$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/C4DB3710B0BC11EFA44BCA7DC4F9AE02.roa File: C4DB3710B0BC11EFA44BCA7DC4F9AE02.roa (raw, json) Hash identifier: BXig7jt+N7fBjNwAkzGpIGTBV5qbb0dfgi5McDSf5Co= Subject key identifier: 32:D8:E6:BC:34:9B:B0:AC:61:35:94:58:9C:C8:A0:38:D7:B8:22:D5 Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Certificate serial: 0104 Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/C4DB3710B0BC11EFA44BCA7DC4F9AE02.roa Signing time: Mon 30 Jun 2025 20:37:07 +0000 ROA not before: Mon 30 Jun 2025 20:37:07 +0000 ROA not after: Thu 30 Oct 2025 00:00:00 +0000 asID: 152177 IP address blocks: 103.214.156.0/22 maxlen: 22 103.214.156.0/23 maxlen: 23 103.214.156.0/24 maxlen: 24 103.214.157.0/24 maxlen: 24 103.214.158.0/24 maxlen: 24 144.48.112.0/22 maxlen: 22 144.48.112.0/23 maxlen: 23 144.48.112.0/24 maxlen: 24 144.48.113.0/24 maxlen: 24 144.48.114.0/24 maxlen: 24 2407:ea40::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Validity Not Before: Jun 30 20:37:07 2025 GMT Not After : Oct 30 00:00:00 2025 GMT Subject: CN=6862f572-1cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:cb:7a:96:45:02:66:18:01:a2:47:9a:c2:0e: 9e:16:8f:c3:1d:5f:36:f0:66:eb:a9:4d:4f:85:37: 79:58:fc:e8:04:60:76:a7:ee:73:15:6c:b8:7e:e9: 9e:86:62:31:21:d3:b5:7e:c3:e6:99:e4:ee:a9:0c: 04:7c:e5:78:37:fd:d3:d2:02:86:27:f0:44:08:76: e8:a3:67:b7:a8:8c:92:3b:27:8a:bf:0b:ad:7d:92: a7:df:24:3b:6f:d5:c2:f2:34:d0:1d:f8:60:c9:be: a0:10:4e:9a:e2:da:7e:99:c2:67:c2:bf:b1:8e:2b: 7b:30:1a:49:c2:06:89:bf:28:e8:97:94:5c:3f:dc: 34:f3:d2:8f:35:36:e5:ab:d5:f0:91:88:57:d5:4a: 56:16:7f:9a:39:94:15:92:cd:8b:2a:a8:95:57:ad: db:ea:74:ee:87:59:76:e1:63:51:6c:c1:af:2d:c4: 17:d3:de:2c:62:a7:ee:35:97:9e:9e:b8:df:29:6c: c2:04:46:64:a4:a8:bc:a1:0c:f2:c3:73:6a:09:54: 7c:50:1c:c7:be:bc:46:a1:c3:e3:9e:55:42:bd:ec: 1c:3b:8e:ba:1f:ee:0c:41:e1:e5:0f:78:59:82:71: f3:39:5f:6c:68:a9:b4:59:51:dd:a2:e8:25:83:17: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D8:E6:BC:34:9B:B0:AC:61:35:94:58:9C:C8:A0:38:D7:B8:22:D5 X509v3 Authority Key Identifier: keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/C4DB3710B0BC11EFA44BCA7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.214.156.0/22 144.48.112.0/22 IPv6: 2407:ea40::/32 Signature Algorithm: sha256WithRSAEncryption 04:62:3f:b0:64:21:84:89:d4:68:a6:1d:55:a7:35:08:d9:40: 