$ rpki-client -vvf rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/C08A3ED6E03C11EF991E147AC4F9AE02.roa File: C08A3ED6E03C11EF991E147AC4F9AE02.roa (raw, json) Hash identifier: Jn6Bcmff+jZyhjqGcyii8YjSmtOYYAInHon2VXcIz3U= Subject key identifier: CC:BD:46:8E:86:9C:6D:17:75:57:E8:70:7B:DE:BA:AE:24:1C:B1:B5 Certificate issuer: /CN=A91E29CB/serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Certificate serial: 0263 Authority key identifier: A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/C08A3ED6E03C11EF991E147AC4F9AE02.roa Signing time: Mon 03 Feb 2025 01:35:52 +0000 ROA not before: Mon 03 Feb 2025 01:35:52 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 138358 IP address blocks: 103.159.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E29CB, serialNumber=A07AF0CCB29835CC7642974BAC9E1502B9CF82D0 Validity Not Before: Feb 3 01:35:52 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67a01d78-0d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:13:61:c5:a8:78:5e:75:f4:d1:56:e4:8b:4e: 69:ac:38:d4:37:e5:69:cb:ed:87:22:dc:f3:6a:4e: 88:cb:fe:86:f6:d0:f4:e6:0c:74:8c:68:e6:fc:9c: 3d:fe:19:b4:4f:8e:82:18:bb:de:e1:d2:d7:9b:9b: 26:21:98:54:66:4a:c9:08:6b:c4:f0:bf:00:24:64: e9:1a:09:07:3f:7c:e5:4b:5d:25:b1:6c:f0:9e:9a: 56:f2:35:3a:12:c7:16:a5:98:52:a8:f2:b3:c7:9b: 0d:9c:ec:10:e2:f1:e0:a9:4c:66:d1:18:b1:2c:9e: 80:a6:56:78:d9:2b:ce:34:ee:81:f7:17:84:57:1a: 62:61:4a:b4:c7:4d:6f:d2:3f:40:3f:1c:b7:e2:0a: 7f:d0:4a:a0:8a:a9:01:7a:c8:ab:2f:fb:9a:54:12: 9e:b7:25:e1:0f:1d:bc:1f:44:d5:f1:6f:60:31:89: e0:5b:b7:fd:d1:6a:64:c8:33:c5:e6:de:86:bd:e0: 5f:b9:59:4a:44:74:fc:ba:0b:dd:9c:7b:3b:f7:f7: 82:89:7f:8e:73:1b:32:50:ae:ec:f2:60:5d:6b:f1: a5:89:ed:11:27:66:a3:39:6c:a6:da:01:02:60:ae: 49:ac:de:e1:0b:24:3c:d5:5a:64:b2:33:17:9d:50: 93:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BD:46:8E:86:9C:6D:17:75:57:E8:70:7B:DE:BA:AE:24:1C:B1:B5 X509v3 Authority Key Identifier: keyid:A0:7A:F0:CC:B2:98:35:CC:76:42:97:4B:AC:9E:15:02:B9:CF:82:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/oHrwzLKYNcx2QpdLrJ4VArnPgtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oHrwzLKYNcx2QpdLrJ4VArnPgtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E29CB/1F902B0E05AF11EDA717642BC4F9AE02/C08A3ED6E03C11EF991E147AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.159.36.