$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/14A4E3F099E211EAAC99C833C4F9AE02.roa File: 14A4E3F099E211EAAC99C833C4F9AE02.roa (raw, json) Hash identifier: OZf2rTXHu96kBPvuzB26Cb7vuaAcJLdb6hdwqLabxDY= Subject key identifier: D8:34:1F:69:22:D1:8A:62:CC:2F:C1:5E:24:76:61:0E:20:1E:96:E1 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 0971 Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/14A4E3F099E211EAAC99C833C4F9AE02.roa Signing time: Thu 26 Jun 2025 20:06:21 +0000 ROA not before: Thu 26 Jun 2025 20:06:21 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139004 IP address blocks: 103.138.120.0/22 maxlen: 24 2001:df0:3b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2417 (0x971) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Jun 26 20:06:21 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=685da83c-f1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:27:19:f1:de:bc:2a:f7:a0:da:62:a7:1c:dc: a3:d6:2b:09:fa:01:e0:1a:be:73:8c:96:4e:9d:be: f0:90:9c:12:ac:c1:53:95:a9:32:6f:c8:33:5d:b4: 96:77:b6:9a:8f:f3:b0:0a:ee:3c:a7:74:bc:a8:3f: 6d:b4:ed:14:16:60:70:8f:2b:81:98:f2:0f:8d:c8: 74:b2:09:6f:59:8c:b2:96:d3:cb:9a:46:32:03:20: 02:95:3a:0a:96:73:fa:f0:3c:56:e2:4c:ff:af:72: 6b:6a:c1:9a:90:55:10:76:6e:8e:52:d2:99:2b:3a: b1:22:58:65:8c:20:2e:9d:1d:c2:8e:f4:95:03:c9: 23:3f:1d:76:b2:7b:a6:29:50:4e:0c:df:c2:a3:00: b6:65:01:e5:e0:0c:2f:c9:ca:a8:c7:a2:73:58:fa: 9b:38:a9:85:31:9d:16:3b:96:39:f5:3e:71:0e:5a: 76:b5:4e:a8:93:8a:f1:1a:9f:b1:28:03:28:26:c5: 73:a9:c8:fd:53:12:24:10:38:dd:39:bc:e7:8d:af: bc:39:7b:a2:c6:35:9c:26:b0:5b:a5:2c:01:bc:74: a9:58:b9:d3:b3:f2:b6:08:fc:99:8c:a7:3e:0b:ee: 39:f4:85:01:eb:71:96:da:27:52:b6:c4:eb:5f:0d: e9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:34:1F:69:22:D1:8A:62:CC:2F:C1:5E:24:76:61:0E:20:1E:96:E1 X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/14A4E3F099E211EAAC99C833C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.120.0/22 IPv6: 2001:df0:3b80::/48 Signature Algorithm: sha256WithRSAEncryption b6:52:ec:e7:5b:44:28:4d:23:dd:a5:44:f7:5f:f3:45:d5:e6: 8d:06:3a:f8:8c:6e:c3:92:06:3e:9a:37:70:cf:cb:cd:51:57: 43:9b:01:9a:70:0c:62:c4:2c:00:16:96:94:63:9d:ca:43:95: af:96:6c:d2:55:19:ec:7c:64:dd:4e:6b:07:2c:8e:ba:78:07: 20:12:57:bf:45:90:d2:7d:8c:f3:ae:e6:f7:74:25:aa:a7:36: 46:b4:95:5b:3c:3c:ac:2e:39:0f:2c:f7:84:99:d5:ef:c4:2b: a0:bc:bb:be:aa:0e:3c:c4:19:62:94:14:5d:63:12:92:22:a3: bb:fe:66:d6:d8:68:5f:41:a3:04:7b:56:15:b2:bf:b1:82:8d: 01:f2:e3:5c:8b:5d:45:79:c1:cc:a4:e0:48:1a:24:85:bf:fc: cf:3b:78:ba:4a:3f:e0:ea:38:4d:d7:8a:7d:cd:07:b7:ff:2f: 47:6f:f1:e2:ee:e6:28:04:e1:16:53:33:5d:23:23:2a:21:59: 72:8b:4a:f0:49:c4:8a:52:2d:cf:87:66:5b:4b:37:ee:ef:51: 06:b0:60:3f:e8:f0:47:49:a9:f3:8e:df:3f:54:80:3b:ba:c8: 32:d5:9e:e8:5c:f2:56:9f:dc:c3:0b:bb:08:ca:c8:4d:bb:ad: 33:75:54:ca -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjUwNjI2MjAwNjIxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVkYTgzYy1mMWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8icZ8d68Kveg2mKnHNyj1isJ+gHgGr5zjJZOnb7wkJwSrMFTlakyb8gzXbSW d7aaj/OwCu48p3S8qD9ttO0UFmBwjyuBmPIPjch0sglvWYyyltPLmkYyAyAClToK lnP68DxW4kz/r3JrasGakFUQdm6OUtKZKzqxIlhljCAunR3CjvSVA8kjPx12snum KVBODN/CowC2ZQHl4Awvycqox6JzWPqbOKmFMZ0WO5Y59T5xDlp2tU6ok4rxGp+x KAMoJsVzqcj9UxIkEDjdObznja+8OXuixjWcJrBbpSwBvHSpWLnTs/K2CPyZjKc+ C+459IUB63GW2idStsTrXw3pBQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNg0H2ki 0YpizC/BXiR2YQ4gHpbhMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI4QzEvRjhBRkExNDA5OUUwMTFFQTk2NjUyRjMyQzRGOUFFMDIvMTRBNEUzRjA5 OUUyMTFFQUFDOTlDODMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJningwDwQCAAIwCQMHACABDfA7gDANBgkqhkiG9w0BAQsF AAOCAQEAtlLs51tEKE0j3aVE91/zRdXmjQY6+Ixuw5IGPpo3cM/LzVFXQ5sBmnAM YsQsABaWlGOdykOVr5Zs0lUZ7Hxk3U5rByyOungHIBJXv0WQ0n2M867m93Qlqqc2 RrSVWzw8rC45Dyz3hJnV78QroLy7vqoOPMQZYpQUXWMSkiKju/5m1thoX0GjBHtW FbK/sYKNAfLjXItdRXnBzKTgSBokhb/8zzt4uko/4Oo4TdeKfc0Ht/8vR2/x4u7m KAThFlMzXSMjKiFZcotK8EnEilItz4dmW0s37u9RBrBgP+jwR0mp847fP1SAO7rI MtWe6FzyVp/cwwu7CMrITbutM3VUyg== -----END CERTIFICATE-----Generated at Fri Jul 4 16:00:04 2025 by rpki-client