$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/54F537EC32CD11EFA6C5320EC4F9AE02.roa File: 54F537EC32CD11EFA6C5320EC4F9AE02.roa (raw, json) Hash identifier: S4JJ7jAyBRSnbNqlDJcNsJ3iSBBNhU/Ff59dfcwJJB4= Subject key identifier: 8D:FA:91:98:A2:DC:A9:C9:7C:5A:6F:5E:94:84:DC:64:33:FD:17:D6 Certificate issuer: /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Certificate serial: 068C Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/54F537EC32CD11EFA6C5320EC4F9AE02.roa Signing time: Wed 02 Jul 2025 23:02:32 +0000 ROA not before: Wed 02 Jul 2025 23:02:32 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139212 IP address blocks: 103.139.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91801A5, serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Validity Not Before: Jul 2 23:02:32 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6865ba88-37c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:72:b2:9f:81:81:ed:0d:27:25:6d:24:15:6e: 9b:2f:7f:bf:7b:c2:96:e6:46:8c:0a:a4:c8:d6:fe: 68:67:17:c8:eb:e2:9d:4b:11:92:93:40:cc:c8:db: ab:99:2c:b2:f7:86:30:72:31:e3:4b:fd:86:a8:5a: a3:7d:2e:90:9a:87:97:8a:54:02:10:1e:64:ab:4f: 53:dd:6b:94:cc:9b:46:33:fe:5f:1c:f2:f3:ed:7f: c8:74:10:82:40:11:b2:1a:6f:8b:9b:c9:21:29:da: 3d:11:36:6a:0d:16:ba:95:6b:bf:65:78:c7:61:81: bc:3a:68:da:66:72:b4:f2:35:25:65:69:8d:ef:05: 96:87:37:7e:db:08:bb:3e:97:48:23:09:b9:b7:4c: 3b:04:b8:4b:92:11:0a:be:c0:69:a7:35:e6:ee:0c: 46:1f:d1:d0:32:bf:2c:47:14:62:02:d0:3c:20:b4: 1e:59:bf:4b:75:7c:38:56:da:19:59:f4:c4:e8:70: 24:a8:45:56:32:f9:e3:ff:74:ed:15:45:42:91:46: d7:f0:a7:1c:a6:f0:58:1b:14:e0:b5:58:3f:71:85: bb:d7:fe:fa:31:1d:ee:12:ea:e3:32:de:0d:d9:29: 9c:33:16:56:0a:b9:d8:8a:ac:a6:8e:1e:57:f3:92: 60:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FA:91:98:A2:DC:A9:C9:7C:5A:6F:5E:94:84:DC:64:33:FD:17:D6 X509v3 Authority Key Identifier: keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/54F537EC32CD11EFA6C5320EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.218.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:dc:d2:aa:b8:bd:50:52:47:c7:4c:df:65:72:8c:f1:a1:3a: 2f:1d:c8:f9:71:16:55:01:80:2d:4f:b0:09:99:c0:59:bd:b0: fa:5b:f7:4c:0a:d1:88:2f:0d:40:4d:62:2e:60:8b:ba:17:14: 56:35:1f:2e:d2:b2:90:d9:1d:3a:d7:ec:d6:38:f7:ac:1e:90: cb:38:be:28:35:8f:e6:20:dc:7b:9f:ce:60:48:15:59:14:ba: c5:c1:aa:57:e8:35:bf:56:dd:8e:6e:72:92:e4:e0:91:64:d8: 5c:16:78:d1:f0:d5:5b:88:63:4f:2d:82:3d:e4:53:d1:fd:a1: f0:c9:22:ff:ae:45:1a:fd:cf:b5:3e:24:28:9c:ec:15:0d:2e: 56:9b:c5:bf:2a:09:73:2f:62:74:54:40:78:e3:22:b4:2a:06: 24:fd:27:a9:30:9c:94:bc:d4:66:f2:b7:fa:b5:0d:6f:5c:81: eb:1e:ab:17:ab:24:5d:7d:ea:25:06:a1:64:4e:29:50:b9:df: fe:59:f6:15:58:aa:75:83:da:56:a8:eb:89:cf:e4:54:5a:bd: ab:3a:b0:e2:9f:96:52:9d:a1:94:d8:75:b9:69:f4:84:01:88: 07:58:e9:67:a5:58:d1:42:66:07:6f:87:c2:bd:63:99:8f:bc: 5c:e9:4a:26 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxQTUxMTAvBgNVBAUTKEU1RTFDRkNBRTFGOUU2RjEyMUNBMTM1NTFCNDBGNjk4 OTg0QjlEOUQwHhcNMjUwNzAyMjMwMjMyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1YmE4OC0zN2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXKyn4GB7Q0nJW0kFW6bL3+/e8KW5kaMCqTI1v5oZxfI6+KdSxGSk0DMyNur mSyy94YwcjHjS/2GqFqjfS6QmoeXilQCEB5kq09T3WuUzJtGM/5fHPLz7X/IdBCC QBGyGm+Lm8khKdo9ETZqDRa6lWu/ZXjHYYG8OmjaZnK08jUlZWmN7wWWhzd+2wi7 PpdIIwm5t0w7BLhLkhEKvsBppzXm7gxGH9HQMr8sRxRiAtA8ILQeWb9LdXw4VtoZ WfTE6HAkqEVWMvnj/3TtFUVCkUbX8KccpvBYGxTgtVg/cYW71/76MR3uEurjMt4N 2SmcMxZWCrnYiqymjh5X85JgIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI36kZii 3KnJfFpvXpSE3GQz/RfWMB8GA1UdIwQYMBaAFOXhz8rh+ebxIcoTVRtA9piYS52d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDFBNS84NEI1RDYxQzdE NkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2RWh5aE5WRzBEMm1KaExu WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlSFB5dUg1NXZFaHloTlZHMEQybUpoTG5aMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAxQTUvODRCNUQ2MUM3RDZEMTFFQkE2QTRBODE3QzRGOUFFMDIvNTRGNTM3RUMz MkNEMTFFRkE2QzUzMjBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABni9owDQYJKoZIhvcNAQELBQADggEBAH3c0qq4vVBSR8dM 32VyjPGhOi8dyPlxFlUBgC1PsAmZwFm9sPpb90wK0YgvDUBNYi5gi7oXFFY1Hy7S spDZHTrX7NY496wekMs4vig1j+Yg3HufzmBIFVkUusXBqlfoNb9W3Y5ucpLk4JFk 2FwWeNHw1VuIY08tgj3kU9H9ofDJIv+uRRr9z7U+JCic7BUNLlabxb8qCXMvYnRU QHjjIrQqBiT9J6kwnJS81Gbyt/q1DW9cgeseqxerJF196iUGoWROKVC53/5Z9hVY qnWD2lao64nP5FRavas6sOKfllKdoZTYdblp9IQBiAdY6WelWNFCZgdvh8K9Y5mP vFzpSiY= -----END CERTIFICATE-----Generated at Sat Jul 5 11:01:07 2025 by rpki-client