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:d2:b1:b2:c4:42:ac:06:2b:60:94:df:0d:9d:6b:63:31:31: c4:1f:73:44:83:f4:a9:e4:dd:15:d2:93:ca:2b:1b:91:31:a4: fc:f5:b2:ff:85:be:34:2a:00:51:cf:ba:13:c3:fe:3c:ba:89: 50:0a:a5:2d:8d:8e:c5:c5:54:6f:f0:ce:ac:f5:b2:a2:3c:98: 3e:79:d9:1b:ba:d1:48:79:5b:b1:e6:d0:28:cd:c2:94:1a:7b: 20:ee:95:06:5a:6c:51:21:96:69:fe:8e:e5:5c:c7:38:36:56: d5:f1:23:b1:0d:63:f0:6b:75:c6:3d:78:cd:72:cb:f9:70:42: 3a:3a:63:8e:18:bf:f2:e5:41:71:cc:e0:eb:41:89:3e:8c:4f: e2:db:8d:7a:10:1a:95:2e:da:60:40:51:3f:76:cb:1a:f0:92: 1b:33:9b:17:02:58:26:fc:b1:0e:0d:0e:61:fe:9f:c5:cc:d4: 5b:c6:90:7e:35:83:82:12:eb:ea:b0:a5:a4:79:fa:a5:54:b3: 96:40:1d:82:50:3e:6c:c1:ef:73:1e:55:2e:6b:e1:23:10:c7: 10:f8:50:dd:f2:1d:5c:cd:8c:d2:8b:ee:22:c7:fa:fb:ee:e4: 2b:3f:35:17:8a:77:fd:0b:31:ff:90:37:3b:e0:54:19:4e:92: da:a0:59:6d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI5Q0IxMTAvBgNVBAUTKEEwN0FGMENDQjI5ODM1Q0M3NjQyOTc0QkFDOUUxNTAy QjlDRjgyRDAwHhcNMjUwMjAzMDEzNTUyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EwMWQ3OC0wZDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhNhxah4XnX00Vbki05prDjUN+Vpy+2HItzzak6Iy/6G9tD05gx0jGjm/Jw9 /hm0T46CGLve4dLXm5smIZhUZkrJCGvE8L8AJGTpGgkHP3zlS10lsWzwnppW8jU6 EscWpZhSqPKzx5sNnOwQ4vHgqUxm0RixLJ6AplZ42SvONO6B9xeEVxpiYUq0x01v 0j9APxy34gp/0EqgiqkBesirL/uaVBKetyXhDx28H0TV8W9gMYngW7f90WpkyDPF 5t6GveBfuVlKRHT8ugvdnHs79/eCiX+OcxsyUK7s8mBda/Glie0RJ2ajOWym2gEC YK5JrN7hCyQ81VpksjMXnVCTOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMy9Ro6G nG0XdVfocHveuq4kHLG1MB8GA1UdIwQYMBaAFKB68MyymDXMdkKXS6yeFQK5z4LQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjlDQi8xRjkwMkIwRTA1 QUYxMUVEQTcxNzY0MkJDNEY5QUUwMi9vSHJ3ekxLWU5jeDJRcGRMcko0VkFyblBn dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Icnd6TEtZTmN4MlFwZExySjRWQXJuUGd0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI5Q0IvMUY5MDJCMEUwNUFGMTFFREE3MTc2NDJCQzRGOUFFMDIvQzA4QTNFRDZF MDNDMTFFRjk5MUUxNDdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnnyQwDQYJKoZIhvcNAQELBQADggEBABrSsbLEQqwGK2CU 3w2da2MxMcQfc0SD9Knk3RXSk8orG5ExpPz1sv+FvjQqAFHPuhPD/jy6iVAKpS2N jsXFVG/wzqz1sqI8mD552Ru60Uh5W7Hm0CjNwpQaeyDulQZabFEhlmn+juVcxzg2 VtXxI7ENY/BrdcY9eM1yy/lwQjo6Y44Yv/LlQXHM4OtBiT6MT+LbjXoQGpUu2mBA UT92yxrwkhszmxcCWCb8sQ4NDmH+n8XM1FvGkH41g4IS6+qwpaR5+qVUs5ZAHYJQ PmzB73MeVS5r4SMQxxD4UN3yHVzNjNKL7iLH+vvu5Cs/NReKd/0LMf+QNzvgVBlO ktqgWW0= -----END CERTIFICATE-----Generated at Wed Nov 5 19:48:45 2025 by rpki-client