$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/1A0FD01411BC11EBA0759F52C4F9AE02.roa File: 1A0FD01411BC11EBA0759F52C4F9AE02.roa (raw, json) Hash identifier: 4Z5gn4hcl2+wGGJV3uouKZcrvOpeWjAHkkCHO7ludR0= Subject key identifier: 45:A9:3B:5F:F1:0E:B6:D7:3A:48:E4:1A:4F:4C:D0:90:BD:F7:D5:03 Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Certificate serial: 07A0 Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/1A0FD01411BC11EBA0759F52C4F9AE02.roa Signing time: Wed 02 Jul 2025 22:01:51 +0000 ROA not before: Wed 02 Jul 2025 22:01:51 +0000 ROA not after: Sat 01 Nov 2025 00:00:00 +0000 asID: 138545 IP address blocks: 103.147.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1952 (0x7a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A, serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Validity Not Before: Jul 2 22:01:51 2025 GMT Not After : Nov 1 00:00:00 2025 GMT Subject: CN=6865ac4e-ac8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:be:9e:5e:9c:a5:58:65:c4:69:9e:8e:46: cc:6e:17:ae:61:78:68:56:4e:e9:f6:e0:5a:58:f1: fe:c3:17:06:8c:cd:9c:b5:54:49:f5:af:6b:36:4d: b2:5a:cc:cf:11:64:1e:85:d1:60:23:3f:7d:b5:bc: 35:88:d4:ed:5e:69:2c:32:45:21:e6:08:19:27:40: ab:aa:c2:dd:0b:99:68:cc:48:bc:92:36:8f:cf:87: c9:73:12:30:a6:20:68:98:ef:61:14:e9:fb:21:3b: 53:35:9f:b8:ed:12:ff:2b:70:9e:93:7d:7d:99:be: 9b:5b:45:a9:1a:c1:59:10:e1:b4:7f:0b:07:17:f8: 35:9f:12:b3:9d:a0:fd:a0:b9:1f:74:72:d2:e1:b5: f5:5d:88:70:7f:cc:9f:5f:35:da:2c:5b:89:b4:55: 38:53:92:ac:25:2c:f7:de:33:bd:b3:ff:77:7b:f5: 09:df:4d:e6:58:f1:d4:33:70:47:cb:14:96:bd:61: 6c:9e:c7:33:3c:b1:21:fa:4c:87:de:33:cf:17:5c: 41:07:7b:42:00:26:49:8a:c9:58:37:25:4d:6f:5b: 52:45:ea:90:9b:48:40:24:3c:a4:2d:e4:d6:47:8c: 76:ba:4d:d9:c5:75:5d:60:5b:d4:5f:fd:15:cd:bc: ac:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A9:3B:5F:F1:0E:B6:D7:3A:48:E4:1A:4F:4C:D0:90:BD:F7:D5:03 X509v3 Authority Key Identifier: keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/1A0FD01411BC11EBA0759F52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.198.0/23 Signature Algorithm: sha256WithRSAEncryption 77:93:2e:2b:a9:0e:6b:22:80:08:84:e0:5b:f6:37:21:39:51: d8:a6:93:6e:c3:9c:54:fa:7e:23:32:5c:d1:2e:6c:ab:da:c1: 89:49:fe:94:60:74:15:78:b9:e1:e2:bd:c5:b6:33:01:61:83: 35:42:74:04:1c:c4:a5:91:5f:1f:be:2c:2f:da:dd:07:60:76: a8:88:f2:c3:df:fa:54:6d:f0:d7:bd:f4:ba:ac:e3:cf:d5:5b: 45:5f:a2:5b:6d:bb:d0:bc:ea:f7:37:de:fe:59:99:6c:e8:f2: 79:44:b2:95:29:3c:2d:29:d8:c9:47:da:9b:25:b3:bb:78:1b: 6f:32:da:bb:b6:c7:8e:e5:08:7b:cb:31:86:fc:28:c4:38:09: 0c:99:c1:d6:99:8f:d7:cb:0f:5e:6e:8a:14:0c:65:c7:eb:cb: 84:e3:0e:3e:28:2b:a5:4c:91:df:14:5b:a1:d2:0d:d8:82:ae: 79:31:b3:98:b8:91:44:ce:73:a5:b5:00:b6:6a:e4:44:ce:5e: 64:84:29:e6:78:a7:74:3b:6f:e8:da:f6:08:ab:04:92:a6:21: b5:1b:d4:4b:58:20:70:a7:59:d8:98:15:fa:d5:9d:19:63:34: 11:0b:da:c0:ae:56:a6:9c:4d:84:34:79:05:8a:7a:92:97:41: 2e:6a:6b:ce -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKEVCQkI0NzNEMTcwQjZCODMwNkQxRTE2QzhCOTUyMzM0 QURENDBGMTAwHhcNMjUwNzAyMjIwMTUxWhcNMjUxMTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1YWM0ZS1hYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzu+nl6cpVhlxGmejkbMbheuYXhoVk7p9uBaWPH+wxcGjM2ctVRJ9a9rNk2y WszPEWQehdFgIz99tbw1iNTtXmksMkUh5ggZJ0CrqsLdC5lozEi8kjaPz4fJcxIw piBomO9hFOn7ITtTNZ+47RL/K3Cek319mb6bW0WpGsFZEOG0fwsHF/g1nxKznaD9 oLkfdHLS4bX1XYhwf8yfXzXaLFuJtFU4U5KsJSz33jO9s/93e/UJ303mWPHUM3BH yxSWvWFsnsczPLEh+kyH3jPPF1xBB3tCACZJislYNyVNb1tSReqQm0hAJDykLeTW R4x2uk3ZxXVdYFvUX/0VzbysiwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEWpO1/x DrbXOkjkGk9M0JC999UDMB8GA1UdIwQYMBaAFOu7Rz0XC2uDBtHhbIuVIzSt1A8Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0TUcwZUZzaTVVak5LM1VE eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dEhQUmNMYTRNRzBlRnNpNVVqTkszVUR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlGNUEvMDg5OEIyM0ExMUJBMTFFQkJDMUE1ODRDQzRGOUFFMDIvMUEwRkQwMTQx MUJDMTFFQkEwNzU5RjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnk8YwDQYJKoZIhvcNAQELBQADggEBAHeTLiupDmsigAiE 4Fv2NyE5Udimk27DnFT6fiMyXNEubKvawYlJ/pRgdBV4ueHivcW2MwFhgzVCdAQc xKWRXx++LC/a3QdgdqiI8sPf+lRt8Ne99Lqs48/VW0Vfolttu9C86vc33v5ZmWzo 8nlEspUpPC0p2MlH2psls7t4G28y2ru2x47lCHvLMYb8KMQ4CQyZwdaZj9fLD15u ihQMZcfry4TjDj4oK6VMkd8UW6HSDdiCrnkxs5i4kUTOc6W1ALZq5ETOXmSEKeZ4 p3Q7b+ja9girBJKmIbUb1EtYIHCnWdiYFfrVnRljNBEL2sCuVqacTYQ0eQWKepKX QS5qa84= -----END CERTIFICATE-----Generated at Thu Jul 3 13:05:06 2025 by rpki-client