$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/438893AC55BE11EDBDE51983C4F9AE02.roa File: 438893AC55BE11EDBDE51983C4F9AE02.roa (raw, json) Hash identifier: Y1Hqc3CucW1MGNfTEVOgwuu3xdmSB7zSj6HU8UBJr7c= Subject key identifier: D6:39:1A:EF:CD:D9:0D:B7:A4:45:C4:8C:B0:15:64:58:AA:89:A0:CE Certificate issuer: /CN=A91B9011/serialNumber=D5167B970787410957E25D9F87508560F005776E Certificate serial: 05B2 Authority key identifier: D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/438893AC55BE11EDBDE51983C4F9AE02.roa Signing time: Wed 14 May 2025 23:13:35 +0000 ROA not before: Wed 14 May 2025 23:13:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142038 IP address blocks: 103.81.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 23:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1458 (0x5b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9011, serialNumber=D5167B970787410957E25D9F87508560F005776E Validity Not Before: May 14 23:13:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6825239f-eafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:53:4f:3c:25:b3:48:94:d4:60:07:15:de:16: fb:60:1b:d4:5f:b6:e4:d4:d2:79:9f:b6:48:5c:12: 2f:e8:e6:62:93:e0:c1:cb:b2:c4:08:ee:8b:1f:b0: 28:bd:58:65:2f:aa:a7:aa:a0:27:50:44:f1:c9:ae: 0c:ad:f0:2d:ee:cd:34:d9:49:67:e0:d0:9e:a4:ee: 22:9c:0f:19:38:11:49:4f:89:48:e0:29:75:85:55: ac:59:8f:c8:cb:77:82:82:bc:80:b8:fd:ff:07:c4: 74:5b:55:18:5f:b5:ff:bc:2b:74:db:c6:24:f6:53: 2b:05:18:01:9a:1b:7c:ff:29:9e:47:fa:89:d3:51: cc:25:7f:6a:a6:d2:6a:05:6c:81:72:a4:0a:b2:f4: e9:da:9d:e6:7e:e1:e4:db:46:91:ed:87:cc:5a:8f: c6:2d:3b:94:b5:31:01:0c:0d:11:26:bb:98:6e:c3: a0:da:61:2f:7a:49:55:f6:27:ac:17:33:8c:0c:6a: 18:3a:9c:e8:e6:b4:53:2e:ba:f4:0c:d9:a8:dc:40: 85:37:bc:00:43:b9:d9:72:69:ac:51:86:53:20:53: 0e:fd:35:81:7e:21:1a:84:75:b5:c9:8b:f7:82:f9: 2a:0d:63:64:fa:a4:5e:ea:e4:2d:67:04:9d:2f:13: 61:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:39:1A:EF:CD:D9:0D:B7:A4:45:C4:8C:B0:15:64:58:AA:89:A0:CE X509v3 Authority Key Identifier: keyid:D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/438893AC55BE11EDBDE51983C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.81.245.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:21:c8:59:58:4f:08:ee:a9:ec:f3:ae:c7:cc:4f:ee:b0:11: 70:6d:be:19:bf:04:80:c4:56:ab:d5:34:fc:9e:c9:c3:b7:a8: af:ff:25:25:b1:81:98:7f:b4:46:d4:2a:c4:26:45:05:2b:fc: 2a:04:26:02:ef:ee:31:01:e3:5e:b3:0b:ec:35:b3:07:e0:70: de:67:6c:4e:1f:53:11:6d:13:9b:ce:65:22:1c:d7:2c:d5:83: b9:d6:a5:89:5d:88:c4:92:9e:3c:36:a4:17:9d:57:28:b3:d6: 36:25:d3:1c:35:60:87:ab:ea:b9:49:e0:34:2e:b3:54:c9:8b: a2:9d:1f:00:19:66:68:8d:11:49:f5:fe:e8:92:65:e3:f4:3d: 6b:d3:ab:1f:ad:8e:c9:a7:07:75:26:ac:28:75:48:19:ae:14: da:88:5d:76:b1:ec:bb:d8:02:5a:eb:88:c8:b2:4e:ff:a9:a0: 36:d8:99:99:fc:82:26:dd:f9:47:86:a0:5b:cc:ae:c8:89:c1: c9:b7:6b:68:f7:d1:8a:21:95:1b:0f:a5:ad:31:17:30:4c:ed: 61:99:dd:d4:3d:c6:7c:03:d9:a6:88:ec:65:c3:ca:01:bb:36: a9:41:d1:89:8c:4c:c5:20:40:4d:b2:21:d3:4d:d7:91:91:94: fa:fd:6d:a3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMTExMTAvBgNVBAUTKEQ1MTY3Qjk3MDc4NzQxMDk1N0UyNUQ5Rjg3NTA4NTYw RjAwNTc3NkUwHhcNMjUwNTE0MjMxMzM1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI1MjM5Zi1lYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVNPPCWzSJTUYAcV3hb7YBvUX7bk1NJ5n7ZIXBIv6OZik+DBy7LECO6LH7Ao vVhlL6qnqqAnUETxya4MrfAt7s002Uln4NCepO4inA8ZOBFJT4lI4Cl1hVWsWY/I y3eCgryAuP3/B8R0W1UYX7X/vCt028Yk9lMrBRgBmht8/ymeR/qJ01HMJX9qptJq BWyBcqQKsvTp2p3mfuHk20aR7YfMWo/GLTuUtTEBDA0RJruYbsOg2mEveklV9ies FzOMDGoYOpzo5rRTLrr0DNmo3ECFN7wAQ7nZcmmsUYZTIFMO/TWBfiEahHW1yYv3 gvkqDWNk+qRe6uQtZwSdLxNhiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNY5Gu/N 2Q23pEXEjLAVZFiqiaDOMB8GA1UdIwQYMBaAFNUWe5cHh0EJV+Jdn4dQhWDwBXdu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAxMS8zODg4RTBDNEM3 M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFRbFg0bDJmaDFDRllQQUZk MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFSWjdsd2VIUVFsWDRsMmZoMUNGWVBBRmQyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjkwMTEvMzg4OEUwQzRDNzNBMTFFQjkwMDc1NTEwQzRGOUFFMDIvNDM4ODkzQUM1 NUJFMTFFREJERTUxOTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnUfUwDQYJKoZIhvcNAQELBQADggEBAG4hyFlYTwjuqezz rsfMT+6wEXBtvhm/BIDEVqvVNPyeycO3qK//JSWxgZh/tEbUKsQmRQUr/CoEJgLv 7jEB416zC+w1swfgcN5nbE4fUxFtE5vOZSIc1yzVg7nWpYldiMSSnjw2pBedVyiz 1jYl0xw1YIer6rlJ4DQus1TJi6KdHwAZZmiNEUn1/uiSZeP0PWvTqx+tjsmnB3Um rCh1SBmuFNqIXXax7LvYAlrriMiyTv+poDbYmZn8gibd+UeGoFvMrsiJwcm3a2j3 0YohlRsPpa0xFzBM7WGZ3dQ9xnwD2aaI7GXDygG7NqlB0YmMTMUgQE2yIdNN15GR lPr9baM= -----END CERTIFICATE-----Generated at Mon Jun 2 07:19:30 2025 by rpki-client