$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/059261A8BC5111EABE07AE32C4F9AE02.roa File: 059261A8BC5111EABE07AE32C4F9AE02.roa (raw, json) Hash identifier: xfShO1VY02IlimsR5UFqO1U8WhpdFohjlqZyHRKoITk= Subject key identifier: C1:62:CE:2D:A3:E9:2D:E5:A3:B6:CE:74:4B:1D:10:CB:56:18:76:A7 Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Certificate serial: 08B8 Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/059261A8BC5111EABE07AE32C4F9AE02.roa Signing time: Thu 10 Jul 2025 21:01:19 +0000 ROA not before: Thu 10 Jul 2025 21:01:19 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 140879 IP address blocks: 103.152.218.0/23 maxlen: 23 103.152.218.0/24 maxlen: 24 103.152.219.0/24 maxlen: 24 2400:8ca0::/32 maxlen: 32 2400:8ca0::/48 maxlen: 48 2400:8ca0:1::/48 maxlen: 48 2400:8ca0:2::/48 maxlen: 48 2400:8ca0:3::/48 maxlen: 48 2400:8ca0:4::/48 maxlen: 48 2400:8ca0:5::/48 maxlen: 48 2400:8ca0:6::/48 maxlen: 48 2400:8ca0:7::/48 maxlen: 48 2400:8ca0:8::/48 maxlen: 48 2400:8ca0:9::/48 maxlen: 48 2400:8ca0:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2232 (0x8b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Validity Not Before: Jul 10 21:01:19 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68702a1f-7b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:02:b8:57:3d:49:cf:3f:f0:26:0e:85:5f:ad: 07:de:d8:e0:29:48:03:fb:1e:ef:bd:da:8d:38:a9: 60:09:ce:52:f0:b6:15:9c:b9:72:b1:22:d3:96:90: 1c:8a:ea:f3:ab:50:75:e5:ef:6d:07:dc:49:bc:d9: a7:ae:76:2c:ed:92:d3:7b:9c:f1:3e:ce:a0:22:e1: 52:f1:c8:34:f4:13:22:7f:8d:e3:d6:0f:a8:a7:aa: a5:d0:d8:95:c5:5a:c4:fd:32:84:13:76:c5:a0:5a: 7a:f4:7f:d3:d1:01:de:2f:a9:fc:b2:69:0d:7f:fb: d2:e3:2a:ab:ca:4f:48:99:24:f4:29:a4:10:8b:bb: ed:cf:6e:4d:7c:e6:ee:51:5a:f7:81:d6:1c:bf:d0: 25:33:7b:2a:eb:77:03:74:b4:67:d6:97:2e:68:f4: 3f:d5:ea:b6:da:df:dd:c0:3e:e6:3c:f4:47:bc:1c: 19:42:8f:a5:2b:ca:32:6e:b6:04:20:bd:6d:2b:45: d7:3a:ad:d3:98:ee:b9:5f:41:66:3a:8b:1b:53:7d: af:3e:71:5e:80:04:5f:ba:bf:2a:5f:8c:0f:53:66: 28:2c:97:9b:b1:36:51:a5:47:52:2f:59:b9:54:aa: 43:71:a5:10:ec:a1:20:2e:c4:59:f8:be:4a:a9:d9: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:62:CE:2D:A3:E9:2D:E5:A3:B6:CE:74:4B:1D:10:CB:56:18:76:A7 X509v3 Authority Key Identifier: keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/059261A8BC5111EABE07AE32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.218.0/23 IPv6: 2400:8ca0::/32 Signature Algorithm: sha256WithRSAEncryption 13:c6:a2:f8:d2:c3:89:84:e4:2c:80:19:a0:c8:60:4d:74:bf: 13:21:d0:fc:5a:4f:9f:75:7d:03:0c:c5:79:54:67:47:a8:1c: 9c:c4:64:fb:6c:e2:d6:30:77:fa:b8:1c:77:17:cb:de:2d:cb: 1b:fb:3c:2a:9f:9c:45:bd:5d:12:25:72:f3:80:0f:b5:93:e4: 73:f0:e7:2b:56:97:f3:c1:a5:ed:17:ba:95:8a:c1:d6:ab:ad: 08:e3:4c:da:59:e6:19:29:52:28:71:c2:dd:76:33:84:a6:68: d5:65:52:e3:d3:8e:9e:76:1c:83:3d:f2:fb:16:77:6a:bb:d6: a1:cc:8b:77:ba:c3:d5:86:80:c1:14:3d:2b:bc:79:cd:60:0f: 98:45:7b:04:60:e7:4b:6e:92:0e:a4:d5:52:35:fa:ab:29:b4: 38:6b:5a:13:41:82:59:ac:80:e1:ed:d0:3e:a9:e5:c0:b8:02: 22:b8:d8:b6:98:02:ab:e7:b8:1f:a2:44:f6:01:8a:99:c6:77: 91:7d:cb:b6:a1:fc:92:9a:29:72:0e:95:ca:dd:8d:2f:3e:b8: 02:f6:06:4f:cf:7b:66:c7:8e:a1:47:cd:0a:15:81:04:d4:1a: 87:b0:0a:d0:b4:03:d1:1f:94:ec:2b:36:41:ca:3b:be:7c:aa: 07:81:d4:d9 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE NDdEMENCQTQwHhcNMjUwNzEwMjEwMTE5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcwMmExZi03YjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QK4Vz1Jzz/wJg6FX60H3tjgKUgD+x7vvdqNOKlgCc5S8LYVnLlysSLTlpAc iurzq1B15e9tB9xJvNmnrnYs7ZLTe5zxPs6gIuFS8cg09BMif43j1g+op6ql0NiV xVrE/TKEE3bFoFp69H/T0QHeL6n8smkNf/vS4yqryk9ImST0KaQQi7vtz25NfObu UVr3gdYcv9AlM3sq63cDdLRn1pcuaPQ/1eq22t/dwD7mPPRHvBwZQo+lK8oybrYE IL1tK0XXOq3TmO65X0FmOosbU32vPnFegARfur8qX4wPU2YoLJebsTZRpUdSL1m5 VKpDcaUQ7KEgLsRZ+L5KqdnWFwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMFizi2j 6S3lo7bOdEsdEMtWGHanMB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzRGMUIvMjNGMzA1NTBCQzRGMTFFQUJBOEM5NjJGQzRGOUFFMDIvMDU5MjYxQThC QzUxMTFFQUJFMDdBRTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnmNowDQQCAAIwBwMFACQAjKAwDQYJKoZIhvcNAQELBQAD ggEBABPGovjSw4mE5CyAGaDIYE10vxMh0PxaT591fQMMxXlUZ0eoHJzEZPts4tYw d/q4HHcXy94tyxv7PCqfnEW9XRIlcvOAD7WT5HPw5ytWl/PBpe0XupWKwdarrQjj TNpZ5hkpUihxwt12M4SmaNVlUuPTjp52HIM98vsWd2q71qHMi3e6w9WGgMEUPSu8 ec1gD5hFewRg50tukg6k1VI1+qsptDhrWhNBglmsgOHt0D6p5cC4AiK42LaYAqvn uB+iRPYBipnGd5F9y7ah/JKaKXIOlcrdjS8+uAL2Bk/Pe2bHjqFHzQoVgQTUGoew CtC0A9EflOwrNkHKO758qgeB1Nk= -----END CERTIFICATE-----Generated at Sat Aug 23 18:37:36 2025 by rpki-client