$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/9D85178EE2AF11E9919C1D4EC4F9AE02.roa File: 9D85178EE2AF11E9919C1D4EC4F9AE02.roa (raw, json) Hash identifier: Io6gCyR0FtQ3xcV6SmfOiqcTWURvoXsQUWodciVqXV4= Subject key identifier: 28:BC:22:36:8B:83:46:41:82:E7:F3:C7:55:D1:CD:13:E2:E4:D1:BB Certificate issuer: /CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292 Certificate serial: 0D1C Authority key identifier: 72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/9D85178EE2AF11E9919C1D4EC4F9AE02.roa Signing time: Thu 10 Jul 2025 18:27:48 +0000 ROA not before: Thu 10 Jul 2025 18:27:48 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 137967 IP address blocks: 103.14.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 18:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1B61, serialNumber=728A824092E5741254BB92D597723361A04BF292 Validity Not Before: Jul 10 18:27:48 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68700622-d65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c5:e1:81:2d:a8:57:a5:6c:5d:d3:f3:67:bb: 4a:3e:83:71:62:7f:da:89:8d:bb:ad:3b:cc:42:65: 47:f2:24:8f:85:2e:12:8a:d1:08:ec:95:54:15:9d: 97:7b:07:92:cc:5c:63:7b:57:44:73:92:e7:17:4c: 66:aa:93:0a:9a:c7:77:81:11:9c:39:45:77:b5:d2: 72:f7:ec:87:a3:c3:d8:fe:5c:bf:0a:e1:61:ac:85: 71:b6:41:1b:e3:4c:84:d2:ca:47:cf:ea:3e:db:6e: 8a:44:a8:cd:c1:8d:c0:f7:82:9d:0d:68:0e:56:63: a3:7d:0f:a3:e1:c3:5f:f6:69:ac:24:9d:e4:01:91: 31:c2:c1:c2:6c:6c:54:d3:ef:00:80:c5:e5:a9:0f: 38:47:ca:0c:d8:13:ef:d1:0d:4f:5a:80:79:f6:e7: 8d:12:78:c5:08:c0:bf:be:5d:bd:e7:fe:cb:0f:4e: 42:84:ec:b0:5e:25:e4:e2:33:37:0e:17:7f:be:20: 99:16:41:fc:bb:a9:a5:42:9b:c3:6f:45:72:a4:40: 4d:ae:b9:d3:9c:e0:fe:a8:54:47:b5:e9:17:b6:a4: 3e:45:df:30:76:86:cd:af:df:d3:ca:ab:b3:5b:93: 3d:51:8d:72:c9:31:66:de:2f:5a:f0:e7:4b:80:3a: b1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BC:22:36:8B:83:46:41:82:E7:F3:C7:55:D1:CD:13:E2:E4:D1:BB X509v3 Authority Key Identifier: keyid:72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/9D85178EE2AF11E9919C1D4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.14.72.0/24 Signature Algorithm: sha256WithRSAEncryption 19:bd:dc:3b:a5:f1:65:6d:98:1a:57:7d:6b:11:fc:6d:f0:16: 86:88:4d:3c:24:0f:2b:9a:59:c1:43:71:61:89:55:b0:75:5e: 71:0b:ec:04:21:a9:7f:a7:b1:11:3a:9f:b0:2f:94:39:7b:77: a1:fb:12:83:96:d0:55:d2:47:2d:ed:e9:1c:30:b7:ce:29:f9: b0:87:7b:e1:9e:68:b6:cf:84:08:b7:48:e7:04:3b:3d:d1:45: 67:0e:5e:d4:c2:55:be:34:ca:42:ef:fd:63:65:ed:d6:61:e9: 1c:3a:cb:7e:8f:aa:10:9f:0b:cc:86:78:a3:4f:f7:d5:1a:2f: 25:e8:6f:fa:83:cc:66:d8:fb:81:b3:ca:14:3e:f6:4b:03:46: b0:c0:c0:d3:bf:d8:a8:7e:75:f0:10:a0:90:47:e2:a8:a5:1d: f7:6b:bc:2b:e8:cf:46:55:dd:2b:0f:82:27:e4:12:37:1b:44: 2a:f0:71:f2:89:8d:d1:0a:52:c5:56:46:29:f5:d2:d8:12:56: b9:4c:17:32:46:78:90:09:e0:d9:59:79:e2:c0:a2:be:7f:73: e4:5c:aa:f7:0f:0e:9c:aa:71:88:de:99:0e:9b:ec:98:4d:be: 17:51:7b:a1:eb:92:20:d7:e3:25:96:70:e3:24:86:e5:4e:3f: ee:be:d7:95 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFCNjExMTAvBgNVBAUTKDcyOEE4MjQwOTJFNTc0MTI1NEJCOTJENTk3NzIzMzYx QTA0QkYyOTIwHhcNMjUwNzEwMTgyNzQ4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcwMDYyMi1kNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncXhgS2oV6VsXdPzZ7tKPoNxYn/aiY27rTvMQmVH8iSPhS4SitEI7JVUFZ2X eweSzFxje1dEc5LnF0xmqpMKmsd3gRGcOUV3tdJy9+yHo8PY/ly/CuFhrIVxtkEb 40yE0spHz+o+226KRKjNwY3A94KdDWgOVmOjfQ+j4cNf9mmsJJ3kAZExwsHCbGxU 0+8AgMXlqQ84R8oM2BPv0Q1PWoB59ueNEnjFCMC/vl295/7LD05ChOywXiXk4jM3 Dhd/viCZFkH8u6mlQpvDb0VypEBNrrnTnOD+qFRHtekXtqQ+Rd8wdobNr9/Tyquz W5M9UY1yyTFm3i9a8OdLgDqx1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFCi8IjaL g0ZBgufzx1XRzRPi5NG7MB8GA1UdIwQYMBaAFHKKgkCS5XQSVLuS1ZdyM2GgS/KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUI2MS8zRjAwRDc1Q0Uy QUYxMUU5QkIwMUZDNERDNEY5QUUwMi9jb3FDUUpMbGRCSlV1NUxWbDNJellhQkw4 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NvcUNRSkxsZEJKVXU1TFZsM0l6WWFCTDhwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjFCNjEvM0YwMEQ3NUNFMkFGMTFFOUJCMDFGQzREQzRGOUFFMDIvOUQ4NTE3OEVF MkFGMTFFOTkxOUMxRDRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnDkgwDQYJKoZIhvcNAQELBQADggEBABm93Dul8WVtmBpX fWsR/G3wFoaITTwkDyuaWcFDcWGJVbB1XnEL7AQhqX+nsRE6n7AvlDl7d6H7EoOW 0FXSRy3t6Rwwt84p+bCHe+GeaLbPhAi3SOcEOz3RRWcOXtTCVb40ykLv/WNl7dZh 6Rw6y36PqhCfC8yGeKNP99UaLyXob/qDzGbY+4GzyhQ+9ksDRrDAwNO/2Kh+dfAQ oJBH4qilHfdrvCvoz0ZV3SsPgifkEjcbRCrwcfKJjdEKUsVWRin10tgSVrlMFzJG eJAJ4NlZeeLAor5/c+RcqvcPDpyqcYjemQ6b7JhNvhdRe6HrkiDX4yWWcOMkhuVO P+6+15U= -----END CERTIFICATE-----Generated at Mon Jul 21 12:41:41 2025 by rpki-client