$ rpki-client -vvf rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/350CDCB44ED611ED84336740C4F9AE02.roa File: 350CDCB44ED611ED84336740C4F9AE02.roa (raw, json) Hash identifier: Rl7cC9aD2+HUzvALoJy+W3POWuoH4LCYbv/U7VQpjNA= Subject key identifier: B4:C8:64:6D:08:98:BB:93:0C:B1:5C:2E:88:4F:D2:57:4D:5B:C1:CF Certificate issuer: /CN=A91D32F4/serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Certificate serial: 01F2 Authority key identifier: 69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/350CDCB44ED611ED84336740C4F9AE02.roa Signing time: Mon 05 May 2025 02:08:51 +0000 ROA not before: Mon 05 May 2025 02:08:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149659 IP address blocks: 103.185.176.0/23 maxlen: 23 103.185.176.0/24 maxlen: 24 103.185.177.0/24 maxlen: 24 2001:df0:9940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D32F4, serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Validity Not Before: May 5 02:08:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68181db3-e697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:05:0d:a2:b1:98:52:8c:19:a6:5e:ad:0a: fd:72:59:f4:dd:09:e3:53:1b:c0:6a:b7:7c:ef:4b: 58:f8:f9:fe:32:da:ff:6a:eb:d9:d3:2e:8e:72:54: c5:05:e6:13:95:b4:3f:8d:98:6a:c3:4b:f3:7b:da: 06:1d:49:8f:b0:4f:b1:63:8d:99:6c:73:98:86:7b: 4a:d1:2d:d7:86:c9:ba:ac:05:4b:c0:d3:49:c0:70: 70:2a:30:ff:8c:b9:f2:50:d7:45:1f:73:47:85:72: 8e:8e:7f:74:23:25:21:c3:c9:21:6b:98:97:e2:ae: 0e:07:b5:c3:9a:a9:38:18:c4:e6:54:4d:d5:b4:76: 62:1e:4e:82:ef:73:5a:0f:26:19:9f:79:e5:ba:51: 29:7c:00:ac:cd:c1:44:4b:82:2c:92:64:5a:ad:94: f2:33:62:ae:77:ab:a2:22:64:e6:17:f8:60:89:c6: 30:ae:5f:43:a0:b0:82:31:b1:97:6b:12:fd:af:a4: 8b:2b:39:9b:00:8a:14:bb:04:6d:32:34:30:e6:5a: 4f:fe:56:c7:04:ed:cf:fe:ee:05:26:b2:17:25:e3: df:a9:8e:b3:40:a3:39:2b:51:56:fc:42:9a:9d:fc: 90:92:2e:15:86:2e:86:5c:dd:64:df:e4:64:43:19: 8f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C8:64:6D:08:98:BB:93:0C:B1:5C:2E:88:4F:D2:57:4D:5B:C1:CF X509v3 Authority Key Identifier: keyid:69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/350CDCB44ED611ED84336740C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.185.176.0/23 IPv6: 2001:df0:9940::/48 Signature Algorithm: sha256WithRSAEncryption 77:1a:9b:73:4f:f1:36:4a:be:50:59:f2:89:cc:2b:c0:d6:6e: f4:a8:59:5a:05:1b:da:c2:0b:c5:76:18:ec:94:52:5e:57:d0: 8d:ca:3d:e5:5f:ee:63:87:fe:b3:71:de:8f:90:b4:6c:fd:ed: 28:e6:c1:1a:79:30:6c:15:bb:30:3c:9f:f8:24:4f:04:31:bc: 27:ae:10:65:c9:55:ce:bf:5a:1e:08:f3:2d:b4:ac:60:d5:b4: 52:c5:2c:59:d6:64:6a:6c:72:0e:23:40:e5:b6:8a:08:61:55: 77:9d:96:33:a0:2d:8e:8e:1b:64:64:c4:fa:c3:41:3a:c0:90: 48:6f:4c:4f:a1:82:87:54:e1:cb:13:77:1f:fb:99:da:ae:be: 13:ee:6f:2d:80:56:c2:a7:97:a6:81:c6:9c:bf:74:47:c4:b8: a4:bf:87:62:2b:89:71:98:4d:dc:e7:41:5b:9a:bd:89:0f:ca: fd:6b:24:1b:1b:80:92:1d:76:7b:f1:12:ce:5a:a4:79:73:df: e8:b2:e8:3d:bf:00:b8:cd:46:b5:ce:01:63:f0:1a:fa:d9:5e: e2:10:8b:4b:5c:d0:7c:fa:17:98:9a:68:5f:75:26:61:80:46: 03:18:29:4f:ed:cc:f9:5b:3b:06:50:7e:53:02:18:d7:b7:2b: c3:f1:1d:cb -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMyRjQxMTAvBgNVBAUTKDY5QzA4OUI3QTQ4RTdEQTZFRTRGMDFGRUM2QTk4RTBB RDJGQTgxMEIwHhcNMjUwNTA1MDIwODUxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE4MWRiMy1lNjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAllMFDaKxmFKMGaZerQr9cln03QnjUxvAard870tY+Pn+Mtr/auvZ0y6OclTF BeYTlbQ/jZhqw0vze9oGHUmPsE+xY42ZbHOYhntK0S3Xhsm6rAVLwNNJwHBwKjD/ jLnyUNdFH3NHhXKOjn90IyUhw8kha5iX4q4OB7XDmqk4GMTmVE3VtHZiHk6C73Na DyYZn3nlulEpfACszcFES4IskmRarZTyM2Kud6uiImTmF/hgicYwrl9DoLCCMbGX axL9r6SLKzmbAIoUuwRtMjQw5lpP/lbHBO3P/u4FJrIXJePfqY6zQKM5K1FW/EKa nfyQki4Vhi6GXN1k3+RkQxmPXwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLTIZG0I mLuTDLFcLohP0ldNW8HPMB8GA1UdIwQYMBaAFGnAibekjn2m7k8B/sapjgrS+oEL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzJGNC9CNENBNzc5NjRE RTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2ZhYnVUd0gteHFtT0N0TDZn UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjQ0p0NlNPZmFidVR3SC14cW1PQ3RMNmdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDMyRjQvQjRDQTc3OTY0REUwMTFFREE2RjAxMDQ4QzRGOUFFMDIvMzUwQ0RDQjQ0 RUQ2MTFFRDg0MzM2NzQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnubAwDwQCAAIwCQMHACABDfCZQDANBgkqhkiG9w0BAQsF AAOCAQEAdxqbc0/xNkq+UFnyicwrwNZu9KhZWgUb2sILxXYY7JRSXlfQjco95V/u Y4f+s3Hej5C0bP3tKObBGnkwbBW7MDyf+CRPBDG8J64QZclVzr9aHgjzLbSsYNW0 UsUsWdZkamxyDiNA5baKCGFVd52WM6Atjo4bZGTE+sNBOsCQSG9MT6GCh1ThyxN3 H/uZ2q6+E+5vLYBWwqeXpoHGnL90R8S4pL+HYiuJcZhN3OdBW5q9iQ/K/WskGxuA kh12e/ESzlqkeXPf6LLoPb8AuM1Gtc4BY/Aa+tle4hCLS1zQfPoXmJpoX3UmYYBG AxgpT+3M+Vs7BlB+UwIY17crw/Edyw== -----END CERTIFICATE-----Generated at Mon Oct 20 19:27:17 2025 by rpki-client