$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/1D9DC82A652311EBA8CF3C4CC4F9AE02.roa File: 1D9DC82A652311EBA8CF3C4CC4F9AE02.roa (raw, json) Hash identifier: dCLTxe5AeU3EWuhpQGl4ZlWRgK483ALuIyneqH0vPGA= Subject key identifier: 4B:E5:93:AA:95:2E:42:E5:6F:45:B0:06:6F:C0:CC:2A:8E:A3:FC:9D Certificate issuer: /CN=A91203DC/serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Certificate serial: 21AC Authority key identifier: 56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/1D9DC82A652311EBA8CF3C4CC4F9AE02.roa Signing time: Mon 18 Aug 2025 16:42:42 +0000 ROA not before: Mon 18 Aug 2025 16:42:42 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 13335 IP address blocks: 103.31.4.0/23 maxlen: 23 103.31.4.0/24 maxlen: 24 2405:b500::/32 maxlen: 32 2405:b500::/34 maxlen: 34 2405:b500:4000::/34 maxlen: 34 2405:b500:8000::/34 maxlen: 34 2405:b500:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8620 (0x21ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DC, serialNumber=5646E07A0F6025F1E260F1C4996F9A681B292071 Validity Not Before: Aug 18 16:42:42 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68a35802-5685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:62:72:c6:fd:93:e7:76:5b:39:89:3f:d5:69: 9f:a2:2f:31:b6:47:ef:a4:96:c7:b5:f8:66:12:80: 5c:3d:fa:5e:dd:d5:6f:82:f3:4a:a1:49:db:56:23: d2:32:76:8e:90:05:ef:be:6a:dc:b8:79:f0:5b:ce: e6:21:f3:b9:0a:28:1a:7d:ca:10:00:5b:63:fb:61: 07:56:93:d5:36:ef:fc:0c:1e:d8:63:59:82:d7:19: 48:77:c5:35:48:0d:35:89:5a:e0:0c:d3:7e:1b:ec: 4a:a6:72:b8:a0:4b:ec:f6:93:19:1a:aa:f1:60:5f: 3d:03:09:3e:43:39:25:00:78:f6:35:01:a5:d4:60: 15:5d:a0:b9:62:21:7d:54:e3:c0:19:69:27:00:b9: a1:bd:e7:4a:b2:7d:80:c0:c4:d7:08:9d:1c:39:79: af:dd:94:86:a0:fc:5a:23:13:ac:b4:bc:94:90:72: 43:95:60:22:3a:4e:21:82:e0:9c:b4:a4:ee:2e:12: 13:78:25:fa:cc:8a:59:e2:33:41:1f:7b:df:43:ea: a4:df:da:21:d1:6a:0f:ab:b3:1b:dc:75:7a:1e:fc: dd:51:36:8a:26:57:af:01:9d:89:c6:18:ea:ce:65: a7:7f:bb:19:59:f3:62:b3:fe:71:9d:19:84:d1:4f: cc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E5:93:AA:95:2E:42:E5:6F:45:B0:06:6F:C0:CC:2A:8E:A3:FC:9D X509v3 Authority Key Identifier: keyid:56:46:E0:7A:0F:60:25:F1:E2:60:F1:C4:99:6F:9A:68:1B:29:20:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/Vkbgeg9gJfHiYPHEmW-aaBspIHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vkbgeg9gJfHiYPHEmW-aaBspIHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DC/FAD3D6FCDC4911E5A0625F82C4F9AE02/1D9DC82A652311EBA8CF3C4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.31.4.0/23 IPv6: 