$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/A5D6438038C011ED8D00366CC4F9AE02.roa File: A5D6438038C011ED8D00366CC4F9AE02.roa (raw, json) Hash identifier: +md5I194ApAFzI9Vr3T+f9A2DpbYrH7HshUb/eOgpZE= Subject key identifier: 04:71:84:66:97:42:D0:7E:BD:B8:C4:FC:3A:11:E2:9D:08:8B:DD:E4 Certificate issuer: /CN=A91BF849/serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Certificate serial: 023D Authority key identifier: 80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/A5D6438038C011ED8D00366CC4F9AE02.roa Signing time: Mon 11 Aug 2025 02:40:31 +0000 ROA not before: Mon 11 Aug 2025 02:40:31 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 135549 IP address blocks: 103.65.184.0/22 maxlen: 22 103.65.184.0/23 maxlen: 23 103.65.184.0/24 maxlen: 24 103.65.185.0/24 maxlen: 24 103.65.186.0/23 maxlen: 23 103.65.186.0/24 maxlen: 24 103.65.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF849, serialNumber=801BAD8CB22641DDEDE4DBD39F4BE7F4D8CAEA55 Validity Not Before: Aug 11 02:40:31 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6899581f-0578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:81:a5:0b:9d:b9:b2:ea:cb:0c:41:20:71:33: 6f:31:b7:7e:1f:69:8f:04:40:b8:8d:23:c1:32:c6: e3:7f:e1:ca:c8:d4:15:3d:1e:de:97:d5:47:6e:53: 78:09:3c:be:12:49:69:b6:5e:8b:3d:9e:a7:45:70: 1b:f0:92:da:14:ca:8a:c3:a3:e2:1a:f0:6e:0b:95: 38:4e:2c:2d:bb:41:09:9a:8c:8e:f6:53:6e:1c:1c: a9:a2:e0:54:04:bc:d4:4d:7f:13:d8:4a:73:ab:a2: 6b:0c:87:2e:63:57:06:9c:a7:40:fb:3e:5d:22:e3: b3:5a:e7:87:f5:ee:a9:bc:7b:11:c1:df:7a:13:7b: d7:e9:f2:19:1e:3b:c0:a3:37:aa:96:b8:b1:24:63: 77:6b:e9:8e:17:be:6f:70:b9:34:b4:04:2b:a3:86: a3:cf:9d:ac:47:de:39:40:51:fe:eb:5d:c9:80:fc: 6e:72:2a:9c:3a:99:cf:b6:1d:fc:d1:ed:27:e2:2f: 2d:41:00:af:34:bd:58:63:03:40:fc:cc:95:cb:f3: 86:85:23:52:35:b7:5a:c5:62:5b:4f:a8:7c:60:43: c1:da:bd:5e:92:ba:2d:bf:e9:d1:a9:51:08:7e:7d: d4:de:53:08:ad:7f:f6:49:28:9e:25:ac:dd:3f:ca: f0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:71:84:66:97:42:D0:7E:BD:B8:C4:FC:3A:11:E2:9D:08:8B:DD:E4 X509v3 Authority Key Identifier: keyid:80:1B:AD:8C:B2:26:41:DD:ED:E4:DB:D3:9F:4B:E7:F4:D8:CA:EA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/gButjLImQd3t5NvTn0vn9NjK6lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gButjLImQd3t5NvTn0vn9NjK6lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF849/C42A4AD838BC11EDB0AFB864C4F9AE02/A5D6438038C011ED8D00366CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.65.184.