$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/F276575AA81411EFACD1214BC4F9AE02.roa File: F276575AA81411EFACD1214BC4F9AE02.roa (raw, json) Hash identifier: VF+Qy3jNNDjRyR500naqK22zDcvwaaWbguSS+FWiTSk= Subject key identifier: B4:A0:4C:7B:8C:BE:C6:E1:11:0C:38:57:6A:28:CC:AD:19:C8:05:D0 Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Certificate serial: 0189 Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/F276575AA81411EFACD1214BC4F9AE02.roa Signing time: Fri 13 Jun 2025 03:11:13 +0000 ROA not before: Fri 13 Jun 2025 03:11:13 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151358 IP address blocks: 103.117.116.0/24 maxlen: 24 103.210.226.0/23 maxlen: 24 2401:4a0::/32 maxlen: 32 2401:4a0:1::/48 maxlen: 48 2401:4a0:2::/48 maxlen: 48 2401:4a0:a::/48 maxlen: 48 2401:4a0:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Validity Not Before: Jun 13 03:11:13 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684b96d1-91c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7a:93:a4:b8:70:80:32:52:bb:31:aa:f1:a1: 69:a4:c0:5d:47:26:46:23:f6:17:ff:44:29:0a:dc: 28:75:aa:8e:8b:62:88:25:c2:cb:7f:d0:ca:82:0b: 72:61:e6:84:d5:68:24:5e:32:53:d7:94:16:df:69: 75:ae:c0:20:29:3c:d7:f9:3c:a9:57:66:f7:f3:27: e7:7c:10:73:2e:3a:e1:31:ae:80:8b:47:e1:30:1d: 22:03:a9:78:d4:18:5a:88:f9:00:0a:66:06:10:ff: b5:bd:18:83:e4:69:c9:00:e1:da:96:e3:7b:7d:e9: 4f:2b:1a:99:a9:a6:43:a0:51:d2:bd:ea:5a:61:3f: 74:b3:ed:b0:17:be:92:61:06:cb:29:0f:3e:51:d9: 99:81:c4:42:cd:fb:6a:d0:ae:af:0d:35:0f:29:e8: d6:5d:5b:99:73:4f:0a:8a:0a:c1:97:9e:89:e4:4f: 25:1c:02:74:84:79:df:1e:af:f6:bb:84:af:5e:e7: 82:38:a5:76:04:6a:b7:4b:af:a0:6d:aa:bb:60:8a: 3d:2c:83:7a:53:db:fe:87:cd:5b:60:c1:5b:85:61: e7:a2:0e:ea:07:21:71:fe:72:11:c8:38:dc:ad:5b: e6:f4:aa:42:d3:fc:ff:cf:18:d0:9c:50:3f:1f:68: b3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A0:4C:7B:8C:BE:C6:E1:11:0C:38:57:6A:28:CC:AD:19:C8:05:D0 X509v3 Authority Key Identifier: keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/F276575AA81411EFACD1214BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.117.116.0/24 103.210.226.0/23 IPv6: 2401:4a0::/32 Signature Algorithm: sha256WithRSAEncryption 2f:98:8e:a7:e4:6a:8c:3f:aa:e6:8a:97:ad:c5:4d:54:35:f9: ba:6a:5c:37:bf:1b:3f:19:91:2e:9e:9e:ba:b0:14:93:75:6d: 82:e4:ae:cc:68:e4:8b:f6:a4:e8:e8:f7:67:76:48:c8:43:33: 30:ee:da:31:3a:07:9a:61:42:8d:a4:43:5d:a9:6a:7f:d5:11: a5:e0:02:96:56:25:03:cf:fa:89:5d:2a:fd:d0:8d:d3:aa:c6: ee:4f:fb:d5:e4:43:d9:a2:64:72:d2:a5:c7:ed:be:10:22:d6: eb:e5:78:45:57:dd:73:49:4e:d2:a6:33:51:b3:97:4e:3d:0e: 4f:bc:f2:12:68:6c:8e:b5:82:00:bd:58:c7:14:84:7d:01:85: 53:53:b5:cb:68:16:31:be:c2:ba:27:fb:b1:7e:7d:75:a1:d3: 14:b9:f1:3b:79:89:b7:ad:73:28:94:a1:bc:52:c3:bc:92:a0: de:06:68:33:cb:ba:2d:ef:62:56:e8:a8:bc:61:22:2f:51:a9: 84:a4:25:34:c4:d3:74:17:56:da:b5:9c:4e:54:ec:dd:e1:50: 3d:86:c0:03:31:c2:54:0e:78:09:d9:3e:3d:95:4d:72:fc:d1: c1:41:d5:4d:3b:9c:6f:52:af:9a:3a:8a:f9:f2:09:25:6f:34: 03:01:9b:16 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMyRjIxMTAvBgNVBAUTKDBCNjFBMDc0Rjg0MkE0NzE4QkFCMUQ4NDUyQTZDQjY4 MkU2RkVEREYwHhcNMjUwNjEzMDMxMTEzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRiOTZkMS05MWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3qTpLhwgDJSuzGq8aFppMBdRyZGI/YX/0QpCtwodaqOi2KIJcLLf9DKggty YeaE1WgkXjJT15QW32l1rsAgKTzX+TypV2b38yfnfBBzLjrhMa6Ai0fhMB0iA6l4 1BhaiPkACmYGEP+1vRiD5GnJAOHaluN7felPKxqZqaZDoFHSvepaYT90s+2wF76S YQbLKQ8+UdmZgcRCzftq0K6vDTUPKejWXVuZc08KigrBl56J5E8lHAJ0hHnfHq/2 u4SvXueCOKV2BGq3S6+gbaq7YIo9LIN6U9v+h81bYMFbhWHnog7qByFx/nIRyDjc rVvm9KpC0/z/zxjQnFA/H2iziwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFLSgTHuM vsbhEQw4V2oozK0ZyAXQMB8GA1UdIwQYMBaAFAthoHT4QqRxi6sdhFKmy2gub+3f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzJGMi80MjFFMDVGMkZF Q0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BIR0xxeDJFVXFiTGFDNXY3 ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyR2dkUGhDcEhHTHF4MkVVcWJMYUM1djdkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDMyRjIvNDIxRTA1RjJGRUNEMTFFREFGODA3ODUyQzRGOUFFMDIvRjI3NjU3NUFB ODE0MTFFRkFDRDEyMTRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABndXQDBAFn0uIwDQQCAAIwBwMFACQBBKAwDQYJKoZIhvcN AQELBQADggEBAC+Yjqfkaow/quaKl63FTVQ1+bpqXDe/Gz8ZkS6enrqwFJN1bYLk rsxo5Iv2pOjo92d2SMhDMzDu2jE6B5phQo2kQ12pan/VEaXgApZWJQPP+oldKv3Q jdOqxu5P+9XkQ9miZHLSpcftvhAi1uvleEVX3XNJTtKmM1Gzl049Dk+88hJobI61 ggC9WMcUhH0BhVNTtctoFjG+wron+7F+fXWh0xS58Tt5ibetcyiUobxSw7ySoN4G aDPLui3vYlboqLxhIi9RqYSkJTTE03QXVtq1nE5U7N3hUD2GwAMxwlQOeAnZPj2V TXL80cFB1U07nG9Sr5o6ivnyCSVvNAMBmxY= -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:41 2025 by rpki-client