$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/083000C22A6F11EC9AD38840C4F9AE02.roa File: 083000C22A6F11EC9AD38840C4F9AE02.roa (raw, json) Hash identifier: /P52dIbBCuZBok0CgnukmD2RJdXy7244gcQDCyE7vYQ= Subject key identifier: 64:E2:AF:B7:03:6C:38:81:62:86:C8:B8:3F:0E:6A:08:E9:22:BB:F6 Certificate issuer: /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Certificate serial: 04D0 Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/083000C22A6F11EC9AD38840C4F9AE02.roa Signing time: Wed 25 Jun 2025 00:04:31 +0000 ROA not before: Wed 25 Jun 2025 00:04:31 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 142547 IP address blocks: 103.168.224.0/23 maxlen: 23 103.168.224.0/24 maxlen: 24 103.168.225.0/24 maxlen: 24 2001:df6:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1232 (0x4d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Validity Not Before: Jun 25 00:04:31 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=685b3d0e-e413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:e9:7b:36:01:b8:dd:09:16:12:73:e0:75: 83:1c:16:01:a3:60:81:cb:2e:e3:08:f1:1f:a0:97: 7c:cf:2d:94:65:d8:9a:44:e8:2a:18:fa:0c:af:19: 25:14:75:24:b3:7b:ce:ea:60:16:8a:16:64:43:ae: e3:15:8b:f3:e8:e2:aa:14:84:5a:8a:f6:15:d9:08: ad:8d:ac:46:cc:89:63:73:f7:b9:70:11:80:42:c2: f6:ee:fd:66:39:ca:00:54:c9:81:bb:0f:94:49:d6: ac:c9:2c:b9:83:ee:bb:e4:b2:6c:b3:56:cc:ba:f1: eb:cf:33:f2:4b:db:23:0a:88:5f:2e:e5:b8:e3:b6: 03:79:74:33:f6:cd:39:fd:a4:3e:30:b6:c1:77:13: 0a:b6:d0:7e:bc:6f:ec:7b:54:00:0f:f4:ea:76:78: 64:24:87:51:5c:a6:e7:e2:c6:a9:70:c7:05:ff:0a: 87:e6:24:ac:20:f3:5b:ea:17:a8:40:75:dc:ed:29: a4:f9:c9:1f:36:f6:57:6a:a0:47:39:17:53:f1:77: 96:fd:a3:a3:a5:84:53:42:55:75:b9:98:f1:94:d0: 66:61:5b:d9:b4:08:3a:a9:5e:df:31:b8:7a:ef:03: 59:63:29:1e:8b:6d:8f:59:a0:32:6c:36:6b:28:a3: 92:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E2:AF:B7:03:6C:38:81:62:86:C8:B8:3F:0E:6A:08:E9:22:BB:F6 X509v3 Authority Key Identifier: keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/083000C22A6F11EC9AD38840C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.224.0/23 IPv6: 2001:df6:e080::/48 Signature Algorithm: sha256WithRSAEncryption cc:2c:7b:77:54:90:f4:b6:0b:b5:a5:a3:0a:a9:e6:6b:84:1f: e9:ac:60:e6:3c:47:5f:30:9d:39:5e:70:a3:a8:61:0e:47:70: cf:52:d4:26:d2:bc:23:13:b1:10:2c:e0:8e:33:7b:a1:97:78: 8c:11:c8:42:0f:38:9e:98:0b:20:f0:61:94:55:a5:f3:a5:d1: e8:0c:0e:4e:07:a3:2f:75:89:79:5a:13:e5:a5:f9:e4:6c:b5: ed:30:5a:a3:8d:a4:ee:08:66:17:e8:54:11:c7:5f:46:c2:69: f7:69:0d:ad:69:54:8b:fc:d3:92:a6:9c:a0:84:83:40:0c:e1: e8:00:65:46:ef:08:be:f5:0e:6e:27:7d:6e:e9:76:4c:54:a1: b5:2f:3e:45:ab:5b:67:e5:db:57:7a:48:54:9c:f1:7e:80:b9: ca:51:58:96:9d:ba:3e:35:6c:33:79:88:da:4d:b8:01:74:12: 9a:a1:de:ba:74:fe:31:f8:bf:89:1f:c7:be:b3:4a:02:82:1c: 73:96:69:bc:91:15:e8:ac:cc:e9:91:d8:78:8c:2f:1d:fb:8c: e8:72:e9:0d:a8:d4:27:2b:ef:a3:a1:f6:6a:a4:e3:29:50:26: 04:5a:f7:8e:23:b7:ef:6d:c7:26:fb:52:94:61:ee:09:94:14: bd:de:ba:76 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxRDkxMTAvBgNVBAUTKDQzRTRBODFERDU5NDY3MzA1MUU4QzdFMEIxQURCRDMx QzQ4M0I2NTMwHhcNMjUwNjI1MDAwNDMxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODViM2QwZS1lNDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcvpezYBuN0JFhJz4HWDHBYBo2CByy7jCPEfoJd8zy2UZdiaROgqGPoMrxkl FHUks3vO6mAWihZkQ67jFYvz6OKqFIRaivYV2QitjaxGzIljc/e5cBGAQsL27v1m OcoAVMmBuw+USdasySy5g+675LJss1bMuvHrzzPyS9sjCohfLuW447YDeXQz9s05 /aQ+MLbBdxMKttB+vG/se1QAD/TqdnhkJIdRXKbn4sapcMcF/wqH5iSsIPNb6heo QHXc7Smk+ckfNvZXaqBHORdT8XeW/aOjpYRTQlV1uZjxlNBmYVvZtAg6qV7fMbh6 7wNZYykei22PWaAybDZrKKOSxQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGTir7cD bDiBYobIuD8OagjpIrv2MB8GA1UdIwQYMBaAFEPkqB3VlGcwUejH4LGtvTHEg7ZT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjFEOS9FMzdGMTM4MjJB NkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6QlI2TWZnc2EyOU1jU0R0 bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtU29IZFdVWnpCUjZNZmdzYTI5TWNTRHRsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REYxRDkvRTM3RjEzODIyQTZDMTFFQzk1RUIyNjNGQzRGOUFFMDIvMDgzMDAwQzIy QTZGMTFFQzlBRDM4ODQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnqOAwDwQCAAIwCQMHACABDfbggDANBgkqhkiG9w0BAQsF AAOCAQEAzCx7d1SQ9LYLtaWjCqnma4Qf6axg5jxHXzCdOV5wo6hhDkdwz1LUJtK8 IxOxECzgjjN7oZd4jBHIQg84npgLIPBhlFWl86XR6AwOTgejL3WJeVoT5aX55Gy1 7TBao42k7ghmF+hUEcdfRsJp92kNrWlUi/zTkqacoISDQAzh6ABlRu8IvvUObid9 bul2TFShtS8+RatbZ+XbV3pIVJzxfoC5ylFYlp26PjVsM3mI2k24AXQSmqHeunT+ Mfi/iR/HvrNKAoIcc5ZpvJEV6KzM6ZHYeIwvHfuM6HLpDajUJyvvo6H2aqTjKVAm BFr3jiO3723HJvtSlGHuCZQUvd66dg== -----END CERTIFICATE-----Generated at Thu Jul 3 13:17:48 2025 by rpki-client