$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/BC66C474FB5C11EFB5FF765EC4F9AE02.roa File: BC66C474FB5C11EFB5FF765EC4F9AE02.roa (raw, json) Hash identifier: 8cVWvhVTaDx9YrIBArb9pQY5a8aQELboLZU4FfWd7+w= Subject key identifier: CE:B6:D8:63:51:85:2A:F6:7A:52:44:7C:CB:69:7D:B7:10:A4:31:BB Certificate issuer: /CN=A91B3EDE/serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Certificate serial: 32 Authority key identifier: 80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/BC66C474FB5C11EFB5FF765EC4F9AE02.roa Signing time: Thu 05 Jun 2025 07:32:23 +0000 ROA not before: Thu 05 Jun 2025 07:32:23 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135357 IP address blocks: 103.41.16.0/22 maxlen: 22 103.41.16.0/24 maxlen: 24 103.41.17.0/24 maxlen: 24 103.41.18.0/24 maxlen: 24 103.41.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3EDE, serialNumber=80FB52636A9E50C08868E627520A1A0D8A87F046 Validity Not Before: Jun 5 07:32:23 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68414806-bab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ed:9a:25:d5:41:64:cc:1c:48:19:bd:dc:60: 91:33:21:bd:58:da:29:68:7b:ef:37:58:22:fe:7b: f3:27:b6:bb:f7:33:a3:d5:d5:df:81:9b:a2:89:7c: 77:8e:21:38:5c:11:12:3a:90:1d:9f:ca:5b:aa:30: b5:70:f3:4d:91:f4:c0:ac:59:75:f6:1b:70:65:ef: 3d:8d:cd:64:6c:ae:96:31:80:f1:00:7e:0e:ac:be: a9:ab:d9:3d:df:fe:58:e8:38:70:74:4a:32:50:af: f0:81:3f:39:7a:c0:a8:a4:d3:a8:5d:88:16:70:94: 5a:37:12:78:b5:86:3b:57:64:9e:94:70:0f:48:53: e0:eb:ce:07:6c:00:c8:fc:0f:c7:6b:11:08:8e:53: 30:80:0e:09:a7:f4:8c:62:63:d0:e1:7a:ea:e4:23: 0b:6d:0d:b4:c8:f1:43:08:00:0d:e8:fd:b9:44:b1: 8b:62:3a:d2:60:8c:54:b9:1a:22:87:50:e6:49:88: 73:e3:30:16:72:27:00:2c:40:5d:e9:e7:ab:56:06: f6:35:06:b7:26:71:d3:21:39:4e:18:d1:ff:78:e2: 78:0b:bc:5c:e6:5e:6f:98:cc:ee:30:a9:15:e0:54: 7a:81:4f:54:e0:07:d1:a4:39:58:47:28:f2:be:ed: 4e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B6:D8:63:51:85:2A:F6:7A:52:44:7C:CB:69:7D:B7:10:A4:31:BB X509v3 Authority Key Identifier: keyid:80:FB:52:63:6A:9E:50:C0:88:68:E6:27:52:0A:1A:0D:8A:87:F0:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/gPtSY2qeUMCIaOYnUgoaDYqH8EY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gPtSY2qeUMCIaOYnUgoaDYqH8EY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3EDE/5904D970FB5C11EF8EAF311CC4F9AE02/BC66C474FB5C11EFB5FF765EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.41.16.0/22 Signature Algorithm: sha256WithRSAEncryption 23:6a:48:54:c4:26:6f:7c:09:7f:c9:ef:6f:5c:b5:81:57:7a: 85:4e:5e:c9:97:61:88:d2:cd:3c:97:f4:73:fa:63:a5:2f:51: 92:99:e7:61:a4:94:29:1c:78:93:26:75:2c:19:98:ac:da:2b: bb:8c:fb:9e:9f:e9:7a:08:86:3f:28:c6:85:d1:8d:8d:e0:92: 3e:72:92:75:04:fd:4f:cc:94:29:1b:dc:9c:23:ee:0e:0a:7d: 0c:9c:b4:70:6b:63:b5:fb:e9:9b:34:a5:a4:0d:45:d4:35:3b: b5:26:6a:4a:b7:2a:65:dc:63:b9:3f:9e:b3:90:cd:4a:60:d5: 46:68:2e:28:f1:4d:79:0d:7e:e8:90:8f:55:10:6a:bd:bf:5a: 13:b2:b5:f0:21:0c:8c:fd:99:28:48:b5:08:82:2e:6d:e6:8b: 30:6e:24:d0:ed:d8:3f:fa:02:a0:04:23:7b:9a:5d:4b:2b:97: c3:f5:03:ca:b1:27:8f:73:7f:9d:16:df:4b:95:7d:6f:83:4b: 14:8e:ac:4b:db:dc:33:3e:b7:9e:77:20:df:32:72:0e:5d:cb: 28:bc:97:db:fb:82:74:a2:78:71:2e:97:be:77:d8:bc:70:e3: 76:0f:19:63:3b:d1:d0:18:49:ba:81:c5:5c:15:06:96:88:df: 89:75:9d:4d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0VERTExMC8GA1UEBRMoODBGQjUyNjM2QTlFNTBDMDg4NjhFNjI3NTIwQTFBMEQ4 QTg3RjA0NjAeFw0yNTA2MDUwNzMyMjNaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NDE0ODA2LWJhYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDh7Zol1UFkzBxIGb3cYJEzIb1Y2iloe+83WCL+e/Mntrv3M6PV1d+Bm6KJfHeO IThcERI6kB2fyluqMLVw802R9MCsWXX2G3Bl7z2NzWRsrpYxgPEAfg6svqmr2T3f /ljoOHB0SjJQr/CBPzl6wKik06hdiBZwlFo3Eni1hjtXZJ6UcA9IU+DrzgdsAMj8 D8drEQiOUzCADgmn9IxiY9DheurkIwttDbTI8UMIAA3o/blEsYtiOtJgjFS5GiKH UOZJiHPjMBZyJwAsQF3p56tWBvY1BrcmcdMhOU4Y0f944ngLvFzmXm+YzO4wqRXg VHqBT1TgB9GkOVhHKPK+7U4zAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUzrbYY1GF KvZ6UkR8y2l9txCkMbswHwYDVR0jBBgwFoAUgPtSY2qeUMCIaOYnUgoaDYqH8EYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzRURFLzU5MDREOTcwRkI1 QzExRUY4RUFGMzExQ0M0RjlBRTAyL2dQdFNZMnFlVU1DSWFPWW5VZ29hRFlxSDhF WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ1B0U1kycWVVTUNJYU9ZblVnb2FEWXFIOEVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0VERS81OTA0RDk3MEZCNUMxMUVGOEVBRjMxMUNDNEY5QUUwMi9CQzY2QzQ3NEZC NUMxMUVGQjVGRjc2NUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmcpEDANBgkqhkiG9w0BAQsFAAOCAQEAI2pIVMQmb3wJf8nv b1y1gVd6hU5eyZdhiNLNPJf0c/pjpS9RkpnnYaSUKRx4kyZ1LBmYrNoru4z7np/p egiGPyjGhdGNjeCSPnKSdQT9T8yUKRvcnCPuDgp9DJy0cGtjtfvpmzSlpA1F1DU7 tSZqSrcqZdxjuT+es5DNSmDVRmguKPFNeQ1+6JCPVRBqvb9aE7K18CEMjP2ZKEi1 CIIubeaLMG4k0O3YP/oCoAQje5pdSyuXw/UDyrEnj3N/nRbfS5V9b4NLFI6sS9vc Mz63nncg3zJyDl3LKLyX2/uCdKJ4cS6XvnfYvHDjdg8ZYzvR0BhJuoHFXBUGlojf iXWdTQ== -----END CERTIFICATE-----Generated at Thu Jul 3 10:39:30 2025 by rpki-client