$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/F550BA02768A11F081B6114EC4F9AE02.roa File: F550BA02768A11F081B6114EC4F9AE02.roa (raw, json) Hash identifier: +Emh97G4a6MC22cwrisLR6hKm25TYhC5b4mYNP17m7E= Subject key identifier: 0C:75:6D:03:07:47:66:52:DF:BC:92:AE:08:F5:DC:20:00:B4:AD:63 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 34D2 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/F550BA02768A11F081B6114EC4F9AE02.roa Signing time: Mon 11 Aug 2025 08:12:44 +0000 ROA not before: Mon 11 Aug 2025 08:12:44 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 136468 IP address blocks: 103.35.251.0/24 maxlen: 24 103.35.251.16/28 maxlen: 28 103.35.251.32/28 maxlen: 28 103.35.251.48/28 maxlen: 28 103.35.251.64/28 maxlen: 28 2402:cf80:100a::/48 maxlen: 48 2402:cf80:100b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13522 (0x34d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Aug 11 08:12:44 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6899a5fc-a3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b4:fb:96:f7:c9:2d:ab:98:8d:cc:18:f7:36: cf:cd:0e:8b:80:dc:cc:3d:9e:2a:15:98:25:e1:03: 43:cb:71:30:c6:8b:20:3b:6c:69:30:fb:3c:ac:72: a9:a7:9e:2b:1b:58:dd:b1:b9:7a:a8:3f:d4:cf:70: 16:cd:c5:d1:27:98:b7:85:96:80:db:20:1e:ec:e5: fd:6b:7c:3a:50:03:20:e4:e6:f4:41:cb:9c:e2:c4: c5:89:12:72:78:0d:0e:c5:ec:1e:2f:f0:53:18:01: 75:6f:e4:eb:c9:4c:e6:2d:af:02:12:ef:c5:54:59: 92:d6:a6:b3:e2:c8:59:bf:9e:2e:0c:d8:fa:5e:c8: 59:74:da:69:62:40:29:09:eb:f1:10:53:a4:66:3d: 01:07:7b:4e:b1:6d:9b:c4:99:de:76:79:a5:77:a7: 72:41:9c:24:78:40:62:6c:d8:b7:b9:21:24:f2:11: d4:5f:ff:92:30:6d:fd:55:ce:4e:3a:cc:89:f2:97: c2:4d:9f:ff:9e:bc:ca:fc:ee:b5:09:5e:db:c0:43: 1e:87:2c:41:a1:72:00:5f:c0:1e:1e:42:eb:34:91: 36:6f:04:9c:88:3c:32:95:8a:9b:4a:56:81:be:f5: 2e:fc:7f:42:a7:85:3f:78:5a:39:11:ed:96:6d:33: 60:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:75:6D:03:07:47:66:52:DF:BC:92:AE:08:F5:DC:20:00:B4:AD:63 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/F550BA02768A11F081B6114EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.35.251.0/24 IPv6: 2402:cf80:100a::/47 Signature Algorithm: sha256WithRSAEncryption bb:7c:f3:d8:ad:75:63:4a:ce:23:1d:bb:fe:bc:ea:81:ea:69: 54:00:7f:0b:38:f6:db:e7:fe:16:86:46:8c:0d:0b:3a:88:83: cb:29:38:82:9a:5b:f1:ed:9e:6e:47:57:c7:93:f0:0a:9e:91: 77:d6:e4:b5:f9:19:75:ba:1f:c2:81:df:13:6a:ff:0c:97:3f: 79:53:c4:41:e7:57:d2:1d:c4:21:e6:ee:92:6f:03:c8:9d:78: 2c:18:6b:1b:2e:93:de:bd:9c:55:52:89:87:0a:3d:18:2f:f6: 2a:6c:fb:16:d3:e4:9c:af:d8:cb:2d:17:02:fe:85:aa:cc:ad: 60:a7:39:f7:aa:88:45:30:db:13:69:7b:5d:09:79:35:7a:93: 4b:1a:14:8b:f7:ee:f2:26:03:b9:54:8e:09:33:b5:54:c0:4e: 0b:c1:f8:20:52:e3:1f:67:5a:37:19:e7:d7:6f:5b:b0:1b:4a: 12:34:0e:be:bd:09:92:35:db:08:86:02:3a:f5:30:82:84:67: f3:66:ce:eb:03:c3:d2:d6:35:01:f0:df:3e:88:9f:a0:7b:68: b3:58:6b:62:22:d5:a9:81:9c:5a:f0:20:d8:08:7e:c7:cb:15: 79:c7:8b:b9:2a:b4:40:32:62:d8:50:f2:53:ec:d7:33:77:88: 57:65:60:ca -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICNNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjUwODExMDgxMjQ0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk5YTVmYy1hM2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07T7lvfJLauYjcwY9zbPzQ6LgNzMPZ4qFZgl4QNDy3EwxosgO2xpMPs8rHKp p54rG1jdsbl6qD/Uz3AWzcXRJ5i3hZaA2yAe7OX9a3w6UAMg5Ob0Qcuc4sTFiRJy eA0OxeweL/BTGAF1b+TryUzmLa8CEu/FVFmS1qaz4shZv54uDNj6XshZdNppYkAp CevxEFOkZj0BB3tOsW2bxJnednmld6dyQZwkeEBibNi3uSEk8hHUX/+SMG39Vc5O OsyJ8pfCTZ//nrzK/O61CV7bwEMehyxBoXIAX8AeHkLrNJE2bwSciDwylYqbSlaB vvUu/H9Cp4U/eFo5Ee2WbTNgdQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAx1bQMH R2ZS37ySrgj13CAAtK1jMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkzNTAvMzkxM0JDQTAxRDg3MTFFMkI0MkIwMkRGMDhCMDJDRDIvRjU1MEJBMDI3 NjhBMTFGMDgxQjYxMTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnI/swDwQCAAIwCQMHASQCz4AQCjANBgkqhkiG9w0BAQsF AAOCAQEAu3zz2K11Y0rOIx27/rzqgeppVAB/Czj22+f+FoZGjA0LOoiDyyk4gppb 8e2ebkdXx5PwCp6Rd9bktfkZdbofwoHfE2r/DJc/eVPEQedX0h3EIebukm8DyJ14 LBhrGy6T3r2cVVKJhwo9GC/2Kmz7FtPknK/Yyy0XAv6FqsytYKc596qIRTDbE2l7 XQl5NXqTSxoUi/fu8iYDuVSOCTO1VMBOC8H4IFLjH2daNxnn129bsBtKEjQOvr0J kjXbCIYCOvUwgoRn82bO6wPD0tY1AfDfPoifoHtos1hrYiLVqYGcWvAg2Ah+x8sV eceLuSq0QDJi2FDyU+zXM3eIV2Vgyg== -----END CERTIFICATE-----Generated at Sat Aug 23 13:43:12 2025 by rpki-client