$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/BF62DA407DB711F097EDEE38C4F9AE02.roa File: BF62DA407DB711F097EDEE38C4F9AE02.roa (raw, json) Hash identifier: iW47l/RV9yF4Tv+p9VvPX2Mmyz/jeEz0xbDiMZ6bOaU= Subject key identifier: 3B:E1:88:E9:FB:EB:38:4A:47:0D:2B:66:17:AA:A9:52:C4:7C:6A:0B Certificate issuer: /CN=A91A5560/serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256 Certificate serial: F8 Authority key identifier: E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/BF62DA407DB711F097EDEE38C4F9AE02.roa Signing time: Wed 20 Aug 2025 11:20:59 +0000 ROA not before: Wed 20 Aug 2025 11:20:59 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 834 IP address blocks: 103.108.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5560, serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256 Validity Not Before: Aug 20 11:20:59 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=68a5af9b-272c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:ba:e4:2c:34:9f:da:b3:9b:c7:43:6a:fc: d1:81:92:c7:85:fa:7a:be:21:94:33:7a:1c:42:31: d0:d1:6b:33:f0:15:2d:be:42:86:be:b7:27:cd:0d: 0e:8b:03:99:7d:c4:f0:8c:26:c9:fb:db:9e:65:09: 02:b0:48:cb:05:fd:7b:b2:f5:3a:58:76:00:94:8d: 9e:76:1d:4b:64:03:23:9b:d5:bc:bb:50:52:5e:d0: 5b:08:0d:3a:fc:9f:70:a9:54:93:d6:d1:04:74:0a: 11:9a:62:2a:2a:b8:8b:b4:34:e0:60:a0:92:e3:0e: fa:f6:bb:6d:a0:96:4e:3d:d1:6a:f2:2d:55:5a:72: bf:24:56:dd:e1:b8:a5:78:1a:50:40:05:78:d8:3c: df:c2:3d:4d:35:6a:42:a8:54:38:d3:d4:c8:96:98: 04:a3:d9:a9:31:66:2d:c1:f1:bb:13:10:47:23:27: ce:2f:47:32:14:86:9b:2c:0d:46:9a:ac:b9:e1:81: 04:d6:35:c8:fc:ae:1e:2d:31:fb:ea:ae:e9:87:b6: bf:4b:ce:2f:43:4d:68:a2:ef:64:eb:39:6e:6c:0d: e2:66:ff:cc:6d:30:ab:77:ff:21:c6:d3:39:ac:49: 01:d8:bf:e4:08:7d:e8:20:40:01:bb:6d:06:6c:54: b0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E1:88:E9:FB:EB:38:4A:47:0D:2B:66:17:AA:A9:52:C4:7C:6A:0B X509v3 Authority Key Identifier: keyid:E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/BF62DA407DB711F097EDEE38C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.108.175.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:ec:9e:bd:df:cf:91:fc:e9:e7:10:fe:5f:ab:ce:db:d0:13: 86:69:84:7f:f0:d7:ec:f7:99:1b:37:cc:cd:2f:af:f9:7e:d2: ac:1b:96:1d:21:ff:f2:93:05:f4:06:ff:9f:7d:55:a4:b9:b1: 0b:b1:2d:d2:74:91:b4:84:b1:c5:c2:d2:68:95:0b:d8:0a:94: b0:c9:83:66:21:7b:d1:53:4c:12:cb:65:fc:ea:20:9b:e3:b2: 03:a0:f5:de:96:8f:ab:0b:72:72:79:9f:e7:49:c9:41:b5:36: 91:7b:b6:fa:46:c6:97:02:52:de:80:50:9c:83:3e:08:fb:26: 0e:71:58:82:96:a7:08:02:9a:1a:f7:f4:c8:7a:8e:7f:32:cd: 43:46:43:18:64:dd:4a:4a:5e:c7:7b:a1:ac:b5:b7:2b:18:c9: 43:3e:68:cd:07:5d:a2:ec:98:ce:bf:f1:f1:b4:33:4e:5f:ac: 45:f8:be:8b:3c:1a:67:ba:42:22:ae:1f:0e:68:2e:97:1a:32: 96:0b:70:21:f2:0a:08:c1:db:dc:7a:74:d3:23:19:87:1b:58: 7d:6b:46:d8:e0:91:bc:1a:94:52:9e:08:52:a7:1e:30:90:81: 64:60:1e:cf:3a:24:32:63:72:4c:c2:1a:7a:d5:bd:f1:16:21: e8:a9:ac:f5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NjAxMTAvBgNVBAUTKEUzOEVCM0Y1QTUxMDdFMzBGMENBNzFEREVBNzVCMTcw RDBCMDMyNTYwHhcNMjUwODIwMTEyMDU5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE1YWY5Yi0yNzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrS65Cw0n9qzm8dDavzRgZLHhfp6viGUM3ocQjHQ0Wsz8BUtvkKGvrcnzQ0O iwOZfcTwjCbJ+9ueZQkCsEjLBf17svU6WHYAlI2edh1LZAMjm9W8u1BSXtBbCA06 /J9wqVST1tEEdAoRmmIqKriLtDTgYKCS4w769rttoJZOPdFq8i1VWnK/JFbd4bil eBpQQAV42Dzfwj1NNWpCqFQ409TIlpgEo9mpMWYtwfG7ExBHIyfOL0cyFIabLA1G mqy54YEE1jXI/K4eLTH76q7ph7a/S84vQ01oou9k6zlubA3iZv/MbTCrd/8hxtM5 rEkB2L/kCH3oIEABu20GbFSwTQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDvhiOn7 6zhKRw0rZheqqVLEfGoLMB8GA1UdIwQYMBaAFOOOs/WlEH4w8Mpx3ep1sXDQsDJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU2MC80QzNENkJDMDIx NkYxMUVGQUY0NUVBMkRDNEY5QUUwMi80NDZ6OWFVUWZqRHd5bkhkNm5XeGNOQ3dN bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ0Nno5YVVRZmpEd3luSGQ2bld4Y05Dd01sWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU1NjAvNEMzRDZCQzAyMTZGMTFFRkFGNDVFQTJEQzRGOUFFMDIvQkY2MkRBNDA3 REI3MTFGMDk3RURFRTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnbK8wDQYJKoZIhvcNAQELBQADggEBAE3snr3fz5H86ecQ /l+rztvQE4ZphH/w1+z3mRs3zM0vr/l+0qwblh0h//KTBfQG/599VaS5sQuxLdJ0 kbSEscXC0miVC9gKlLDJg2Yhe9FTTBLLZfzqIJvjsgOg9d6Wj6sLcnJ5n+dJyUG1 NpF7tvpGxpcCUt6AUJyDPgj7Jg5xWIKWpwgCmhr39Mh6jn8yzUNGQxhk3UpKXsd7 oay1tysYyUM+aM0HXaLsmM6/8fG0M05frEX4vos8Gme6QiKuHw5oLpcaMpYLcCHy CgjB29x6dNMjGYcbWH1rRtjgkbwalFKeCFKnHjCQgWRgHs86JDJjckzCGnrVvfEW IeiprPU= -----END CERTIFICATE-----Generated at Sat Aug 23 06:54:27 2025 by rpki-client