$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/7D215B2CC3C111EE8F83CE1AC4F9AE02.roa File: 7D215B2CC3C111EE8F83CE1AC4F9AE02.roa (raw, json) Hash identifier: WiLdUkxZVUsyLYaXHR0WIvWbfxTpV9CYC+KkS9rRgFs= Subject key identifier: 12:77:25:11:47:C8:E6:13:00:00:23:D7:4D:91:BF:B3:84:21:B4:0F Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 01D4 Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/7D215B2CC3C111EE8F83CE1AC4F9AE02.roa Signing time: Mon 23 Jun 2025 02:40:39 +0000 ROA not before: Mon 23 Jun 2025 02:40:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139351 IP address blocks: 103.121.6.0/24 maxlen: 24 103.121.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: Jun 23 02:40:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6858bea6-05f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:2f:d5:ef:cb:3b:f4:11:6f:24:bc:c7:b0:f0: 64:c3:78:b8:48:22:01:1a:b7:e7:4f:c0:dc:79:73: 77:a7:24:e6:85:90:a9:ec:81:26:3b:20:0e:b3:46: a1:73:19:8d:67:ff:92:8f:1f:e8:53:0e:a8:ce:b6: 9b:6a:10:65:1a:4e:4a:97:5b:16:78:58:4f:aa:c6: bd:8e:51:0b:af:d0:99:75:cc:1e:4b:4f:a8:47:55: 5c:4a:d9:40:dc:ef:e1:b8:61:21:17:c8:03:e5:b7: 0d:30:84:a8:6c:56:87:a7:82:6b:35:58:75:9a:2f: f9:11:38:f1:09:18:db:1e:97:b3:34:5a:86:59:0b: 47:45:33:aa:c2:f7:9c:53:86:44:de:a4:7a:b2:15: 14:24:7e:52:1a:3f:ed:f5:7b:79:b1:d0:fb:c0:28: 4e:dd:d0:c2:91:ca:c2:a2:e4:8b:48:90:9e:ca:3c: 58:f7:8a:e4:89:30:5c:77:3f:89:e7:86:d9:8e:b4: 19:43:ea:c2:98:c8:49:2b:2a:25:2e:e9:ba:ed:6e: d4:aa:44:88:dc:6a:aa:f0:01:fc:25:5a:e6:dc:53: b4:c6:2e:9c:99:d6:ec:7b:f2:eb:2b:1e:a2:b7:3b: fb:1c:84:c0:7c:01:7b:22:4b:97:6c:ca:2e:e5:90: ea:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:77:25:11:47:C8:E6:13:00:00:23:D7:4D:91:BF:B3:84:21:B4:0F X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/7D215B2CC3C111EE8F83CE1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.6.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:d5:2d:5f:07:b2:b2:9f:3b:53:e0:6b:5b:c7:27:f5:8e:4c: a3:7c:fe:13:a7:1c:c4:fa:57:7e:eb:2b:0c:3c:e5:f2:45:6e: 3b:af:6b:09:68:68:5c:01:62:d2:26:4d:73:84:8a:64:d9:17: d2:3f:f3:39:31:ce:f1:7a:8f:40:df:6f:95:49:5a:5e:37:06: 31:66:56:dd:83:30:4e:c5:90:f7:bd:6f:c7:76:52:aa:f8:f4: b5:8b:bc:6c:0e:a1:6f:31:5e:f3:8a:71:1c:b9:cc:29:43:54: 87:44:7a:dc:25:19:12:56:cb:0f:b8:11:9b:2b:7c:cb:83:d7: ea:05:05:a6:38:96:fa:2c:01:74:fb:92:9c:fc:a7:f4:e0:82: e2:79:df:53:35:7e:ac:9d:f7:eb:18:bc:1d:24:73:68:f0:fc: 01:04:ba:79:4e:82:24:b6:2a:58:41:63:b2:9c:f5:53:cf:ff: bb:1f:a7:15:b3:03:0a:bf:21:1f:53:ab:a4:fe:da:c2:90:b3: 1d:fb:d9:18:1e:ac:3f:d5:4d:ad:95:45:ed:15:63:05:03:53: 78:8b:44:48:c4:cc:b6:28:fc:20:09:c4:81:50:19:1f:4c:e6: 88:24:fc:11:9c:ce:e6:f1:8b:3c:7d:2e:65:e1:f5:bd:fa:fd: fe:ca:c3:6e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjUwNjIzMDI0MDM5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU4YmVhNi0wNWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9y/V78s79BFvJLzHsPBkw3i4SCIBGrfnT8DceXN3pyTmhZCp7IEmOyAOs0ah cxmNZ/+Sjx/oUw6ozrabahBlGk5Kl1sWeFhPqsa9jlELr9CZdcweS0+oR1VcStlA 3O/huGEhF8gD5bcNMISobFaHp4JrNVh1mi/5ETjxCRjbHpezNFqGWQtHRTOqwvec U4ZE3qR6shUUJH5SGj/t9Xt5sdD7wChO3dDCkcrCouSLSJCeyjxY94rkiTBcdz+J 54bZjrQZQ+rCmMhJKyolLum67W7UqkSI3Gqq8AH8JVrm3FO0xi6cmdbse/LrKx6i tzv7HITAfAF7IkuXbMou5ZDqowIDAQABo4IClTCCApEwHQYDVR0OBBYEFBJ3JRFH yOYTAAAj102Rv7OEIbQPMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUZBRkYvRDA2MTFGMDRDQzQ0MTFFRDlBNzFFMTBDQzRGOUFFMDIvN0QyMTVCMkND M0MxMTFFRThGODNDRTFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFneQYwDQYJKoZIhvcNAQELBQADggEBAJzVLV8HsrKfO1Pg a1vHJ/WOTKN8/hOnHMT6V37rKww85fJFbjuvawloaFwBYtImTXOEimTZF9I/8zkx zvF6j0Dfb5VJWl43BjFmVt2DME7FkPe9b8d2Uqr49LWLvGwOoW8xXvOKcRy5zClD VIdEetwlGRJWyw+4EZsrfMuD1+oFBaY4lvosAXT7kpz8p/TgguJ531M1fqyd9+sY vB0kc2jw/AEEunlOgiS2KlhBY7Kc9VPP/7sfpxWzAwq/IR9Tq6T+2sKQsx372Rge rD/VTa2VRe0VYwUDU3iLREjEzLYo/CAJxIFQGR9M5ogk/BGczubxizx9LmXh9b36 /f7Kw24= -----END CERTIFICATE-----Generated at Wed Jul 2 10:53:35 2025 by rpki-client