$ rpki-client -vvf rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/071307C4CF2711EFAE85C158C4F9AE02.roa File: 071307C4CF2711EFAE85C158C4F9AE02.roa (raw, json) Hash identifier: Jdi5YMAdvLRIKc4pHfedwRGTiMQF2AZRQPVcxAS4Y3w= Subject key identifier: CA:3E:EC:5C:0C:99:56:C7:23:D3:F2:C7:31:93:96:C6:52:96:1D:2F Certificate issuer: /CN=A91462B5/serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Certificate serial: 038B Authority key identifier: 64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/071307C4CF2711EFAE85C158C4F9AE02.roa Signing time: Wed 21 May 2025 01:18:24 +0000 ROA not before: Wed 21 May 2025 01:18:24 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 21859 IP address blocks: 103.215.125.0/24 maxlen: 24 103.215.126.0/24 maxlen: 24 157.119.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 02:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 907 (0x38b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91462B5, serialNumber=6483198A5054D4AB7A0161CD6391FA6C14B00208 Validity Not Before: May 21 01:18:24 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682d29e0-11d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:11:b2:f5:91:d9:a4:0e:ad:df:1c:b8:93:c7: ac:f3:85:0d:fd:4d:41:3b:c2:6b:46:23:ab:04:c4: 05:a0:55:e9:dc:6a:ab:31:8d:5a:7e:6f:9c:61:18: b3:d5:b8:44:46:4f:f1:8f:32:fe:6c:c0:e7:d7:fd: 59:5c:7c:81:31:de:5f:98:a5:d2:63:b8:8d:a5:08: 12:aa:a3:2b:9f:17:70:b3:56:15:4b:25:4a:6c:16: 49:b7:41:87:f3:62:49:6f:34:37:8b:c0:59:d1:0e: 0f:6e:7e:a8:8d:b0:78:00:f3:d1:b2:b6:b9:0c:58: 91:36:b9:8f:e6:4d:60:b9:f7:ca:a2:a0:04:14:3e: d3:b1:e6:87:d1:82:10:38:35:01:2b:86:45:fb:4d: a9:05:3b:72:b6:b9:38:ec:d5:6f:b3:4e:f7:f4:df: 7a:f8:aa:44:90:7e:95:9b:e5:54:d5:d0:80:0b:15: 79:49:bc:f0:70:6e:83:bb:a4:09:45:d4:34:94:5b: db:60:d6:46:e5:17:34:de:3b:ea:fa:39:7d:d0:71: dc:f4:ed:6c:ff:67:6b:39:b7:de:43:16:45:53:5c: 8f:9f:f6:42:04:fb:f4:c0:09:e6:9e:9a:b0:0e:72: 26:39:53:2a:94:79:6e:3e:a6:26:44:b7:de:5b:73: 96:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3E:EC:5C:0C:99:56:C7:23:D3:F2:C7:31:93:96:C6:52:96:1D:2F X509v3 Authority Key Identifier: keyid:64:83:19:8A:50:54:D4:AB:7A:01:61:CD:63:91:FA:6C:14:B0:02:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZIMZilBU1Kt6AWHNY5H6bBSwAgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91462B5/6D5FED92CC2F11EC85538037C4F9AE02/071307C4CF2711EFAE85C158C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.215.125.0-103.215.126.255 157.119.23.