$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/03DAC9E4076211EFB14D3B12C4F9AE02.roa File: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (raw, json) Hash identifier: 81XCmtMAkz8d5MFKkbARa3r3fmwCBxTjGKLV+BXxDFc= Subject key identifier: A5:DB:04:57:80:B4:B8:C4:90:40:67:0F:91:20:E8:E3:96:C3:66:F3 Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Certificate serial: D8 Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/03DAC9E4076211EFB14D3B12C4F9AE02.roa Signing time: Fri 23 May 2025 04:56:25 +0000 ROA not before: Fri 23 May 2025 04:56:25 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 61414 IP address blocks: 103.23.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Validity Not Before: May 23 04:56:25 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682ffff9-1319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:94:46:65:e4:c2:f9:d8:c8:f4:19:0a:89: 9d:71:d9:d8:10:58:62:ff:89:a7:8e:04:86:3d:c1: bd:c5:36:e1:1a:63:d6:df:95:82:23:85:4d:00:19: 42:0f:8d:1e:1e:79:4b:9e:e4:e6:af:3d:3c:58:fb: bd:32:4c:e8:f3:0a:69:b3:c8:6e:bf:48:7f:7a:fa: 8f:a3:80:79:f4:a2:72:ef:36:dc:69:07:e3:95:13: 9a:f9:f4:ee:27:83:3b:90:2e:02:ce:cb:89:4a:09: 50:e5:60:81:65:e8:95:27:dc:a3:34:bb:b0:8a:1c: a3:d3:1b:2c:05:04:db:a1:57:d9:df:a5:b5:a2:7f: e8:83:fd:f2:c8:79:e9:a1:bd:7e:fb:f7:33:5f:e5: c4:a6:4f:63:58:7f:87:f4:12:1b:c1:85:db:36:2e: 5d:e4:03:4b:c1:84:f9:97:d2:a4:03:e3:47:6b:4e: 88:4f:5e:a3:26:ee:3e:d5:e7:61:0b:b0:d2:3f:9e: 2e:e4:12:90:3c:f8:3e:67:c4:72:68:3e:ff:a5:2b: de:27:8d:bb:79:43:38:90:5c:dc:d0:79:5c:15:3e: 9c:20:c1:e4:f6:1e:3a:cb:ff:90:ea:ec:c4:79:eb: 54:71:13:4c:0c:dc:76:53:f1:c9:69:91:33:6e:35: 17:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DB:04:57:80:B4:B8:C4:90:40:67:0F:91:20:E8:E3:96:C3:66:F3 X509v3 Authority Key Identifier: keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/03DAC9E4076211EFB14D3B12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.23.172.0/23 Signature Algorithm: sha256WithRSAEncryption 18:33:4b:ef:0f:33:98:78:03:61:00:3b:d5:45:bf:e4:84:aa: 8c:10:91:33:c7:83:2b:d0:36:6c:24:68:63:d9:ef:f9:f4:47: 95:23:41:48:30:5d:1b:8a:a3:4e:29:41:21:f4:7d:52:a0:3c: 54:68:e2:4c:9c:b7:3e:e8:9c:08:d5:b4:98:33:c5:f4:e2:c5: 10:2a:04:01:ba:ef:f8:42:99:d0:43:84:fa:20:80:54:bb:22: 72:cc:e9:81:36:7d:4f:91:b6:1d:39:33:88:7b:1c:4a:b2:96: 7f:b6:93:1c:fe:3b:6a:8e:ed:ec:d2:fa:9f:83:2f:f5:92:0e: 4f:a5:7e:16:af:98:56:e0:4d:8e:80:a1:d1:a9:58:ab:30:be: 2a:5f:ad:dc:e7:74:a1:ed:5f:3a:54:83:62:9a:12:54:c8:81: b4:b3:a3:4d:a8:47:81:59:25:0d:e1:2d:86:bd:ca:db:01:1d: 1c:e1:85:6c:ac:d0:38:f3:51:ad:50:30:55:3d:0d:02:32:ab: 3e:b7:a5:98:a7:03:bd:c5:6b:c7:71:b4:aa:18:6b:21:e1:62: 3d:28:ca:fe:e0:9c:29:5f:46:6a:e5:8d:4b:c5:a1:a4:c2:20: 49:0c:80:c5:30:39:6a:54:2d:18:53:d9:4e:6c:5d:34:7e:a4: a5:9e:d0:22 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGNUQxMTAvBgNVBAUTKEI0MDgxODE1QzZCQUVEOThBMUNDOTUwQUM2RkExMEJD NjAwNTg5MDIwHhcNMjUwNTIzMDQ1NjI1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmZmZmOS0xMzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveuURmXkwvnYyPQZComdcdnYEFhi/4mnjgSGPcG9xTbhGmPW35WCI4VNABlC D40eHnlLnuTmrz08WPu9Mkzo8wpps8huv0h/evqPo4B59KJy7zbcaQfjlROa+fTu J4M7kC4CzsuJSglQ5WCBZeiVJ9yjNLuwihyj0xssBQTboVfZ36W1on/og/3yyHnp ob1++/czX+XEpk9jWH+H9BIbwYXbNi5d5ANLwYT5l9KkA+NHa06IT16jJu4+1edh C7DSP54u5BKQPPg+Z8RyaD7/pSveJ427eUM4kFzc0HlcFT6cIMHk9h46y/+Q6uzE eetUcRNMDNx2U/HJaZEzbjUXSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKXbBFeA tLjEkEBnD5Eg6OOWw2bzMB8GA1UdIwQYMBaAFLQIGBXGuu2YocyVCsb6ELxgBYkC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Y1RC8xMEY5NEVGMDA2 QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjdaaWh6SlVLeHZvUXZHQUZp UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTNGNUQvMTBGOTRFRjAwNkFCMTFFRjg3QkZBNzI1QzRGOUFFMDIvMDNEQUM5RTQw NzYyMTFFRkIxNEQzQjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnF6wwDQYJKoZIhvcNAQELBQADggEBABgzS+8PM5h4A2EA O9VFv+SEqowQkTPHgyvQNmwkaGPZ7/n0R5UjQUgwXRuKo04pQSH0fVKgPFRo4kyc tz7onAjVtJgzxfTixRAqBAG67/hCmdBDhPoggFS7InLM6YE2fU+Rth05M4h7HEqy ln+2kxz+O2qO7ezS+p+DL/WSDk+lfhavmFbgTY6AodGpWKswvipfrdzndKHtXzpU g2KaElTIgbSzo02oR4FZJQ3hLYa9ytsBHRzhhWys0DjzUa1QMFU9DQIyqz63pZin A73Fa8dxtKoYayHhYj0oyv7gnClfRmrljUvFoaTCIEkMgMUwOWpULRhT2U5sXTR+ pKWe0CI= -----END CERTIFICATE-----Generated at Mon Jun 2 07:15:58 2025 by rpki-client