$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/A30B6882B3DE11F0B2D83330C4F9AE02.roa File: A30B6882B3DE11F0B2D83330C4F9AE02.roa (raw, json) Hash identifier: 1s0ebn+BQVw0yPfQmnoFsQomr8t/uDwXlJRNpXKjLCg= Subject key identifier: F2:E2:1F:21:7B:0C:BE:58:4C:FD:BC:3B:0F:AC:0B:10:26:67:5F:7D Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0BAF Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/A30B6882B3DE11F0B2D83330C4F9AE02.roa Signing time: Tue 28 Oct 2025 09:20:47 +0000 ROA not before: Tue 28 Oct 2025 09:20:47 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 31713 IP address blocks: 103.17.28.0/22 maxlen: 24 116.66.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2991 (0xbaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Oct 28 09:20:47 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69008aef-640c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:65:bd:7e:63:33:d0:33:3f:bc:91:71:ac:15: ca:53:59:0e:ab:50:f7:25:f1:7d:fe:71:50:e2:7e: 2f:04:2b:38:25:d9:14:7d:62:21:69:60:63:0b:a4: f9:f8:3f:64:93:5b:66:e1:78:88:49:52:dc:f0:60: e7:83:21:33:52:cc:27:a4:8c:7e:26:1c:b6:5c:5d: 06:66:c8:c0:21:3d:6c:9a:17:3e:63:9e:7f:c4:b4: 01:e4:6f:02:48:74:8e:32:ab:a5:09:c7:68:01:c5: d4:17:f0:28:c9:8d:51:50:c6:80:7b:ab:fd:2e:62: 73:c7:af:84:59:8d:19:a3:d7:1c:55:b0:d0:fd:c0: 91:fa:b6:b6:0b:dd:ae:76:6d:60:71:36:cb:12:7a: 4a:f7:a9:c3:d2:63:92:70:71:82:8a:10:cd:0d:6c: e4:9f:6b:ce:41:3f:bb:b6:ea:93:5e:66:dd:07:73: 6a:ae:e6:a5:9b:7f:3a:6b:9b:47:28:31:11:50:b4: 58:37:6a:90:a4:5b:23:1c:ce:30:07:c2:e1:6a:c1: fe:03:1a:87:74:a5:78:eb:ce:84:ca:b1:e7:a7:12: 3e:e0:98:1d:a7:a8:b2:48:e4:5c:a9:43:25:aa:d4: 42:91:c9:0b:1f:f0:6a:92:a9:0d:d3:74:3a:76:f4: ce:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E2:1F:21:7B:0C:BE:58:4C:FD:BC:3B:0F:AC:0B:10:26:67:5F:7D X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/A30B6882B3DE11F0B2D83330C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.17.28.0/22 116.66.208.0/20 Signature Algorithm: sha256WithRSAEncryption ad:6f:5a:f8:dc:36:b6:40:0c:cd:9e:48:93:b8:8b:c8:04:e3: 8b:e6:88:3a:e1:d6:7f:f4:e6:6a:9b:d6:3a:79:14:60:c2:31: 5f:02:54:f8:4a:2f:69:a1:0a:18:fb:7e:55:9a:e1:0a:71:5f: 3e:13:25:e2:d8:ef:74:35:03:4a:1f:10:a5:bd:1b:c8:a1:1d: 66:24:03:47:1e:9c:b4:aa:58:ef:5b:f7:fc:95:3c:dd:a3:0c: 9b:dd:41:2f:4c:42:76:a2:f0:68:4c:14:a2:9e:db:01:b9:74: da:e8:9a:70:b7:fb:ed:4d:a3:59:88:18:c6:60:8d:2f:78:e2: 06:dc:a1:18:56:f2:c4:77:71:94:d7:a8:6b:b8:22:99:d9:f4: 78:d4:f6:14:cb:6b:09:12:26:38:9d:7f:50:1e:c4:08:2f:ab: 55:67:a5:b5:8d:aa:2e:78:8d:48:79:9a:27:a3:fd:2c:55:b4: 96:d9:fa:4b:16:23:d8:3d:42:41:b4:ca:f2:81:16:a8:b7:ed: b8:44:25:3f:96:75:cb:5d:df:a2:b2:f8:fa:6c:e6:7d:5f:62: 9f:b0:f8:41:70:9a:5a:55:5d:30:ec:6c:d5:81:35:aa:eb:e3: e9:2c:5b:1b:ed:fe:59:88:88:fd:3b:df:f8:79:e6:27:fb:2c: a2:f0:b9:1e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICC68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUxMDI4MDkyMDQ3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAwOGFlZi02NDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mW9fmMz0DM/vJFxrBXKU1kOq1D3JfF9/nFQ4n4vBCs4JdkUfWIhaWBjC6T5 +D9kk1tm4XiISVLc8GDngyEzUswnpIx+Jhy2XF0GZsjAIT1smhc+Y55/xLQB5G8C SHSOMqulCcdoAcXUF/AoyY1RUMaAe6v9LmJzx6+EWY0Zo9ccVbDQ/cCR+ra2C92u dm1gcTbLEnpK96nD0mOScHGCihDNDWzkn2vOQT+7tuqTXmbdB3Nqrualm386a5tH KDERULRYN2qQpFsjHM4wB8LhasH+AxqHdKV4686EyrHnpxI+4Jgdp6iySORcqUMl qtRCkckLH/BqkqkN03Q6dvTOWwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPLiHyF7 DL5YTP28Ow+sCxAmZ199MB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvQTM3NEExQjY0NjcxMTFFQTgxQUJCMjVGQzRGOUFFMDIvQTMwQjY4ODJC M0RFMTFGMEIyRDgzMzMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnERwDBAR0QtAwDQYJKoZIhvcNAQELBQADggEBAK1vWvjc NrZADM2eSJO4i8gE44vmiDrh1n/05mqb1jp5FGDCMV8CVPhKL2mhChj7flWa4Qpx Xz4TJeLY73Q1A0ofEKW9G8ihHWYkA0cenLSqWO9b9/yVPN2jDJvdQS9MQnai8GhM FKKe2wG5dNromnC3++1No1mIGMZgjS944gbcoRhW8sR3cZTXqGu4IpnZ9HjU9hTL awkSJjidf1AexAgvq1VnpbWNqi54jUh5miej/SxVtJbZ+ksWI9g9QkG0yvKBFqi3 7bhEJT+Wdctd36Ky+Pps5n1fYp+w+EFwmlpVXTDsbNWBNarr4+ksWxvt/lmIiP07 3/h55if7LKLwuR4= -----END CERTIFICATE-----Generated at Wed Nov 5 18:15:13 2025 by rpki-client