$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/0C0402DEE5CD11EBADAD0E66C4F9AE02.roa File: 0C0402DEE5CD11EBADAD0E66C4F9AE02.roa (raw, json) Hash identifier: trH5jaHCGYgIOAiGZuSF42NeMtUvi3wioLPll8n3v2o= Subject key identifier: 82:06:88:5B:5B:67:DB:84:12:F7:2C:EC:C2:B2:B8:57:E0:AB:A2:47 Certificate issuer: /CN=A91F6E63/serialNumber=ADB9217821FFBEE096E1CEC47098A3145A246EA0 Certificate serial: 0571 Authority key identifier: AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/0C0402DEE5CD11EBADAD0E66C4F9AE02.roa Signing time: Sat 31 May 2025 23:53:13 +0000 ROA not before: Sat 31 May 2025 23:53:13 +0000 ROA not after: Wed 01 Oct 2025 00:00:00 +0000 asID: 9341 IP address blocks: 103.110.88.0/24 maxlen: 24 103.110.89.0/24 maxlen: 24 103.110.90.0/24 maxlen: 24 103.110.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.crl rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 23:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1393 (0x571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E63, serialNumber=ADB9217821FFBEE096E1CEC47098A3145A246EA0 Validity Not Before: May 31 23:53:13 2025 GMT Not After : Oct 1 00:00:00 2025 GMT Subject: CN=683b9668-f7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:b4:9a:83:de:3d:9b:a5:82:fa:41:8d:2e: 3f:c1:9c:8e:37:c6:67:71:c3:db:47:52:b5:23:60: ab:c4:b2:bb:37:23:b9:6a:fa:30:c8:e3:ce:5b:09: 03:f1:36:cb:86:96:6c:92:ea:2e:53:84:73:ce:a9: de:a0:2f:fe:ea:5f:41:5d:cd:16:df:29:9b:2a:67: 2b:4a:3f:76:0c:b5:19:5c:2b:3e:0b:eb:61:f6:a2: c5:ef:4d:d0:84:42:f0:a6:93:3c:d7:0c:5d:1f:75: 79:27:5a:5d:87:6e:ad:a7:e2:28:50:b9:b5:e3:07: 3d:06:2c:6b:22:38:03:73:fe:80:f0:67:23:f8:04: ec:9a:23:50:3a:0b:63:74:a6:b8:27:dc:8f:91:66: 58:1f:87:c1:27:62:45:a4:12:24:97:81:48:7d:fb: 25:0d:d1:4b:23:96:9c:07:91:87:91:96:ed:7f:96: b9:17:56:ab:e0:98:82:a7:16:db:89:a1:cf:06:d9: 89:23:a2:ed:0c:9a:ee:c1:e5:5c:3a:84:a3:da:a4: 16:d8:4f:4e:e6:28:11:13:d0:06:d5:23:63:f2:f5: a6:5f:3e:5f:ce:67:24:92:d5:cf:6c:c0:0d:ef:11: 63:6b:dc:64:e1:61:ff:46:0b:8c:eb:7c:2e:e7:45: bd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:06:88:5B:5B:67:DB:84:12:F7:2C:EC:C2:B2:B8:57:E0:AB:A2:47 X509v3 Authority Key Identifier: keyid:AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/0C0402DEE5CD11EBADAD0E66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.88.0/22 Signature Algorithm: sha256WithRSAEncryption 