$ rpki-client -vvf rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/91BBC8880D9711ED8F09C27DC4F9AE02.roa File: 91BBC8880D9711ED8F09C27DC4F9AE02.roa (raw, json) Hash identifier: KV+SoYHbA+Q51JP+NigJCe33FcHjWlimMC267ADRQGw= Subject key identifier: 8E:A5:16:63:16:25:9B:5A:7C:B7:7F:8E:51:DB:E4:A6:E5:88:FC:9C Certificate issuer: /CN=A9171669/serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4 Certificate serial: 028C Authority key identifier: 83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/91BBC8880D9711ED8F09C27DC4F9AE02.roa Signing time: Thu 03 Jul 2025 02:06:49 +0000 ROA not before: Thu 03 Jul 2025 02:06:49 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 149990 IP address blocks: 103.190.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171669, serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4 Validity Not Before: Jul 3 02:06:49 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6865e5b9-0d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6e:68:cb:40:23:4c:95:85:f9:4b:88:f3:95: 31:2b:5e:45:d8:13:5a:3c:b6:19:9b:13:e5:b5:97: c9:88:30:e7:d2:ce:02:d6:3b:ad:a7:45:fd:79:bb: 4e:ed:65:4e:1c:d6:e1:30:35:48:17:ab:1b:64:11: 23:09:97:ff:f7:1a:7f:d5:bd:dc:08:0f:b9:84:17: fd:e1:c5:8a:19:87:88:70:f0:1f:95:b6:fd:e7:05: 17:5a:23:ad:e1:d7:b9:81:35:ec:d9:04:f6:1f:c3: 67:d7:f7:df:52:0c:d4:d1:fa:b5:12:12:38:c0:3d: 7e:3c:63:ce:32:4a:80:6c:1b:ab:f7:df:a8:bf:ca: e7:04:88:9b:25:12:77:72:3d:be:02:49:5c:df:ae: 84:b0:71:20:19:e0:46:32:55:98:03:ae:27:b3:38: fb:88:ca:6d:f1:fa:1b:dd:b6:6e:7c:f4:e1:e6:80: 09:a1:39:27:44:ce:f0:56:1c:8a:aa:cd:7d:c2:60: ac:a6:fc:4f:16:73:95:68:cf:3b:15:dc:cc:1e:ac: 4c:53:a1:ae:9f:65:95:b8:48:28:91:2c:d4:c9:8a: 08:ac:d0:16:17:2e:b5:40:d9:f3:e1:83:44:e3:84: bf:dc:93:ee:89:ae:3b:3b:15:ab:70:4c:b5:cf:d6: 23:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A5:16:63:16:25:9B:5A:7C:B7:7F:8E:51:DB:E4:A6:E5:88:FC:9C X509v3 Authority Key Identifier: keyid:83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/91BBC8880D9711ED8F09C27DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.68.0/23 Signature Algorithm: sha256WithRSAEncryption a2:be:af:73:5f:35:d5:75:e2:fe:88:1a:b3:7b:6d:0c:83:14: dd:10:6a:b2:38:68:d2:b9:b9:2b:8b:d4:1e:d8:6f:27:c4:d8: 2f:b2:6b:eb:ea:92:1a:a4:01:a1:e7:c5:44:00:0c:b6:96:71: d6:34:ef:ca:be:4e:6b:e4:14:9f:22:c0:6b:ae:7b:a5:39:aa: bb:95:e9:d0:f7:ca:34:d7:75:e5:57:56:ba:33:38:31:cc:91: 13:c1:af:cd:7c:2e:b9:cb:21:1a:02:47:c1:bc:34:1a:c8:e7: 47:48:35:bd:d9:47:bd:d2:cb:2f:d1:71:f9:47:18:04:64:ae: f8:c1:4f:9b:cf:f5:55:32:be:38:b1:91:07:a3:d5:ff:57:65: f6:88:5e:1b:72:ce:25:fd:b6:6c:0e:b2:84:9f:c3:c2:e0:16: 22:7e:7a:4f:e2:48:1f:97:23:dc:ed:25:11:c9:74:d1:f7:92: 4d:bb:2f:79:52:8f:92:52:a3:ba:7b:f4:a3:10:40:e2:6a:ef: 69:8b:95:c0:c1:18:77:5d:cf:06:38:25:5d:77:8e:0c:88:4e: 2f:7c:a6:80:c4:7c:7f:cc:fb:5e:a8:74:19:6c:63:d7:3f:44: 1d:2b:4b:b2:d6:14:13:0b:4c:10:61:cb:3b:cd:c5:9c:ef:0d: a5:c4:40:a0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2NjkxMTAvBgNVBAUTKDgzMkZFNTYxNEUwMkQzNTBGODg2NzkwREU0QkRDOTlG NDI2NDU1RTQwHhcNMjUwNzAzMDIwNjQ5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1ZTViOS0wZDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0m5oy0AjTJWF+UuI85UxK15F2BNaPLYZmxPltZfJiDDn0s4C1jutp0X9ebtO 7WVOHNbhMDVIF6sbZBEjCZf/9xp/1b3cCA+5hBf94cWKGYeIcPAflbb95wUXWiOt 4de5gTXs2QT2H8Nn1/ffUgzU0fq1EhI4wD1+PGPOMkqAbBur99+ov8rnBIibJRJ3 cj2+Aklc366EsHEgGeBGMlWYA64nszj7iMpt8fob3bZufPTh5oAJoTknRM7wVhyK qs19wmCspvxPFnOVaM87FdzMHqxMU6Gun2WVuEgokSzUyYoIrNAWFy61QNnz4YNE 44S/3JPuia47OxWrcEy1z9YjsQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI6lFmMW JZtafLd/jlHb5KbliPycMB8GA1UdIwQYMBaAFIMv5WFOAtNQ+IZ5DeS9yZ9CZFXk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTY2OS9CNTU4QkEwNjBE OTQxMUVEQTVENEUwNTFDNEY5QUUwMi9neV9sWVU0QzAxRDRobmtONUwzSm4wSmtW ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5X2xZVTRDMDFENGhua041TDNKbjBKa1ZlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE2NjkvQjU1OEJBMDYwRDk0MTFFREE1RDRFMDUxQzRGOUFFMDIvOTFCQkM4ODgw RDk3MTFFRDhGMDlDMjdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnvkQwDQYJKoZIhvcNAQELBQADggEBAKK+r3NfNdV14v6I GrN7bQyDFN0QarI4aNK5uSuL1B7YbyfE2C+ya+vqkhqkAaHnxUQADLaWcdY078q+ TmvkFJ8iwGuue6U5qruV6dD3yjTXdeVXVrozODHMkRPBr818LrnLIRoCR8G8NBrI 50dINb3ZR73Syy/RcflHGARkrvjBT5vP9VUyvjixkQej1f9XZfaIXhtyziX9tmwO soSfw8LgFiJ+ek/iSB+XI9ztJRHJdNH3kk27L3lSj5JSo7p79KMQQOJq72mLlcDB GHddzwY4JV13jgyITi98poDEfH/M+16odBlsY9c/RB0rS7LWFBMLTBBhyzvNxZzv DaXEQKA= -----END CERTIFICATE-----Generated at Fri Jul 4 22:17:43 2025 by rpki-client