$ rpki-client -vvf rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/4D7F18D69F8911EC8270CE39C4F9AE02.roa File: 4D7F18D69F8911EC8270CE39C4F9AE02.roa (raw, json) Hash identifier: 0t4pRp/9HpBWWGpsNbOV6QZlF+pCTN3GNbTfKEK0f+Y= Subject key identifier: A0:1E:FB:08:57:85:EC:C0:91:90:6A:0A:55:11:7A:9B:D5:D0:6B:58 Certificate issuer: /CN=A91A81F7/serialNumber=933AED7C3A064226A7144B7478C7403DACDD8005 Certificate serial: 0398 Authority key identifier: 93:3A:ED:7C:3A:06:42:26:A7:14:4B:74:78:C7:40:3D:AC:DD:80:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrtfDoGQianFEt0eMdAPazdgAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/4D7F18D69F8911EC8270CE39C4F9AE02.roa Signing time: Thu 05 Jun 2025 01:06:54 +0000 ROA not before: Thu 05 Jun 2025 01:06:54 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45102 IP address blocks: 103.151.206.0/23 maxlen: 23 103.151.206.0/24 maxlen: 24 103.151.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/kzrtfDoGQianFEt0eMdAPazdgAU.crl rsync://rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/kzrtfDoGQianFEt0eMdAPazdgAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrtfDoGQianFEt0eMdAPazdgAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A81F7, serialNumber=933AED7C3A064226A7144B7478C7403DACDD8005 Validity Not Before: Jun 5 01:06:54 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6840edae-c1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e2:22:55:8e:7b:96:35:39:3d:d5:72:4e:28: 22:e7:2f:a2:c0:be:b3:72:dc:61:60:bf:fa:03:40: 96:c7:53:38:bf:84:e5:a4:0c:9b:97:60:12:11:15: 81:6b:74:33:07:34:2b:44:e3:b2:aa:b7:de:88:77: a0:e0:ff:f0:60:10:29:48:21:b9:54:65:84:22:4a: 73:f8:03:6b:84:06:73:ae:8d:f8:f0:94:4c:81:86: 07:b9:87:19:b5:58:68:07:1c:cf:cb:ab:f7:b7:36: e1:b2:51:e5:58:4b:ce:9f:3a:be:06:ea:e5:7d:51: e8:16:98:16:5c:9e:df:2a:d0:30:f2:1e:5c:55:dc: 61:d5:e2:b7:a4:09:c2:04:b5:e3:71:a1:65:20:ad: 39:c3:05:ff:51:f9:41:31:d8:29:58:b9:fc:cb:9c: 45:a3:98:84:13:c6:1b:6e:6d:e1:7a:fb:0b:10:5f: bb:47:c9:60:99:5a:d9:b7:f4:33:33:7c:11:4b:f5: 47:45:d9:d7:bc:12:4d:93:28:04:df:4a:77:1d:3d: 0c:1d:3f:35:b2:bc:62:eb:91:d8:51:44:29:ed:17: 4c:aa:3c:ad:62:42:25:4f:29:c1:93:45:d9:73:09: 1c:8c:51:56:65:0f:00:ae:7a:2c:06:36:ec:71:47: 16:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1E:FB:08:57:85:EC:C0:91:90:6A:0A:55:11:7A:9B:D5:D0:6B:58 X509v3 Authority Key Identifier: keyid:93:3A:ED:7C:3A:06:42:26:A7:14:4B:74:78:C7:40:3D:AC:DD:80:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/kzrtfDoGQianFEt0eMdAPazdgAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrtfDoGQianFEt0eMdAPazdgAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A81F7/30F46EEE9F8611EC8D9F3F34C4F9AE02/4D7F18D69F8911EC8270CE39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.206.0/23 