$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/A697738410FA11EF9A068536C4F9AE02.roa File: A697738410FA11EF9A068536C4F9AE02.roa (raw, json) Hash identifier: GgKSSa0DZkr/DMOZ+SWiE+267xJNKIhRXUimhakcIXw= Subject key identifier: 38:D3:54:78:29:AE:12:27:81:91:76:1F:1D:4F:85:6E:F0:8A:CE:17 Certificate issuer: /CN=A91BC3F1/serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5 Certificate serial: DC Authority key identifier: 80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/A697738410FA11EF9A068536C4F9AE02.roa Signing time: Sun 29 Jun 2025 04:54:47 +0000 ROA not before: Sun 29 Jun 2025 04:54:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135658 IP address blocks: 103.155.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC3F1, serialNumber=807C040FA901E5D8695A6534DE66C3D6A0BFBCC5 Validity Not Before: Jun 29 04:54:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6860c717-3a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:f5:cc:e8:de:f7:77:f2:e3:09:11:5d:b4: 3a:07:3a:b0:10:6a:a4:d7:16:84:ff:90:ef:79:6a: a5:4e:e0:82:0a:90:5f:25:f3:30:5f:f0:89:40:89: a0:7f:e6:ea:04:fe:ff:4e:fc:90:c5:1a:38:ac:bf: 3c:93:93:45:d3:5d:26:ab:fe:50:c5:69:65:4a:10: d6:ca:0c:64:d4:33:f5:54:a1:16:ce:aa:ef:30:b5: 11:78:ff:30:94:a8:ec:f3:d7:84:d6:0f:32:43:a0: e0:b3:82:d5:9b:5b:dd:83:44:25:6d:d5:28:49:78: ab:28:3c:b4:9d:46:20:30:98:13:e7:4d:e7:c4:9c: 06:5f:37:0f:c5:91:9f:f8:67:dc:b9:67:7b:05:67: f7:de:c2:86:56:15:a0:40:c6:b6:67:1d:62:bf:80: 1c:d1:45:80:c5:92:9f:ab:2c:53:26:ed:9c:e7:22: 48:fd:ea:ac:45:c5:86:48:1e:98:a2:a9:6a:ce:2c: d9:a0:c0:22:f4:0e:46:78:6b:39:b8:02:a8:52:bd: 47:1b:9e:fc:b1:09:c5:7d:d4:5c:c4:da:72:72:79: bf:d7:f0:c9:60:89:74:02:27:00:5b:d3:1b:de:0c: 4a:21:dc:8f:46:12:ad:fa:23:0a:f6:4a:d2:37:6e: f8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D3:54:78:29:AE:12:27:81:91:76:1F:1D:4F:85:6E:F0:8A:CE:17 X509v3 Authority Key Identifier: keyid:80:7C:04:0F:A9:01:E5:D8:69:5A:65:34:DE:66:C3:D6:A0:BF:BC:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/gHwED6kB5dhpWmU03mbD1qC_vMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gHwED6kB5dhpWmU03mbD1qC_vMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC3F1/95B711C410F911EF888C522FC4F9AE02/A697738410FA11EF9A068536C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.155.59.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:41:7c:2c:ab:57:5f:24:e7:d2:65:03:af:be:61:a6:ee:33: 7c:a8:e0:e6:26:63:10:36:8d:54:9a:4a:be:7e:ca:d1:fe:1a: 19:98:16:3f:36:78:21:2f:ed:84:42:0e:f8:29:4c:d3:45:67: 7b:1a:00:2e:3b:55:4e:73:38:bf:e5:59:2e:52:40:95:8b:b1: e2:9b:30:1e:46:a5:12:52:6a:c4:a2:fa:68:01:a4:ed:b7:d9: 6a:54:65:bd:08:65:16:63:25:b0:cc:c2:4c:0b:6c:b5:a2:f4: b3:b7:7f:9b:df:0d:d3:71:87:19:e5:bf:e2:8d:2b:97:fa:ae: c8:fb:a8:f8:c0:2c:b0:9d:95:2c:a6:eb:38:4b:f8:88:cf:f4: c6:36:ec:d2:09:99:4c:d4:e6:48:5d:db:48:c4:84:8a:bf:8b: 13:2b:94:5b:5c:e9:2f:3d:fe:13:dd:69:fc:9b:0a:ee:73:e9: 2a:ca:ae:40:21:f3:be:40:f9:bc:b4:45:29:9a:1d:7f:73:b5: 9e:5a:b3:ce:16:8f:51:1e:98:40:00:0a:21:64:77:02:ec:62: 73:d6:ce:38:6c:88:ec:b1:b1:a6:26:12:c4:df:0d:85:4d:7a: e6:6b:9c:4a:20:90:f6:82:2a:73:d5:98:2a:ac:04:6c:29:20: ba:23:58:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMzRjExMTAvBgNVBAUTKDgwN0MwNDBGQTkwMUU1RDg2OTVBNjUzNERFNjZDM0Q2 QTBCRkJDQzUwHhcNMjUwNjI5MDQ1NDQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYwYzcxNy0zYTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1D1zOje93fy4wkRXbQ6BzqwEGqk1xaE/5DveWqlTuCCCpBfJfMwX/CJQImg f+bqBP7/TvyQxRo4rL88k5NF010mq/5QxWllShDWygxk1DP1VKEWzqrvMLUReP8w lKjs89eE1g8yQ6Dgs4LVm1vdg0QlbdUoSXirKDy0nUYgMJgT503nxJwGXzcPxZGf +GfcuWd7BWf33sKGVhWgQMa2Zx1iv4Ac0UWAxZKfqyxTJu2c5yJI/eqsRcWGSB6Y oqlqzizZoMAi9A5GeGs5uAKoUr1HG578sQnFfdRcxNpycnm/1/DJYIl0AicAW9Mb 3gxKIdyPRhKt+iMK9krSN2748QIDAQABo4IClTCCApEwHQYDVR0OBBYEFDjTVHgp rhIngZF2Hx1PhW7wis4XMB8GA1UdIwQYMBaAFIB8BA+pAeXYaVplNN5mw9agv7zF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzNGMS85NUI3MTFDNDEw RjkxMUVGODg4QzUyMkZDNEY5QUUwMi9nSHdFRDZrQjVkaHBXbVUwM21iRDFxQ192 TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dId0VENmtCNWRocFdtVTAzbWJEMXFDX3ZNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkMzRjEvOTVCNzExQzQxMEY5MTFFRjg4OEM1MjJGQzRGOUFFMDIvQTY5NzczODQx MEZBMTFFRjlBMDY4NTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnmzswDQYJKoZIhvcNAQELBQADggEBACxBfCyrV18k59Jl A6++YabuM3yo4OYmYxA2jVSaSr5+ytH+GhmYFj82eCEv7YRCDvgpTNNFZ3saAC47 VU5zOL/lWS5SQJWLseKbMB5GpRJSasSi+mgBpO232WpUZb0IZRZjJbDMwkwLbLWi 9LO3f5vfDdNxhxnlv+KNK5f6rsj7qPjALLCdlSym6zhL+IjP9MY27NIJmUzU5khd 20jEhIq/ixMrlFtc6S89/hPdafybCu5z6SrKrkAh875A+by0RSmaHX9ztZ5as84W j1EemEAACiFkdwLsYnPWzjhsiOyxsaYmEsTfDYVNeuZrnEogkPaCKnPVmCqsBGwp ILojWA0= -----END CERTIFICATE-----Generated at Thu Jul 3 04:32:16 2025 by rpki-client