$ rpki-client -vvf rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/2611C806D1AA11EA82C4313FC4F9AE02.roa File: 2611C806D1AA11EA82C4313FC4F9AE02.roa (raw, json) Hash identifier: B+Mru32S1aXG9w3Uo0R4mgvVrJKNsa0zvQvSg+Djl+s= Subject key identifier: 59:47:0F:06:36:2F:AD:00:94:87:D1:F8:26:E1:11:10:D0:9D:BD:0C Certificate issuer: /CN=A91177D4/serialNumber=8653329A51DBC679F1BF17D791D83EC7689BE7AE Certificate serial: 084D Authority key identifier: 86:53:32:9A:51:DB:C6:79:F1:BF:17:D7:91:D8:3E:C7:68:9B:E7:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/2611C806D1AA11EA82C4313FC4F9AE02.roa Signing time: Mon 04 Aug 2025 03:25:07 +0000 ROA not before: Mon 04 Aug 2025 03:25:07 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 133938 IP address blocks: 103.153.240.0/23 maxlen: 23 103.153.240.0/24 maxlen: 24 103.153.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.crl rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2125 (0x84d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91177D4, serialNumber=8653329A51DBC679F1BF17D791D83EC7689BE7AE Validity Not Before: Aug 4 03:25:07 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=68902813-6db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dc:9a:99:f5:16:d4:71:ec:6e:70:4d:d4:17: 3d:47:cd:85:b0:f5:ca:9f:a6:33:a0:33:3c:42:53: 10:b2:54:10:6c:7b:f4:84:05:be:8e:1d:1c:0a:ad: 0d:74:84:43:d9:4d:52:49:51:06:c8:9f:57:7e:7d: 1c:7d:8f:7f:34:aa:9e:3b:35:a7:c5:c5:2d:66:16: 32:ae:af:84:3a:07:4c:fe:88:d5:0f:07:eb:a7:5e: 7d:1b:fc:43:fa:cb:2d:73:31:1b:77:fa:9c:13:a5: c6:dd:15:59:f5:9a:34:eb:80:b0:64:03:26:65:6d: 7b:e5:63:cc:0a:3b:7f:2d:a8:48:f9:e8:b6:9c:c6: 75:1a:d3:76:c1:cc:2a:8f:f6:dc:77:61:1e:a6:9c: 6b:3d:d3:6f:8b:45:60:de:23:87:3d:c0:8a:16:29: 99:59:48:06:b4:33:b6:4f:37:9b:f0:4e:4c:9a:20: e4:f5:f0:e7:e0:b5:4f:06:6e:84:bb:b4:94:97:a7: a8:0b:36:10:96:a3:3e:2d:f0:b2:95:2e:0d:7f:4f: dc:9d:e7:eb:e6:10:33:b2:03:7a:66:e7:0f:b4:45: e8:49:b5:97:26:14:e0:d6:06:a7:35:08:55:70:7f: fd:87:ea:b9:7c:75:d1:fc:58:67:5d:4a:5d:07:5d: 88:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:47:0F:06:36:2F:AD:00:94:87:D1:F8:26:E1:11:10:D0:9D:BD:0C X509v3 Authority Key Identifier: keyid:86:53:32:9A:51:DB:C6:79:F1:BF:17:D7:91:D8:3E:C7:68:9B:E7:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/hlMymlHbxnnxvxfXkdg-x2ib564.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlMymlHbxnnxvxfXkdg-x2ib564.