$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/1DEAACDA9F8511EABAA10F3BC4F9AE02.roa File: 1DEAACDA9F8511EABAA10F3BC4F9AE02.roa (raw, json) Hash identifier: SCNejdxnpcaaKKmMwjhiNM0xWAEADnWJttQDspq42Vg= Subject key identifier: 08:24:A3:8F:AE:83:F9:D7:4A:59:8E:84:D9:92:CD:85:5A:FB:ED:AA Certificate issuer: /CN=A91CF364/serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Certificate serial: 095D Authority key identifier: 4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/1DEAACDA9F8511EABAA10F3BC4F9AE02.roa Signing time: Fri 22 Aug 2025 20:30:42 +0000 ROA not before: Fri 22 Aug 2025 20:30:42 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132218 IP address blocks: 103.71.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2397 (0x95d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF364, serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Validity Not Before: Aug 22 20:30:42 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68a8d372-0e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:f7:5b:e5:eb:a2:25:a8:47:95:2e:8b:f5: 57:78:88:b5:6e:3f:a3:8a:6d:f8:dd:f1:c3:de:3a: 4e:19:4e:4f:24:3b:c9:f6:52:fd:55:39:a7:9f:04: 8c:b9:8c:d7:33:d0:71:91:cd:38:23:80:4a:1b:3c: 48:82:4c:8d:f9:b7:5f:56:b0:85:ea:03:cb:85:f2: 4e:fc:e3:1d:b6:ac:18:6c:2b:77:4d:16:36:9c:6b: a5:a0:5e:df:e7:be:39:de:e8:21:4b:88:d2:da:38: 00:f4:bb:b4:ae:32:e3:dd:99:eb:7f:20:c2:e3:fc: 97:c3:0c:3a:09:48:5b:39:02:0f:51:69:f5:4e:be: cd:f3:8b:18:17:ac:96:97:81:63:54:2c:3b:5a:4e: a2:c8:77:3e:c6:8d:c2:ef:ee:e2:7f:a9:09:3f:aa: 8a:8b:63:f8:07:1a:c4:cc:28:d2:21:b7:b3:fa:c4: 18:d5:7a:2c:ff:01:a3:c9:08:58:9c:58:c9:4a:2d: f5:f9:ba:3b:8a:40:92:42:cb:2e:7f:a2:81:9c:c2: c1:3c:08:19:ba:d2:36:f8:3f:82:fc:9f:c2:76:b2: ae:d1:2c:bd:2e:06:d1:78:9f:a1:ed:d8:e2:04:1f: 9a:28:a7:bb:1b:d1:56:51:5e:cc:2f:9c:c1:44:59: 36:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:24:A3:8F:AE:83:F9:D7:4A:59:8E:84:D9:92:CD:85:5A:FB:ED:AA X509v3 Authority Key Identifier: keyid:4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/1DEAACDA9F8511EABAA10F3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.71.57.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:b5:50:f6:54:b3:c8:d4:f9:38:03:75:2d:58:93:63:63:14: 17:ef:86:74:0c:f1:39:2d:c9:7b:41:ee:3e:c6:16:39:90:9b: fb:a7:15:36:fc:d2:87:f5:ca:63:2a:5c:30:af:cb:9d:d5:4e: e9:c9:0d:80:d4:ce:c4:31:4d:1a:8a:7f:81:54:d2:06:d6:97: 60:4a:2e:4b:97:97:80:13:8d:53:e2:ad:c9:69:eb:08:a2:2e: 1c:fb:2d:10:01:bd:5d:c0:db:70:56:81:67:b4:9b:06:e9:25: 0f:cc:8a:39:11:77:b3:5f:54:92:92:56:af:9d:df:78:28:a9: 37:b0:be:85:51:c6:f7:08:ff:10:14:5c:b0:ec:2b:49:62:84: de:d4:1e:2d:35:b0:77:6b:98:bd:31:0b:1d:01:78:01:85:dc: d5:1b:6a:54:cf:31:12:dd:39:50:fc:06:c7:7c:dd:56:dc:36: 3e:50:c3:92:15:e3:8c:51:e2:a8:6f:48:93:60:23:d9:23:85: 34:e2:0d:c6:ae:cc:ee:77:1d:4c:c7:3b:25:af:95:b9:37:aa: c3:cf:a9:78:19:00:10:ab:e6:64:02:01:86:96:68:75:3d:ce: c6:f6:48:b5:a0:83:d4:09:dd:9c:fc:15:74:84:30:84:bd:d2: 46:4e:0b:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YzNjQxMTAvBgNVBAUTKDRBNzNCMTZEMkVFOUU5Q0Q0QzNGQzBCRDYxMDkxQzQ4 OTA1M0Q0MzYwHhcNMjUwODIyMjAzMDQyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE4ZDM3Mi0wZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFL3W+XroiWoR5Uui/VXeIi1bj+jim343fHD3jpOGU5PJDvJ9lL9VTmnnwSM uYzXM9Bxkc04I4BKGzxIgkyN+bdfVrCF6gPLhfJO/OMdtqwYbCt3TRY2nGuloF7f 57453ughS4jS2jgA9Lu0rjLj3ZnrfyDC4/yXwww6CUhbOQIPUWn1Tr7N84sYF6yW l4FjVCw7Wk6iyHc+xo3C7+7if6kJP6qKi2P4BxrEzCjSIbez+sQY1Xos/wGjyQhY nFjJSi31+bo7ikCSQssuf6KBnMLBPAgZutI2+D+C/J/CdrKu0Sy9LgbReJ+h7dji BB+aKKe7G9FWUV7ML5zBRFk21QIDAQABo4IClTCCApEwHQYDVR0OBBYEFAgko4+u g/nXSlmOhNmSzYVa++2qMB8GA1UdIwQYMBaAFEpzsW0u6enNTD/AvWEJHEiQU9Q2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjM2NC83MTZBNTlBQzlG ODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZjMU1QOEM5WVFrY1NKQlQx RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NuT3hiUzdwNmMxTVA4QzlZUWtjU0pCVDFEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0YzNjQvNzE2QTU5QUM5RjgzMTFFQTkzMTQ5MTM1QzRGOUFFMDIvMURFQUFDREE5 Rjg1MTFFQUJBQTEwRjNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnRzkwDQYJKoZIhvcNAQELBQADggEBAH+1UPZUs8jU+TgD dS1Yk2NjFBfvhnQM8TktyXtB7j7GFjmQm/unFTb80of1ymMqXDCvy53VTunJDYDU zsQxTRqKf4FU0gbWl2BKLkuXl4ATjVPirclp6wiiLhz7LRABvV3A23BWgWe0mwbp JQ/MijkRd7NfVJKSVq+d33goqTewvoVRxvcI/xAUXLDsK0lihN7UHi01sHdrmL0x Cx0BeAGF3NUbalTPMRLdOVD8Bsd83VbcNj5Qw5IV44xR4qhvSJNgI9kjhTTiDcau zO53HUzHOyWvlbk3qsPPqXgZABCr5mQCAYaWaHU9zsb2SLWgg9QJ3Zz8FXSEMIS9 0kZOCw0= -----END CERTIFICATE-----Generated at Sun Aug 24 00:35:15 2025 by rpki-client