$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/A5FE56B2596B11F0AF4BB31EC4F9AE02.roa File: A5FE56B2596B11F0AF4BB31EC4F9AE02.roa (raw, json) Hash identifier: plyiht/V1LmRJUTFVmqkO0mlXSVbC2l7eMnY30pWhS4= Subject key identifier: 97:A3:B5:BC:27:CD:16:45:F0:EA:48:A0:6A:42:1F:77:67:2C:48:7E Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0B7C Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/A5FE56B2596B11F0AF4BB31EC4F9AE02.roa Signing time: Mon 01 Sep 2025 08:22:03 +0000 ROA not before: Mon 01 Sep 2025 08:22:03 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 401783 IP address blocks: 103.249.184.0/24 maxlen: 24 103.249.185.0/24 maxlen: 24 103.249.186.0/24 maxlen: 24 103.249.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 19:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2940 (0xb7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Sep 1 08:22:03 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68b557ab-881a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3c:83:11:4f:40:0b:86:63:ec:f9:14:5d:b6: 58:2d:f7:f0:04:ed:2c:7e:d0:2a:6e:98:07:1f:e8: e3:54:43:dd:bb:e4:00:23:11:67:08:8c:ac:9e:28: 71:be:d7:9d:c7:c7:86:62:7e:2c:af:0f:6d:f8:1d: dd:09:76:c3:97:23:75:59:8a:02:4d:35:05:19:fd: a9:88:1d:d8:ab:a8:0c:82:70:b4:78:91:20:74:11: bd:16:6c:97:ae:5d:da:33:7f:88:08:d8:9e:8d:f8: dc:67:41:09:42:0d:52:cd:29:77:4f:7b:3e:13:e8: 49:31:49:1d:dd:d7:76:bd:ed:31:66:0d:7c:23:34: 3f:74:7a:f8:2c:f5:16:8c:86:65:0b:4f:76:43:91: 08:92:76:b6:f7:0f:c7:ea:53:71:f9:d5:94:63:d0: 28:0f:d6:8f:dd:05:ff:f5:08:f7:13:a2:a4:5c:98: d8:3d:d1:5b:0d:d9:70:db:83:60:ce:3f:d3:36:fa: a7:91:5c:8b:18:5a:06:1d:e8:12:7e:72:10:0d:8b: 29:d9:89:7f:72:5d:c2:75:5e:02:8a:ab:67:8c:e9: 5d:15:3e:52:30:97:e8:fa:b1:57:8a:1a:23:26:7f: dc:10:e8:9f:7b:07:7e:47:a5:5e:19:bf:35:83:78: 40:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A3:B5:BC:27:CD:16:45:F0:EA:48:A0:6A:42:1F:77:67:2C:48:7E X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/A5FE56B2596B11F0AF4BB31EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.249.184.0/22 Signature Algorithm: sha256WithRSAEncryption 81:67:f8:45:c3:72:fb:e9:ce:d9:9e:60:43:bc:94:41:97:bc: 33:e7:f8:1d:8f:37:5b:33:c7:cb:1e:d1:c9:21:fe:83:0e:b6: 86:02:ba:e9:0f:41:31:83:09:b5:ce:90:8b:0b:47:41:e8:f1: 2c:40:aa:21:31:ef:f0:10:c0:f5:92:aa:c0:14:1a:d7:67:fc: 81:e1:c3:a5:05:b8:9d:b6:5e:76:da:96:5f:14:09:70:7b:29: 64:bc:2d:7f:c3:99:4b:f0:71:44:23:b8:73:24:28:98:eb:a8: 60:9d:22:ba:63:a9:6b:d9:c3:84:55:b8:cd:54:98:53:b8:a9: a4:5b:80:4b:db:7a:34:8b:39:3c:95:13:f2:c9:c8:0f:ff:a3: 15:4f:24:b1:83:84:f5:ab:ed:a4:c2:db:4a:63:36:ad:66:99: 3d:f8:8c:56:c5:aa:2b:dc:ce:a7:db:98:f9:a0:0e:e0:12:a0: 94:ad:44:86:00:5e:82:bd:42:3f:9f:16:e7:c5:b2:07:3b:47: 67:73:95:92:ba:a3:0d:c3:44:71:a5:db:a8:ba:0c:e4:52:b5: c3:6f:5a:82:92:c0:55:df:13:8d:c5:61:e3:f7:2c:58:9e:33: 51:31:c2:08:57:52:09:80:6a:b4:46:24:c5:9a:0c:d6:74:80: 03:3f:ba:b5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjUwOTAxMDgyMjAzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI1NTdhYi04ODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTyDEU9AC4Zj7PkUXbZYLffwBO0sftAqbpgHH+jjVEPdu+QAIxFnCIysnihx vtedx8eGYn4srw9t+B3dCXbDlyN1WYoCTTUFGf2piB3Yq6gMgnC0eJEgdBG9FmyX rl3aM3+ICNiejfjcZ0EJQg1SzSl3T3s+E+hJMUkd3dd2ve0xZg18IzQ/dHr4LPUW jIZlC092Q5EIkna29w/H6lNx+dWUY9AoD9aP3QX/9Qj3E6KkXJjYPdFbDdlw24Ng zj/TNvqnkVyLGFoGHegSfnIQDYsp2Yl/cl3CdV4CiqtnjOldFT5SMJfo+rFXihoj Jn/cEOifewd+R6VeGb81g3hABwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJejtbwn zRZF8OpIoGpCH3dnLEh+MB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNEMzAvRTNERjQ2OUM0MTY4MTFFQUFFOEE3NzUwQzRGOUFFMDIvQTVGRTU2QjI1 OTZCMTFGMEFGNEJCMzFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn+bgwDQYJKoZIhvcNAQELBQADggEBAIFn+EXDcvvpztme YEO8lEGXvDPn+B2PN1szx8se0ckh/oMOtoYCuukPQTGDCbXOkIsLR0Ho8SxAqiEx 7/AQwPWSqsAUGtdn/IHhw6UFuJ22Xnball8UCXB7KWS8LX/DmUvwcUQjuHMkKJjr qGCdIrpjqWvZw4RVuM1UmFO4qaRbgEvbejSLOTyVE/LJyA//oxVPJLGDhPWr7aTC 20pjNq1mmT34jFbFqivczqfbmPmgDuASoJStRIYAXoK9Qj+fFufFsgc7R2dzlZK6 ow3DRHGl26i6DORStcNvWoKSwFXfE43FYeP3LFieM1ExwghXUgmAarRGJMWaDNZ0 gAM/urU= -----END CERTIFICATE-----Generated at Fri Sep 5 08:56:43 2025 by rpki-client