$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/F9F53948599011EEB54F7158C4F9AE02.roa File: F9F53948599011EEB54F7158C4F9AE02.roa (raw, json) Hash identifier: COduvcn03AcqXsB04vyV+PFYTFyroxeZoB1Buoefevg= Subject key identifier: C5:BC:8D:09:5E:F5:37:2D:A5:90:A7:8F:74:54:56:F0:BA:C9:EE:4E Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Certificate serial: 0171 Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/F9F53948599011EEB54F7158C4F9AE02.roa Signing time: Sun 06 Jul 2025 05:56:30 +0000 ROA not before: Sun 06 Jul 2025 05:56:30 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 967 IP address blocks: 103.247.28.0/23 maxlen: 24 2401:1fe0::/48 maxlen: 48 2401:1fe0:1::/48 maxlen: 48 2401:1fe0:2::/48 maxlen: 48 2401:1fe0:3::/48 maxlen: 48 2401:1fe0:4::/48 maxlen: 48 2401:1fe0:5::/48 maxlen: 48 2401:1fe0:6::/48 maxlen: 48 2401:1fe0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Validity Not Before: Jul 6 05:56:30 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=686a100d-89c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:65:6f:79:0a:24:1c:d1:44:a9:89:da:46:54: 1f:7f:54:ec:f2:e0:4a:b3:80:5b:cd:ce:eb:86:84: e0:19:cf:c0:5e:d9:d6:78:42:a4:7f:d2:49:c1:5a: 97:de:9f:22:65:9c:2c:9a:9b:60:8b:a3:8a:e1:a2: 48:24:7c:d8:48:23:9c:a4:4a:2f:53:6b:c6:e8:46: 5f:3a:60:ad:ea:40:47:cc:24:fd:9b:1d:4a:93:67: 95:53:38:a7:8d:90:03:04:3b:36:ef:89:26:39:14: 25:38:ac:0f:f2:15:00:86:c3:03:ef:51:2e:f6:96: dd:3e:22:28:75:21:0e:f6:5c:ad:71:ff:b0:c1:b6: 2b:aa:0b:1c:95:0b:87:40:a3:ae:ae:0e:f0:3e:7b: 9c:b8:15:7e:67:6c:88:d1:07:52:43:2d:09:c1:5a: 9e:d9:b2:49:a6:a3:b9:a7:5c:74:0b:92:8b:de:91: 9e:d1:0a:ba:16:94:04:17:ee:5a:47:3a:92:6c:0e: be:a0:bc:63:9b:e4:14:9a:da:4c:df:e7:95:b6:cb: 58:50:13:d2:42:63:07:a9:0f:1b:08:51:b6:90:7d: 07:29:8a:e1:8a:00:98:6d:d9:ac:54:e4:64:c4:0f: f6:8e:7b:07:77:8d:a7:a7:66:a8:a7:a9:40:ee:d1: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BC:8D:09:5E:F5:37:2D:A5:90:A7:8F:74:54:56:F0:BA:C9:EE:4E X509v3 Authority Key Identifier: keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/F9F53948599011EEB54F7158C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.247.28.0/23 IPv6: 2401:1fe0::/45 Signature Algorithm: sha256WithRSAEncryption 88:82:cc:a1:0c:8f:29:55:94:47:40:c3:b6:ea:52:53:97:7d: a3:0d:a1:0e:82:84:68:1f:e1:90:1f:d7:79:cd:9b:fe:f3:1e: 0c:54:3e:38:19:d0:81:fb:d6:00:6b:f9:89:ac:bb:03:17:0a: 11:8f:1f:d6:df:77:05:69:00:1d:d1:5a:54:55:ed:a8:a9:19: 2a:fb:c6:0d:47:51:1b:11:ab:ce:76:a2:48:9c:47:49:83:c3: 48:19:3d:85:4f:1b:4e:0a:8b:ec:3c:bb:0f:bd:69:86:29:b9: 62:c6:b4:89:41:36:5b:b9:0a:00:15:c3:40:16:31:c9:91:e0: 6d:51:5a:88:c5:b9:d8:c9:41:5f:80:47:b7:bb:5e:dd:c4:1d: 97:9d:3a:f5:ee:dd:72:04:2c:4d:48:2b:69:01:ac:cf:25:6e: 21:47:78:0a:17:4b:2c:5a:3b:b7:ef:4f:e6:5a:23:bf:f6:12: 99:61:43:89:ce:97:2d:84:a7:8a:29:8b:9b:87:94:66:45:05: aa:83:46:26:ca:86:d8:ac:49:c3:3f:db:ff:e5:08:5a:ac:46: 72:28:5e:b3:1e:ab:53:ac:c5:ed:ba:0d:6a:fe:dc:5e:6f:e7: 8b:1a:96:30:ea:27:65:14:b8:35:fd:e0:b0:0f:f4:dc:d7:62: 0f:ef:8d:d0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBMzExMTAvBgNVBAUTKDFFRjMwQzRDNTYwNEE1NkVDQjNFQUVFN0YyQ0E5N0VC NzgxMDUwNzAwHhcNMjUwNzA2MDU1NjMwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZhMTAwZC04OWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GVveQokHNFEqYnaRlQff1Ts8uBKs4Bbzc7rhoTgGc/AXtnWeEKkf9JJwVqX 3p8iZZwsmptgi6OK4aJIJHzYSCOcpEovU2vG6EZfOmCt6kBHzCT9mx1Kk2eVUzin jZADBDs274kmORQlOKwP8hUAhsMD71Eu9pbdPiIodSEO9lytcf+wwbYrqgsclQuH QKOurg7wPnucuBV+Z2yI0QdSQy0JwVqe2bJJpqO5p1x0C5KL3pGe0Qq6FpQEF+5a RzqSbA6+oLxjm+QUmtpM3+eVtstYUBPSQmMHqQ8bCFG2kH0HKYrhigCYbdmsVORk xA/2jnsHd42np2aop6lA7tFzSQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMW8jQle 9TctpZCnj3RUVvC6ye5OMB8GA1UdIwQYMBaAFB7zDExWBKVuyz6u5/LKl+t4EFBw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0EzMS8wOTBGMTRGQTUw MEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBXN0xQcTduOHNxWDYzZ1FV SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkNBMzEvMDkwRjE0RkE1MDBDMTFFRTgyQjI2ODYzQzRGOUFFMDIvRjlGNTM5NDg1 OTkwMTFFRUI1NEY3MTU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFn9xwwDwQCAAIwCQMHAyQBH+AAADANBgkqhkiG9w0BAQsF AAOCAQEAiILMoQyPKVWUR0DDtupSU5d9ow2hDoKEaB/hkB/Xec2b/vMeDFQ+OBnQ gfvWAGv5iay7AxcKEY8f1t93BWkAHdFaVFXtqKkZKvvGDUdRGxGrznaiSJxHSYPD SBk9hU8bTgqL7Dy7D71phim5Ysa0iUE2W7kKABXDQBYxyZHgbVFaiMW52MlBX4BH t7te3cQdl5069e7dcgQsTUgraQGszyVuIUd4ChdLLFo7t+9P5lojv/YSmWFDic6X LYSniimLm4eUZkUFqoNGJsqG2KxJwz/b/+UIWqxGcihesx6rU6zF7boNav7cXm/n ixqWMOonZRS4Nf3gsA/03NdiD++N0A== -----END CERTIFICATE-----Generated at Mon Jul 21 07:41:22 2025 by rpki-client