06:47:3b:63:16:47:51:11:27:3e:38:fb:c1:19:5a:b7:80:dc: 89:65:82:45:85:21:ee:5d:01:07:28:6f:76:d5:7a:b5:e3:e9: 76:cc:6b:5d:79:f0:17:a7:b3:aa:40:f8:6d:70:74:82:6a:01: 75:14:ea:41:9f:6e:1d:03:90:aa:71:fe:9e:fa:90:84:f1:c8: 98:ef:13:f7:49:fd:17:e8:76:49:42:28:b3:c3:0c:86:d0:13: 7f:21:54:51:1a:2d:1e:59:a2:62:ec:be:19:18:30:a4:25:0d: 37:e1:df:9a:44:1f:bb:c8:1d:85:e0:6d:d6:41:e1:28:68:e0: cc:f8:ae:a4:3a:fb:59:4a:18:0a:b7:0b:20:6f:8b:c3:b8:02: ee:52:47:85:70:eb:54:15:d2:11:21:63:38:ad:e2:14:c3:0c: 48:f7:a8:e0:43:14:eb:31:e6:9f:5d:da:b6:1f:c3:f5:5a:58: 80:e9:49:2a:7d:28:53:03:d0:50:de:ec:cb:aa:54:ac:6d:53: ca:bb:1b:4a:3d:80:a4:7c:61:18:74:4d:64:dd:31:c4:29:c6: 2e:81:61:1d:08:5e:55:34:d4:15:8b:80:44:72:01:17:ec:b5: d6:24:39:d8 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKDlBQ0I4MDY2NjNGQjBGQ0Y2RUJDNDNDMDEwQjkzNUUw NTIxNEZDOUYwHhcNMjUwNjMwMjAzNzA3WhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYyZjU3Mi0xY2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA88t6lkUCZhgBokeawg6eFo/DHV828GbrqU1PhTd5WPzoBGB2p+5zFWy4fume hmIxIdO1fsPmmeTuqQwEfOV4N/3T0gKGJ/BECHboo2e3qIySOyeKvwutfZKn3yQ7 b9XC8jTQHfhgyb6gEE6a4tp+mcJnwr+xjit7MBpJwgaJvyjol5RcP9w089KPNTbl q9XwkYhX1UpWFn+aOZQVks2LKqiVV63b6nTuh1l24WNRbMGvLcQX094sYqfuNZee nrjfKWzCBEZkpKi8oQzyw3NqCVR8UBzHvrxGocPjnlVCvewcO466H+4MQeHlD3hZ gnHzOV9saKm0WVHdouglgxfwrwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFDLY5rw0 m7CsYTWUWJzIoDjXuCLVMB8GA1UdIwQYMBaAFJrLgGZj+w/PbrxDwBC5NeBSFPyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4OXV2RVBBRUxrMTRGSVVf SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zdUFabVA3RDg5dXZFUEFFTGsxNEZJVV9KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdCNjgvNTNBN0I5MkNCMEE1MTFFQThGOTJFRDE3QzRGOUFFMDIvQzREQjM3MTBC MEJDMTFFRkE0NEJDQTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn1pwDBAKQMHAwDQQCAAIwBwMFACQH6kAwDQYJKoZIhvcN AQELBQADggEBAARiP7BkIYSJ1GimHVWnNQjZQAZHO2MWR1ERJz44+8EZWreA3Ill gkWFIe5dAQcob3bVerXj6XbMa1158Bens6pA+G1wdIJqAXUU6kGfbh0DkKpx/p76 kITxyJjvE/dJ/RfodklCKLPDDIbQE38hVFEaLR5ZomLsvhkYMKQlDTfh35pEH7vI HYXgbdZB4Sho4Mz4rqQ6+1lKGAq3CyBvi8O4Au5SR4Vw61QV0hEhYzit4hTDDEj3 qOBDFOsx5p9d2rYfw/VaWIDpSSp9KFMD0FDe7MuqVKxtU8q7G0o9gKR8YRh0TWTd McQpxi6BYR0IXlU01BWLgERyARfstdYkOdg= -----END CERTIFICATE-----Generated at Fri Jul 4 06:35:12 2025 by rpki-client