$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/D8674A0C0ED911EE8A4E0A23C4F9AE02.roa File: D8674A0C0ED911EE8A4E0A23C4F9AE02.roa (raw, json) Hash identifier: AIB5iRq0wZoH+M+QlWHGPd+eXgQBKYvmWuJJAuisaNs= Subject key identifier: 4C:EE:3C:22:BB:CA:02:B1:D6:8F:24:90:BE:AC:83:3F:2E:7A:D1:21 Certificate issuer: /CN=A91AF404/serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Certificate serial: 018B Authority key identifier: FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/D8674A0C0ED911EE8A4E0A23C4F9AE02.roa Signing time: Sat 31 May 2025 03:51:48 +0000 ROA not before: Sat 31 May 2025 03:51:48 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135327 IP address blocks: 103.197.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 03:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF404, serialNumber=FA012740DCA493CCE203AFAADE8EBC719AAC23B4 Validity Not Before: May 31 03:51:48 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683a7cd4-b397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:32:ec:e2:85:53:fe:09:a4:d3:a9:6d:fa:62: fa:a8:f6:6b:18:22:e5:d7:9c:0e:c6:61:61:63:f4: 62:a0:7e:3d:0d:ec:d7:21:87:5d:0b:10:87:a4:10: e1:87:a1:5d:b5:c8:8b:9e:7b:8c:3f:ef:e1:89:89: d9:76:34:80:41:bb:a2:2c:ae:9d:f9:53:05:d9:76: bb:f0:63:2b:42:17:b8:d5:a8:d9:b0:66:77:18:46: 95:7c:66:9a:39:4b:81:41:0f:3d:8c:f5:db:f5:f1: 66:2a:eb:c7:e4:cf:b4:75:eb:3f:b0:98:71:22:4a: 60:68:52:5a:b4:a8:77:13:b4:f3:cc:09:96:be:29: a7:01:5e:35:86:a6:df:43:29:0c:08:1a:e3:dc:09: 24:a4:b5:0e:44:51:0b:7c:da:69:38:78:de:aa:cc: 0f:37:a1:08:1b:45:21:09:be:e1:1a:a0:f9:24:28: f5:2e:f8:4d:05:d9:50:1e:e2:99:a5:3b:05:02:db: 97:98:76:07:89:1a:52:16:76:fa:c2:e6:c1:44:a3: 89:fd:84:7f:fc:6e:84:e0:a4:fa:01:8f:97:18:2c: 8f:6b:0d:1f:31:11:fa:75:e3:60:81:2d:8f:f1:61: 61:63:e2:52:62:21:2f:45:c2:4e:f0:63:c4:8c:ed: 30:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EE:3C:22:BB:CA:02:B1:D6:8F:24:90:BE:AC:83:3F:2E:7A:D1:21 X509v3 Authority Key Identifier: keyid:FA:01:27:40:DC:A4:93:CC:E2:03:AF:AA:DE:8E:BC:71:9A:AC:23:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/-gEnQNykk8ziA6-q3o68cZqsI7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gEnQNykk8ziA6-q3o68cZqsI7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF404/544081D2F4D811ED98046C4AC4F9AE02/D8674A0C0ED911EE8A4E0A23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.104.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:46:55:39:6d:4d:35:fa:58:fb:a4:fb:d3:4c:74:5c:a2:0f: b2:7a:bb:00:c6:35:1d:45:23:31:9d:fc:43:b3:e4:56:a0:ce: 71:78:9d:01:0e:9b:f0:c9:c5:3c:44:68:e1:45:64:d2:b8:da: 72:52:b9:1a:93:de:aa:82:3b:9c:84:51:5b:9a:5a:97:50:13: 3c:79:07:4a:97:a6:52:ad:c5:3c:f0:c1:8c:b1:53:ea:59:75: cb:5e:7f:2d:ba:82:87:7e:91:9a:0e:57:ad:58:42:bb:ea:d2: b1:1e:23:f7:aa:63:81:b4:4c:e6:25:df:a9:e5:e6:7e:d3:28: 0d:50:a4:76:ca:a4:3d:5b:35:ef:38:3e:55:00:3c:e1:85:8e: 34:0b:45:fa:98:00:99:8b:58:0d:4b:f0:2f:75:ca:24:a2:bc: d4:84:6c:0c:87:34:b6:29:eb:48:2b:e1:73:37:0d:c7:f3:f6: 37:d8:d5:30:99:a9:4c:3e:91:f6:1e:04:d6:5c:04:13:3e:74: 95:7b:c3:d0:38:15:c4:d9:06:ae:11:34:08:32:2d:b7:ff:13: e4:70:46:69:8e:3c:c0:f6:00:4c:a6:60:3c:d7:41:b2:bb:94: 63:53:9b:43:7f:2c:15:ba:a7:2d:70:91:3c:c6:49:cc:15:2c: 82:d3:ed:e1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY0MDQxMTAvBgNVBAUTKEZBMDEyNzQwRENBNDkzQ0NFMjAzQUZBQURFOEVCQzcx OUFBQzIzQjQwHhcNMjUwNTMxMDM1MTQ4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNhN2NkNC1iMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DLs4oVT/gmk06lt+mL6qPZrGCLl15wOxmFhY/RioH49DezXIYddCxCHpBDh h6FdtciLnnuMP+/hiYnZdjSAQbuiLK6d+VMF2Xa78GMrQhe41ajZsGZ3GEaVfGaa OUuBQQ89jPXb9fFmKuvH5M+0des/sJhxIkpgaFJatKh3E7TzzAmWvimnAV41hqbf QykMCBrj3AkkpLUORFELfNppOHjeqswPN6EIG0UhCb7hGqD5JCj1LvhNBdlQHuKZ pTsFAtuXmHYHiRpSFnb6wubBRKOJ/YR//G6E4KT6AY+XGCyPaw0fMRH6deNggS2P 8WFhY+JSYiEvRcJO8GPEjO0wgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEzuPCK7 ygKx1o8kkL6sgz8uetEhMB8GA1UdIwQYMBaAFPoBJ0DcpJPM4gOvqt6OvHGarCO0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjQwNC81NDQwODFEMkY0 RDgxMUVEOTgwNDZDNEFDNEY5QUUwMi8tZ0VuUU55a2s4emlBNi1xM282OGNacXNJ N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nRW5RTnlrazh6aUE2LXEzbzY4Y1pxc0k3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUY0MDQvNTQ0MDgxRDJGNEQ4MTFFRDk4MDQ2QzRBQzRGOUFFMDIvRDg2NzRBMEMw RUQ5MTFFRThBNEUwQTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnxWgwDQYJKoZIhvcNAQELBQADggEBAE1GVTltTTX6WPuk +9NMdFyiD7J6uwDGNR1FIzGd/EOz5FagznF4nQEOm/DJxTxEaOFFZNK42nJSuRqT 3qqCO5yEUVuaWpdQEzx5B0qXplKtxTzwwYyxU+pZdctefy26god+kZoOV61YQrvq 0rEeI/eqY4G0TOYl36nl5n7TKA1QpHbKpD1bNe84PlUAPOGFjjQLRfqYAJmLWA1L 8C91yiSivNSEbAyHNLYp60gr4XM3Dcfz9jfY1TCZqUw+kfYeBNZcBBM+dJV7w9A4 FcTZBq4RNAgyLbf/E+RwRmmOPMD2AEymYDzXQbK7lGNTm0N/LBW6py1wkTzGScwV LILT7eE= -----END CERTIFICATE-----Generated at Mon Jun 2 07:18:14 2025 by rpki-client