$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/04231ECC326F11F0B0723439C4F9AE02.roa File: 04231ECC326F11F0B0723439C4F9AE02.roa (raw, json) Hash identifier: M5MFheEe6PxTWB7Wz5J5r55zoAQSHJDym66hYRrpkxA= Subject key identifier: 1E:5D:E2:66:AD:8C:C3:5C:94:9A:D2:75:C9:F5:51:C8:AA:2F:AB:A4 Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0B70 Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/04231ECC326F11F0B0723439C4F9AE02.roa Signing time: Thu 31 Jul 2025 20:29:59 +0000 ROA not before: Thu 31 Jul 2025 20:29:59 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 135426 IP address blocks: 103.17.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2928 (0xb70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Jul 31 20:29:59 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=688bd246-4d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:b6:d2:2b:a8:04:32:7d:20:7e:2f:45:a5: 74:e6:e6:21:ca:3d:a7:a2:cb:07:95:57:e1:9e:06: 82:21:cc:c5:53:1c:e2:01:cc:6f:ba:9a:60:92:70: f6:a5:06:1e:6f:43:9f:ca:ed:e6:45:53:9d:05:9c: 23:ec:04:64:42:74:18:90:85:9c:39:ae:fc:f7:47: 31:7d:7a:58:13:97:52:2c:61:1c:41:3b:80:c0:54: 6b:6e:27:02:68:3d:e7:05:7f:56:2b:37:ae:84:ac: ec:f8:41:57:b2:bb:c4:97:d9:5a:1b:96:45:02:46: 2f:46:b1:59:49:d3:f6:53:f8:d0:44:b6:5c:a4:4c: 2a:f8:42:9d:c7:4c:c8:87:07:d7:f9:65:50:07:6d: 2d:65:e3:9c:47:2b:89:72:c7:5e:9c:c4:c6:9e:b3: ac:45:00:65:f9:ae:fe:5e:56:c0:a5:bd:17:37:c0: e8:59:5c:23:db:30:0e:84:54:0d:87:61:90:86:fe: 81:59:37:52:c9:2a:9d:83:c7:a5:c3:ca:14:aa:a2: 8c:11:23:3a:b8:70:48:26:02:60:ba:1f:e7:ed:08: 26:dc:6e:bf:0f:04:7e:5c:e2:c4:f4:70:f6:e7:17: af:95:aa:6f:ea:d4:8d:2c:52:5d:68:4c:54:7d:f0: 6f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5D:E2:66:AD:8C:C3:5C:94:9A:D2:75:C9:F5:51:C8:AA:2F:AB:A4 X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/04231ECC326F11F0B0723439C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.17.29.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:f7:a4:c7:82:08:8e:86:65:b6:6b:5e:9c:6b:8f:ba:0e:24: b2:d7:8a:bc:1c:53:e2:39:a8:72:4b:24:34:2b:ec:1c:ff:4e: 88:80:a4:98:72:c9:4b:bd:18:96:b8:bb:42:69:db:b7:42:87: ec:86:3c:45:4e:dd:ef:24:c9:10:6f:4c:cc:c8:77:71:9f:9c: e1:c3:a5:b8:76:b2:6f:b9:3a:54:af:90:18:c3:39:4c:62:88: fa:44:06:ff:c9:75:10:1e:2d:f0:17:a8:bb:48:3e:fe:be:89: 73:c2:6f:17:d8:74:42:b0:cd:73:9f:ae:ca:c3:c4:8d:30:a0: e7:40:c3:96:93:c0:38:d8:99:01:71:d0:32:1d:88:f4:1f:9e: c9:f0:57:e3:11:6b:2a:7d:fb:3e:f5:7c:61:94:df:b7:d9:4e: 56:d1:65:ff:a4:2b:98:89:36:c9:a3:6a:3d:09:7f:98:33:f8: 07:40:14:44:1d:48:6d:c9:1c:a9:47:c2:36:a2:ee:7c:d6:ec: 24:2b:69:e8:03:6f:01:6a:a2:06:8f:86:6a:3f:20:d8:7d:7b: 89:c7:29:8b:94:dc:8f:e8:1a:82:84:ea:92:2f:be:dc:0e:6e: 7e:8d:da:3f:8a:10:8a:ed:85:31:a1:25:80:f7:62:bd:b7:f0: 90:ac:f6:39 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUwNzMxMjAyOTU5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhiZDI0Ni00ZDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQm20iuoBDJ9IH4vRaV05uYhyj2nossHlVfhngaCIczFUxziAcxvuppgknD2 pQYeb0Ofyu3mRVOdBZwj7ARkQnQYkIWcOa7890cxfXpYE5dSLGEcQTuAwFRrbicC aD3nBX9WKzeuhKzs+EFXsrvEl9laG5ZFAkYvRrFZSdP2U/jQRLZcpEwq+EKdx0zI hwfX+WVQB20tZeOcRyuJcsdenMTGnrOsRQBl+a7+XlbApb0XN8DoWVwj2zAOhFQN h2GQhv6BWTdSySqdg8elw8oUqqKMESM6uHBIJgJguh/n7Qgm3G6/DwR+XOLE9HD2 5xevlapv6tSNLFJdaExUffBvDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFB5d4mat jMNclJrSdcn1UciqL6ukMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvQTM3NEExQjY0NjcxMTFFQTgxQUJCMjVGQzRGOUFFMDIvMDQyMzFFQ0Mz MjZGMTFGMEIwNzIzNDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnER0wDQYJKoZIhvcNAQELBQADggEBAAz3pMeCCI6GZbZr Xpxrj7oOJLLXirwcU+I5qHJLJDQr7Bz/ToiApJhyyUu9GJa4u0Jp27dCh+yGPEVO 3e8kyRBvTMzId3GfnOHDpbh2sm+5OlSvkBjDOUxiiPpEBv/JdRAeLfAXqLtIPv6+ iXPCbxfYdEKwzXOfrsrDxI0woOdAw5aTwDjYmQFx0DIdiPQfnsnwV+MRayp9+z71 fGGU37fZTlbRZf+kK5iJNsmjaj0Jf5gz+AdAFEQdSG3JHKlHwjai7nzW7CQraegD bwFqogaPhmo/INh9e4nHKYuU3I/oGoKE6pIvvtwObn6N2j+KEIrthTGhJYD3Yr23 8JCs9jk= -----END CERTIFICATE-----Generated at Sat Aug 23 20:28:51 2025 by rpki-client