$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/3818D9A09A9011EFB14F1729C4F9AE02.roa File: 3818D9A09A9011EFB14F1729C4F9AE02.roa (raw, json) Hash identifier: XjGmTLSTgsODpSCPTs5pCmUy9NRCIk0AE9Vg9MOaVdU= Subject key identifier: 0C:2D:25:3B:66:61:71:61:EB:40:10:94:88:77:1E:6E:E4:CE:CC:B7 Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Certificate serial: 09C2 Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/3818D9A09A9011EFB14F1729C4F9AE02.roa Signing time: Wed 02 Jul 2025 05:46:10 +0000 ROA not before: Wed 02 Jul 2025 05:46:10 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 9825 IP address blocks: 103.74.229.0/24 maxlen: 24 103.74.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2498 (0x9c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23B3, serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Validity Not Before: Jul 2 05:46:10 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6864c7a2-4789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:26:1c:f3:0b:ea:e5:4a:31:32:c3:fe:31:3e: a7:63:04:72:5c:c2:b9:6a:70:48:a3:d1:7e:53:8e: 23:e4:cb:2b:70:38:b2:3b:a2:12:c9:7e:d4:d5:e8: 25:8b:47:ef:2f:d4:fa:63:51:65:a3:83:0d:93:11: 4a:dd:a7:d8:d9:97:d5:2b:d6:8f:5e:0b:0f:c1:ff: a6:c6:3a:01:00:8a:e7:74:b3:f9:99:0d:c1:fe:d1: d5:27:56:ef:7d:28:8d:ef:8e:93:fc:97:3c:8b:e2: 93:64:9e:7d:90:b6:84:83:39:db:0d:00:e2:2b:76: c5:81:d6:db:a5:13:a1:19:a3:77:47:a3:c1:ee:e1: 3c:09:b8:1f:1a:b0:bd:65:d2:71:10:e0:02:95:8c: c8:8a:a6:39:03:dd:62:de:bc:bf:ff:b8:7d:55:08: eb:fc:4d:66:e4:71:d5:f5:86:a7:95:12:cf:91:bd: 4e:d9:5a:2e:34:e7:23:21:31:77:e9:18:19:78:12: dc:6b:66:38:5a:e7:d0:d9:88:2e:a5:80:dd:24:38: 2b:6a:3f:64:17:20:bb:06:fa:54:40:d6:24:53:14: 0a:ff:29:d5:69:e0:03:67:37:03:83:21:83:c3:17: 07:67:82:bc:65:96:47:4a:81:fe:87:af:f3:34:0b: 6b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2D:25:3B:66:61:71:61:EB:40:10:94:88:77:1E:6E:E4:CE:CC:B7 X509v3 Authority Key Identifier: keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/3818D9A09A9011EFB14F1729C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.74.229.0-103.74.230.255 Signature Algorithm: sha256WithRSAEncryption 36:8b:18:e2:7a:6c:19:34:fd:55:90:c5:b9:b1:de:4f:3f:37: c6:ad:68:89:67:4b:2f:f4:eb:38:34:eb:b3:31:f5:7c:2a:72: 8e:40:79:32:3b:9a:6f:08:86:79:f4:eb:62:72:50:9c:dc:37: d6:bd:5e:19:a4:96:24:4d:b0:fd:57:7d:7c:9a:7c:f4:67:86: a3:30:2e:d6:46:2f:68:cd:61:a7:97:75:cf:b3:12:ad:7b:72: 23:fd:52:8e:12:53:3b:55:42:9e:50:a3:2d:89:13:6a:a6:36: 8a:00:8a:69:06:48:df:d3:db:22:c9:c5:29:d8:d6:64:fc:de: 58:28:ec:c2:58:b2:94:8e:03:bb:7f:bd:b4:20:2f:ce:c6:62: 01:04:06:3e:da:23:19:21:91:4d:87:1b:2b:e6:bd:83:03:2b: ad:b5:0d:ba:64:b8:88:1f:31:48:a7:39:06:a0:00:58:b6:35: 22:e6:d7:c1:6d:e4:a5:3a:36:07:71:b5:2c:42:10:fa:16:9c: 3a:92:ea:ca:bb:2a:86:a8:db:88:ec:be:bc:5a:3a:67:ef:1a: f5:cb:e8:6c:b6:8f:37:52:39:0f:54:13:8c:65:b3:d4:06:1f: 31:0f:05:86:80:f3:0f:4c:95:d3:85:55:12:eb:cf:f5:51:6f: 42:35:32:11 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICCcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIzQjMxMTAvBgNVBAUTKDVDMzY4NDM5Q0JDNUY1QTQ1NzE1RDY0NzZCRUFBNjY4 NkQwOTUxQjEwHhcNMjUwNzAyMDU0NjEwWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY0YzdhMi00Nzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziYc8wvq5UoxMsP+MT6nYwRyXMK5anBIo9F+U44j5MsrcDiyO6ISyX7U1egl i0fvL9T6Y1Flo4MNkxFK3afY2ZfVK9aPXgsPwf+mxjoBAIrndLP5mQ3B/tHVJ1bv fSiN746T/Jc8i+KTZJ59kLaEgznbDQDiK3bFgdbbpROhGaN3R6PB7uE8CbgfGrC9 ZdJxEOAClYzIiqY5A91i3ry//7h9VQjr/E1m5HHV9YanlRLPkb1O2VouNOcjITF3 6RgZeBLca2Y4WufQ2YgupYDdJDgraj9kFyC7BvpUQNYkUxQK/ynVaeADZzcDgyGD wxcHZ4K8ZZZHSoH+h6/zNAtrlwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFAwtJTtm YXFh60AQlIh3Hm7kzsy3MB8GA1UdIwQYMBaAFFw2hDnLxfWkVxXWR2vqpmhtCVGx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNCMy9FNjQ2NUExMDhF OTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2RjlhUlhGZFpIYS1xbWFHMEpV YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEYUVPY3ZGOWFSWEZkWkhhLXFtYUcwSlViRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjIzQjMvRTY0NjVBMTA4RTk4MTFFQUFCNThCRDNBQzRGOUFFMDIvMzgxOEQ5QTA5 QTkwMTFFRkIxNEYxNzI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGdK5QMEAGdK5jANBgkqhkiG9w0BAQsFAAOCAQEANosY 4npsGTT9VZDFubHeTz83xq1oiWdLL/TrODTrszH1fCpyjkB5MjuabwiGefTrYnJQ nNw31r1eGaSWJE2w/Vd9fJp89GeGozAu1kYvaM1hp5d1z7MSrXtyI/1SjhJTO1VC nlCjLYkTaqY2igCKaQZI39PbIsnFKdjWZPzeWCjswliylI4Du3+9tCAvzsZiAQQG PtojGSGRTYcbK+a9gwMrrbUNumS4iB8xSKc5BqAAWLY1IubXwW3kpTo2B3G1LEIQ +hacOpLqyrsqhqjbiOy+vFo6Z+8a9cvobLaPN1I5D1QTjGWz1AYfMQ8FhoDzD0yV 04VVEuvP9VFvQjUyEQ== -----END CERTIFICATE-----Generated at Fri Jul 4 18:06:06 2025 by rpki-client