$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa File: 1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa (raw, json) Hash identifier: dZTRls4280/E4YN4c7nuR8VH/U9lXLY5JNfcW3Mega8= Subject key identifier: 49:95:B2:D3:C3:E2:60:00:43:6F:C1:AF:C7:33:7F:E8:69:50:65:29 Certificate issuer: /CN=A91175BA/serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100 Certificate serial: 013F Authority key identifier: EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa Signing time: Wed 30 Jul 2025 09:26:54 +0000 ROA not before: Wed 30 Jul 2025 09:26:54 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152320 IP address blocks: 103.85.72.0/22 maxlen: 23 103.85.72.0/24 maxlen: 24 103.85.73.0/24 maxlen: 24 103.85.74.0/24 maxlen: 24 103.85.75.0/24 maxlen: 24 203.175.12.0/22 maxlen: 24 2001:df0:a640::/48 maxlen: 48 2001:df0:a641::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175BA, serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100 Validity Not Before: Jul 30 09:26:54 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6889e55e-26d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:dd:6f:8f:93:d9:17:67:d5:f5:dc:8f:b9:1e: ea:a9:3d:f2:54:a3:fc:2e:34:7e:73:6e:5e:27:ec: fe:ec:27:f8:09:ca:d2:3d:cc:1a:23:80:86:08:7e: e5:6a:e1:e3:91:41:bb:22:77:2b:07:a2:29:d3:70: 0a:4e:00:13:de:b9:7e:92:d6:e7:c1:4c:3e:c1:88: 0c:a7:c3:e9:e0:01:8b:46:ed:93:80:a0:bd:05:88: 6e:f6:9c:56:29:a0:58:24:ec:25:e8:fa:f4:f2:6f: 69:3c:a7:83:41:1d:94:3d:00:ec:24:ed:ae:6a:09: 82:42:fb:eb:16:e6:74:80:30:8d:65:2d:d8:00:96: e6:3d:73:da:e3:1d:e4:8c:39:a3:66:42:7f:e0:fa: 15:fa:51:7c:ee:18:2e:13:97:11:32:db:e1:64:1b: 6f:8b:38:f3:c9:1a:29:18:50:9e:1e:70:eb:04:2b: c0:ec:57:ed:68:17:90:ea:8a:16:d3:eb:cc:c8:e8: a6:ef:e6:58:b8:89:59:ce:98:fa:7d:0e:5b:68:3c: 79:69:41:b7:ab:77:68:f7:ee:f1:34:8c:62:12:84: b5:7c:94:87:87:7e:8d:8f:0d:a9:1d:8c:b1:21:fc: 78:d7:3f:6e:0d:88:5b:51:10:d7:95:75:db:61:c7: 86:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:95:B2:D3:C3:E2:60:00:43:6F:C1:AF:C7:33:7F:E8:69:50:65:29 X509v3 Authority Key Identifier: keyid:EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.72.0/22 203.175.12.0/22 IPv6: 2001:df0:a640::/47 Signature Algorithm: sha256WithRSAEncryption 8c:d5:47:a9:73:da:98:1c:a4:b9:f8:82:10:82:5f:ed:48:a8: 17:fe:15:ae:3b:8c:dd:8a:e2:e3:30:4b:a3:e7:93:9c:0f:83: 0f:08:34:0f:68:2d:63:96:9a:76:d1:a9:c6:f0:8c:92:b0:be: 22:34:15:9a:58:c0:ee:3a:77:29:00:e7:27:a9:f1:e9:78:8d: 48:c9:dd:2c:9f:fc:41:d0:8c:4f:37:68:d3:52:93:1f:1b:8f: 71:1d:07:09:cb:c5:3d:2e:6d:5e:d0:ae:0c:76:a4:8a:68:f8: 44:c4:8e:35:9e:15:b9:22:aa:c8:fb:1c:9f:bc:4f:4e:d3:87: e1:af:e0:5d:ae:89:bb:e3:1c:0e:e7:9a:d6:65:03:a1:0d:f8: b2:89:16:30:49:09:a7:4e:98:55:18:71:2d:a0:17:fe:e2:50: fc:87:6c:c4:7a:17:c8:72:02:cc:aa:64:b0:91:f1:0b:02:59: d5:c3:61:ca:d5:c7:50:60:d5:46:7e:44:dc:60:4b:54:75:36: 8d:cf:48:5c:ee:c8:45:17:13:14:cb:79:18:9e:44:6d:60:63: c8:1c:1b:ba:36:83:63:22:d7:5e:fc:8e:26:26:ae:bf:4d:17: a2:42:86:02:47:0b:b8:5c:ff:be:9e:b0:9a:33:dc:df:61:7c: f0:b5:44:85 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1QkExMTAvBgNVBAUTKEVBNjExMzdDMDkwMDkwNkU0NzQ4RDFFMDdDQzU1NUU2 QTdDQ0UxMDAwHhcNMjUwNzMwMDkyNjU0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODg5ZTU1ZS0yNmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs91vj5PZF2fV9dyPuR7qqT3yVKP8LjR+c25eJ+z+7Cf4CcrSPcwaI4CGCH7l auHjkUG7IncrB6Ip03AKTgAT3rl+ktbnwUw+wYgMp8Pp4AGLRu2TgKC9BYhu9pxW KaBYJOwl6Pr08m9pPKeDQR2UPQDsJO2uagmCQvvrFuZ0gDCNZS3YAJbmPXPa4x3k jDmjZkJ/4PoV+lF87hguE5cRMtvhZBtvizjzyRopGFCeHnDrBCvA7FftaBeQ6ooW 0+vMyOim7+ZYuIlZzpj6fQ5baDx5aUG3q3do9+7xNIxiEoS1fJSHh36Njw2pHYyx Ifx41z9uDYhbURDXlXXbYceGGQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFEmVstPD 4mAAQ2/Br8czf+hpUGUpMB8GA1UdIwQYMBaAFOphE3wJAJBuR0jR4HzFVeanzOEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVCQS8xNkM0RDJCOEM4 NEQxMUVCOTkxM0QzMkRDNEY5QUUwMi82bUVUZkFrQWtHNUhTTkhnZk1WVjVxZk00 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZtRVRmQWtBa0c1SFNOSGdmTVZWNXFmTTRRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTc1QkEvMTZDNEQyQjhDODREMTFFQjk5MTNEMzJEQzRGOUFFMDIvMUY3RUNDODgy QUZBMTFGMEJDQkZCRDcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAJnVUgDBALLrwwwDwQCAAIwCQMHASABDfCmQDANBgkqhkiG 9w0BAQsFAAOCAQEAjNVHqXPamBykufiCEIJf7UioF/4VrjuM3Yri4zBLo+eTnA+D Dwg0D2gtY5aadtGpxvCMkrC+IjQVmljA7jp3KQDnJ6nx6XiNSMndLJ/8QdCMTzdo 01KTHxuPcR0HCcvFPS5tXtCuDHakimj4RMSONZ4VuSKqyPscn7xPTtOH4a/gXa6J u+McDuea1mUDoQ34sokWMEkJp06YVRhxLaAX/uJQ/IdsxHoXyHICzKpksJHxCwJZ 1cNhytXHUGDVRn5E3GBLVHU2jc9IXO7IRRcTFMt5GJ5EbWBjyBwbujaDYyLXXvyO Jiauv00XokKGAkcLuFz/vp6wmjPc32F88LVEhQ== -----END CERTIFICATE-----Generated at Sat Aug 9 05:53:18 2025 by rpki-client