$ rpki-client -vvf rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/9D6DB59E1C5211EA8C6AAE37C4F9AE02.roa File: 9D6DB59E1C5211EA8C6AAE37C4F9AE02.roa (raw, json) Hash identifier: fjLr8uQxYz0b2IkiqsLdHlpaSbA1UhMnKJdo096hNVQ= Subject key identifier: 26:33:56:8A:69:31:8F:6D:2F:C2:90:CF:9B:D9:0A:DD:53:81:5C:86 Certificate issuer: /CN=A91315C1/serialNumber=406E2DFBAA0EA007DDC66993F2C7B308DA0A1A57 Certificate serial: 0BF3 Authority key identifier: 40:6E:2D:FB:AA:0E:A0:07:DD:C6:69:93:F2:C7:B3:08:DA:0A:1A:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/9D6DB59E1C5211EA8C6AAE37C4F9AE02.roa Signing time: Mon 04 Aug 2025 19:29:18 +0000 ROA not before: Mon 04 Aug 2025 19:29:18 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139261 IP address blocks: 103.140.132.0/23 maxlen: 23 103.140.132.0/24 maxlen: 24 103.140.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.crl rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91315C1, serialNumber=406E2DFBAA0EA007DDC66993F2C7B308DA0A1A57 Validity Not Before: Aug 4 19:29:18 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68910a0e-d64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:56:10:79:40:c2:f0:86:9c:a0:72:75:5a:54: 35:6b:15:de:0a:01:e0:bc:70:c0:d5:ff:28:d1:24: 8c:b4:6b:08:ef:de:ce:23:a8:3b:84:34:d9:ef:9c: a2:34:2b:cf:49:72:52:58:59:05:7b:03:d9:8b:2b: fb:2a:71:d1:a5:59:71:ec:b2:e4:40:5e:0d:0d:5e: 39:d8:60:d7:96:b9:6e:b7:90:a6:9f:a4:40:d7:56: b1:91:57:93:0a:e7:3d:17:5e:30:5e:af:ee:94:42: 69:0a:8e:1d:ab:0a:10:4a:71:e3:9d:66:c5:0b:02: 59:99:ba:9c:3b:de:b9:02:ef:87:63:aa:01:a8:ee: 6b:c6:d4:75:88:c5:af:38:61:55:82:f5:bc:e4:bd: de:3e:b5:25:36:c4:bd:0e:dd:ed:b9:c5:d7:73:3a: bb:cc:41:38:28:59:e7:87:05:fa:7b:d3:b2:d5:84: 3c:bb:93:ea:7d:09:41:28:07:f7:e0:2f:6e:6c:15: 1b:57:a9:e0:99:13:56:3d:07:97:06:cf:70:66:da: 02:0d:93:e3:61:31:8d:21:20:6e:4c:73:72:03:aa: c7:54:5e:9b:af:b3:b1:e2:fc:7a:1a:7a:f2:99:37: 1d:bd:21:40:09:68:22:50:45:ec:4f:df:66:2a:7c: e2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:33:56:8A:69:31:8F:6D:2F:C2:90:CF:9B:D9:0A:DD:53:81:5C:86 X509v3 Authority Key Identifier: keyid:40:6E:2D:FB:AA:0E:A0:07:DD:C6:69:93:F2:C7:B3:08:DA:0A:1A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/9D6DB59E1C5211EA8C6AAE37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.132.0/23 Signature Algorithm: sha256WithRSAEncryption 03:ac:6e:fb:1d:d2:09:53:22:a0:8f:d8:02:cd:68:21:77:57: