$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/CA08C348098D11EDAB30E934C4F9AE02.roa File: CA08C348098D11EDAB30E934C4F9AE02.roa (raw, json) Hash identifier: XQQlM6hNFAUKcUE8JK0r1I7v7DiMWYg0+Wov0CdSVM0= Subject key identifier: 82:B7:6F:30:74:7E:F0:F8:5B:48:11:9A:19:C3:11:96:A0:E3:0D:C7 Certificate issuer: /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Certificate serial: 02AC Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/CA08C348098D11EDAB30E934C4F9AE02.roa Signing time: Fri 15 Aug 2025 02:38:33 +0000 ROA not before: Fri 15 Aug 2025 02:38:33 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 137817 IP address blocks: 103.191.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141586, serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Validity Not Before: Aug 15 02:38:33 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=689e9da9-7912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:52:c9:30:76:7f:eb:4b:e8:8c:8c:14:0f:c6: 84:4b:48:42:fc:10:a8:ae:71:a5:52:89:6e:dd:d7: 38:02:48:1c:9c:92:3c:62:47:19:f2:f7:b0:0a:42: 89:de:a8:98:59:92:cb:41:20:e3:75:1d:70:53:82: cd:7e:21:c5:59:04:a1:12:d6:08:b9:7d:8b:45:12: 11:6d:9d:1b:32:b8:08:e2:43:cd:7a:51:10:a9:71: 4f:d8:e2:c0:1a:b2:c8:ea:61:5e:37:8e:c3:8c:23: ab:93:1b:4c:7d:46:a3:38:4e:73:0f:a4:8d:c1:c5: 57:24:ad:36:81:fc:66:7e:f5:e4:43:80:4a:3e:08: 07:9a:32:a1:c2:1d:0a:61:83:05:95:cb:d0:ca:75: 88:8b:57:ba:39:3b:9b:77:30:41:2b:3c:78:84:84: 75:09:a7:ff:e1:97:16:81:97:62:3f:e2:24:b9:32: 3c:93:ba:35:a1:9a:c7:20:8a:44:9c:b9:6d:d2:ec: 88:b1:a0:40:b1:3d:66:f3:d0:c7:0d:5f:38:db:c9: 0b:ed:47:5c:bc:8d:c3:54:b6:c9:14:45:d0:6a:64: b3:93:9f:31:f8:73:09:0b:c2:5e:26:10:fd:c5:4d: 5a:8d:09:dc:a7:e9:44:80:89:eb:f9:a6:da:07:b0: a3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B7:6F:30:74:7E:F0:F8:5B:48:11:9A:19:C3:11:96:A0:E3:0D:C7 X509v3 Authority Key Identifier: keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/CA08C348098D11EDAB30E934C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.140.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:a2:72:d4:d5:50:8c:a1:4f:73:37:f7:92:f8:b5:25:0e:fd: af:3d:d5:a1:4d:9b:a4:d9:49:9a:28:9a:d4:a4:aa:69:b7:81: 60:89:bd:9d:33:a3:28:ed:a4:1a:17:bd:9d:c7:f6:9f:31:49: 3e:5a:45:c9:16:68:7d:d8:dc:78:3f:12:8e:70:ad:5a:cf:ee: 37:d4:26:2d:0f:53:1c:08:4e:22:06:4a:69:68:15:f7:af:82: 77:3f:b9:37:cf:2a:2c:0e:ba:76:34:b3:ac:83:10:41:af:b7: 39:a7:d7:fc:06:31:d2:b2:4b:2f:d1:02:e9:a5:78:f2:97:60: ba:ba:d6:11:3e:a8:71:e1:84:6f:c4:16:36:32:50:de:17:0a: 00:e1:23:44:f9:a1:75:1b:60:8e:c9:63:f6:c8:e1:83:2a:db: 48:ed:81:5c:e5:23:0b:90:84:77:27:c2:90:83:62:1a:a4:b1: 57:12:fc:38:77:95:cf:f1:f5:93:43:1d:2c:42:0f:47:8e:23: fd:37:85:d8:3a:ed:43:43:74:a5:c2:28:b1:13:12:a7:30:47: 4e:76:35:84:31:e8:69:50:0f:41:5e:f0:2b:10:2d:a0:9d:4b: 29:56:5a:6f:dc:aa:fa:74:94:e2:70:44:0f:34:6d:22:ec:41: dc:9d:61:1c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1ODYxMTAvBgNVBAUTKEFDMjNGNTREMzAxNTBCNDYwMDlDMUEwMjlFNUVFQ0RC NkUwNTU2NTYwHhcNMjUwODE1MDIzODMzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODllOWRhOS03OTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11LJMHZ/60vojIwUD8aES0hC/BCornGlUolu3dc4AkgcnJI8YkcZ8vewCkKJ 3qiYWZLLQSDjdR1wU4LNfiHFWQShEtYIuX2LRRIRbZ0bMrgI4kPNelEQqXFP2OLA GrLI6mFeN47DjCOrkxtMfUajOE5zD6SNwcVXJK02gfxmfvXkQ4BKPggHmjKhwh0K YYMFlcvQynWIi1e6OTubdzBBKzx4hIR1Caf/4ZcWgZdiP+IkuTI8k7o1oZrHIIpE nLlt0uyIsaBAsT1m89DHDV8428kL7UdcvI3DVLbJFEXQamSzk58x+HMJC8JeJhD9 xU1ajQncp+lEgInr+abaB7CjPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIK3bzB0 fvD4W0gRmhnDEZag4w3HMB8GA1UdIwQYMBaAFKwj9U0wFQtGAJwaAp5e7NtuBVZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTU4Ni8wRDYxOTE2ODA5 OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMwWUFuQm9Dbmw3czIyNEZW bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDUDFUVEFWQzBZQW5Cb0NubDdzMjI0RlZsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDE1ODYvMEQ2MTkxNjgwOThCMTFFREFDOEZDRjJGQzRGOUFFMDIvQ0EwOEMzNDgw OThEMTFFREFCMzBFOTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnv4wwDQYJKoZIhvcNAQELBQADggEBAJyictTVUIyhT3M3 95L4tSUO/a891aFNm6TZSZoomtSkqmm3gWCJvZ0zoyjtpBoXvZ3H9p8xST5aRckW aH3Y3Hg/Eo5wrVrP7jfUJi0PUxwITiIGSmloFfevgnc/uTfPKiwOunY0s6yDEEGv tzmn1/wGMdKySy/RAumlePKXYLq61hE+qHHhhG/EFjYyUN4XCgDhI0T5oXUbYI7J Y/bI4YMq20jtgVzlIwuQhHcnwpCDYhqksVcS/Dh3lc/x9ZNDHSxCD0eOI/03hdg6 7UNDdKXCKLETEqcwR052NYQx6GlQD0Fe8CsQLaCdSylWWm/cqvp0lOJwRA80bSLs QdydYRw= -----END CERTIFICATE-----Generated at Fri Aug 22 18:26:51 2025 by rpki-client