Signature Algorithm: sha256WithRSAEncryption 97:30:00:e3:0d:73:1c:ad:62:cd:44:ef:dd:cb:9e:cd:90:fd: e0:86:c5:9f:67:90:56:36:28:6b:3b:ec:a7:89:4d:1b:96:56: c7:ff:29:ff:96:7c:98:4a:fb:85:07:ee:ef:03:8c:43:6a:af: bd:13:ef:e3:54:d9:41:75:f3:75:c9:6d:eb:7e:a2:9c:93:59: 9b:9c:05:7e:b0:d8:f2:1d:99:c2:5d:d7:82:0f:87:c2:4d:2a: 52:5d:68:f1:4b:0b:14:a2:11:46:97:cc:dc:33:98:ff:4d:59: af:f2:ec:58:7a:d8:7a:57:61:e3:1f:07:6b:1b:ab:a5:90:3c: 5c:c0:5c:fc:cf:0e:53:54:11:d9:64:12:ba:38:f5:08:51:31: c3:56:f1:81:5c:ad:24:c6:12:4f:84:f7:1d:ec:f0:0a:24:8f: 7a:2f:97:0b:68:3b:d9:fd:00:89:ce:e9:fd:5d:85:d3:e7:a2: dd:63:11:05:13:57:4b:48:e0:22:d6:38:13:c5:8c:1f:a6:03: 42:62:d9:48:af:68:36:a9:b5:f6:73:9b:84:43:cc:3c:83:f5: 8a:5b:02:e8:8a:48:ea:1d:93:04:e4:58:1d:2a:04:11:75:d1: 4d:1e:7e:78:e7:70:c5:57:81:ff:b6:3a:d1:6d:36:39:e8:14: 76:52:91:22 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgxRjcxMTAvBgNVBAUTKDkzM0FFRDdDM0EwNjQyMjZBNzE0NEI3NDc4Qzc0MDNE QUNERDgwMDUwHhcNMjUwNjA1MDEwNjU0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQwZWRhZS1jMWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7+IiVY57ljU5PdVyTigi5y+iwL6zctxhYL/6A0CWx1M4v4TlpAybl2ASERWB a3QzBzQrROOyqrfeiHeg4P/wYBApSCG5VGWEIkpz+ANrhAZzro348JRMgYYHuYcZ tVhoBxzPy6v3tzbhslHlWEvOnzq+BurlfVHoFpgWXJ7fKtAw8h5cVdxh1eK3pAnC BLXjcaFlIK05wwX/UflBMdgpWLn8y5xFo5iEE8Ybbm3hevsLEF+7R8lgmVrZt/Qz M3wRS/VHRdnXvBJNkygE30p3HT0MHT81srxi65HYUUQp7RdMqjytYkIlTynBk0XZ cwkcjFFWZQ8ArnosBjbscUcWXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKAe+whX hezAkZBqClURepvV0GtYMB8GA1UdIwQYMBaAFJM67Xw6BkImpxRLdHjHQD2s3YAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODFGNy8zMEY0NkVFRTlG ODYxMUVDOEQ5RjNGMzRDNEY5QUUwMi9renJ0ZkRvR1FpYW5GRXQwZU1kQVBhemRn QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t6cnRmRG9HUWlhbkZFdDBlTWRBUGF6ZGdBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTgxRjcvMzBGNDZFRUU5Rjg2MTFFQzhEOUYzRjM0QzRGOUFFMDIvNEQ3RjE4RDY5 Rjg5MTFFQzgyNzBDRTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnl84wDQYJKoZIhvcNAQELBQADggEBAJcwAOMNcxytYs1E 793Lns2Q/eCGxZ9nkFY2KGs77KeJTRuWVsf/Kf+WfJhK+4UH7u8DjENqr70T7+NU 2UF183XJbet+opyTWZucBX6w2PIdmcJd14IPh8JNKlJdaPFLCxSiEUaXzNwzmP9N Wa/y7Fh62HpXYeMfB2sbq6WQPFzAXPzPDlNUEdlkEro49QhRMcNW8YFcrSTGEk+E 9x3s8Aokj3ovlwtoO9n9AInO6f1dhdPnot1jEQUTV0tI4CLWOBPFjB+mA0Ji2Uiv aDaptfZzm4RDzDyD9YpbAuiKSOodkwTkWB0qBBF10U0efnjncMVXgf+2OtFtNjno FHZSkSI= -----END CERTIFICATE-----Generated at Mon Jun 30 16:09:03 2025 by rpki-client