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:0e:8b:04:c0:4f:ff:09:3e:49:45:02:b3:87:13:84:77:01: cd:66:89:0b:a2:68:ab:9b:4e:57:28:02:22:ea:94:f0:25:55: c8:a8:6a:e9:b5:a2:da:1e:c6:75:93:dc:86:4a:89:55:0b:77: e8:ea:4a:95:7c:92:63:60:2f:81:30:2b:3e:a8:01:ec:90:44: 72:01:39:75:ab:84:13:d8:f1:1f:72:c0:91:4c:bd:92:da:0f: 0e:57:39:a3:19:e4:85:e6:66:32:15:ef:4e:a3:6d:c2:73:d9: f7:70:93:c9:c2:32:cb:62:ab:7e:dd:73:f8:94:0b:65:da:71: 2a:5e:0f:94:8e:87:c0:20:50:34:7e:7b:e1:76:9f:10:c6:8a: 76:4f:72:9c:2a:92:3f:c0:48:de:44:0f:60:6f:7c:a2:f2:15: 0c:5e:3c:a2:08:f1:d9:0e:f9:c2:f3:f0:94:e3:c2:2b:37:cf: e5:ec:90:29:46:ba:8b:b2:b4:e1:5b:f9:f3:74:87:54:7e:d5: 3d:2e:ba:95:6f:4f:d8:47:28:99:0b:7f:c3:64:60:a6:09:df: 18:d9:1c:5d:d3:9b:cb:04:30:12:f9:fa:b1:9a:a7:40:da:a2: 0f:e8:a4:e8:42:90:02:7e:a7:2f:29:fd:63:e4:f9:d7:1b:6c: 7e:e7:ba:8c -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyQjUxMTAvBgNVBAUTKDY0ODMxOThBNTA1NEQ0QUI3QTAxNjFDRDYzOTFGQTZD MTRCMDAyMDgwHhcNMjUwNTIxMDExODI0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJkMjllMC0xMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxGy9ZHZpA6t3xy4k8es84UN/U1BO8JrRiOrBMQFoFXp3GqrMY1afm+cYRiz 1bhERk/xjzL+bMDn1/1ZXHyBMd5fmKXSY7iNpQgSqqMrnxdws1YVSyVKbBZJt0GH 82JJbzQ3i8BZ0Q4Pbn6ojbB4APPRsra5DFiRNrmP5k1guffKoqAEFD7TseaH0YIQ ODUBK4ZF+02pBTtytrk47NVvs0739N96+KpEkH6Vm+VU1dCACxV5SbzwcG6Du6QJ RdQ0lFvbYNZG5Rc03jvq+jl90HHc9O1s/2drObfeQxZFU1yPn/ZCBPv0wAnmnpqw DnImOVMqlHluPqYmRLfeW3OW0wIDAQABo4ICozCCAp8wHQYDVR0OBBYEFMo+7FwM mVbHI9PyxzGTlsZSlh0vMB8GA1UdIwQYMBaAFGSDGYpQVNSregFhzWOR+mwUsAII MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjJCNS82RDVGRUQ5MkND MkYxMUVDODU1MzgwMzdDNEY5QUUwMi9aSU1aaWxCVTFLdDZBV0hOWTVINmJCU3dB Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJTVppbEJVMUt0NkFXSE5ZNUg2YkJTd0FnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyQjUvNkQ1RkVEOTJDQzJGMTFFQzg1NTM4MDM3QzRGOUFFMDIvMDcxMzA3QzRD RjI3MTFFRkFFODVDMTU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQwDAMEAGfXfQMEAGfXfgMEAJ13FzANBgkqhkiG9w0BAQsFAAOC AQEAjw6LBMBP/wk+SUUCs4cThHcBzWaJC6Joq5tOVygCIuqU8CVVyKhq6bWi2h7G dZPchkqJVQt36OpKlXySY2AvgTArPqgB7JBEcgE5dauEE9jxH3LAkUy9ktoPDlc5 oxnkheZmMhXvTqNtwnPZ93CTycIyy2Krft1z+JQLZdpxKl4PlI6HwCBQNH574Xaf EMaKdk9ynCqSP8BI3kQPYG98ovIVDF48ogjx2Q75wvPwlOPCKzfP5eyQKUa6i7K0 4Vv583SHVH7VPS66lW9P2EcomQt/w2RgpgnfGNkcXdObywQwEvn6sZqnQNqiD+ik 6EKQAn6nLyn9Y+T51xtsfue6jA== -----END CERTIFICATE-----Generated at Fri Oct 24 07:15:18 2025 by rpki-client