$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa File: 7338235CC06011EE882BC34AC4F9AE02.roa (raw, json) Hash identifier: YK6Hmo3PllZtdE5hm6A8K6SCgV+te0dB3ba976/6MCY= Subject key identifier: 89:B3:55:17:41:B8:1A:A4:EB:F0:E3:12:D7:6E:19:F7:06:53:CE:A0 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 1550 Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa Signing time: Sun 14 Sep 2025 16:56:20 +0000 ROA not before: Sun 14 Sep 2025 16:56:20 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 135106 IP address blocks: 103.209.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5456 (0x1550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Sep 14 16:56:20 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68c6f3b4-8676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c6:dc:74:50:0e:d6:72:98:34:aa:80:85:85: e6:96:4e:42:c0:c3:90:20:ff:94:f6:cb:b9:d1:f9: 56:e7:9c:fa:5c:9d:6b:89:d7:d8:8b:5f:09:f2:5b: 21:86:13:ca:af:81:f0:2e:9f:8f:c4:a3:e4:11:40: d9:52:f7:25:7a:51:f1:03:6d:11:de:b3:dd:f6:60: e6:80:87:97:f4:ee:08:99:8b:95:0f:a9:c3:5f:32: 8b:fa:41:17:00:c8:81:e7:3a:a6:5e:72:49:1b:b2: 4c:45:01:bb:19:eb:d4:34:45:70:5d:ec:08:16:6a: c6:4f:ba:d7:fd:85:c9:c9:5d:1a:34:91:50:4d:b7: 78:f4:fb:eb:b4:a6:ae:65:e7:0e:73:70:1f:d9:dc: 5b:e5:5b:eb:35:3f:a4:15:94:63:0d:7c:7b:c9:ca: 7a:3c:15:6c:9f:d6:22:17:7b:7d:4c:be:32:77:85: 18:ca:c2:41:49:e2:82:1c:11:e4:28:34:61:fa:0f: 1b:70:92:33:04:a6:b7:c7:57:23:7f:ba:73:16:8a: 72:6e:0a:d6:7a:6f:a3:b2:18:cb:6b:c1:3f:00:8b: b7:08:ad:d0:4f:b0:05:73:c6:f3:97:96:0b:69:14: c2:1a:24:b3:6d:dc:60:04:71:a1:3e:9e:29:65:f4: 62:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B3:55:17:41:B8:1A:A4:EB:F0:E3:12:D7:6E:19:F7:06:53:CE:A0 X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.124.0/24 Signature Algorithm: sha256WithRSAEncryption da:43:55:c3:1a:d1:32:1b:e0:9b:ef:66:56:c8:0d:a4:f9:c4: 0e:9b:ab:a5:3d:05:d9:9f:34:0f:be:7a:41:64:e5:fb:42:ef: 10:c0:97:1d:3f:a1:4e:0a:08:08:42:34:a1:cb:d3:03:94:a2: ae:57:ff:77:58:b2:ba:3e:28:1a:b3:69:5a:2b:fd:eb:d7:45: de:96:0d:da:96:a8:5b:bf:09:b8:0a:6f:8e:49:d0:fb:ec:fb: 07:81:79:84:83:89:5b:16:ef:09:cc:99:7a:27:76:f8:45:3f: 66:4a:e1:38:16:5f:09:7e:9c:0c:83:47:62:41:f5:73:d7:7e: 40:fb:3c:fe:3a:b8:a5:28:5d:77:76:57:1a:74:22:b3:eb:4d: 96:e2:fe:a8:77:c6:a8:88:45:08:00:2f:5b:0c:b0:8d:82:d7: e8:52:7c:90:42:d1:b4:3d:c7:bf:83:29:92:e0:e8:63:6d:5a: f8:18:e1:cc:4b:ca:cc:ad:94:68:d6:7c:e0:4d:63:dd:1e:a0: 21:85:1b:52:ab:5d:21:ef:39:85:14:83:98:d7:1a:a5:f1:70: 82:0e:c3:57:c0:c6:a1:55:14:a8:1f:f3:15:94:69:55:56:b8: ae:30:ec:cc:e4:05:04:cd:8a:68:bc:2b:77:fb:49:9a:ac:94: 7b:86:3a:ee -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjUwOTE0MTY1NjIwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM2ZjNiNC04Njc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MbcdFAO1nKYNKqAhYXmlk5CwMOQIP+U9su50flW55z6XJ1ridfYi18J8lsh hhPKr4HwLp+PxKPkEUDZUvclelHxA20R3rPd9mDmgIeX9O4ImYuVD6nDXzKL+kEX AMiB5zqmXnJJG7JMRQG7GevUNEVwXewIFmrGT7rX/YXJyV0aNJFQTbd49PvrtKau ZecOc3Af2dxb5VvrNT+kFZRjDXx7ycp6PBVsn9YiF3t9TL4yd4UYysJBSeKCHBHk KDRh+g8bcJIzBKa3x1cjf7pzFopybgrWem+jshjLa8E/AIu3CK3QT7AFc8bzl5YL aRTCGiSzbdxgBHGhPp4pZfRi0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFImzVRdB uBqk6/DjEtduGfcGU86gMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzAxRDUvRDRCRTAwRDQ2M0U1MTFFOEI1Q0ZFNDFBQzRGOUFFMDIvNzMzODIzNUND MDYwMTFFRTg4MkJDMzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn0XwwDQYJKoZIhvcNAQELBQADggEBANpDVcMa0TIb4Jvv ZlbIDaT5xA6bq6U9BdmfNA++ekFk5ftC7xDAlx0/oU4KCAhCNKHL0wOUoq5X/3dY sro+KBqzaVor/evXRd6WDdqWqFu/CbgKb45J0Pvs+weBeYSDiVsW7wnMmXondvhF P2ZK4TgWXwl+nAyDR2JB9XPXfkD7PP46uKUoXXd2Vxp0IrPrTZbi/qh3xqiIRQgA L1sMsI2C1+hSfJBC0bQ9x7+DKZLg6GNtWvgY4cxLysytlGjWfOBNY90eoCGFG1Kr XSHvOYUUg5jXGqXxcIIOw1fAxqFVFKgf8xWUaVVWuK4w7MzkBQTNimi8K3f7SZqs lHuGOu4= -----END CERTIFICATE-----Generated at Mon Oct 20 14:00:19 2025 by rpki-client