$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BD84664CB0F011E5A08A224DC4F9AE02.roa File: BD84664CB0F011E5A08A224DC4F9AE02.roa (raw, json) Hash identifier: oG5ygd/penwWyXmZZkzYKDAIiWuJVz9Qy2pJuzyaYxo= Subject key identifier: 8C:42:13:29:43:E0:96:F9:7E:95:C4:A7:50:E3:9F:FB:CB:04:CA:31 Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Certificate serial: 279A Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BD84664CB0F011E5A08A224DC4F9AE02.roa Signing time: Tue 08 Jul 2025 15:52:47 +0000 ROA not before: Tue 08 Jul 2025 15:52:47 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 58430 IP address blocks: 103.11.12.0/24 maxlen: 24 2405:6d00:c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10138 (0x279a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81 Validity Not Before: Jul 8 15:52:47 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686d3ecf-34fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:db:ad:1e:68:8a:68:0d:84:c2:85:fe:e2:11: f9:80:a0:46:18:2d:f5:33:90:8c:b2:c4:04:34:3e: 4f:12:35:01:dd:a4:d1:36:f1:54:e6:a8:07:ec:5b: 4d:65:36:87:a3:8e:67:61:99:94:3a:3f:ec:42:ab: 6a:8b:0a:77:d9:ca:c5:18:35:b0:e3:59:fd:d0:c9: 80:2f:30:f3:f5:cb:e4:c1:02:a5:6d:76:89:81:00: c7:18:92:0c:28:07:51:d4:3c:ec:2c:d9:7a:50:89: ef:0d:4f:ec:55:22:3d:b1:9f:60:ba:a5:dd:a5:56: 37:70:ff:e7:95:33:2f:41:86:aa:41:5f:07:e4:25: 06:37:72:1f:cd:6c:62:15:d0:fa:4d:b8:39:8d:a9: b7:1a:47:63:83:79:52:fe:4a:6d:53:44:2b:46:26: 5d:81:4c:72:a2:2d:96:07:e9:2f:92:0a:a6:a8:c2: a3:f2:5c:25:0c:ac:f7:57:fb:11:0a:de:28:9c:ed: e7:13:78:e7:09:38:d9:8c:25:07:90:ad:43:90:69: 11:65:6f:5f:54:e5:fe:27:49:e7:cf:e1:98:43:76: 62:35:d6:34:f6:2f:50:f6:87:2e:e5:17:92:9e:c0: 58:44:98:cd:c6:ef:74:5b:ba:f9:5e:66:10:5b:c9: 23:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:42:13:29:43:E0:96:F9:7E:95:C4:A7:50:E3:9F:FB:CB:04:CA:31 X509v3 Authority Key Identifier: keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BD84664CB0F011E5A08A224DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.11.12.0/24 IPv6: 2405:6d00:c00::/48 Signature Algorithm: sha256WithRSAEncryption 73:ba:56:0f:33:07:22:45:df:e1:1e:c9:ed:f9:93:de:c2:6b: 00:66:4c:ba:7d:75:43:3e:19:78:d4:75:40:e8:48:0a:e5:ce: 8e:32:5b:b2:51:e7:07:f7:8a:aa:4d:7e:77:78:38:c0:f2:6e: 64:d2:c9:49:df:19:f4:7b:a4:78:b2:a5:8e:b9:0d:0c:ea:eb: cf:5e:fa:76:db:70:33:dd:08:f3:6d:5d:11:53:bc:4b:cd:5c: 55:f0:9d:6a:45:42:3e:04:9c:2d:6d:8a:66:d8:cc:30:20:0b: ea:94:66:36:a5:8c:f8:f9:14:e2:6c:92:a5:79:16:8b:5c:f3: 96:d5:f7:ac:86:39:2f:b9:6f:49:8a:2e:2d:46:b0:60:93:13: 34:08:9c:22:52:f6:e3:81:8f:82:08:22:0d:d1:dd:cc:89:7a: 34:92:fe:d6:a8:d7:d9:bc:01:bd:2f:1d:97:95:8f:1c:04:3f: 55:db:51:98:fe:99:76:fe:09:78:05:eb:b7:c4:77:d1:fa:54: 9d:53:79:8f:76:93:88:d8:69:26:18:de:63:15:fc:9c:e2:e7: 26:ae:6e:15:e6:a7:27:45:b9:93:0f:b1:16:bc:84:ba:15:30: bb:75:53:f5:0e:b7:77:12:bc:ef:6a:68:6c:a5:a4:5b:d1:cc: 64:d3:c7:e6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICJ5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE RjgwN0NEODEwHhcNMjUwNzA4MTU1MjQ3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZkM2VjZi0zNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dutHmiKaA2EwoX+4hH5gKBGGC31M5CMssQEND5PEjUB3aTRNvFU5qgH7FtN ZTaHo45nYZmUOj/sQqtqiwp32crFGDWw41n90MmALzDz9cvkwQKlbXaJgQDHGJIM KAdR1DzsLNl6UInvDU/sVSI9sZ9guqXdpVY3cP/nlTMvQYaqQV8H5CUGN3IfzWxi FdD6Tbg5jam3Gkdjg3lS/kptU0QrRiZdgUxyoi2WB+kvkgqmqMKj8lwlDKz3V/sR Ct4onO3nE3jnCTjZjCUHkK1DkGkRZW9fVOX+J0nnz+GYQ3ZiNdY09i9Q9ocu5ReS nsBYRJjNxu90W7r5XmYQW8kjCwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIxCEylD 4Jb5fpXEp1Djn/vLBMoxMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3 Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6 WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFFNjAvRjE5OTY3MTJDN0NGMTFFNEIxM0JFMTIxQzRGOUFFMDIvQkQ4NDY2NENC MEYwMTFFNUEwOEEyMjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnCwwwDwQCAAIwCQMHACQFbQAMADANBgkqhkiG9w0BAQsF AAOCAQEAc7pWDzMHIkXf4R7J7fmT3sJrAGZMun11Qz4ZeNR1QOhICuXOjjJbslHn B/eKqk1+d3g4wPJuZNLJSd8Z9HukeLKljrkNDOrrz176dttwM90I821dEVO8S81c VfCdakVCPgScLW2KZtjMMCAL6pRmNqWM+PkU4mySpXkWi1zzltX3rIY5L7lvSYou LUawYJMTNAicIlL244GPgggiDdHdzIl6NJL+1qjX2bwBvS8dl5WPHAQ/VdtRmP6Z dv4JeAXrt8R30fpUnVN5j3aTiNhpJhjeYxX8nOLnJq5uFeanJ0W5kw+xFryEuhUw u3VT9Q63dxK872pobKWkW9HMZNPH5g== -----END CERTIFICATE-----Generated at Sun Jul 20 10:53:48 2025 by rpki-client