$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9BBCC1F60D2411EEA8431074C4F9AE02.roa File: 9BBCC1F60D2411EEA8431074C4F9AE02.roa (raw, json) Hash identifier: CWem0s7hf8kQnIdZUnWxTyisJw7AnKLcP2ANy+rIwcs= Subject key identifier: E4:E1:C5:4C:B8:07:0B:4A:3B:9A:71:DD:B2:C0:E0:99:7B:4C:7E:B2 Certificate issuer: /CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Certificate serial: 0190 Authority key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9BBCC1F60D2411EEA8431074C4F9AE02.roa Signing time: Mon 23 Jun 2025 02:41:26 +0000 ROA not before: Mon 23 Jun 2025 02:41:26 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151324 IP address blocks: 103.196.176.0/23 maxlen: 23 103.196.176.0/24 maxlen: 24 103.196.177.0/24 maxlen: 24 2001:df2:6c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3E37, serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Validity Not Before: Jun 23 02:41:26 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6858bed6-8566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7b:5e:0e:a0:72:ca:32:cf:09:e2:37:fb:cc: 4f:02:15:94:ae:37:c1:1b:d4:6d:2c:fd:fc:59:5d: d5:b5:6f:93:04:12:1c:bc:c4:26:a8:e5:ae:f5:53: a2:28:13:67:b9:a5:51:05:f7:1e:94:e5:4f:a8:18: 7e:b4:04:9f:91:22:7a:27:ce:32:73:fc:75:e1:59: b7:1e:fd:0d:8a:38:35:42:2a:86:75:c1:3b:72:a5: f9:53:cf:7f:9e:09:35:a4:75:7c:ef:80:e7:aa:6e: 98:ba:10:64:b3:92:ca:9e:32:4a:6c:f6:9f:7a:48: f1:03:e6:7f:45:13:79:83:e5:ed:80:6c:9f:cb:b3: 58:8f:b0:a8:74:37:63:b7:4b:d0:43:11:e7:9b:8b: 43:2c:4a:6b:f0:15:14:cc:2a:f0:19:9d:f1:02:20: 0e:17:85:f7:ed:df:ab:a6:46:c7:97:a2:19:f5:a8: 44:81:7a:cd:b7:a5:e5:c7:86:97:92:a1:b0:23:ec: 86:45:78:8a:d2:c5:82:ab:fd:a2:6f:35:88:a8:7e: 30:49:ec:35:44:bf:bb:89:76:fc:d6:8b:4c:4e:96: 54:d5:08:d1:48:0a:da:7a:7c:1e:70:10:36:a3:33: bb:f9:da:ba:ce:be:ce:58:a1:84:19:7a:15:fa:c6: 7a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E1:C5:4C:B8:07:0B:4A:3B:9A:71:DD:B2:C0:E0:99:7B:4C:7E:B2 X509v3 Authority Key Identifier: keyid:F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9BBCC1F60D2411EEA8431074C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.196.176.0/23 IPv6: 2001:df2:6c40::/48 Signature Algorithm: sha256WithRSAEncryption a4:c9:55:25:3b:ed:f5:43:f0:ff:a8:8d:29:09:40:56:2e:b5: 7f:dc:2a:b3:58:00:0d:8b:b3:b4:0c:6e:0d:6f:62:fc:12:76: 26:0b:de:07:dc:48:6e:aa:6a:04:0b:2f:aa:b9:4e:b1:78:e5: 07:db:5b:59:fa:ba:b8:56:dc:1b:f7:6c:19:20:66:40:de:1d: 95:71:4f:5b:c9:fa:9a:40:58:4a:53:49:02:f8:14:6a:6f:eb: 27:1c:d5:63:bd:cb:88:80:ed:00:89:c1:0f:5b:dd:81:e1:e8: 2a:c9:b6:86:95:6b:0f:fa:f4:69:65:45:91:fb:45:52:a8:70: 02:eb:8f:77:51:8a:68:88:34:b7:7c:0b:c4:f4:54:1f:ac:7e: 08:54:c5:82:de:21:6d:af:97:58:82:a5:56:41:de:bd:fd:7b: 18:13:b3:02:fa:a3:3e:e4:c9:d5:48:df:73:e6:1f:0f:f3:f1: a7:0d:7e:85:e1:a1:78:24:97:44:72:16:04:e4:ec:a1:5a:99: 61:bf:74:1d:8c:94:8d:50:a5:f7:d0:56:30:16:84:85:29:93: 32:16:fe:81:14:db:10:2d:73:36:15:e8:68:87:35:b9:10:f1: 49:1c:79:08:90:4d:f4:69:47:38:9f:eb:b9:60:0d:69:16:ac: 83:e7:64:93 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFMzcxMTAvBgNVBAUTKEY0NTYxOEVBMjczRjQwQjRCQzY4NUUyOTg4N0UyMDUw ODNDNDkwQTYwHhcNMjUwNjIzMDI0MTI2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU4YmVkNi04NTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3teDqByyjLPCeI3+8xPAhWUrjfBG9RtLP38WV3VtW+TBBIcvMQmqOWu9VOi KBNnuaVRBfcelOVPqBh+tASfkSJ6J84yc/x14Vm3Hv0Nijg1QiqGdcE7cqX5U89/ ngk1pHV874Dnqm6YuhBks5LKnjJKbPafekjxA+Z/RRN5g+XtgGyfy7NYj7CodDdj t0vQQxHnm4tDLEpr8BUUzCrwGZ3xAiAOF4X37d+rpkbHl6IZ9ahEgXrNt6Xlx4aX kqGwI+yGRXiK0sWCq/2ibzWIqH4wSew1RL+7iXb81otMTpZU1QjRSAraenwecBA2 ozO7+dq6zr7OWKGEGXoV+sZ64QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOThxUy4 BwtKO5px3bLA4Jl7TH6yMB8GA1UdIwQYMBaAFPRWGOonP0C0vGheKYh+IFCDxJCm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0UzNy9CNDQ1NTNEOEYw OUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FMUzhhRjRwaUg0Z1VJUEVr S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGWVk2aWNfUUxTOGFGNHBpSDRnVUlQRWtLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzNFMzcvQjQ0NTUzRDhGMDlGMTFFRDlCNEEwNzM0QzRGOUFFMDIvOUJCQ0MxRjYw RDI0MTFFRUE4NDMxMDc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnxLAwDwQCAAIwCQMHACABDfJsQDANBgkqhkiG9w0BAQsF AAOCAQEApMlVJTvt9UPw/6iNKQlAVi61f9wqs1gADYuztAxuDW9i/BJ2JgveB9xI bqpqBAsvqrlOsXjlB9tbWfq6uFbcG/dsGSBmQN4dlXFPW8n6mkBYSlNJAvgUam/r JxzVY73LiIDtAInBD1vdgeHoKsm2hpVrD/r0aWVFkftFUqhwAuuPd1GKaIg0t3wL xPRUH6x+CFTFgt4hba+XWIKlVkHevf17GBOzAvqjPuTJ1Ujfc+YfD/Pxpw1+heGh eCSXRHIWBOTsoVqZYb90HYyUjVCl99BWMBaEhSmTMhb+gRTbEC1zNhXoaIc1uRDx SRx5CJBN9GlHOJ/ruWANaRasg+dkkw== -----END CERTIFICATE-----Generated at Thu Jul 3 10:39:43 2025 by rpki-client