$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/7A89B302E7E511EFA8BD237AC4F9AE02.roa File: 7A89B302E7E511EFA8BD237AC4F9AE02.roa (raw, json) Hash identifier: 3cZWclJtX3V6aTw+zOu2W0FHd/b2ev4flaWcS3tJ/J0= Subject key identifier: E6:9E:A4:C9:1D:FC:F3:10:66:E9:8E:87:39:7B:0A:A2:AA:AD:26:2C Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0CBB Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/7A89B302E7E511EFA8BD237AC4F9AE02.roa Signing time: Fri 20 Jun 2025 18:42:55 +0000 ROA not before: Fri 20 Jun 2025 18:42:55 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137842 IP address blocks: 103.115.156.0/24 maxlen: 24 103.115.157.0/24 maxlen: 24 103.115.158.0/24 maxlen: 24 2402:ea40::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3259 (0xcbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Jun 20 18:42:55 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6855abaf-2e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d7:f3:ab:a4:f1:e3:da:3e:29:fc:99:b0:5a: 8c:7e:7f:d2:bf:eb:ba:77:bd:7d:f6:89:96:33:c8: e2:ce:c0:96:6c:d0:13:66:74:d5:1a:2e:41:2c:93: 0d:c9:a0:f4:18:76:83:35:02:60:f4:5b:84:f6:fb: 00:c5:68:f9:8b:ce:c1:7e:52:b1:28:f1:35:4e:c4: 5c:ae:95:85:1c:78:2d:58:49:b7:44:8d:f8:43:a3: 13:f1:36:8d:21:7c:04:69:3b:5e:a4:c9:19:a9:47: e3:db:4f:90:42:82:e5:5f:b4:fe:67:9d:c2:e4:ca: 4e:d9:0d:cc:f3:53:6b:a9:85:94:a4:26:4b:be:6b: b9:8d:c7:ba:58:24:56:77:f2:8e:5a:63:b5:02:d1: 6d:78:0c:51:1d:bd:01:c0:83:5f:ce:4a:86:89:c5: 8b:45:fe:6a:f6:3a:0c:25:f2:c2:dd:f2:d8:2b:f6: ee:9d:9e:ce:ba:d4:e2:88:01:a3:af:41:2e:db:f3: 0e:25:00:dd:f0:e9:48:97:ff:49:9f:a7:e0:cc:bd: e9:41:95:e7:0b:f7:56:84:33:22:8a:aa:39:c8:86: cc:c3:88:dc:a1:da:00:94:23:af:7b:79:37:6a:99: b0:83:fe:62:ed:23:4c:6c:1b:c3:07:45:44:61:da: 03:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9E:A4:C9:1D:FC:F3:10:66:E9:8E:87:39:7B:0A:A2:AA:AD:26:2C X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/7A89B302E7E511EFA8BD237AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.156.0-103.115.158.255 IPv6: 2402:ea40::/32 Signature Algorithm: sha256WithRSAEncryption 6d:fe:25:6a:af:23:27:57:59:eb:98:8c:b9:c9:ed:d2:4c:a3: aa:77:55:dc:0c:9e:18:2f:3e:28:f6:a4:4b:9f:ef:db:ce:b9: 07:b0:cd:95:a1:1a:36:da:4f:59:d8:cf:70:88:7c:15:12:0d: 22:e7:94:eb:90:ad:88:4d:fb:71:2e:cd:1f:75:46:cd:30:f2: 7d:8f:cb:70:7d:53:c2:48:45:b6:f5:88:d9:7f:24:9b:49:83: b6:33:55:a8:c0:99:3b:a9:83:40:91:72:b1:5c:bf:3a:86:99: 33:89:b3:14:49:8b:9e:3d:8a:17:1c:e1:61:9e:9a:1b:81:fa: d8:0c:3d:d8:a4:db:56:27:38:30:b8:18:ca:53:18:00:4c:8f: 9d:27:19:5a:26:ab:dd:32:c4:b2:80:d4:b7:0e:d1:b8:5b:12: 94:90:74:3d:95:4d:07:9c:9a:9f:e0:96:df:4c:54:34:07:3d: d1:7d:22:be:18:f0:a7:cc:03:bf:6f:d2:31:00:81:54:f3:42: 7a:bd:ff:94:18:c3:38:20:8a:ea:0f:09:2e:94:70:a0:7a:64: 7a:fd:f7:7e:f9:68:1f:ba:42:b5:11:15:a0:f2:87:a1:75:6d: 02:c8:37:f9:3c:da:06:c6:b2:28:73:33:bd:ff:25:a5:a5:08: 51:2d:9b:7e -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICDLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjUwNjIwMTg0MjU1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU1YWJhZi0yZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Nfzq6Tx49o+KfyZsFqMfn/Sv+u6d7199omWM8jizsCWbNATZnTVGi5BLJMN yaD0GHaDNQJg9FuE9vsAxWj5i87BflKxKPE1TsRcrpWFHHgtWEm3RI34Q6MT8TaN IXwEaTtepMkZqUfj20+QQoLlX7T+Z53C5MpO2Q3M81NrqYWUpCZLvmu5jce6WCRW d/KOWmO1AtFteAxRHb0BwINfzkqGicWLRf5q9joMJfLC3fLYK/bunZ7OutTiiAGj r0Eu2/MOJQDd8OlIl/9Jn6fgzL3pQZXnC/dWhDMiiqo5yIbMw4jcodoAlCOve3k3 apmwg/5i7SNMbBvDB0VEYdoDHQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFOaepMkd /PMQZumOhzl7CqKqrSYsMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQ2MTQvMUM5NDg5OUFGNEYwMTFFOUFDMjAyQjFEQzRGOUFFMDIvN0E4OUIzMDJF N0U1MTFFRkE4QkQyMzdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEAmdznAMEAGdznjANBAIAAjAHAwUAJALqQDANBgkqhkiG 9w0BAQsFAAOCAQEAbf4laq8jJ1dZ65iMucnt0kyjqndV3AyeGC8+KPakS5/v2865 B7DNlaEaNtpPWdjPcIh8FRINIueU65CtiE37cS7NH3VGzTDyfY/LcH1TwkhFtvWI 2X8km0mDtjNVqMCZO6mDQJFysVy/OoaZM4mzFEmLnj2KFxzhYZ6aG4H62Aw92KTb Vic4MLgYylMYAEyPnScZWiar3TLEsoDUtw7RuFsSlJB0PZVNB5yan+CW30xUNAc9 0X0ivhjwp8wDv2/SMQCBVPNCer3/lBjDOCCK6g8JLpRwoHpkev33fvloH7pCtREV oPKHoXVtAsg3+TzaBsayKHMzvf8lpaUIUS2bfg== -----END CERTIFICATE-----Generated at Thu Jul 3 23:19:15 2025 by rpki-client