$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/DA33C49E08E211ED8B10721AC4F9AE02.roa File: DA33C49E08E211ED8B10721AC4F9AE02.roa (raw, json) Hash identifier: zgRU+P4on5aXmZrrpnxUigxzSC5YeVSm8pI31wcNWhY= Subject key identifier: 4D:13:09:B6:EA:DA:F6:BC:62:2F:00:E7:91:41:B9:31:31:B7:83:A1 Certificate issuer: /CN=A91D73FD/serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3 Certificate serial: 06C2 Authority key identifier: B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/DA33C49E08E211ED8B10721AC4F9AE02.roa Signing time: Wed 24 Sep 2025 22:43:59 +0000 ROA not before: Wed 24 Sep 2025 22:43:59 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141772 IP address blocks: 103.120.176.0/24 maxlen: 24 103.120.177.0/24 maxlen: 24 103.120.178.0/24 maxlen: 24 103.120.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 23:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1730 (0x6c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73FD, serialNumber=B04BBA1F18C0E70831F354F7455EE15D322941B3 Validity Not Before: Sep 24 22:43:59 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68d4742f-c02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:01:33:59:bd:64:a1:f7:c4:9f:e0:27:5a: 78:4d:9a:24:b3:13:5b:a3:e3:f2:75:79:9b:bf:a3: e9:01:b5:ac:05:26:c8:ab:22:1a:38:6f:51:c2:36: 81:11:47:dc:65:09:2d:83:31:ef:3b:0e:8b:e2:04: 25:17:ab:ce:f2:82:0f:32:3b:7c:c9:3e:cf:92:84: b1:de:1a:af:b3:73:54:e8:00:17:92:ae:72:9a:cb: 14:ea:b9:c2:f9:52:3a:5f:52:dc:3b:f6:e7:1c:77: 2e:53:f3:08:bc:ce:ef:67:02:5b:76:e1:04:00:61: 4f:c7:e0:ef:8b:e0:66:80:f8:e5:90:0d:a5:98:ee: c2:59:e8:ff:fd:c6:24:a0:50:a6:d8:59:98:0b:1f: 9f:74:c4:72:b2:0b:39:74:51:a1:d1:9d:bb:a7:b9: e4:a4:a1:a0:cb:08:2d:d0:d5:36:12:10:11:87:60: da:8b:f6:9e:f0:09:dc:07:fa:6c:3e:19:05:dc:ab: d0:ce:f9:23:ca:b7:da:73:f0:88:2c:11:b5:bc:ca: 60:a2:66:23:f4:d4:c8:4b:86:26:44:cc:c9:f9:62: df:cb:3a:93:f7:dc:34:b4:c6:da:09:65:c0:54:e7: a2:00:cc:a5:2f:e4:a8:66:f6:92:44:5a:26:45:2b: 5f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:13:09:B6:EA:DA:F6:BC:62:2F:00:E7:91:41:B9:31:31:B7:83:A1 X509v3 Authority Key Identifier: keyid:B0:4B:BA:1F:18:C0:E7:08:31:F3:54:F7:45:5E:E1:5D:32:29:41:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/sEu6HxjA5wgx81T3RV7hXTIpQbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sEu6HxjA5wgx81T3RV7hXTIpQbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73FD/DCB25B967B4311EB83533666C4F9AE02/DA33C49E08E211ED8B10721AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.176.0/22 