$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3E3640816B711ECBD752D47C4F9AE02.roa File: A3E3640816B711ECBD752D47C4F9AE02.roa (raw, json) Hash identifier: BNYmN1wk5JGVk6X2Q2E4a9z3VS1aqS52vWE2ok1A99M= Subject key identifier: 69:AD:C5:22:4F:6B:6A:97:4B:81:0B:52:F6:DA:DB:21:59:BA:F1:7F Certificate issuer: /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7 Certificate serial: 0515 Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3E3640816B711ECBD752D47C4F9AE02.roa Signing time: Mon 30 Jun 2025 21:58:24 +0000 ROA not before: Mon 30 Jun 2025 21:58:24 +0000 ROA not after: Thu 30 Oct 2025 00:00:00 +0000 asID: 63916 IP address blocks: 103.113.156.0/22 maxlen: 22 103.113.156.0/24 maxlen: 24 103.113.157.0/24 maxlen: 24 103.113.158.0/24 maxlen: 24 103.113.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1301 (0x515) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7 Validity Not Before: Jun 30 21:58:24 2025 GMT Not After : Oct 30 00:00:00 2025 GMT Subject: CN=68630880-7053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:bb:7d:e5:bb:ea:2d:66:93:6b:f3:70:40: 75:07:e2:bd:a8:49:e1:cc:7a:dd:ce:a6:fb:42:d0: 7f:15:ea:4f:29:4e:7a:72:69:01:4b:ab:c0:7c:41: 0d:00:ad:93:98:d8:1d:6f:7d:e4:c6:68:22:bb:f0: 97:a8:58:f3:be:a8:b5:68:19:0d:6f:b1:4a:b1:0f: f6:eb:4a:63:72:7e:76:be:7d:34:c7:a2:9e:29:5b: be:8e:41:31:30:64:01:6b:98:be:b6:50:7e:7f:39: 9c:bd:3c:a1:1c:76:36:86:e7:eb:85:3e:bd:39:2f: f0:df:f2:5f:60:a3:be:6b:6d:57:1b:78:03:b1:50: bd:b9:31:fd:04:c3:07:52:55:27:8c:62:ce:03:0a: 2c:df:ff:8e:31:c0:9a:79:7a:69:ef:52:f3:98:af: 4c:80:91:91:96:94:32:c8:9b:50:8b:69:08:ad:3a: 92:e7:ee:5d:fb:6b:ee:2a:86:99:95:2b:0b:4a:f9: c9:b6:91:fd:d4:bd:f8:4c:b2:c8:d3:47:05:fc:80: fd:20:87:9d:81:4f:0d:e7:e9:29:30:05:47:89:eb: dc:38:fe:6e:f1:b2:c8:bc:5d:02:e2:c4:e4:1b:a7: ab:ef:85:8d:86:d7:37:5b:0e:44:a3:0a:d2:1c:82: 8d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AD:C5:22:4F:6B:6A:97:4B:81:0B:52:F6:DA:DB:21:59:BA:F1:7F X509v3 Authority Key Identifier: keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A3E3640816B711ECBD752D47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.156.0/22 Signature Algorithm: sha256WithRSAEncryption b6:70:52:d4:f4:2c:d3:fe:02:3f:be:ba:07:b1:6d:53:cc:7b: d9:97:39:e8:2a:a4:73:39:cf:fe:77:86:a5:a2:7c:33:c4:78: 18:6d:75:ab:6a:22:b6:35:c6:f2:ee:5a:78:28:6e:d2:7b:c2: 46:71:f5:70:f7:ce:02:45:e7:f4:cf:35:b9:fe:d4:00:52:e6: e9:b9:d0:a9:56:b7:26:45:d1:cf:c7:37:71:5a:78:85:4a:1c: 82:e9:c4:67:7c:23:ea:4b:5e:3c:e9:30:76:87:cb:64:5d:43: 9b:6f:42:89:3d:ec:6d:e4:8a:e0:33:d1:24:ea:48:45:0d:d9: 81:19:e1:63:57:69:4e:f1:9c:7b:e6:6a:eb:a2:7f:72:b0:3b: 5c:ac:f2:a0:1b:d1:b8:f7:2e:1e:ce:f2:9d:14:37:16:f6:34: 96:dd:d0:d6:46:d3:6a:94:8d:e0:55:62:d9:f4:cd:47:68:92: ce:11:40:2a:e4:13:df:81:be:e9:32:51:9d:ef:5a:3b:10:22: a5:c6:37:ad:a3:2d:a4:c2:fb:84:0d:bb:31:ac:85:5a:f3:6c: 3d:71:14:06:6d:5e:f0:30:5a:6a:93:21:2c:15:5c:3f:8a:08: 3c:d4:a9:6d:c6:0f:3c:e6:44:17:ab:53:c6:6a:bf:37:b6:16: 91:06:f1:ae -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKDQxRDI2OEM1MTEzRUYzRUQ3QjE3M0I3ODBFMDE3RUQz RkU4NTU1RjcwHhcNMjUwNjMwMjE1ODI0WhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzMDg4MC03MDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGC7feW76i1mk2vzcEB1B+K9qEnhzHrdzqb7QtB/FepPKU56cmkBS6vAfEEN AK2TmNgdb33kxmgiu/CXqFjzvqi1aBkNb7FKsQ/260pjcn52vn00x6KeKVu+jkEx MGQBa5i+tlB+fzmcvTyhHHY2hufrhT69OS/w3/JfYKO+a21XG3gDsVC9uTH9BMMH UlUnjGLOAwos3/+OMcCaeXpp71LzmK9MgJGRlpQyyJtQi2kIrTqS5+5d+2vuKoaZ lSsLSvnJtpH91L34TLLI00cF/ID9IIedgU8N5+kpMAVHievcOP5u8bLIvF0C4sTk G6er74WNhtc3Ww5EowrSHIKNBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGmtxSJP a2qXS4ELUvba2yFZuvF/MB8GA1UdIwQYMBaAFEHSaMURPvPtexc7eA4BftP+hVX3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9RZEpveFJFLTgtMTdGenQ0RGdGLTBfNkZW ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FkSm94UkUtOC0xN0Z6dDREZ0YtMF82RlZmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDg5MUQvMzgxQThGMkExQ0MyMTFFQjgyQjU3MTc4QzRGOUFFMDIvQTNFMzY0MDgx NkI3MTFFQ0JENzUyRDQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJncZwwDQYJKoZIhvcNAQELBQADggEBALZwUtT0LNP+Aj++ ugexbVPMe9mXOegqpHM5z/53hqWifDPEeBhtdatqIrY1xvLuWngobtJ7wkZx9XD3 zgJF5/TPNbn+1ABS5um50KlWtyZF0c/HN3FaeIVKHILpxGd8I+pLXjzpMHaHy2Rd Q5tvQok97G3kiuAz0STqSEUN2YEZ4WNXaU7xnHvmauuif3KwO1ys8qAb0bj3Lh7O 8p0UNxb2NJbd0NZG02qUjeBVYtn0zUdoks4RQCrkE9+BvukyUZ3vWjsQIqXGN62j LaTC+4QNuzGshVrzbD1xFAZtXvAwWmqTISwVXD+KCDzUqW3GDzzmRBerU8Zqvze2 FpEG8a4= -----END CERTIFICATE-----Generated at Wed Jul 2 04:40:35 2025 by rpki-client