$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/CE751320B9D511ED89A5B11FC4F9AE02.roa File: CE751320B9D511ED89A5B11FC4F9AE02.roa (raw, json) Hash identifier: tUYKyj51w8FY5qrfQOEMkIv2L7xe24UEi8KjbC1Ydgg= Subject key identifier: 36:79:55:DD:8D:0B:89:93:5D:FC:B4:7E:38:60:A2:B4:5D:B7:A0:4A Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 057D Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/CE751320B9D511ED89A5B11FC4F9AE02.roa Signing time: Fri 15 Aug 2025 00:05:29 +0000 ROA not before: Fri 15 Aug 2025 00:05:29 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 976 IP address blocks: 103.170.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1405 (0x57d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Aug 15 00:05:29 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=689e79c8-7019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0b:a9:34:0b:08:2d:93:46:59:85:18:14:2c: 68:a4:a4:b4:c3:91:8b:22:de:3d:a8:ad:24:c2:77: 87:d6:87:4e:77:62:e4:97:2e:47:d8:d6:5e:28:49: df:e9:6b:7f:db:79:cd:a2:fa:b5:18:15:53:a3:30: d1:04:13:dd:93:80:32:7d:e2:f4:dc:08:59:24:a1: b9:ae:5e:a1:69:7c:8b:81:00:05:91:69:97:39:b4: 06:8b:a5:ec:cd:7c:3c:bf:03:ce:ac:ea:c5:a6:b3: d1:40:91:64:48:ce:76:2d:90:0f:dc:97:1b:13:d3: 00:ae:7d:cf:d2:10:d6:c4:ef:86:3c:a8:ad:26:7b: f9:cb:cb:b9:c4:83:05:90:71:04:d5:2e:a5:b6:2a: aa:70:32:30:dd:51:91:e5:93:15:16:24:98:eb:51: 71:3b:ea:12:4f:70:2e:7e:dc:60:7e:b5:49:4d:a7: 26:77:5c:c1:24:ba:aa:5c:02:2f:39:88:f7:c6:02: 2a:ac:03:53:a9:f5:7a:e3:1a:a0:77:eb:3d:f3:78: 55:b9:d5:dc:89:4f:f1:9a:d1:d5:ed:96:8f:bf:4f: 54:cf:94:08:6c:b0:4a:e6:a6:23:85:dc:90:d2:95: 6c:19:8e:ad:78:0c:35:b9:88:73:53:81:93:49:aa: d2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:79:55:DD:8D:0B:89:93:5D:FC:B4:7E:38:60:A2:B4:5D:B7:A0:4A X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/CE751320B9D511ED89A5B11FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.170.72.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:64:b6:c7:2f:ae:b9:c0:7c:88:06:2a:64:a6:07:af:a3:50: 5b:b6:64:d4:4a:a5:43:75:2e:3d:18:ec:e2:44:10:c6:8a:fe: e6:8c:b2:22:bb:af:2e:51:96:62:a4:b6:23:b4:5f:05:a1:91: 8e:f6:f9:56:c0:25:d0:ba:cc:28:d7:42:25:37:9f:cd:40:af: ae:ec:06:6a:c6:b4:22:82:6a:55:8b:fb:f6:77:ac:8e:88:00: e6:02:71:23:b0:be:b3:66:7c:d5:74:5d:5d:95:ef:d4:18:fd: e6:f5:8b:28:c9:35:e1:fd:2e:46:b2:95:c7:da:4f:67:c1:3c: 2c:9d:56:9e:39:0f:f0:09:e0:cb:51:ec:c1:60:88:c3:6f:e1: 8d:44:06:d6:82:8c:71:51:bf:9b:0a:0f:75:35:35:98:d1:99: 0e:3b:f3:39:ac:24:74:6b:3b:44:ec:ff:12:82:08:87:97:e6: 21:aa:5e:21:7a:30:87:da:f6:06:e9:16:e5:5d:bf:0c:5f:9f: a2:8e:25:a2:95:ff:bb:2f:3f:49:b4:3b:7c:26:70:21:2f:77: dc:94:08:44:5b:cb:76:05:9e:22:8c:fb:f7:5d:ad:b8:85:13: 34:f6:6c:fc:b6:7c:ec:09:34:b1:58:30:91:63:89:a6:68:b6: d1:09:37:9e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjUwODE1MDAwNTI5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODllNzljOC03MDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwupNAsILZNGWYUYFCxopKS0w5GLIt49qK0kwneH1odOd2Lkly5H2NZeKEnf 6Wt/23nNovq1GBVTozDRBBPdk4AyfeL03AhZJKG5rl6haXyLgQAFkWmXObQGi6Xs zXw8vwPOrOrFprPRQJFkSM52LZAP3JcbE9MArn3P0hDWxO+GPKitJnv5y8u5xIMF kHEE1S6ltiqqcDIw3VGR5ZMVFiSY61FxO+oST3AuftxgfrVJTacmd1zBJLqqXAIv OYj3xgIqrANTqfV64xqgd+s983hVudXciU/xmtHV7ZaPv09Uz5QIbLBK5qYjhdyQ 0pVsGY6teAw1uYhzU4GTSarSnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDZ5Vd2N C4mTXfy0fjhgorRdt6BKMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI4RTMvNTM5M0MwRUUwMDI2MTFFQ0E0MDYxNjE0QzRGOUFFMDIvQ0U3NTEzMjBC OUQ1MTFFRDg5QTVCMTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnqkgwDQYJKoZIhvcNAQELBQADggEBAB9ktscvrrnAfIgG KmSmB6+jUFu2ZNRKpUN1Lj0Y7OJEEMaK/uaMsiK7ry5RlmKktiO0XwWhkY72+VbA JdC6zCjXQiU3n81Ar67sBmrGtCKCalWL+/Z3rI6IAOYCcSOwvrNmfNV0XV2V79QY /eb1iyjJNeH9LkaylcfaT2fBPCydVp45D/AJ4MtR7MFgiMNv4Y1EBtaCjHFRv5sK D3U1NZjRmQ478zmsJHRrO0Ts/xKCCIeX5iGqXiF6MIfa9gbpFuVdvwxfn6KOJaKV /7svP0m0O3wmcCEvd9yUCERby3YFniKM+/ddrbiFEzT2bPy2fOwJNLFYMJFjiaZo ttEJN54= -----END CERTIFICATE-----Generated at Sun Aug 24 02:33:31 2025 by rpki-client