$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/CF072592709211EAB1D2FA0FC4F9AE02.roa File: CF072592709211EAB1D2FA0FC4F9AE02.roa (raw, json) Hash identifier: qgPwBHuJNODFhkIhrJVb9VAEuenY+/fH1u9JlBx0mT8= Subject key identifier: 65:2C:E6:D4:BC:CF:5B:28:69:0A:3F:9C:99:8E:1F:8D:9B:2B:E2:FA Certificate issuer: /CN=A91DCBAD/serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Certificate serial: 0A32 Authority key identifier: 53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/CF072592709211EAB1D2FA0FC4F9AE02.roa Signing time: Wed 04 Jun 2025 20:05:13 +0000 ROA not before: Wed 04 Jun 2025 20:05:13 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135406 IP address blocks: 103.7.188.0/23 maxlen: 24 103.81.219.0/24 maxlen: 24 103.107.16.0/24 maxlen: 24 103.120.49.0/24 maxlen: 24 103.217.106.0/24 maxlen: 24 203.55.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 19:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610 (0xa32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCBAD, serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Validity Not Before: Jun 4 20:05:13 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6840a6f9-0956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:1a:2c:51:f0:9e:85:7e:a1:07:11:8f:04: a1:77:0a:c9:ad:08:b9:08:b3:32:61:71:21:ec:19: 95:20:26:3b:3b:af:dd:8b:58:d3:3a:45:b5:84:ce: 08:60:1d:2d:f8:14:44:10:02:f4:3e:b9:41:3e:5d: bc:f2:0e:d0:66:71:39:5c:5f:fc:6e:ba:21:cb:55: 78:69:57:93:aa:de:3f:30:99:b8:2b:17:ae:fe:c8: a6:32:65:75:25:11:37:0b:5a:8e:af:0b:2e:97:6b: e9:25:28:c6:51:c2:8c:c0:74:33:d2:8e:9f:56:0f: f0:53:45:82:86:61:4f:06:4e:b8:f0:2f:db:c2:30: cf:b2:20:92:58:1f:93:fb:6e:97:84:2f:53:87:f2: be:3c:ae:e2:33:8e:7b:47:6d:ab:96:47:d5:c0:1b: c9:95:b0:d5:5c:fa:d1:8b:db:cd:d1:be:e9:db:68: 32:63:11:12:0c:67:0c:9f:0d:f9:d8:4d:f1:60:c6: 22:f9:96:e3:8b:a4:ef:49:f6:09:09:d6:94:0c:16: 38:9a:0c:06:4e:f4:79:3b:67:17:e1:51:5a:56:f8: 44:bb:c0:4b:25:81:8c:6b:ea:30:5d:32:17:c3:8a: fc:a2:20:7a:2f:8b:ca:91:ef:91:5a:34:0c:02:31: 94:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2C:E6:D4:BC:CF:5B:28:69:0A:3F:9C:99:8E:1F:8D:9B:2B:E2:FA X509v3 Authority Key Identifier: keyid:53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/CF072592709211EAB1D2FA0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.7.188.0/23 103.81.219.0/24 103.107.16.0/24 103.120.49.0/24 103.217.106.0/24 203.55.212.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:7b:d1:5c:a0:da:9c:3b:21:9e:6a:28:ea:d6:b8:15:60:90: 23:3f:04:58:50:73:99:f1:ba:49:e9:65:c1:52:42:3f:35:c3: 60:aa:02:57:97:a2:8d:02:a1:6e:54:4c:d0:82:b6:e5:13:ac: 24:5c:1b:ab:e3:b6:c7:10:61:cb:55:58:bc:53:f4:ae:37:f2: c4:40:61:ca:10:20:f7:ba:51:7b:10:0e:8d:c9:dd:59:83:06: 9c:9f:a2:df:f0:16:75:3a:29:ec:75:7b:f2:f8:22:f8:90:89: 75:f3:45:ad:b0:4d:4d:9f:5b:2c:bc:04:65:e8:0f:50:36:7e: df:8b:68:32:67:cd:13:0a:1f:07:fe:e9:f9:00:67:69:a7:df: f9:57:53:d6:31:ff:53:30:69:cc:1b:73:72:51:2a:68:18:ff: 00:3c:ca:a4:7d:3b:7b:63:8f:c4:e0:35:4c:eb:b2:52:2d:67: f5:c5:10:4c:7a:97:c3:69:d6:d3:36:71:05:55:82:72:ff:de: 7f:59:ea:20:05:55:e3:18:6d:a3:e6:2f:61:82:7c:a4:6b:d8: af:a4:8a:57:d1:a0:0c:1f:76:cf:64:85:5b:94:87:4f:83:fe: 7f:79:0a:3d:9c:9f:7d:23:a7:9b:81:63:3e:82:30:10:c7:34: d1:b6:00:76 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCQUQxMTAvBgNVBAUTKDUzMjY4QTI3MzZBNUZGNTU0Qjk0MDcwM0YzNzRGQzM1 NzkyMjhDMzAwHhcNMjUwNjA0MjAwNTEzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQwYTZmOS0wOTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7AaLFHwnoV+oQcRjwShdwrJrQi5CLMyYXEh7BmVICY7O6/di1jTOkW1hM4I YB0t+BREEAL0PrlBPl288g7QZnE5XF/8brohy1V4aVeTqt4/MJm4Kxeu/simMmV1 JRE3C1qOrwsul2vpJSjGUcKMwHQz0o6fVg/wU0WChmFPBk648C/bwjDPsiCSWB+T +26XhC9Th/K+PK7iM457R22rlkfVwBvJlbDVXPrRi9vN0b7p22gyYxESDGcMnw35 2E3xYMYi+Zbji6TvSfYJCdaUDBY4mgwGTvR5O2cX4VFaVvhEu8BLJYGMa+owXTIX w4r8oiB6L4vKke+RWjQMAjGUhwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFGUs5tS8 z1soaQo/nJmOH42bK+L6MB8GA1UdIwQYMBaAFFMmiic2pf9VS5QHA/N0/DV5Ioww MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0JBRC8zNjU5RTdBRTcw OTExMUVBOEE5QjRFMERDNEY5QUUwMi9VeWFLSnphbF8xVkxsQWNEODNUOE5Ya2lq REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5YUtKemFsXzFWTGxBY0Q4M1Q4TlhraWpEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENCQUQvMzY1OUU3QUU3MDkxMTFFQThBOUI0RTBEQzRGOUFFMDIvQ0YwNzI1OTI3 MDkyMTFFQUIxRDJGQTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAFnB7wDBABnUdsDBABnaxADBABneDEDBABn2WoDBADLN9Qw DQYJKoZIhvcNAQELBQADggEBAIp70Vyg2pw7IZ5qKOrWuBVgkCM/BFhQc5nxuknp ZcFSQj81w2CqAleXoo0CoW5UTNCCtuUTrCRcG6vjtscQYctVWLxT9K438sRAYcoQ IPe6UXsQDo3J3VmDBpyfot/wFnU6Kex1e/L4IviQiXXzRa2wTU2fWyy8BGXoD1A2 ft+LaDJnzRMKHwf+6fkAZ2mn3/lXU9Yx/1Mwacwbc3JRKmgY/wA8yqR9O3tjj8Tg NUzrslItZ/XFEEx6l8Np1tM2cQVVgnL/3n9Z6iAFVeMYbaPmL2GCfKRr2K+kilfR oAwfds9khVuUh0+D/n95Cj2cn30jp5uBYz6CMBDHNNG2AHY= -----END CERTIFICATE-----Generated at Mon Jun 9 22:35:05 2025 by rpki-client