$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/CF2E103080E011F08E83DE46C4F9AE02.roa File: CF2E103080E011F08E83DE46C4F9AE02.roa (raw, json) Hash identifier: Y6JO5fQI73bFQr5WyCjc2Hk/eYd4ilGqwT2WOKBxnQ8= Subject key identifier: 23:2E:86:28:DC:C1:22:83:B8:F3:FE:FB:9B:58:0E:96:41:C1:59:D2 Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Certificate serial: 0774 Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/CF2E103080E011F08E83DE46C4F9AE02.roa Signing time: Sun 24 Aug 2025 11:52:29 +0000 ROA not before: Sun 24 Aug 2025 11:52:29 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142044 IP address blocks: 103.165.158.0/24 maxlen: 24 2407:4ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1908 (0x774) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E Validity Not Before: Aug 24 11:52:29 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68aafcfc-7d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:df:67:95:2c:bc:dd:17:77:b3:0a:76:80:1b: b6:3f:e3:15:21:d1:30:68:8b:64:f1:63:b7:75:e2: d4:90:34:2f:43:2e:21:48:a6:e0:77:0f:87:21:28: fa:61:4f:95:70:0b:03:6e:42:77:a1:ca:e9:09:2a: 57:fc:a9:42:83:bf:12:3f:ef:1f:89:a2:84:e1:da: 43:e9:db:5b:ec:ae:99:07:a0:49:5e:46:12:de:1a: b1:1a:28:ef:61:f1:53:29:44:4e:fd:4d:d8:2d:25: a6:03:d6:0b:75:d5:5c:ef:d1:e4:5f:c4:78:7f:7a: 76:1f:e8:8a:9e:00:1c:80:2b:65:50:59:c3:6d:07: 93:eb:92:48:b3:06:d3:cc:bc:b9:1d:ce:07:23:a4: 59:7d:22:ef:08:c2:2a:b5:5a:10:79:c5:ce:27:a7: cc:b2:d7:6b:3c:91:a3:8e:de:be:97:a4:7c:3c:e3: f0:75:98:22:98:33:e3:89:3f:fd:ba:e1:35:63:af: 26:63:4f:9d:fd:6f:22:8b:82:14:21:d6:92:db:7f: 11:8c:93:de:36:40:2b:ec:3c:82:22:1e:75:dc:fa: c3:67:bf:36:2e:e2:27:5b:6d:97:0b:dd:f3:1c:f1: f8:e2:7e:65:8a:bc:8f:54:c8:46:31:a2:62:3b:eb: 9d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2E:86:28:DC:C1:22:83:B8:F3:FE:FB:9B:58:0E:96:41:C1:59:D2 X509v3 Authority Key Identifier: keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/CF2E103080E011F08E83DE46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.158.0/24 IPv6: 2407:4ac0::/32 Signature Algorithm: sha256WithRSAEncryption 31:d7:6a:47:92:34:84:20:7c:0d:e2:a5:ce:9e:d5:8f:9b:4a: 3f:52:33:ce:c1:38:53:c5:27:e0:1f:18:69:fd:48:18:bc:1b: 06:24:44:c9:d8:c5:7d:68:5a:dd:d7:8e:09:be:06:3a:95:ad: 31:69:49:24:36:7c:16:22:ce:75:bd:08:4f:74:09:cb:99:68: 3c:e9:ba:3d:89:ee:fd:e8:aa:18:d0:7a:00:84:cf:05:ed:e1: e2:5e:44:58:71:97:44:f3:3f:c5:16:b2:d9:d3:f1:77:f3:ac: d6:6d:b6:ac:82:6b:a5:fb:e4:07:cf:ce:27:f6:1d:cf:b9:7d: 19:8c:bb:64:39:0f:c3:32:00:2c:b2:1a:b9:e4:46:da:d5:41: 9f:66:b5:00:f6:06:0c:2d:a6:96:53:d8:9e:96:1f:cb:b1:57: 49:f7:3a:6e:7c:37:34:a9:a8:ef:33:51:d3:f3:6d:74:9e:83: 85:9c:02:cb:2d:6e:29:5e:8a:78:8d:ee:af:39:87:f4:af:84: 52:29:7f:5f:fa:1c:41:b7:c9:bb:6c:2f:fa:7c:f2:28:f5:35: b7:03:20:f4:64:11:7b:26:8e:5e:e3:cc:8a:38:f1:ec:00:b1: 8b:5a:b8:33:ec:4f:22:d6:56:8f:6e:54:a1:bf:3f:68:b0:cf: 43:fa:a0:1e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU2QjcxMTAvBgNVBAUTKDgzRDk2RjFERUE3MkE5OUQyMzRCNDQ1NkQ2RjY2NzVE QzdFNjA2MUUwHhcNMjUwODI0MTE1MjI5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFhZmNmYy03ZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2N9nlSy83Rd3swp2gBu2P+MVIdEwaItk8WO3deLUkDQvQy4hSKbgdw+HISj6 YU+VcAsDbkJ3ocrpCSpX/KlCg78SP+8fiaKE4dpD6dtb7K6ZB6BJXkYS3hqxGijv YfFTKURO/U3YLSWmA9YLddVc79HkX8R4f3p2H+iKngAcgCtlUFnDbQeT65JIswbT zLy5Hc4HI6RZfSLvCMIqtVoQecXOJ6fMstdrPJGjjt6+l6R8POPwdZgimDPjiT/9 uuE1Y68mY0+d/W8ii4IUIdaS238RjJPeNkAr7DyCIh513PrDZ782LuInW22XC93z HPH44n5liryPVMhGMaJiO+udoQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCMuhijc wSKDuPP++5tYDpZBwVnSMB8GA1UdIwQYMBaAFIPZbx3qcqmdI0tEVtb2Z13H5gYe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZCNy85NUVGN0RCQTk2 N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFaMGpTMFJXMXZablhjZm1C aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c5bHZIZXB5cVowalMwUlcxdlpuWGNmbUJoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU2QjcvOTVFRjdEQkE5NjdEMTFFQkFERDUwRDJDQzRGOUFFMDIvQ0YyRTEwMzA4 MEUwMTFGMDhFODNERTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABnpZ4wDQQCAAIwBwMFACQHSsAwDQYJKoZIhvcNAQELBQAD ggEBADHXakeSNIQgfA3ipc6e1Y+bSj9SM87BOFPFJ+AfGGn9SBi8GwYkRMnYxX1o Wt3Xjgm+BjqVrTFpSSQ2fBYiznW9CE90CcuZaDzpuj2J7v3oqhjQegCEzwXt4eJe RFhxl0TzP8UWstnT8XfzrNZttqyCa6X75AfPzif2Hc+5fRmMu2Q5D8MyACyyGrnk RtrVQZ9mtQD2BgwtppZT2J6WH8uxV0n3Om58NzSpqO8zUdPzbXSeg4WcAsstbile iniN7q85h/SvhFIpf1/6HEG3ybtsL/p88ij1NbcDIPRkEXsmjl7jzIo48ewAsYta uDPsTyLWVo9uVKG/P2iwz0P6oB4= -----END CERTIFICATE-----Generated at Fri Sep 19 09:15:24 2025 by rpki-client