$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/2C7C9DD2258E11F0B42E1529C4F9AE02.roa File: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (raw, json) Hash identifier: KCTQ3tbaoeUAbY8WbJ6K6Z4PRHlUfgdv71MIHaYTETs= Subject key identifier: 16:30:F2:03:A2:03:99:02:74:16:A9:56:A3:E6:79:22:91:3B:E4:23 Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Certificate serial: BC Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/2C7C9DD2258E11F0B42E1529C4F9AE02.roa Signing time: Wed 21 May 2025 05:16:52 +0000 ROA not before: Wed 21 May 2025 05:16:52 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 151627 IP address blocks: 103.25.10.0/23 maxlen: 23 103.25.10.0/24 maxlen: 24 103.25.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Validity Not Before: May 21 05:16:52 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682d61c4-6e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a1:fe:0b:9c:03:87:37:a4:33:ae:f7:df:b7: 09:1a:f0:59:77:88:83:f3:54:2d:a8:38:1d:72:4e: aa:03:c5:04:fc:06:15:e6:c6:f5:98:8b:80:16:92: 9a:85:e2:fc:0c:71:71:34:66:ef:52:ac:ab:84:72: f2:da:39:ef:be:d2:96:d4:04:7a:ac:53:13:f9:a0: 81:9d:ea:be:94:87:2b:82:ab:51:f5:aa:14:04:ec: 91:28:ce:cc:0e:e3:e5:9b:14:3c:82:d7:dd:f4:10: ff:ca:c0:eb:9a:4e:6e:34:4a:2c:d9:94:7e:29:c8: a8:d5:39:aa:ae:e9:f3:99:76:ec:64:64:a9:15:84: 70:ec:43:15:a4:69:64:ef:c1:18:47:1d:97:cf:4b: 35:7d:4a:a8:b9:cc:74:2d:5d:aa:df:9a:41:64:35: 8d:8a:06:26:fa:57:db:39:7d:e4:34:29:8f:28:cc: 48:2d:70:db:97:34:2f:40:5d:4c:8a:99:e2:f0:ff: 5f:49:e3:72:66:13:7b:3c:83:0c:88:d5:08:57:58: 3a:34:89:3b:ad:c0:30:17:36:f0:98:d4:c3:ec:cc: 2f:7a:05:b8:63:b0:84:71:63:a6:4d:12:a6:3d:5f: 5b:35:56:3a:eb:d9:6d:84:e1:02:d8:db:a3:0d:ac: 0f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:30:F2:03:A2:03:99:02:74:16:A9:56:A3:E6:79:22:91:3B:E4:23 X509v3 Authority Key Identifier: keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/2C7C9DD2258E11F0B42E1529C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.25.10.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:23:a2:f9:d8:0a:9e:af:a6:9e:c9:a9:c5:65:67:16:95:4b: f3:21:43:be:28:97:aa:aa:4b:69:3d:0f:9c:3f:23:e5:a1:8b: 8e:2c:bd:df:5f:d1:9a:2d:c8:6b:b7:9f:63:c5:16:d2:09:4b: a4:e1:0e:24:80:a2:b8:3e:a5:72:6c:03:2a:fa:3f:5e:d8:7f: 64:27:2f:86:da:58:51:21:f2:45:f4:16:cc:e2:a0:43:8b:d2: 77:eb:4b:f6:b0:53:53:e2:ed:a8:ac:44:ac:ca:3c:e7:e0:6f: 52:a1:44:f3:97:12:f0:6f:4e:b1:7f:f5:07:69:f3:f2:43:87: ed:6b:e8:93:36:e2:e4:0b:4c:eb:97:c1:05:12:f4:6f:0d:ca: 79:15:6d:2c:e5:bd:2c:5d:55:14:70:c3:16:a5:aa:dd:2a:50: cf:2f:e7:1a:96:95:5a:53:8e:d1:7e:93:20:c4:fb:be:07:36: ec:f4:3c:1d:45:0e:93:6d:72:b4:03:1c:65:b1:ef:6e:e6:14: b6:4b:ba:2e:6a:12:97:d7:78:1f:99:9b:ed:1e:da:a4:63:d0: 4d:f4:ca:d3:46:d8:0e:de:24:83:35:e9:ad:3d:5e:b6:d6:82: 40:eb:22:74:bf:00:ec:1f:19:93:f5:37:0e:83:80:b5:a5:80: b5:f3:75:4a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyRDgxMTAvBgNVBAUTKEVEOUIwRTYwODVBMjVERjI2NzQ5RkYyNzU4MUE0RThC QzdDMTg2Q0MwHhcNMjUwNTIxMDUxNjUyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJkNjFjNC02ZTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6H+C5wDhzekM67337cJGvBZd4iD81QtqDgdck6qA8UE/AYV5sb1mIuAFpKa heL8DHFxNGbvUqyrhHLy2jnvvtKW1AR6rFMT+aCBneq+lIcrgqtR9aoUBOyRKM7M DuPlmxQ8gtfd9BD/ysDrmk5uNEos2ZR+Kcio1TmqrunzmXbsZGSpFYRw7EMVpGlk 78EYRx2Xz0s1fUqoucx0LV2q35pBZDWNigYm+lfbOX3kNCmPKMxILXDblzQvQF1M ipni8P9fSeNyZhN7PIMMiNUIV1g6NIk7rcAwFzbwmNTD7MwvegW4Y7CEcWOmTRKm PV9bNVY669lthOEC2NujDawPdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBYw8gOi A5kCdBapVqPmeSKRO+QjMB8GA1UdIwQYMBaAFO2bDmCFol3yZ0n/J1gaTovHwYbM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDJEOC9FMDkyNDhFQTJB QjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhmSm5TZjhuV0JwT2k4ZkJo c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdac09ZSVdpWGZKblNmOG5XQnBPaThmQmhzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTAyRDgvRTA5MjQ4RUEyQUI2MTFFRkIzMzlGRDgxQzRGOUFFMDIvMkM3QzlERDIy NThFMTFGMEI0MkUxNTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnGQowDQYJKoZIhvcNAQELBQADggEBAE4jovnYCp6vpp7J qcVlZxaVS/MhQ74ol6qqS2k9D5w/I+Whi44svd9f0ZotyGu3n2PFFtIJS6ThDiSA org+pXJsAyr6P17Yf2QnL4baWFEh8kX0FszioEOL0nfrS/awU1Pi7aisRKzKPOfg b1KhRPOXEvBvTrF/9Qdp8/JDh+1r6JM24uQLTOuXwQUS9G8NynkVbSzlvSxdVRRw wxalqt0qUM8v5xqWlVpTjtF+kyDE+74HNuz0PB1FDpNtcrQDHGWx727mFLZLui5q EpfXeB+Zm+0e2qRj0E30ytNG2A7eJIM16a09XrbWgkDrInS/AOwfGZP1Nw6DgLWl gLXzdUo= -----END CERTIFICATE-----Generated at Mon Jun 2 07:19:46 2025 by rpki-client