$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/FB782FD2721311EE8754E20FC4F9AE02.roa File: FB782FD2721311EE8754E20FC4F9AE02.roa (raw, json) Hash identifier: xJGsHqGgFbOugl0Yth4s2pEmidaRE24uLNoUNasacRI= Subject key identifier: 16:FF:68:24:3A:70:04:40:B4:74:12:B3:B2:4B:3C:6E:35:F2:3F:7A Certificate issuer: /CN=A91BE6D3/serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Certificate serial: 04A4 Authority key identifier: 98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/FB782FD2721311EE8754E20FC4F9AE02.roa Signing time: Thu 05 Jun 2025 00:25:19 +0000 ROA not before: Thu 05 Jun 2025 00:25:19 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 8220 IP address blocks: 103.248.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1188 (0x4a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D3, serialNumber=989F89D68C86834AF82D9D27D16E55C09A6EF7BC Validity Not Before: Jun 5 00:25:19 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6840e3ef-5be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:ec:23:c2:c8:59:e3:ca:c1:09:37:ec:60: ea:8b:5d:4a:eb:95:9f:38:b6:8d:c4:11:e0:f7:04: 9a:b6:3e:2c:81:de:3c:50:4a:88:f8:bf:8a:e8:f5: 7f:e4:d2:0e:7f:d0:53:86:00:fb:30:d3:67:ac:7e: e5:d3:e3:6f:01:68:3d:a2:be:ce:91:97:5b:d2:90: e8:87:ae:c8:18:fe:f4:79:a7:17:12:ab:5e:18:e2: 1e:61:a6:c6:3a:89:0e:0a:ea:3c:56:74:30:b1:85: 51:2f:f0:3b:a8:b6:73:d3:59:e1:68:81:d7:18:58: 01:82:81:8b:fb:00:94:55:5f:d4:4f:ae:d6:ec:6b: 7e:b5:ab:2f:46:a2:16:d6:f0:cc:44:c2:1a:2d:10: cc:84:e3:3b:b3:58:94:7d:0e:7c:6d:39:d4:bd:9f: 0b:75:20:57:6d:d1:62:21:63:1d:fe:f5:d0:50:3d: 1f:a7:f0:6d:86:a2:0a:af:93:4d:f1:bf:f9:35:bc: 29:b9:96:f1:f9:55:75:2a:ef:21:89:c9:fa:a5:33: 4d:34:79:4d:73:3c:77:85:1a:8f:58:2d:ab:cf:47: 94:92:c1:96:15:dd:08:c0:0d:83:61:9d:26:eb:0a: 72:fd:8c:e2:23:eb:51:66:1f:0f:f7:27:58:a8:68: ac:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FF:68:24:3A:70:04:40:B4:74:12:B3:B2:4B:3C:6E:35:F2:3F:7A X509v3 Authority Key Identifier: keyid:98:9F:89:D6:8C:86:83:4A:F8:2D:9D:27:D1:6E:55:C0:9A:6E:F7:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ-J1oyGg0r4LZ0n0W5VwJpu97w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D3/EF93835A379211EC9C6C9B69C4F9AE02/FB782FD2721311EE8754E20FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.248.76.0/24 Signature Algorithm: sha256WithRSAEncryption 59:f5:d1:40:9a:93:6e:02:89:07:86:83:20:4c:a6:11:d8:1d: 02:a9:11:6b:86:ca:93:03:4c:06:cc:55:41:ec:0d:76:e8:df: e7:6b:45:bf:9c:5c:1f:e4:89:22:65:14:1c:1c:46:c4:c6:e1: ab:b9:4e:90:19:3a:8b:17:c3:e3:e1:90:77:b3:dc:3b:33:48: c6:ae:eb:73:64:90:35:6e:06:e6:b3:7f:04:a0:48:75:c3:b6: d4:90:44:90:c6:67:0a:90:ea:54:40:7f:5d:bd:92:10:34:e1: bc:15:63:68:f8:18:92:34:f5:11:65:a3:9b:a4:49:be:d8:9e: 3e:ec:55:e4:f9:af:1a:bb:5a:c0:dd:6e:6f:1e:36:cf:d4:0d: ad:b9:3c:79:50:48:8a:01:76:2c:8e:c8:ed:06:5f:33:aa:4f: c0:21:f7:9f:47:b2:00:bd:29:1d:93:6c:d3:01:ab:48:97:0c: e2:a6:59:5b:ca:ce:f3:47:d8:5d:a5:c2:cd:e4:b0:35:68:93: 39:79:33:cc:fa:6d:98:12:34:e7:07:6c:e6:9a:e6:c9:cc:74: 31:ad:af:2d:5e:94:9f:01:02:f0:82:85:73:4a:8e:ac:6b:45: 88:15:71:2d:2e:11:0b:dd:07:56:13:2f:81:8d:e2:8e:37:a3: 58:4d:56:41 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDMxMTAvBgNVBAUTKDk4OUY4OUQ2OEM4NjgzNEFGODJEOUQyN0QxNkU1NUMw OUE2RUY3QkMwHhcNMjUwNjA1MDAyNTE5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQwZTNlZi01YmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOTsI8LIWePKwQk37GDqi11K65WfOLaNxBHg9wSatj4sgd48UEqI+L+K6PV/ 5NIOf9BThgD7MNNnrH7l0+NvAWg9or7OkZdb0pDoh67IGP70eacXEqteGOIeYabG OokOCuo8VnQwsYVRL/A7qLZz01nhaIHXGFgBgoGL+wCUVV/UT67W7Gt+tasvRqIW 1vDMRMIaLRDMhOM7s1iUfQ58bTnUvZ8LdSBXbdFiIWMd/vXQUD0fp/BthqIKr5NN 8b/5NbwpuZbx+VV1Ku8hicn6pTNNNHlNczx3hRqPWC2rz0eUksGWFd0IwA2DYZ0m 6wpy/YziI+tRZh8P9ydYqGisHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBb/aCQ6 cARAtHQSs7JLPG418j96MB8GA1UdIwQYMBaAFJifidaMhoNK+C2dJ9FuVcCabve8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZEMy9FRjkzODM1QTM3 OTIxMUVDOUM2QzlCNjlDNEY5QUUwMi9tSi1KMW95R2cwcjRMWjBuMFc1VndKcHU5 N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21KLUoxb3lHZzByNExaMG4wVzVWd0pwdTk3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkU2RDMvRUY5MzgzNUEzNzkyMTFFQzlDNkM5QjY5QzRGOUFFMDIvRkI3ODJGRDI3 MjEzMTFFRTg3NTRFMjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn+EwwDQYJKoZIhvcNAQELBQADggEBAFn10UCak24CiQeG gyBMphHYHQKpEWuGypMDTAbMVUHsDXbo3+drRb+cXB/kiSJlFBwcRsTG4au5TpAZ OosXw+PhkHez3DszSMau63NkkDVuBuazfwSgSHXDttSQRJDGZwqQ6lRAf129khA0 4bwVY2j4GJI09RFlo5ukSb7Ynj7sVeT5rxq7WsDdbm8eNs/UDa25PHlQSIoBdiyO yO0GXzOqT8Ah959HsgC9KR2TbNMBq0iXDOKmWVvKzvNH2F2lws3ksDVokzl5M8z6 bZgSNOcHbOaa5snMdDGtry1elJ8BAvCChXNKjqxrRYgVcS0uEQvdB1YTL4GN4o43 o1hNVkE= -----END CERTIFICATE-----Generated at Thu Jul 3 07:13:22 2025 by rpki-client