$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/819F3DD6F5E111EC9754EB85C4F9AE02.roa File: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (raw, json) Hash identifier: wBj04byRChV0petmdr4Ke9cr8WzCiaxcwGuAnk1TvDM= Subject key identifier: 4C:7C:EE:3A:4C:3A:82:8E:36:CE:3C:8F:5D:91:79:3C:39:E2:CA:2A Certificate issuer: /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503 Certificate serial: 02E7 Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/819F3DD6F5E111EC9754EB85C4F9AE02.roa Signing time: Thu 21 Aug 2025 01:38:33 +0000 ROA not before: Thu 21 Aug 2025 01:38:33 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 21788 IP address blocks: 103.142.30.0/24 maxlen: 24 103.142.31.0/24 maxlen: 24 2001:df1:2880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 743 (0x2e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503 Validity Not Before: Aug 21 01:38:33 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a67898-88cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a9:d5:6f:d5:ab:c3:74:1e:a8:e3:d2:56:d5: 0b:bb:80:33:76:20:b0:8b:9b:e5:ae:bf:af:9d:42: 54:14:4f:0b:37:56:88:e5:74:f6:ef:03:a4:55:51: c7:a9:ef:76:23:d3:dc:08:c1:40:17:f6:45:94:e1: 6e:02:05:07:25:34:8f:01:95:20:93:f2:4d:25:23: 05:6e:58:2f:08:6e:a9:fe:e7:5f:e2:d1:c0:36:a0: 02:51:67:2c:8d:84:00:96:31:98:d7:57:3d:cf:42: 75:22:82:b6:10:03:ba:c7:cf:15:6e:b9:45:46:59: 05:b3:36:d8:1d:3f:2b:4f:4c:14:4f:5b:28:d8:45: 17:8a:a6:ec:14:87:2a:89:08:ad:12:95:f8:1f:a5: 79:d9:e8:b4:95:c2:17:7f:d4:96:78:8c:ed:c9:12: bb:1f:ee:06:eb:29:48:4c:f9:4e:93:03:41:c5:a3: 70:82:e7:83:af:49:9c:19:26:ec:4e:19:8e:c7:0f: a6:fe:c6:89:d1:36:77:1f:ba:43:3f:39:16:f7:04: bd:94:8e:26:01:c8:16:59:fa:17:b6:42:12:c8:72: fa:c1:e1:b6:c2:09:86:54:54:1c:f2:6e:ed:c1:f3: e2:52:25:31:e7:7f:42:cd:73:25:65:ca:e8:37:41: 15:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7C:EE:3A:4C:3A:82:8E:36:CE:3C:8F:5D:91:79:3C:39:E2:CA:2A X509v3 Authority Key Identifier: keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/819F3DD6F5E111EC9754EB85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.30.0/23 IPv6: 2001:df1:2880::/48 Signature Algorithm: sha256WithRSAEncryption a9:b9:f4:5a:8b:ea:46:96:53:58:73:3c:b8:f6:26:37:e8:03: 90:04:eb:83:59:6c:39:3a:45:f8:fa:da:72:e4:eb:b8:f9:26: 17:d5:b8:bb:f8:57:ae:54:13:18:ad:16:94:0b:c8:ad:17:42: 1f:c7:5c:c8:bd:c6:43:5d:a9:63:a3:ab:ca:11:89:e8:ec:f2: 57:dc:06:72:f3:1d:e2:b5:05:ce:e3:48:f8:ea:50:db:65:8d: 59:8c:98:d5:4e:21:4f:e8:7f:0a:ff:9b:e3:b4:11:f0:98:15: 61:1c:74:bf:90:3d:af:1a:d1:79:dd:fb:84:db:6b:19:c5:0f: 53:04:3f:bb:cc:a6:42:30:08:b7:d5:a5:a6:b9:f8:62:0d:4b: cc:0d:b9:9f:7c:e8:99:14:2d:76:22:f1:bf:12:d8:6d:e5:6c: 22:ab:59:2d:c6:ff:57:b0:0f:2e:cd:48:18:35:d8:e7:76:e2: 27:5a:66:72:06:e4:69:46:5a:9e:0c:75:f3:cc:20:1c:11:c1: 84:48:f3:16:50:db:15:b2:5d:e3:b3:31:ba:18:b6:68:0b:86: 95:ed:d1:94:85:28:b2:5f:6a:48:f2:a6:2d:22:aa:f4:e8:dc: e9:90:ef:00:a5:5e:69:04:bf:b3:46:56:08:2b:dd:cf:e2:56: 59:65:eb:73 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4 NjFGMkE1MDMwHhcNMjUwODIxMDEzODMzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2Nzg5OC04OGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKnVb9Wrw3QeqOPSVtULu4AzdiCwi5vlrr+vnUJUFE8LN1aI5XT27wOkVVHH qe92I9PcCMFAF/ZFlOFuAgUHJTSPAZUgk/JNJSMFblgvCG6p/udf4tHANqACUWcs jYQAljGY11c9z0J1IoK2EAO6x88VbrlFRlkFszbYHT8rT0wUT1so2EUXiqbsFIcq iQitEpX4H6V52ei0lcIXf9SWeIztyRK7H+4G6ylITPlOkwNBxaNwgueDr0mcGSbs ThmOxw+m/saJ0TZ3H7pDPzkW9wS9lI4mAcgWWfoXtkISyHL6weG2wgmGVFQc8m7t wfPiUiUx539CzXMlZcroN0EVEQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEx87jpM OoKONs48j12ReTw54soqMB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1 REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTcxMUIvNTA1Qzk3MzhGNURCMTFFQzlEMDY3NzdCQzRGOUFFMDIvODE5RjNERDZG NUUxMTFFQzk3NTRFQjg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjh4wDwQCAAIwCQMHACABDfEogDANBgkqhkiG9w0BAQsF AAOCAQEAqbn0WovqRpZTWHM8uPYmN+gDkATrg1lsOTpF+PracuTruPkmF9W4u/hX rlQTGK0WlAvIrRdCH8dcyL3GQ12pY6OryhGJ6OzyV9wGcvMd4rUFzuNI+OpQ22WN WYyY1U4hT+h/Cv+b47QR8JgVYRx0v5A9rxrRed37hNtrGcUPUwQ/u8ymQjAIt9Wl prn4Yg1LzA25n3zomRQtdiLxvxLYbeVsIqtZLcb/V7APLs1IGDXY53biJ1pmcgbk aUZangx188wgHBHBhEjzFlDbFbJd47Mxuhi2aAuGle3RlIUosl9qSPKmLSKq9Ojc 6ZDvAKVeaQS/s0ZWCCvdz+JWWWXrcw== -----END CERTIFICATE-----Generated at Sat Aug 23 22:04:53 2025 by rpki-client