2fJ+Sv/A5wNicZIOXteThUmaCz BK/T1VOMExYPk+7A5mzccDZQHMETc64FLY2CBX5AI74/zAKhQyl6c2daXk1MT6L1 zOrO7cqHEUwkJgOTX3VNUitMYOc0DEVwRQcbJtUTMfVMvX+RfnTm6eSIjm/JH4sq gHTLuee/dr9K7g5t2Ob9oh1Nu51CrilnjVwCnM2gQXdvcx9VeP/P/I0BiGxX2Nbc vvXMf5VmE1Mh2HoKd3ehyGwbYs5tz7zLJtamZJvl6W2TymR93zJbrbyCxmcPcbZB YnbsAcThWuW3BIyzxX0C9bzStwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG63S8qB NhkeKYjfwcOnsJnFKtjNMB8GA1UdIwQYMBaAFJaQxdYJ/ORCw1uZFtVj+fGHtorU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEUyQy8wRkUxRUQwNkEy RkIxMUU5QTUyNkE1N0VDNEY5QUUwMi9scERGMWduODVFTERXNWtXMVdQNThZZTJp dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xwREYxZ244NUVMRFc1a1cxV1A1OFllMml0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDhFMkMvMEZFMUVEMDZBMkZCMTFFOUE1MjZBNTdFQzRGOUFFMDIvNkMxNTM3NjhD RTU1MTFFQjlERDgwQzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFni9AwDQYJKoZIhvcNAQELBQADggEBACT/eAh6M956GH4W 1PJ4lFB3T5P6NEzfiKm+ukuH3uRZXZMv6xc8noO0/51gyRD2b329ue+B+a4WZTmP gRlpadupOV2cl1J1SwUsXv5OytlSM8DoeUq6Zueut8rNEiWnX26ZQeLPXcFMuxGo C/x5D6dQ0i40mEoA9L4qzYKl4inyfBq0vlDcgGccI8MbqOBIBBGbveu5zzIO1Kmi rFeBYzlcNYsGtruzNHkYLKCBPFo1Nj2v7w3CfXK/3uLMZGPG7/ja8XbyUQpF+Jq8 n6aCUJ1l/xD4CO1YxvW0qXDLqmywG+spbeLhBg/Vh0BmwFUINizoz9LIhQTtB01+ N1/4v6g= -----END CERTIFICATE-----Generated at Sun Jul 20 07:11:48 2025 by rpki-client