11:1c:65:e6:d7:e5:e3:6d:e8:78:f7:59:8a:c6:a3:64:d8:70: 76:4a:25:f0:a1:0e:48:ff:53:5f:90:f7:01:35:ed:19:f1:02: 3c:12:db:8d:28:55:47:fb:ea:d5:66:35:80:00:64:ec:13:e7: 65:7d:60:8a:0a:2f:65:39:a5:1f:a2:bc:73:9a:ff:15:18:de: ba:47:db:ae:21:5d:1e:52:5f:12:78:c1:31:58:4e:37:05:a8: c8:b8:4c:5e:c8:1c:0d:66:0a:fb:93:af:83:05:30:26:ab:0d: e7:f4:14:3f:c7:d4:c4:45:e6:85:5e:66:f3:ce:e3:b7:b9:3a: b7:72:bc:36:79:31:94:ff:5e:73:ca:02:49:56:22:81:1f:7d: 9d:72:c9:a8:68:c8:de:2b:31:2f:97:98:76:94:19:c9:d4:60: 32:39:3b:d9:de:29:21:de:79:00:4a:26:2f:74:cc:60:a1:a7: 8a:d1:88:13:57:77:23:2b:cb:c8:9f:e4:36:43:be:12:32:02: bb:c7:07:e6:8c:6f:a1:e2:4b:62:ea:f7:48:b9:37:31:12:d3: d0:03:76:2e:8d:a4:19:8c:f6:f8:1a:c4:e5:15:d4:2e:6b:01: 1d:b8:51:c8:17:10:a8:60:eb:7e:ae:ab:95:b6:2c:9a:62:42: ba:c5:fb:df -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjMxMTAvBgNVBAUTKEFEQjkyMTc4MjFGRkJFRTA5NkUxQ0VDNDcwOThBMzE0 NUEyNDZFQTAwHhcNMjUwNTMxMjM1MzEzWhcNMjUxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNiOTY2OC1mN2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/a0moPePZulgvpBjS4/wZyON8ZnccPbR1K1I2CrxLK7NyO5avowyOPOWwkD 8TbLhpZskuouU4RzzqneoC/+6l9BXc0W3ymbKmcrSj92DLUZXCs+C+th9qLF703Q hELwppM81wxdH3V5J1pdh26tp+IoULm14wc9BixrIjgDc/6A8Gcj+ATsmiNQOgtj dKa4J9yPkWZYH4fBJ2JFpBIkl4FIffslDdFLI5acB5GHkZbtf5a5F1ar4JiCpxbb iaHPBtmJI6LtDJruweVcOoSj2qQW2E9O5igRE9AG1SNj8vWmXz5fzmckktXPbMAN 7xFja9xk4WH/RguM63wu50W9OQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIIGiFtb Z9uEEvcs7MKyuFfgq6JHMB8GA1UdIwQYMBaAFK25IXgh/77gluHOxHCYoxRaJG6g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2My9ENjlDRDkyOEU0 QTQxMUVCOEJDNUM1NDZDNEY5QUUwMi9yYmtoZUNIX3Z1Q1c0YzdFY0ppakZGb2ti cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jia2hlQ0hfdnVDVzRjN0VjSmlqRkZva2JxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjZFNjMvRDY5Q0Q5MjhFNEE0MTFFQjhCQzVDNTQ2QzRGOUFFMDIvMEMwNDAyREVF NUNEMTFFQkFEQUQwRTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnblgwDQYJKoZIhvcNAQELBQADggEBABEcZebX5eNt6Hj3 WYrGo2TYcHZKJfChDkj/U1+Q9wE17RnxAjwS240oVUf76tVmNYAAZOwT52V9YIoK L2U5pR+ivHOa/xUY3rpH264hXR5SXxJ4wTFYTjcFqMi4TF7IHA1mCvuTr4MFMCar Def0FD/H1MRF5oVeZvPO47e5OrdyvDZ5MZT/XnPKAklWIoEffZ1yyahoyN4rMS+X mHaUGcnUYDI5O9neKSHeeQBKJi90zGChp4rRiBNXdyMry8if5DZDvhIyArvHB+aM b6HiS2Lq90i5NzES09ADdi6NpBmM9vgaxOUV1C5rAR24UcgXEKhg636uq5W2LJpi QrrF+98= -----END CERTIFICATE-----Generated at Mon Jun 2 06:35:46 2025 by rpki-client