$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/F14C782E5B4111F0A3307863C4F9AE02.roa File: F14C782E5B4111F0A3307863C4F9AE02.roa (raw, json) Hash identifier: 6vTGONqzhjdGHEUkre6z0hWqKpmgbLwLfYX97Y9ROXU= Subject key identifier: 5E:78:26:54:1A:5D:A2:E4:3F:07:25:61:48:2E:82:72:8C:27:45:56 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 04A2 Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/F14C782E5B4111F0A3307863C4F9AE02.roa Signing time: Mon 07 Jul 2025 14:52:03 +0000 ROA not before: Mon 07 Jul 2025 14:52:03 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 56224 IP address blocks: 103.150.152.0/24 maxlen: 24 103.150.153.0/24 maxlen: 24 202.12.80.0/24 maxlen: 24 202.12.81.0/24 maxlen: 24 202.12.82.0/24 maxlen: 24 202.12.83.0/24 maxlen: 24 2405:3e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 00:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1186 (0x4a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: Jul 7 14:52:03 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=686bdf13-04b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:41:59:06:3f:d1:97:8d:a0:ab:3e:3c:16:68: ea:c2:84:2b:d2:3f:3e:b2:d8:c1:3f:55:b2:96:f3: fd:4e:59:0e:ea:1b:8d:73:b2:72:ee:26:e4:41:9a: 3d:b0:11:6d:37:8d:f2:38:c4:74:fd:78:45:3c:e9: d2:2f:29:6f:cc:10:2e:6e:ac:a9:8b:b2:43:9c:21: 9a:f7:2c:b4:6a:36:8c:d6:7a:a8:02:a1:98:39:ab: b2:bf:63:eb:12:16:52:60:4e:de:0c:4c:a5:28:3f: d5:4a:51:5e:51:d7:d8:cc:71:b5:8d:a8:06:a6:c9: 68:56:b1:46:15:69:c7:ea:0c:6c:e8:91:48:37:5a: e7:3e:ba:12:ab:4d:e5:8c:99:88:60:75:f2:57:b7: cd:7c:85:64:5f:3d:14:0c:8b:e0:53:04:66:3f:3b: a2:96:42:b5:0d:b6:50:be:fb:de:53:49:70:e1:e0: c9:1c:05:03:b8:28:cf:fa:9e:ef:0a:d9:c0:82:0c: ad:55:8a:b2:f3:06:c7:b1:bc:2c:6f:bd:8d:b5:00: a2:ef:cf:8d:6a:8c:31:a2:81:aa:c8:e6:76:11:41: a5:ed:9c:b0:f5:25:43:f6:5b:17:aa:b1:ad:98:b0: 5e:6d:f5:04:df:db:bb:a4:f0:35:eb:81:2e:4b:32: 6c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:78:26:54:1A:5D:A2:E4:3F:07:25:61:48:2E:82:72:8C:27:45:56 X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/F14C782E5B4111F0A3307863C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.152.0/23 202.12.80.0/22 IPv6: 2405:3e40::/32 Signature Algorithm: sha256WithRSAEncryption 79:9c:72:a5:46:a5:05:da:1c:9d:85:86:cc:1d:47:66:28:3e: bb:84:58:8e:09:ce:17:4f:04:d1:6d:66:04:4d:70:06:67:e3: 52:89:5f:b2:2c:04:e4:10:ce:03:57:c0:ea:b8:31:57:f6:15: d0:b7:d1:33:ac:64:cd:e8:a6:fc:3e:86:d2:85:82:6f:da:1a: d6:6d:34:2a:76:15:ca:5d:5d:62:0d:29:38:fe:62:12:41:1b: a5:5c:3f:98:dd:54:4a:82:84:5b:87:3a:5e:b5:a9:26:94:09: 6c:47:7e:6d:dc:b1:6d:31:db:66:c1:71:ef:d9:1e:c9:b9:f8: 15:a3:07:6f:13:0c:66:d5:93:62:95:e0:9d:eb:74:90:33:4d: bb:61:0d:d0:99:c6:2d:b0:18:2b:69:49:4f:8f:5b:05:03:cf: 17:8a:1f:55:b9:26:5f:7a:b3:ae:62:7b:33:ec:5b:b4:94:d1: 8d:88:e3:3f:7a:2d:ee:f5:47:59:da:30:8a:ce:27:59:dd:ec: 28:81:95:1d:d4:a1:ed:62:d5:0a:27:2e:60:63:a0:d2:70:a3: e3:cd:aa:fb:fd:3f:16:d0:c6:e7:c3:48:47:d9:c0:5b:00:dd: 5e:07:fe:25:3b:ac:e8:4b:4b:8a:97:7c:ab:69:a6:8c:9d:d4: c1:7e:a9:95 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjUwNzA3MTQ1MjAzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZiZGYxMy0wNGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA80FZBj/Rl42gqz48FmjqwoQr0j8+stjBP1WylvP9TlkO6huNc7Jy7ibkQZo9 sBFtN43yOMR0/XhFPOnSLylvzBAubqypi7JDnCGa9yy0ajaM1nqoAqGYOauyv2Pr EhZSYE7eDEylKD/VSlFeUdfYzHG1jagGpsloVrFGFWnH6gxs6JFIN1rnProSq03l jJmIYHXyV7fNfIVkXz0UDIvgUwRmPzuilkK1DbZQvvveU0lw4eDJHAUDuCjP+p7v CtnAggytVYqy8wbHsbwsb72NtQCi78+NaowxooGqyOZ2EUGl7Zyw9SVD9lsXqrGt mLBebfUE39u7pPA164EuSzJs6QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFF54JlQa XaLkPwclYUgugnKMJ0VWMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk0NjcvNzcwQjRGMUE1MjZGMTFFQ0JDNTBFQjE3QzRGOUFFMDIvRjE0Qzc4MkU1 QjQxMTFGMEEzMzA3ODYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnlpgDBALKDFAwDQQCAAIwBwMFACQFPkAwDQYJKoZIhvcN AQELBQADggEBAHmccqVGpQXaHJ2FhswdR2YoPruEWI4JzhdPBNFtZgRNcAZn41KJ X7IsBOQQzgNXwOq4MVf2FdC30TOsZM3opvw+htKFgm/aGtZtNCp2FcpdXWINKTj+ YhJBG6VcP5jdVEqChFuHOl61qSaUCWxHfm3csW0x22bBce/ZHsm5+BWjB28TDGbV k2KV4J3rdJAzTbthDdCZxi2wGCtpSU+PWwUDzxeKH1W5Jl96s65iezPsW7SU0Y2I 4z96Le71R1naMIrOJ1nd7CiBlR3Uoe1i1QonLmBjoNJwo+PNqvv9PxbQxufDSEfZ wFsA3V4H/iU7rOhLS4qXfKtppoyd1MF+qZU= -----END CERTIFICATE-----Generated at Fri Jul 25 00:34:29 2025 by rpki-client