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91177D4/2CEEFE34D1A811EA8C58373BC4F9AE02/2611C806D1AA11EA82C4313FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.240.0/23 Signature Algorithm: sha256WithRSAEncryption 48:4d:4a:94:fa:dd:3c:63:e1:24:be:7e:04:cc:e8:4a:1d:8f: ac:eb:4f:27:43:d9:b7:cd:0c:c4:a6:92:45:5a:60:2c:5d:c7: b3:de:e6:7c:08:c9:cf:38:8c:52:39:47:46:06:74:0d:12:bd: 7e:74:3c:6d:14:dc:32:b4:18:a1:08:2c:e7:ac:4a:fd:7c:24: 50:81:d8:f1:33:07:b5:7f:3d:0b:26:29:54:4e:65:45:13:8f: 06:6f:7a:8b:c3:5a:40:08:68:2b:67:df:81:80:fe:43:59:e3: ba:c1:b6:a4:25:ad:ec:50:37:dc:9b:29:e2:e2:73:b3:c8:ac: 8b:5f:25:85:ba:7c:85:b9:0b:d9:61:5c:70:09:4b:ce:02:c3: 1b:5e:99:cf:12:c7:58:cd:d6:8c:e5:69:55:4c:c5:c6:e1:b3: 44:e1:f3:de:47:32:04:49:59:f9:e9:fc:6a:79:ce:0b:1c:f2: 64:55:2a:cf:47:4e:2b:39:23:4c:50:25:b1:ed:66:19:24:03: 44:4a:26:2e:0b:51:04:02:30:5d:24:52:8c:69:4b:74:5a:6e: 75:ea:70:dc:68:3a:2f:51:f9:91:ad:87:48:64:71:b1:b6:77: f8:e9:41:f5:14:03:fb:26:ec:7b:50:86:50:0f:00:cc:86:fc: c9:78:22:41 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3RDQxMTAvBgNVBAUTKDg2NTMzMjlBNTFEQkM2NzlGMUJGMTdENzkxRDgzRUM3 Njg5QkU3QUUwHhcNMjUwODA0MDMyNTA3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkwMjgxMy02ZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtyamfUW1HHsbnBN1Bc9R82FsPXKn6YzoDM8QlMQslQQbHv0hAW+jh0cCq0N dIRD2U1SSVEGyJ9Xfn0cfY9/NKqeOzWnxcUtZhYyrq+EOgdM/ojVDwfrp159G/xD +sstczEbd/qcE6XG3RVZ9Zo064CwZAMmZW175WPMCjt/LahI+ei2nMZ1GtN2wcwq j/bcd2EeppxrPdNvi0Vg3iOHPcCKFimZWUgGtDO2Tzeb8E5MmiDk9fDn4LVPBm6E u7SUl6eoCzYQlqM+LfCylS4Nf0/cnefr5hAzsgN6ZucPtEXoSbWXJhTg1ganNQhV cH/9h+q5fHXR/FhnXUpdB12I/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFFlHDwY2 L60AlIfR+CbhERDQnb0MMB8GA1UdIwQYMBaAFIZTMppR28Z58b8X15HYPsdom+eu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzdENC8yQ0VFRkUzNEQx QTgxMUVBOEM1ODM3M0JDNEY5QUUwMi9obE15bWxIYnhubnh2eGZYa2RnLXgyaWI1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hsTXltbEhieG5ueHZ4ZlhrZGcteDJpYjU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTc3RDQvMkNFRUZFMzREMUE4MTFFQThDNTgzNzNCQzRGOUFFMDIvMjYxMUM4MDZE MUFBMTFFQTgyQzQzMTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmfAwDQYJKoZIhvcNAQELBQADggEBAEhNSpT63Txj4SS+ fgTM6Eodj6zrTydD2bfNDMSmkkVaYCxdx7Pe5nwIyc84jFI5R0YGdA0SvX50PG0U 3DK0GKEILOesSv18JFCB2PEzB7V/PQsmKVROZUUTjwZveovDWkAIaCtn34GA/kNZ 47rBtqQlrexQN9ybKeLic7PIrItfJYW6fIW5C9lhXHAJS84Cwxtemc8Sx1jN1ozl aVVMxcbhs0Th895HMgRJWfnp/Gp5zgsc8mRVKs9HTis5I0xQJbHtZhkkA0RKJi4L UQQCMF0kUoxpS3RabnXqcNxoOi9R+ZGth0hkcbG2d/jpQfUUA/sm7HtQhlAPAMyG /Ml4IkE= -----END CERTIFICATE-----Generated at Sun Aug 10 20:59:08 2025 by rpki-client