$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/7617F5408D6C11F0AB7BFE70C4F9AE02.roa File: 7617F5408D6C11F0AB7BFE70C4F9AE02.roa (raw, json) Hash identifier: c7Vsr0eRAEmxWhobNGyEno1B5Pvs5ja8tO1BeT/ckVk= Subject key identifier: B1:90:C0:63:2C:86:23:CF:43:56:BD:9D:AC:C9:1C:D6:07:D0:35:BC Certificate issuer: /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Certificate serial: 0D15 Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/7617F5408D6C11F0AB7BFE70C4F9AE02.roa Signing time: Tue 09 Sep 2025 11:02:23 +0000 ROA not before: Tue 09 Sep 2025 11:02:23 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 137453 IP address blocks: 103.137.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 11:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3349 (0xd15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Validity Not Before: Sep 9 11:02:23 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68c0093e-735c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:52:1e:b8:59:2f:ec:55:cb:73:4c:61:32: 6b:e8:7f:00:1a:9b:2f:62:eb:4f:8f:2a:59:b7:91: 4e:21:7a:93:e8:32:6f:1a:ad:df:c6:ad:12:7e:a5: 35:9c:85:5f:3d:d8:ba:a1:0f:e4:28:49:5d:10:50: ff:76:e4:8b:64:0e:f0:77:5d:23:ea:ba:d7:92:9e: 49:5b:a4:0a:38:0a:f3:6a:c2:cf:05:72:1e:e5:09: c3:fb:a1:e7:b8:8e:c0:ef:4c:2a:9d:16:dc:24:53: 78:ab:e0:4a:ae:26:55:10:f2:4b:e4:4f:fd:44:38: 17:31:fb:88:7c:b1:0d:fe:fb:29:49:79:a5:d7:ab: da:ef:69:f5:1a:c8:23:37:8b:56:eb:18:49:69:77: 3e:00:2a:8d:38:bb:26:61:29:56:dd:bf:f2:1f:66: 43:1c:2b:9d:7b:76:ea:a1:e0:79:1f:23:1d:6c:7c: 23:f6:c2:7d:df:fe:13:73:fd:3d:62:a6:1b:1a:eb: e8:83:06:ea:59:a7:6c:67:7d:9b:3d:2b:c8:9b:ef: 57:a7:cd:e5:0f:f9:40:0c:d6:16:82:40:69:d8:7d: 35:c4:be:7d:0d:ea:da:90:e1:11:59:62:76:9d:c4: 16:7b:af:26:e1:2e:48:b2:6c:66:33:9b:de:19:3d: e6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:90:C0:63:2C:86:23:CF:43:56:BD:9D:AC:C9:1C:D6:07:D0:35:BC X509v3 Authority Key Identifier: keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/7617F5408D6C11F0AB7BFE70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.72.0/24 Signature Algorithm: sha256WithRSAEncryption a2:83:2f:49:a1:5a:31:55:f4:da:07:96:79:94:ea:e2:fb:9f: cb:f8:b2:0d:7c:eb:ec:5d:6d:c3:eb:5e:ca:ac:09:3b:5e:14: db:8d:be:ba:26:fc:5c:3a:87:72:07:d8:47:04:da:41:3f:3e: b2:01:de:67:95:a4:73:f4:55:f1:3d:5b:e3:46:e9:4a:f7:67: 63:b3:2b:18:dd:5c:96:80:b4:11:04:a2:c6:50:a7:00:a0:77: 8a:21:fa:a3:2e:94:bc:40:34:8e:d1:96:a3:28:ec:0c:b4:81: ed:d7:db:01:20:35:8d:b1:62:35:52:65:5f:f5:f1:90:b3:7f: 53:d3:a7:c7:45:dd:cc:ea:cd:cf:aa:ca:35:ca:ac:d0:d2:93: c0:5a:a7:05:54:17:8f:92:14:19:18:51:f8:89:5f:d7:61:4e: 4e:ed:00:81:df:92:79:50:a4:d1:31:3d:a7:34:a9:73:90:9b: f8:14:5c:b7:2d:13:28:fb:0b:12:4e:bf:0d:0b:9e:2b:05:fd: 75:da:33:af:b9:06:92:a1:9a:81:7a:54:3c:40:e6:73:ef:c5: 9a:44:54:4a:90:3a:6c:4f:b4:59:12:c8:eb:1b:ec:4b:8b:fb: 7b:36:6e:1a:ea:3a:7f:cd:07:53:62:79:35:84:df:23:8d:b7: 40:3e:db:c6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0MTgxMTAvBgNVBAUTKDZCNUVCRkU5OEEzNzg3NjRDMUIxMkRDQjY5MDRFNDYx MEI1MEFDNTcwHhcNMjUwOTA5MTEwMjIzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGMwMDkzZS03MzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymtSHrhZL+xVy3NMYTJr6H8AGpsvYutPjypZt5FOIXqT6DJvGq3fxq0SfqU1 nIVfPdi6oQ/kKEldEFD/duSLZA7wd10j6rrXkp5JW6QKOArzasLPBXIe5QnD+6Hn uI7A70wqnRbcJFN4q+BKriZVEPJL5E/9RDgXMfuIfLEN/vspSXml16va72n1Gsgj N4tW6xhJaXc+ACqNOLsmYSlW3b/yH2ZDHCude3bqoeB5HyMdbHwj9sJ93/4Tc/09 YqYbGuvogwbqWadsZ32bPSvIm+9Xp83lD/lADNYWgkBp2H01xL59DerakOERWWJ2 ncQWe68m4S5IsmxmM5veGT3mvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLGQwGMs hiPPQ1a9nazJHNYH0DW8MB8GA1UdIwQYMBaAFGtev+mKN4dkwbEty2kE5GELUKxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQxOC8wQzBCODAwRUY2 ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gyVEJzUzNMYVFUa1lRdFFy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExNl82WW8zaDJUQnNTM0xhUVRrWVF0UXJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU0MTgvMEMwQjgwMEVGNjgyMTFFOUE4OTk2MTQ2QzRGOUFFMDIvNzYxN0Y1NDA4 RDZDMTFGMEFCN0JGRTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABniUgwDQYJKoZIhvcNAQELBQADggEBAKKDL0mhWjFV9NoH lnmU6uL7n8v4sg186+xdbcPrXsqsCTteFNuNvrom/Fw6h3IH2EcE2kE/PrIB3meV pHP0VfE9W+NG6Ur3Z2OzKxjdXJaAtBEEosZQpwCgd4oh+qMulLxANI7RlqMo7Ay0 ge3X2wEgNY2xYjVSZV/18ZCzf1PTp8dF3czqzc+qyjXKrNDSk8BapwVUF4+SFBkY UfiJX9dhTk7tAIHfknlQpNExPac0qXOQm/gUXLctEyj7CxJOvw0LnisF/XXaM6+5 BpKhmoF6VDxA5nPvxZpEVEqQOmxPtFkSyOsb7EuL+3s2bhrqOn/NB1NieTWE3yON t0A+28Y= -----END CERTIFICATE-----Generated at Tue Sep 9 23:03:01 2025 by rpki-client