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:55:e2:0e:07:21:47:75:02:75:04:36:99:95:1f:28:20:e2: 2c:ee:94:e1:71:67:6f:83:51:8d:c1:c2:fc:7e:ee:fe:c1:39: f4:7f:df:fb:45:0f:0b:f7:74:c9:cc:a5:82:ff:a3:1b:6e:c6: c8:44:74:76:c1:34:a2:0e:f1:a5:fa:d2:d0:26:c4:32:43:4b: 66:c0:27:8c:a4:5d:d3:02:4d:18:e4:d2:34:02:64:76:57:cd: 14:f6:56:ea:07:4e:b7:60:f7:50:d3:92:7a:f0:b4:57:01:7d: a6:85:b5:7c:27:3b:47:6d:87:1b:cb:6f:8c:78:a7:f7:3d:07: 57:54:35:79:7e:d2:99:42:d2:bb:6d:96:26:a7:7b:31:76:83: 51:9a:98:fe:7c:e6:7c:bd:8b:07:80:1d:6c:37:39:35:fe:aa: 66:d1:0b:aa:5b:f6:20:e0:c6:f9:0b:86:f7:19:a5:14:8f:60: 28:05:ee:76:6e:e2:86:5b:d9:11:3d:0f:9a:f9:5c:e0:b3:b9: 90:67:4d:7b:e1:44:bf:68:65:c5:78:1f:5a:f9:c0:e7:f8:df: 93:3a:27:53:c9:6d:78:0c:c2:09:80:0e:a6:dc:e4:c5:47:f4: eb:e1:cd:1d:4e:59:08:f6:98:5f:65:ef:5c:77:83:3a:0d:d4: da:22:89:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4NDkxMTAvBgNVBAUTKDgwMUJBRDhDQjIyNjQxRERFREU0REJEMzlGNEJFN0Y0 RDhDQUVBNTUwHhcNMjUwODExMDI0MDMxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk5NTgxZi0wNTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoGlC525surLDEEgcTNvMbd+H2mPBEC4jSPBMsbjf+HKyNQVPR7el9VHblN4 CTy+Eklptl6LPZ6nRXAb8JLaFMqKw6PiGvBuC5U4Tiwtu0EJmoyO9lNuHBypouBU BLzUTX8T2Epzq6JrDIcuY1cGnKdA+z5dIuOzWueH9e6pvHsRwd96E3vX6fIZHjvA ozeqlrixJGN3a+mOF75vcLk0tAQro4ajz52sR945QFH+613JgPxuciqcOpnPth38 0e0n4i8tQQCvNL1YYwNA/MyVy/OGhSNSNbdaxWJbT6h8YEPB2r1ekrotv+nRqVEI fn3U3lMIrX/2SSieJazdP8rwnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFARxhGaX QtB+vbjE/DoR4p0Ii93kMB8GA1UdIwQYMBaAFIAbrYyyJkHd7eTb059L5/TYyupV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjg0OS9DNDJBNEFEODM4 QkMxMUVEQjBBRkI4NjRDNEY5QUUwMi9nQnV0akxJbVFkM3Q1TnZUbjB2bjlOaks2 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCdXRqTEltUWQzdDVOdlRuMHZuOU5qSzZsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkY4NDkvQzQyQTRBRDgzOEJDMTFFREIwQUZCODY0QzRGOUFFMDIvQTVENjQzODAz OEMwMTFFRDhEMDAzNjZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnQbgwDQYJKoZIhvcNAQELBQADggEBAE1V4g4HIUd1AnUE NpmVHygg4izulOFxZ2+DUY3Bwvx+7v7BOfR/3/tFDwv3dMnMpYL/oxtuxshEdHbB NKIO8aX60tAmxDJDS2bAJ4ykXdMCTRjk0jQCZHZXzRT2VuoHTrdg91DTknrwtFcB faaFtXwnO0dthxvLb4x4p/c9B1dUNXl+0plC0rttlianezF2g1GamP585ny9iweA HWw3OTX+qmbRC6pb9iDgxvkLhvcZpRSPYCgF7nZu4oZb2RE9D5r5XOCzuZBnTXvh RL9oZcV4H1r5wOf435M6J1PJbXgMwgmADqbc5MVH9OvhzR1OWQj2mF9l71x3gzoN 1NoiiV0= -----END CERTIFICATE-----Generated at Sun Aug 24 06:44:15 2025 by rpki-client