Signature Algorithm: sha256WithRSAEncryption b3:59:38:c4:54:c4:f2:5c:88:62:7c:09:e0:b2:27:33:10:b4: d2:d1:07:54:18:de:20:b1:fb:2f:bf:18:48:df:fa:0e:2c:a6: df:24:f8:85:df:dc:a7:48:a2:e8:8d:ed:cd:4f:47:78:97:3e: 1f:33:ff:12:d4:53:95:85:d9:2e:8b:07:9d:57:ad:5d:89:fe: 7f:38:1b:d9:b7:94:2b:e9:e4:10:4c:6d:69:19:f9:07:93:2b: af:2b:06:f7:a8:84:7b:be:96:f7:7f:46:c0:4c:d9:d0:78:87: 58:b8:93:70:ba:cf:17:95:09:03:f4:d7:18:c9:d6:24:4b:8c: ff:d9:ca:94:07:5d:df:d3:29:2b:e3:b2:a7:4b:58:93:d1:af: 4f:c5:f6:9a:ae:36:71:13:61:03:58:b5:2e:2a:8b:9a:a3:54: 70:3c:88:b1:3d:90:21:93:c0:69:1a:83:a5:d8:19:1c:9b:06: b7:bd:d4:82:4a:19:8e:80:53:bf:b6:13:bd:68:2d:62:2c:f6: 33:01:33:73:ee:46:7b:8d:54:55:1f:4a:4f:fc:34:6c:ef:07: e6:97:7d:a7:19:67:d8:d8:4a:75:be:ae:c7:5a:83:e6:43:b5: 9e:63:96:c8:10:c2:b0:e7:c5:1a:62:4e:1a:fc:6c:50:b8:80: a1:be:98:ea -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDczRkQxMTAvBgNVBAUTKEIwNEJCQTFGMThDMEU3MDgzMUYzNTRGNzQ1NUVFMTVE MzIyOTQxQjMwHhcNMjUwOTI0MjI0MzU5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ0NzQyZi1jMDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq98BM1m9ZKH3xJ/gJ1p4TZoksxNbo+PydXmbv6PpAbWsBSbIqyIaOG9RwjaB EUfcZQktgzHvOw6L4gQlF6vO8oIPMjt8yT7PkoSx3hqvs3NU6AAXkq5ymssU6rnC +VI6X1LcO/bnHHcuU/MIvM7vZwJbduEEAGFPx+Dvi+BmgPjlkA2lmO7CWej//cYk oFCm2FmYCx+fdMRysgs5dFGh0Z27p7nkpKGgywgt0NU2EhARh2Dai/ae8AncB/ps PhkF3KvQzvkjyrfac/CILBG1vMpgomYj9NTIS4YmRMzJ+WLfyzqT99w0tMbaCWXA VOeiAMylL+SoZvaSRFomRStf5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFE0TCbbq 2va8Yi8A55FBuTExt4OhMB8GA1UdIwQYMBaAFLBLuh8YwOcIMfNU90Ve4V0yKUGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzNGRC9EQ0IyNUI5NjdC NDMxMUVCODM1MzM2NjZDNEY5QUUwMi9zRXU2SHhqQTV3Z3g4MVQzUlY3aFhUSXBR Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NFdTZIeGpBNXdneDgxVDNSVjdoWFRJcFFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDczRkQvRENCMjVCOTY3QjQzMTFFQjgzNTMzNjY2QzRGOUFFMDIvREEzM0M0OUUw OEUyMTFFRDhCMTA3MjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJneLAwDQYJKoZIhvcNAQELBQADggEBALNZOMRUxPJciGJ8 CeCyJzMQtNLRB1QY3iCx+y+/GEjf+g4spt8k+IXf3KdIouiN7c1PR3iXPh8z/xLU U5WF2S6LB51XrV2J/n84G9m3lCvp5BBMbWkZ+QeTK68rBveohHu+lvd/RsBM2dB4 h1i4k3C6zxeVCQP01xjJ1iRLjP/ZypQHXd/TKSvjsqdLWJPRr0/F9pquNnETYQNY tS4qi5qjVHA8iLE9kCGTwGkag6XYGRybBre91IJKGY6AU7+2E71oLWIs9jMBM3Pu RnuNVFUfSk/8NGzvB+aXfacZZ9jYSnW+rsdag+ZDtZ5jlsgQwrDnxRpiThr8bFC4 gKG+mOo= -----END CERTIFICATE-----Generated at Sun Oct 26 22:57:25 2025 by rpki-client