$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/1DC0E5BC419811EAA268D964C4F9AE02.roa File: 1DC0E5BC419811EAA268D964C4F9AE02.roa (raw, json) Hash identifier: zl+a8vSD9MSTaMQoEXEh+bjKrxbAyrwmlDVNsBCrX70= Subject key identifier: 7C:2D:BD:40:D5:2A:08:2C:7F:D0:42:6C:99:D4:4E:B4:59:CE:4A:DA Certificate issuer: /CN=A91ED2BB/serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94 Certificate serial: 0B57 Authority key identifier: A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/1DC0E5BC419811EAA268D964C4F9AE02.roa Signing time: Tue 02 Sep 2025 19:39:17 +0000 ROA not before: Tue 02 Sep 2025 19:39:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132827 IP address blocks: 103.246.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 19:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2903 (0xb57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED2BB, serialNumber=A6FF381A2AEBEA6DCCFE0DE65D4196040271FE94 Validity Not Before: Sep 2 19:39:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b747e5-dea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2e:e5:cb:b2:35:b5:dd:eb:ca:3e:b8:41:fa: 76:bd:44:f9:36:3c:3a:39:ff:ba:93:f8:92:e7:b6: fb:f4:52:a7:5f:17:96:76:74:60:00:9e:78:57:c0: 35:1a:75:4e:d4:07:ca:09:f2:f1:aa:6a:bd:88:90: 3c:0e:3a:7c:95:b2:9d:81:8b:43:aa:e6:98:cd:da: 8b:35:6d:5f:38:ae:ce:14:e7:02:80:f7:f6:f8:fe: 46:61:54:52:69:ef:b8:32:fe:da:5b:4a:a3:1d:12: 74:0e:13:87:e4:d9:99:62:b7:a6:f2:68:aa:0e:b2: 6c:23:50:e4:38:fc:e0:2b:70:ac:b8:e0:83:15:d0: 0b:d2:9c:25:b1:fd:17:3e:e9:dd:97:a2:ec:74:06: 4c:8a:72:5e:e5:a4:37:3b:d3:54:c8:46:c6:e9:1f: 4c:91:a5:d4:1d:84:e2:5c:3c:53:27:44:54:41:35: fd:ae:55:f3:29:43:37:7b:0c:67:95:4e:a8:e7:d0: ef:75:6d:bf:cd:67:47:a4:54:fa:60:8b:9b:ba:49: b9:fe:c0:e5:21:6c:65:d5:4a:b3:c8:24:2b:f8:d1: 68:be:6e:11:91:49:fd:e5:18:d8:eb:3f:01:b3:66: 58:a2:be:e4:30:04:97:05:12:65:a4:f6:47:f2:d7: 84:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2D:BD:40:D5:2A:08:2C:7F:D0:42:6C:99:D4:4E:B4:59:CE:4A:DA X509v3 Authority Key Identifier: keyid:A6:FF:38:1A:2A:EB:EA:6D:CC:FE:0D:E6:5D:41:96:04:02:71:FE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/pv84Girr6m3M_g3mXUGWBAJx_pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pv84Girr6m3M_g3mXUGWBAJx_pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED2BB/57D647FA417111EA91495B6BC4F9AE02/1DC0E5BC419811EAA268D964C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.246.178.0/23 Signature