$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/7B18C5B40CCE11ED97C94316C4F9AE02.roa File: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (raw, json) Hash identifier: goaKWUv5rRzy+se4DCphxh+KiAGhLohPjMAfli+5ur8= Subject key identifier: 86:92:0C:C2:20:2B:21:4B:2C:C9:EB:28:E2:F9:08:C7:5F:04:B7:81 Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Certificate serial: 02BA Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/7B18C5B40CCE11ED97C94316C4F9AE02.roa Signing time: Fri 19 Sep 2025 02:09:08 +0000 ROA not before: Fri 19 Sep 2025 02:09:08 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134573 IP address blocks: 103.120.230.0/23 maxlen: 23 103.120.230.0/24 maxlen: 24 103.120.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A6D, serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Validity Not Before: Sep 19 02:09:08 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68ccbb44-d036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:6a:f5:a6:71:fd:c6:00:88:e2:f0:2f:f1: 78:4f:5c:68:5f:fc:61:cf:4c:c5:39:fd:b6:92:f6: 16:c8:21:71:6e:a9:62:0b:bc:d0:eb:7a:36:ae:1c: 40:4d:83:8e:6e:08:32:86:88:50:22:d3:d6:14:a3: 51:9b:ad:af:ef:5e:6e:10:11:d6:fc:10:48:4b:ce: fe:21:ad:44:b2:36:66:86:d7:4e:3e:54:59:d3:6d: b9:3a:27:7d:79:5a:fb:1b:88:f4:0f:c8:55:87:94: 90:96:4d:bf:66:5d:18:25:df:95:32:33:69:dc:7f: 31:e9:22:54:fd:4f:2d:0a:92:bc:a0:10:70:c7:59: c0:c4:55:b3:71:33:d2:e0:2e:f7:01:40:37:23:26: f5:a7:c4:f8:1a:d7:81:bc:15:5b:54:3e:c9:c5:42: ae:14:16:dd:71:35:41:d2:99:c0:60:96:58:05:45: 8e:3b:c2:d4:10:ea:36:66:9b:98:9e:bf:a8:eb:a6: 33:79:05:48:ca:85:86:68:ba:64:e6:7a:61:68:c8: 20:b1:0e:be:20:48:72:bd:1a:50:7f:88:22:0d:35: f8:52:65:f0:ac:70:c9:a7:a9:94:87:26:f2:e2:66: 74:e0:66:b7:d7:88:21:93:94:a3:eb:f2:e7:2b:1a: cf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:92:0C:C2:20:2B:21:4B:2C:C9:EB:28:E2:F9:08:C7:5F:04:B7:81 X509v3 Authority Key Identifier: keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/7B18C5B40CCE11ED97C94316C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.120.230.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:bf:7f:b0:7e:d1:93:f3:9f:48:90:87:ac:98:c7:72:6a:f8: 6e:a4:5c:30:49:08:8b:d4:fa:62:bb:47:55:a5:74:2a:a4:93: 8f:1d:c1:61:a4:9e:46:f8:81:a6:3f:a4:59:e6:4a:f0:35:78: e0:30:7c:c3:36:a7:0e:18:f3:4b:ea:8e:9a:9e:34:22:d0:62: 0f:44:ed:34:26:fe:98:43:54:e3:44:68:63:7f:7b:52:8a:e8: 99:61:97:e0:3a:dd:5e:5e:6e:d5:2f:c1:a4:15:1b:af:ea:30: d2:c5:30:76:35:0f:9d:f0:b8:d5:bf:f1:38:64:2c:b3:b2:3a: 84:a7:9c:e6:95:7d:a2:62:d9:a7:aa:31:eb:25:e1:6e:39:66: 33:57:e6:ac:be:d4:19:9a:db:e5:63:19:61:19:51:ce:6e:d2: c2:83:69:c1:41:9d:ce:8a:07:d8:c8:d2:7f:b6:49:56:7a:24: 48:14:5f:4b:51:43:af:02:07:d3:55:6b:c6:47:c5:ca:b3:87: 14:b3:f3:83:99:09:c1:8b:13:94:db:4c:43:ea:b7:34:6c:06: 76:a4:3b:b9:35:43:47:be:6a:a6:fc:25:1e:15:d9:9c:0c:c3: b2:7c:00:a2:e4:3d:94:fa:13:24:9a:9e:c3:d4:b9:45:3e:e9: 06:8c:e1:dc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBNkQxMTAvBgNVBAUTKEZDN0IzOTRGOEY5Q0JGOUNERDIwOTNDMjcyNkRERkU5 MTNGQUE5Q0UwHhcNMjUwOTE5MDIwOTA4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNjYmI0NC1kMDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXJq9aZx/cYAiOLwL/F4T1xoX/xhz0zFOf22kvYWyCFxbqliC7zQ63o2rhxA TYOObggyhohQItPWFKNRm62v715uEBHW/BBIS87+Ia1EsjZmhtdOPlRZ0225Oid9 eVr7G4j0D8hVh5SQlk2/Zl0YJd+VMjNp3H8x6SJU/U8tCpK8oBBwx1nAxFWzcTPS 4C73AUA3Iyb1p8T4GteBvBVbVD7JxUKuFBbdcTVB0pnAYJZYBUWOO8LUEOo2ZpuY nr+o66YzeQVIyoWGaLpk5nphaMggsQ6+IEhyvRpQf4giDTX4UmXwrHDJp6mUhyby 4mZ04Ga314ghk5Sj6/LnKxrPBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIaSDMIg KyFLLMnrKOL5CMdfBLeBMB8GA1UdIwQYMBaAFPx7OU+PnL+c3SCTwnJt3+kT+qnO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkE2RC83RjhENjNCNDBD Q0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1emRJSlBDY20zZjZSUDZx YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IczVUNC1jdjV6ZElKUENjbTNmNlJQNnFjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDJBNkQvN0Y4RDYzQjQwQ0NCMTFFREIzQ0Q0NzY4QzRGOUFFMDIvN0IxOEM1QjQw Q0NFMTFFRDk3Qzk0MzE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFneOYwDQYJKoZIhvcNAQELBQADggEBAAq/f7B+0ZPzn0iQ h6yYx3Jq+G6kXDBJCIvU+mK7R1WldCqkk48dwWGknkb4gaY/pFnmSvA1eOAwfMM2 pw4Y80vqjpqeNCLQYg9E7TQm/phDVONEaGN/e1KK6Jlhl+A63V5ebtUvwaQVG6/q MNLFMHY1D53wuNW/8ThkLLOyOoSnnOaVfaJi2aeqMesl4W45ZjNX5qy+1Bma2+Vj GWEZUc5u0sKDacFBnc6KB9jI0n+2SVZ6JEgUX0tRQ68CB9NVa8ZHxcqzhxSz84OZ CcGLE5TbTEPqtzRsBnakO7k1Q0e+aqb8JR4V2ZwMw7J8AKLkPZT6EySansPUuUU+ 6QaM4dw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:28 2025 by rpki-client