$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1DB0529C7CA711F0A52C5966C4F9AE02.roa File: 1DB0529C7CA711F0A52C5966C4F9AE02.roa (raw, json) Hash identifier: XaSGJdVmQFwnCd+b3KdpqRusxazGj+qlh/KndRTEPfA= Subject key identifier: D4:92:93:0B:BD:83:5F:F1:C2:66:E1:BE:2B:8A:AB:6D:09:54:90:6C Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Certificate serial: 07F2 Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1DB0529C7CA711F0A52C5966C4F9AE02.roa Signing time: Tue 19 Aug 2025 02:49:25 +0000 ROA not before: Tue 19 Aug 2025 02:49:25 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 15412 IP address blocks: 103.154.20.0/23 maxlen: 23 103.233.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2034 (0x7f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Validity Not Before: Aug 19 02:49:25 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a3e635-1920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ca:51:35:63:8d:3b:d8:8f:7b:8a:74:a0:14: e7:4c:7f:2f:9e:f3:21:74:4b:01:50:e6:c5:8d:a3: c2:fd:8a:6f:d4:1d:94:56:91:5f:d0:f3:12:af:cd: 89:cd:3d:8c:11:01:8d:0b:dc:d2:b6:f2:63:8d:ec: 2a:a7:33:dd:28:39:61:b0:d7:65:44:74:c8:2b:cb: 42:2c:fd:b0:31:45:dc:8c:8b:1e:37:6b:f6:18:0d: 6f:34:3e:a2:26:48:13:09:cd:81:fd:d0:15:94:9c: f5:e2:f9:8e:10:b5:05:f3:3b:54:27:9b:e9:fb:f6: 84:6e:5b:4c:31:8d:c2:24:0d:c3:29:e4:2d:e6:6c: 0b:bf:7b:f7:21:5b:25:38:12:1e:d0:2d:ba:84:ed: 0b:f1:c2:40:5e:69:50:e0:c1:c6:6b:da:63:33:f9: d4:23:04:f7:68:9e:03:bb:94:e0:7b:2d:07:6b:1f: 67:cd:85:af:80:3b:da:94:13:1b:1a:06:a0:0b:6b: 70:72:b8:60:59:5a:c1:67:3a:7f:96:94:5f:2b:b6: 81:50:2e:87:fe:bc:98:08:10:7d:66:0c:64:dd:38: 20:9b:c1:aa:97:99:c0:af:3d:ff:88:b0:53:f9:79: 4d:87:b1:1d:30:ce:b1:1f:ca:e5:9f:c8:ab:d0:b3: 05:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:92:93:0B:BD:83:5F:F1:C2:66:E1:BE:2B:8A:AB:6D:09:54:90:6C X509v3 Authority Key Identifier: keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/1DB0529C7CA711F0A52C5966C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.20.0/23 103.233.212.0/22 Signature Algorithm: sha256WithRSAEncryption 77:4c:71:d8:a7:a6:e0:aa:38:27:7c:58:ea:20:9d:e1:6b:d6: 99:e7:36:74:73:21:44:cc:ff:26:c5:ce:35:bf:99:ee:be:18: 61:f6:00:91:a6:ac:01:32:96:c4:a4:36:7f:2a:cd:38:5a:2d: d7:96:02:eb:ff:20:d6:d4:fb:08:4d:06:87:84:a0:a0:dd:f0: d1:07:67:f9:b4:1c:e5:d0:69:f5:5a:9f:57:37:3e:40:63:46: ad:ab:a7:30:21:1e:b8:18:aa:4d:67:13:ab:68:a8:4e:fa:bd: 3a:bd:f1:c4:a8:12:ac:fc:3a:3d:c4:67:ca:1b:8a:c9:a8:6d: 7f:83:c4:12:9b:34:1d:a2:4b:bf:d5:af:3e:97:8e:ff:02:5d: 88:89:2b:36:e1:13:c1:b9:c4:0c:0d:a3:a4:21:01:8c:0d:44: 3d:40:0b:78:a0:d3:e0:e6:db:cf:de:96:6e:d5:d9:f1:8a:23: af:c0:30:b9:c9:03:d3:65:35:94:a8:a0:c6:26:7f:28:39:db: 73:6e:b2:1b:0b:a8:d7:21:79:62:dc:d9:bd:04:d7:87:ae:00: 84:49:00:f4:88:65:54:eb:6d:f2:7a:e3:64:8f:3a:c6:94:30: c4:5f:4b:1b:f2:8b:cf:85:00:35:c6:6c:aa:99:8c:f3:7b:48: 5d:88:99:ea -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxRTkxMTAvBgNVBAUTKDA1QUQzRTRBQTE5NjFCQTdFQ0JFMDI5MzU3MjVDMjVD RDI2QkQ2QkMwHhcNMjUwODE5MDI0OTI1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzZTYzNS0xOTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucpRNWONO9iPe4p0oBTnTH8vnvMhdEsBUObFjaPC/Ypv1B2UVpFf0PMSr82J zT2MEQGNC9zStvJjjewqpzPdKDlhsNdlRHTIK8tCLP2wMUXcjIseN2v2GA1vND6i JkgTCc2B/dAVlJz14vmOELUF8ztUJ5vp+/aEbltMMY3CJA3DKeQt5mwLv3v3IVsl OBIe0C26hO0L8cJAXmlQ4MHGa9pjM/nUIwT3aJ4Du5Tgey0Hax9nzYWvgDvalBMb GgagC2twcrhgWVrBZzp/lpRfK7aBUC6H/ryYCBB9Zgxk3Tggm8Gql5nArz3/iLBT +XlNh7EdMM6xH8rln8ir0LMFewIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNSSkwu9 g1/xwmbhviuKq20JVJBsMB8GA1UdIwQYMBaAFAWtPkqhlhun7L4Ck1clwlzSa9a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDFFOS9EQUQ4RkI4MDA3 OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2ZnN2Z0tUVnlYQ1hOSnIx cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhMC1TcUdXRzZmc3ZnS1RWeVhDWE5KcjFydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTQxRTkvREFEOEZCODAwNzkwMTFFQkJCOThDMDc2QzRGOUFFMDIvMURCMDUyOUM3 Q0E3MTFGMEE1MkM1OTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnmhQDBAJn6dQwDQYJKoZIhvcNAQELBQADggEBAHdMcdin puCqOCd8WOogneFr1pnnNnRzIUTM/ybFzjW/me6+GGH2AJGmrAEylsSkNn8qzTha LdeWAuv/INbU+whNBoeEoKDd8NEHZ/m0HOXQafVan1c3PkBjRq2rpzAhHrgYqk1n E6toqE76vTq98cSoEqz8Oj3EZ8obismobX+DxBKbNB2iS7/Vrz6Xjv8CXYiJKzbh E8G5xAwNo6QhAYwNRD1AC3ig0+Dm28/elm7V2fGKI6/AMLnJA9NlNZSooMYmfyg5 23NushsLqNcheWLc2b0E14euAIRJAPSIZVTrbfJ642SPOsaUMMRfSxvyi8+FADXG bKqZjPN7SF2Imeo= -----END CERTIFICATE-----Generated at Sun Aug 24 09:02:56 2025 by rpki-client