Algorithm: sha256WithRSAEncryption 79:01:eb:74:a9:d7:bb:26:79:72:e4:7b:cb:e1:25:6a:9a:26: c2:8b:34:05:24:59:3c:c0:04:44:00:b8:22:c4:03:85:e9:0a: 37:a6:ea:a6:9e:cc:2d:96:99:46:64:5f:d2:bc:09:7e:17:24: 6d:b3:26:bb:d5:aa:9f:d3:8a:57:09:03:68:08:42:72:d2:a1: f5:02:8f:15:6f:af:cf:a8:ef:e9:ab:84:8d:6f:4a:07:03:63: ca:a1:6a:07:b5:3c:f5:b6:98:c9:f1:bd:9e:cf:93:53:83:f0: d3:43:93:e7:c6:5a:29:12:0e:49:4c:21:fe:5c:61:1f:24:08: c3:09:f3:fc:ea:eb:08:74:ce:47:e1:85:c3:61:08:86:12:f8: b8:0e:e9:e7:5c:b8:c0:29:77:82:ba:5b:dc:e0:4d:2b:fe:05: 6a:d4:93:0f:73:5f:54:32:04:0c:dd:07:75:e4:cf:fd:96:00: 99:38:20:2f:41:1c:67:1c:69:bd:46:b4:57:53:65:f6:60:c2: f4:d6:bd:bd:48:a9:15:f0:ca:94:7c:8e:1e:71:d6:24:26:be: 76:bf:88:c8:10:5c:e9:60:82:62:b7:53:f0:a1:55:64:fb:0d: 14:85:55:d0:ac:bb:76:bd:1f:96:f9:3c:52:1b:a4:18:b7:cd: fe:53:36:b4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQyQkIxMTAvBgNVBAUTKEE2RkYzODFBMkFFQkVBNkRDQ0ZFMERFNjVENDE5NjA0 MDI3MUZFOTQwHhcNMjUwOTAyMTkzOTE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3NDdlNS1kZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4i7ly7I1td3ryj64Qfp2vUT5Njw6Of+6k/iS57b79FKnXxeWdnRgAJ54V8A1 GnVO1AfKCfLxqmq9iJA8Djp8lbKdgYtDquaYzdqLNW1fOK7OFOcCgPf2+P5GYVRS ae+4Mv7aW0qjHRJ0DhOH5NmZYrem8miqDrJsI1DkOPzgK3CsuOCDFdAL0pwlsf0X Pundl6LsdAZMinJe5aQ3O9NUyEbG6R9MkaXUHYTiXDxTJ0RUQTX9rlXzKUM3ewxn lU6o59DvdW2/zWdHpFT6YIubukm5/sDlIWxl1UqzyCQr+NFovm4RkUn95RjY6z8B s2ZYor7kMASXBRJlpPZH8teEwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHwtvUDV Kggsf9BCbJnUTrRZzkraMB8GA1UdIwQYMBaAFKb/OBoq6+ptzP4N5l1BlgQCcf6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDJCQi81N0Q2NDdGQTQx NzExMUVBOTE0OTVCNkJDNEY5QUUwMi9wdjg0R2lycjZtM01fZzNtWFVHV0JBSnhf cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B2ODRHaXJyNm0zTV9nM21YVUdXQkFKeF9wUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUQyQkIvNTdENjQ3RkE0MTcxMTFFQTkxNDk1QjZCQzRGOUFFMDIvMURDMEU1QkM0 MTk4MTFFQUEyNjhEOTY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn9rIwDQYJKoZIhvcNAQELBQADggEBAHkB63Sp17smeXLk e8vhJWqaJsKLNAUkWTzABEQAuCLEA4XpCjem6qaezC2WmUZkX9K8CX4XJG2zJrvV qp/TilcJA2gIQnLSofUCjxVvr8+o7+mrhI1vSgcDY8qhage1PPW2mMnxvZ7Pk1OD 8NNDk+fGWikSDklMIf5cYR8kCMMJ8/zq6wh0zkfhhcNhCIYS+LgO6edcuMApd4K6 W9zgTSv+BWrUkw9zX1QyBAzdB3Xkz/2WAJk4IC9BHGccab1GtFdTZfZgwvTWvb1I qRXwypR8jh5x1iQmvna/iMgQXOlggmK3U/ChVWT7DRSFVdCsu3a9H5b5PFIbpBi3 zf5TNrQ= -----END CERTIFICATE-----Generated at Sat Sep 6 16:52:48 2025 by rpki-client