$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/493BCC24BC6911EFBA2E5C78C4F9AE02.roa File: 493BCC24BC6911EFBA2E5C78C4F9AE02.roa (raw, json) Hash identifier: ED0l+M3XW8yfiIKv/qBb5H5Y5anJhlkDWFxpGJ+C/jc= Subject key identifier: C5:C7:E6:38:36:B1:CC:8B:40:C6:D1:7D:2B:93:A2:9A:E0:A9:4C:B1 Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Certificate serial: 3630 Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/493BCC24BC6911EFBA2E5C78C4F9AE02.roa Signing time: Tue 02 Sep 2025 15:01:28 +0000 ROA not before: Tue 02 Sep 2025 15:01:28 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 33387 IP address blocks: 103.230.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13872 (0x3630) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Validity Not Before: Sep 2 15:01:28 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b706c8-39f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:fd:d5:aa:56:b0:34:bd:8d:56:25:83:c0: ee:48:40:c2:4e:7b:90:08:76:3a:db:f8:d5:86:6e: aa:7b:90:87:c6:bf:5a:78:a9:da:35:d8:b9:09:ae: 24:3c:25:18:a0:f8:57:ee:68:60:43:f1:a3:24:3b: d2:75:f1:f6:40:7c:9e:94:69:19:92:24:0b:6a:26: bf:28:ab:29:84:9f:2d:0b:25:05:29:f6:61:40:f8: 86:6e:23:88:1a:51:bf:f7:38:f3:75:e4:16:15:8f: 90:58:e8:4e:ca:95:04:53:37:32:ac:7a:4b:84:33: 97:62:b9:74:13:21:21:5b:d0:91:97:98:34:e4:f9: 6e:61:61:99:43:28:3a:1f:16:40:a8:8c:ef:3a:05: 57:53:30:be:9b:27:de:0a:86:fd:f2:ce:86:d3:fc: 0c:4e:ff:d9:ea:bf:35:7a:20:2c:2f:45:01:df:9f: 72:fa:53:4f:4a:f9:d2:0c:44:5c:2f:b8:17:87:61: 39:83:25:ac:ca:e9:46:15:a1:83:e6:c5:8d:33:53: 60:19:c8:f0:d4:10:9a:91:46:98:8f:85:3d:cf:36: 76:55:b9:1d:2b:75:e5:b2:fd:ee:48:81:1c:de:9b: 7a:92:66:c0:d2:80:ca:ae:6d:e6:c3:01:a9:55:60: 82:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C7:E6:38:36:B1:CC:8B:40:C6:D1:7D:2B:93:A2:9A:E0:A9:4C:B1 X509v3 Authority Key Identifier: keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/493BCC24BC6911EFBA2E5C78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.230.71.0/24 Signature Algorithm: sha256WithRSAEncryption 56:d6:57:66:a9:9d:95:d9:9c:00:39:8b:05:df:fa:06:16:09: 4a:2f:0d:ec:3e:e8:2e:0b:96:ce:7c:18:7d:fe:d1:94:cf:ec: 92:85:d3:66:24:54:db:90:de:86:f7:fc:fe:57:39:00:3d:83: ca:1b:f0:3d:f0:dc:c0:0d:6b:2a:d3:36:5c:01:18:db:5f:9e: ba:a9:97:77:91:1d:00:d2:13:79:5b:94:a5:30:4b:3b:0d:88: 45:41:8a:96:60:5b:b6:f9:c5:c3:1e:4d:b9:63:17:4e:e4:4d: bf:d8:f9:9e:e2:d8:ec:85:42:6f:34:11:6d:ac:13:89:17:9f: 53:1a:c2:ee:19:31:03:d3:49:da:9c:ca:63:0e:cb:39:25:b4: a9:23:c7:82:37:4d:57:c5:6c:bc:07:12:de:f5:97:be:be:8b: 1b:d8:90:4e:91:bf:97:a6:e6:f9:dc:74:b6:8d:0a:74:e6:33: 86:44:c8:78:d9:57:b5:d1:3d:d7:40:f1:2e:74:99:9e:19:f2: d3:7e:d3:fd:b7:eb:7a:2f:f4:4c:44:3f:3c:d1:70:eb:dc:48: 21:bd:45:49:b6:2c:6d:e7:38:57:1d:ee:f2:7b:34:f0:86:fd: b6:8c:5f:10:fc:c8:06:6d:ee:7a:0a:e9:ff:49:0b:af:e5:22: 40:8b:a4:12 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0 OTExRjFGNEYwHhcNMjUwOTAyMTUwMTI4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3MDZjOC0zOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUT91apWsDS9jVYlg8DuSEDCTnuQCHY62/jVhm6qe5CHxr9aeKnaNdi5Ca4k PCUYoPhX7mhgQ/GjJDvSdfH2QHyelGkZkiQLaia/KKsphJ8tCyUFKfZhQPiGbiOI GlG/9zjzdeQWFY+QWOhOypUEUzcyrHpLhDOXYrl0EyEhW9CRl5g05PluYWGZQyg6 HxZAqIzvOgVXUzC+myfeCob98s6G0/wMTv/Z6r81eiAsL0UB359y+lNPSvnSDERc L7gXh2E5gyWsyulGFaGD5sWNM1NgGcjw1BCakUaYj4U9zzZ2VbkdK3Xlsv3uSIEc 3pt6kmbA0oDKrm3mwwGpVWCCQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMXH5jg2 scyLQMbRfSuToprgqUyxMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvNDkzQkNDMjRC QzY5MTFFRkJBMkU1Qzc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn5kcwDQYJKoZIhvcNAQELBQADggEBAFbWV2apnZXZnAA5 iwXf+gYWCUovDew+6C4Lls58GH3+0ZTP7JKF02YkVNuQ3ob3/P5XOQA9g8ob8D3w 3MANayrTNlwBGNtfnrqpl3eRHQDSE3lblKUwSzsNiEVBipZgW7b5xcMeTbljF07k Tb/Y+Z7i2OyFQm80EW2sE4kXn1Mawu4ZMQPTSdqcymMOyzkltKkjx4I3TVfFbLwH Et71l76+ixvYkE6Rv5em5vncdLaNCnTmM4ZEyHjZV7XRPddA8S50mZ4Z8tN+0/23 63ov9ExEPzzRcOvcSCG9RUm2LG3nOFcd7vJ7NPCG/baMXxD8yAZt7noK6f9JC6/l IkCLpBI= -----END CERTIFICATE-----Generated at Sun Sep 7 16:21:31 2025 by rpki-client