b9:b7:3d:30:e5:80:9c:77:c9:f2:3f:3b:80:5c:97:f2:95:d8: 91:6b:28:3b:88:57:61:da:36:1a:55:9b:44:9b:84:dd:68:d3: 6e:0f:8f:1b:6f:7c:1c:1d:64:f2:a7:90:db:c1:3b:37:2d:ca: a7:42:88:0f:6d:95:b0:cb:19:cb:54:11:62:4e:48:31:dc:c9: 6f:1b:f9:cb:62:c6:74:ec:17:52:dc:bb:47:e6:82:73:cb:e3: db:4b:29:96:fc:4f:6c:45:56:0f:83:8c:cc:30:ab:af:1f:b6: e4:c2:34:15:a6:4d:77:e0:bb:d9:b3:cd:b9:da:45:da:b6:a6: 6c:42:50:72:7a:43:9f:be:ca:0d:a3:7a:88:04:fe:a2:4f:78: f9:00:8b:25:53:09:1a:75:2a:06:55:6b:90:6c:fe:54:48:d3: e7:15:a2:38:4c:21:04:96:aa:b3:b2:4c:26:2a:fc:36:e7:57: a3:fc:e9:e3:af:26:f7:47:f5:39:29:ee:95:97:0f:10:3f:0a: 31:82:d8:59:9b:c5:ec:6d:8c:23:a2:d0:03:8e:b2:26:f7:55: dc:8d:6a:6a:37:fc:27:ae:b0:93:7f:f9:3c:17:39:27:53:19: d6:f4:e7:c1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1QzExMTAvBgNVBAUTKDQwNkUyREZCQUEwRUEwMDdEREM2Njk5M0YyQzdCMzA4 REEwQTFBNTcwHhcNMjUwODA0MTkyOTE4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkxMGEwZS1kNjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1YQeUDC8IacoHJ1WlQ1axXeCgHgvHDA1f8o0SSMtGsI797OI6g7hDTZ75yi NCvPSXJSWFkFewPZiyv7KnHRpVlx7LLkQF4NDV452GDXlrlut5Cmn6RA11axkVeT Cuc9F14wXq/ulEJpCo4dqwoQSnHjnWbFCwJZmbqcO965Au+HY6oBqO5rxtR1iMWv OGFVgvW85L3ePrUlNsS9Dt3tucXXczq7zEE4KFnnhwX6e9Oy1YQ8u5PqfQlBKAf3 4C9ubBUbV6ngmRNWPQeXBs9wZtoCDZPjYTGNISBuTHNyA6rHVF6br7Ox4vx6Gnry mTcdvSFACWgiUEXsT99mKnzimwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCYzVopp MY9tL8KQz5vZCt1TgVyGMB8GA1UdIwQYMBaAFEBuLfuqDqAH3cZpk/LHswjaChpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTVDMS8zMDA5QThBQTFD NTIxMUVBODREMTk5MzdDNEY5QUUwMi9RRzR0LTZvT29BZmR4bW1UOHNlekNOb0tH bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FHNHQtNm9Pb0FmZHhtbVQ4c2V6Q05vS0dsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzE1QzEvMzAwOUE4QUExQzUyMTFFQTg0RDE5OTM3QzRGOUFFMDIvOUQ2REI1OUUx QzUyMTFFQThDNkFBRTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnjIQwDQYJKoZIhvcNAQELBQADggEBAAOsbvsd0glTIqCP 2ALNaCF3V7m3PTDlgJx3yfI/O4Bcl/KV2JFrKDuIV2HaNhpVm0SbhN1o024Pjxtv fBwdZPKnkNvBOzctyqdCiA9tlbDLGctUEWJOSDHcyW8b+ctixnTsF1Lcu0fmgnPL 49tLKZb8T2xFVg+DjMwwq68ftuTCNBWmTXfgu9mzzbnaRdq2pmxCUHJ6Q5++yg2j eogE/qJPePkAiyVTCRp1KgZVa5Bs/lRI0+cVojhMIQSWqrOyTCYq/DbnV6P86eOv JvdH9Tkp7pWXDxA/CjGC2FmbxextjCOi0AOOsib3VdyNamo3/CeusJN/+TwXOSdT Gdb058E= -----END CERTIFICATE-----Generated at Mon Aug 11 07:31:19 2025 by rpki-client