$ rpki-client -vvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/AA5A77C88DB811EBA0613421C4F9AE02.roa File: AA5A77C88DB811EBA0613421C4F9AE02.roa (raw, json) Hash identifier: qsHbNpoijKrtGMWbxqEqnKfl2y6Wb4U5iSQj3PTcQI0= Subject key identifier: BD:3C:F7:5F:8D:64:FE:62:F4:1B:62:FC:36:DB:B0:63:FD:C9:5D:12 Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 12DC Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/AA5A77C88DB811EBA0613421C4F9AE02.roa Signing time: Tue 15 Jul 2025 01:15:53 +0000 ROA not before: Tue 15 Jul 2025 01:15:53 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 33353 IP address blocks: 103.123.138.0/24 maxlen: 24 2403:7940::/33 maxlen: 33 2403:7940:fcc0::/48 maxlen: 48 2403:7940:fcd0::/48 maxlen: 48 2403:7940:fcd1::/48 maxlen: 48 2403:7940:fcd2::/48 maxlen: 48 2403:7940:fcd3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4828 (0x12dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9, serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Jul 15 01:15:53 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6875abc9-84b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:45:cc:a3:85:68:2f:71:e7:54:1b:95:ae: 88:f5:2c:ae:d5:7c:00:60:b3:92:56:21:3a:56:50: b8:de:26:05:6f:94:17:83:26:e7:50:be:31:24:5b: 66:be:15:4f:65:c3:7e:aa:0a:6e:de:d8:75:9f:63: 8c:b8:d9:b2:2a:6c:c4:89:94:5d:36:f5:a4:a8:51: 03:da:76:9e:d9:c8:26:bc:70:de:78:dc:e5:82:19: 72:e8:ef:8f:10:2d:1a:b7:3e:03:f2:2c:a4:97:2c: 91:5a:1c:f9:65:8c:65:eb:ad:17:22:bc:b2:25:f6: 5a:5a:a1:c7:65:60:4a:70:fe:b8:2e:4d:32:2a:f2: f4:62:90:e1:23:a6:49:be:45:60:15:a5:a1:34:b3: 34:a6:ba:7c:18:5f:95:29:46:d0:ea:ea:27:60:b4: e8:b3:d8:13:50:f6:72:b8:88:28:13:20:3e:dd:c8: 73:2f:df:db:72:c7:4a:7a:cb:d8:55:48:83:65:4c: c9:e7:02:94:88:99:da:cb:2b:53:b5:df:59:d6:c2: d8:56:26:e6:a2:57:97:94:9b:42:10:12:fa:8b:49: db:04:73:00:9a:ac:5f:f0:79:0a:19:e1:90:cb:b1: 10:a7:bf:d4:c0:06:30:51:6a:46:17:e2:16:83:b8: be:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3C:F7:5F:8D:64:FE:62:F4:1B:62:FC:36:DB:B0:63:FD:C9:5D:12 X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/AA5A77C88DB811EBA0613421C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.138.0/24 IPv6: 2403:7940::/33 2403:7940:fcc0::/48 2403:7940:fcd0::/46 Signature Algorithm: sha256WithRSAEncryption 00:1d:1d:9a:63:bd:0e:0c:1f:dc:4c:66:24:e3:47:74:8e:2c: b1:5d:1c:12:92:b5:ec:d4:b4:24:d0:fb:c7:04:22:d7:c1:34: 5f:ff:91:37:d2:71:ba:ff:29:a7:ad:9b:f2:bc:4c:ef:ae:10: 4a:6c:48:18:cd:02:15:88:2f:b6:89:cf:6d:40:d3:90:df:6d: 91:3c:6f:9e:0a:cf:9f:53:ef:a5:2e:6b:82:2a:99:28:fa:43: bc:22:e6:5e:ba:62:29:60:e6:f6:db:79:b0:7d:da:36:fb:b5: 2b:9c:24:41:84:c1:8f:c8:23:10:31:a1:26:94:b4:da:85:12: 1f:2c:98:0a:b4:8c:9e:ac:ec:4d:93:74:48:b8:db:b8:03:20: 8e:20:37:86:6c:73:73:91:c9:5a:1b:75:b5:89:6b:cf:35:68: 60:71:9a:a2:5c:0e:15:89:62:9c:f2:ca:b3:9e:ad:ab:ea:00: 88:f7:d5:e1:82:98:27:a8:93:6d:67:85:43:3c:ce:84:3b:0e: 1a:97:7c:27:02:f3:0e:d1:2c:53:8b:99:ed:82:46:73:0c:d1: 74:73:d7:6e:5d:77:7e:a1:7f:93:aa:32:10:52:56:fb:78:54: 07:35:7e:c3:7a:08:1f:0f:09:1e:33:9a:43:f1:01:cf:3d:ea: 04:93:47:3a -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICEtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjUwNzE1MDExNTUzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1YWJjOS04NGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoV1FzKOFaC9x51Qbla6I9Syu1XwAYLOSViE6VlC43iYFb5QXgybnUL4xJFtm vhVPZcN+qgpu3th1n2OMuNmyKmzEiZRdNvWkqFED2nae2cgmvHDeeNzlghly6O+P EC0atz4D8iyklyyRWhz5ZYxl660XIryyJfZaWqHHZWBKcP64Lk0yKvL0YpDhI6ZJ vkVgFaWhNLM0prp8GF+VKUbQ6uonYLTos9gTUPZyuIgoEyA+3chzL9/bcsdKesvY VUiDZUzJ5wKUiJnayytTtd9Z1sLYVibmoleXlJtCEBL6i0nbBHMAmqxf8HkKGeGQ y7EQp7/UwAYwUWpGF+IWg7i+CQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFL0891+N ZP5i9Bti/DbbsGP9yV0SMB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjcyRjkvRDJFRDQ5QzJDMjZEMTFFOEJBQkUxMTY1QzRGOUFFMDIvQUE1QTc3Qzg4 REI4MTFFQkEwNjEzNDIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMAwEAgABMAYDBABne4owIAQCAAIwGgMGByQDeUAAAwcAJAN5QPzAAwcCJAN5 QPzQMA0GCSqGSIb3DQEBCwUAA4IBAQAAHR2aY70ODB/cTGYk40d0jiyxXRwSkrXs 1LQk0PvHBCLXwTRf/5E30nG6/ymnrZvyvEzvrhBKbEgYzQIViC+2ic9tQNOQ322R PG+eCs+fU++lLmuCKpko+kO8IuZeumIpYOb223mwfdo2+7UrnCRBhMGPyCMQMaEm lLTahRIfLJgKtIyerOxNk3RIuNu4AyCOIDeGbHNzkclaG3W1iWvPNWhgcZqiXA4V iWKc8sqznq2r6gCI99XhgpgnqJNtZ4VDPM6EOw4al3wnAvMO0SxTi5ntgkZzDNF0 c9duXXd+oX+TqjIQUlb7eFQHNX7DeggfDwkeM5pD8QHPPeoEk0c6 -----END CERTIFICATE-----Generated at Mon Aug 11 12:52:27 2025 by rpki-client