2405:b500::/32 Signature Algorithm: sha256WithRSAEncryption 91:77:d9:c4:5d:5f:8b:43:e4:b3:38:fc:02:ff:f0:79:61:75: 19:75:95:4c:34:d1:a2:43:99:42:23:88:2e:c0:9b:23:ba:d2: a7:11:e0:fb:ba:2f:07:61:5d:a0:b5:a2:6d:de:0b:cf:a7:d0: 03:cd:bd:ed:4d:45:8f:80:ea:6a:6a:71:4d:9f:66:dd:b2:1a: bf:4d:05:bf:be:5e:34:67:e0:3c:2c:d6:dd:cf:f0:dc:4b:4c: 10:7c:d4:63:f1:e6:bc:c2:d1:40:2d:f8:67:fa:fc:db:06:92: d0:fd:1f:0c:4f:7c:2b:e3:21:ff:37:f0:a0:cd:e0:3e:b0:de: 77:fa:8a:aa:a2:d1:c9:3b:e6:c5:80:d3:39:df:22:24:34:b5: 76:48:25:51:65:d2:88:16:87:3d:d2:2d:96:f0:77:0d:91:5c: aa:02:ab:e8:e3:bf:b7:02:ae:ea:a9:01:01:e9:b1:10:ad:00: c9:64:1d:7a:34:fa:06:ea:ac:e4:16:fb:90:96:9a:61:ed:39: 7d:f9:a7:90:76:2f:28:5c:f0:19:93:e1:28:7e:10:82:93:b1: 5b:99:36:07:22:98:c1:bf:b0:8d:6d:ae:e2:f9:d2:e1:ff:a8: 16:20:e3:c2:4a:55:c8:3c:b0:d8:d4:37:e5:6f:e3:e2:49:c7: 53:b5:0e:41 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICIawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREMxMTAvBgNVBAUTKDU2NDZFMDdBMEY2MDI1RjFFMjYwRjFDNDk5NkY5QTY4 MUIyOTIwNzEwHhcNMjUwODE4MTY0MjQyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzNTgwMi01Njg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3mJyxv2T53ZbOYk/1Wmfoi8xtkfvpJbHtfhmEoBcPfpe3dVvgvNKoUnbViPS MnaOkAXvvmrcuHnwW87mIfO5CigafcoQAFtj+2EHVpPVNu/8DB7YY1mC1xlId8U1 SA01iVrgDNN+G+xKpnK4oEvs9pMZGqrxYF89Awk+QzklAHj2NQGl1GAVXaC5YiF9 VOPAGWknALmhvedKsn2AwMTXCJ0cOXmv3ZSGoPxaIxOstLyUkHJDlWAiOk4hguCc tKTuLhITeCX6zIpZ4jNBH3vfQ+qk39oh0WoPq7Mb3HV6HvzdUTaKJlevAZ2Jxhjq zmWnf7sZWfNis/5xnRmE0U/MMQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEvlk6qV LkLlb0WwBm/AzCqOo/ydMB8GA1UdIwQYMBaAFFZG4HoPYCXx4mDxxJlvmmgbKSBx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNEQy9GQUQzRDZGQ0RD NDkxMUU1QTA2MjVGODJDNEY5QUUwMi9Wa2JnZWc5Z0pmSGlZUEhFbVctYWFCc3BJ SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZrYmdlZzlnSmZIaVlQSEVtVy1hYUJzcElIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjAzREMvRkFEM0Q2RkNEQzQ5MTFFNUEwNjI1RjgyQzRGOUFFMDIvMUQ5REM4MkE2 NTIzMTFFQkE4Q0YzQzRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnHwQwDQQCAAIwBwMFACQFtQAwDQYJKoZIhvcNAQELBQAD ggEBAJF32cRdX4tD5LM4/AL/8HlhdRl1lUw00aJDmUIjiC7AmyO60qcR4Pu6Lwdh XaC1om3eC8+n0APNve1NRY+A6mpqcU2fZt2yGr9NBb++XjRn4Dws1t3P8NxLTBB8 1GPx5rzC0UAt+Gf6/NsGktD9HwxPfCvjIf838KDN4D6w3nf6iqqi0ck75sWA0znf IiQ0tXZIJVFl0ogWhz3SLZbwdw2RXKoCq+jjv7cCruqpAQHpsRCtAMlkHXo0+gbq rOQW+5CWmmHtOX35p5B2Lyhc8BmT4Sh+EIKTsVuZNgcimMG/sI1truL50uH/qBYg 48JKVcg8sNjUN+Vv4+JJx1O1DkE= -----END CERTIFICATE-----Generated at Sat Aug 23 16:26:30 2025 by rpki-client