$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C554FDECA0FD11EC924D4461C4F9AE02.roa File: C554FDECA0FD11EC924D4461C4F9AE02.roa (raw, json) Hash identifier: c/w4dZs7Fmalkf1ObbkTRPlYSio6NOn/o5i7AALwIQk= Subject key identifier: 63:B5:29:7E:05:B9:20:87:72:02:70:89:F1:17:6A:F3:00:C7:32:61 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4E4B Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C554FDECA0FD11EC924D4461C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:58:07 +0000 ROA not before: Thu 28 Aug 2025 14:58:07 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 63755 IP address blocks: 103.68.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20043 (0x4e4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:58:07 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e7f-9c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:5d:bd:9e:25:75:05:17:77:df:90:8a:da: 9f:2e:31:af:06:68:f4:67:96:3e:e3:d1:56:ec:c5: 10:ce:3b:5e:5e:a5:cb:9f:b8:7d:32:9a:c1:d7:f7: 47:10:82:95:d2:77:b3:37:87:bb:b1:c4:a4:0b:9e: 54:5a:79:49:52:5a:8f:f1:c9:6a:09:5f:a7:a2:df: bd:2c:33:42:2b:4a:b6:da:be:e6:42:51:bc:ac:bd: 72:f9:e7:43:77:53:51:92:13:9d:a5:c7:27:b8:61: c4:bb:26:ee:1f:67:98:e0:17:0b:d4:f5:6c:96:42: 8c:45:71:3e:3e:f1:05:c7:dd:3a:9e:a7:f5:ca:5f: 23:65:6c:d3:c4:13:b9:ee:6c:3e:5b:88:11:29:d8: e7:e1:7e:87:c1:9e:f1:19:81:22:ec:8c:1a:08:f5: 29:57:e1:6f:75:9b:03:36:be:a0:62:d3:0a:9f:83: 3c:d4:2f:1e:87:df:72:91:df:49:89:d7:82:bc:cb: fd:ca:ae:67:d2:49:35:50:30:05:0f:77:ef:fd:dd: 83:fa:3a:87:45:c9:81:8f:4b:b4:3a:e8:48:3a:bd: 29:49:3d:59:dd:68:76:9b:90:2d:a9:d8:1b:33:70: 59:f7:86:9c:da:3a:42:99:9c:e9:9d:45:51:d5:d3: 58:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B5:29:7E:05:B9:20:87:72:02:70:89:F1:17:6A:F3:00:C7:32:61 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C554FDECA0FD11EC924D4461C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.244.0/22 Signature Algorithm: sha256WithRSAEncryption 45:85:ed:30:6c:dd:84:51:d4:77:8e:eb:70:57:11:45:1d:af: ba:2b:63:2f:32:98:05:6c:e1:12:29:5a:ad:7a:8e:2e:35:cc: 05:16:a5:75:2a:9b:da:45:e0:26:a8:76:3c:66:11:4a:c5:42: 10:70:08:8d:06:11:bf:ae:3c:6b:ed:50:e7:9e:9d:01:d5:e8: 5b:b0:ae:a2:33:a0:b6:d4:2e:48:ae:c7:1f:54:e7:57:8b:6e: 94:bd:2b:09:ea:d6:da:27:2d:24:47:b8:17:18:7a:9a:71:49: 2f:65:2f:53:1a:17:5a:e6:ae:7a:0c:f5:a0:ce:05:a4:f3:fe: 9b:c8:82:d3:d3:9a:1c:ff:ed:5e:4a:ed:c6:be:a5:15:97:03: 49:6c:ad:e7:db:ea:2a:19:bf:17:2d:76:6f:06:58:0d:80:7b: 5b:4d:0b:f8:00:94:fc:c2:78:4a:6c:28:25:1e:fc:85:61:0f: ec:0a:61:0e:ee:5f:80:96:8b:12:dd:db:8f:75:ea:72:8a:90: 95:3d:29:cb:4d:72:6e:f4:07:ef:f7:14:3b:79:ad:4f:b4:a6: 12:64:6d:9b:c5:db:50:40:bb:72:3d:3c:24:5c:2b:9d:fa:e7: 10:24:c0:e6:53:20:06:24:66:fa:48:d0:9b:4b:6c:0e:22:06: 74:67:eb:68 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICTkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1ODA3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmU3Zi05YzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6tdvZ4ldQUXd9+QitqfLjGvBmj0Z5Y+49FW7MUQzjteXqXLn7h9MprB1/dH EIKV0nezN4e7scSkC55UWnlJUlqP8clqCV+not+9LDNCK0q22r7mQlG8rL1y+edD d1NRkhOdpccnuGHEuybuH2eY4BcL1PVslkKMRXE+PvEFx906nqf1yl8jZWzTxBO5 7mw+W4gRKdjn4X6HwZ7xGYEi7IwaCPUpV+FvdZsDNr6gYtMKn4M81C8eh99ykd9J ideCvMv9yq5n0kk1UDAFD3fv/d2D+jqHRcmBj0u0OuhIOr0pST1Z3Wh2m5Atqdgb M3BZ94ac2jpCmZzpnUVR1dNY+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGO1KX4F uSCHcgJwifEXavMAxzJhMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzU1NEZERUNB MEZEMTFFQzkyNEQ0NDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnRPQwDQYJKoZIhvcNAQELBQADggEBAEWF7TBs3YRR1HeO 63BXEUUdr7orYy8ymAVs4RIpWq16ji41zAUWpXUqm9pF4CaodjxmEUrFQhBwCI0G Eb+uPGvtUOeenQHV6FuwrqIzoLbULkiuxx9U51eLbpS9Kwnq1tonLSRHuBcYeppx SS9lL1MaF1rmrnoM9aDOBaTz/pvIgtPTmhz/7V5K7ca+pRWXA0lsrefb6ioZvxct dm8GWA2Ae1tNC/gAlPzCeEpsKCUe/IVhD+wKYQ7uX4CWixLd24916nKKkJU9KctN cm70B+/3FDt5rU+0phJkbZvF21BAu3I9PCRcK5365xAkwOZTIAYkZvpI0JtLbA4i BnRn62g= -----END CERTIFICATE-----Generated at Mon Oct 20 14:19:57 2025 by rpki-client