$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/4EF483C64C2911E78BF1BD13C4F9AE02.roa File: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (raw, json) Hash identifier: gmxypZgEWPdJyaxL0d+DHAXn8CkOhTwU8vnSEJsmC3o= Subject key identifier: A8:53:07:91:1E:7D:66:1F:45:FC:83:E5:C0:C9:79:20:05:78:C6:99 Certificate issuer: /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Certificate serial: 1A31 Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/4EF483C64C2911E78BF1BD13C4F9AE02.roa Signing time: Tue 24 Jun 2025 16:26:35 +0000 ROA not before: Tue 24 Jun 2025 16:26:35 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 133450 IP address blocks: 103.94.128.0/22 maxlen: 22 103.94.128.0/23 maxlen: 23 103.94.128.0/24 maxlen: 24 103.94.129.0/24 maxlen: 24 103.94.130.0/23 maxlen: 23 103.94.130.0/24 maxlen: 24 103.94.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6705 (0x1a31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91505AB, serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Validity Not Before: Jun 24 16:26:35 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685ad1bb-6c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:21:fc:9f:55:d5:49:de:b4:fc:43:e5:30: d1:24:22:c7:74:ec:4f:a2:f3:c6:d6:8c:f6:4e:a5: 3e:6a:b1:e1:67:5c:93:40:3d:e6:57:bb:ff:fe:4e: 1e:fe:31:2f:5a:7b:eb:19:94:d0:44:93:ad:cf:f7: 49:4d:f2:16:d1:02:fb:63:a4:4b:08:87:d0:34:cb: 6a:d7:e0:4d:f7:cd:ea:06:aa:e1:a6:b3:75:00:61: 1d:26:20:5f:45:14:66:fa:2c:7d:b2:2e:27:11:df: 26:14:d8:68:09:ce:d7:ea:c2:09:69:af:ad:33:4a: ca:72:00:84:f5:64:b0:1b:a4:6a:40:1d:c7:d9:df: 66:90:7f:e3:64:fd:57:1e:7a:cd:0f:2c:7c:96:84: 3a:9c:72:fd:49:d7:bb:8c:cc:5e:37:1b:64:47:a6: 7f:7f:ef:70:00:89:93:44:84:fe:6d:5c:43:de:19: 7c:99:1d:cf:e4:7a:72:6f:ba:99:f0:fb:e9:23:2c: 4f:56:c6:30:90:c1:10:60:47:fb:09:cb:07:ff:4c: 7a:d1:c5:18:51:19:ea:75:ae:aa:80:1e:24:6f:ed: 50:18:d3:89:2f:89:c8:9b:99:70:88:d8:55:bf:94: 0f:8c:69:80:6e:b2:cb:03:5b:9b:8d:c3:58:6b:46: dd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:53:07:91:1E:7D:66:1F:45:FC:83:E5:C0:C9:79:20:05:78:C6:99 X509v3 Authority Key Identifier: keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/4EF483C64C2911E78BF1BD13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.94.128.0/22 Signature Algorithm: sha256WithRSAEncryption 42:e5:c3:bc:59:3c:3e:2b:83:3c:62:c7:93:0d:35:77:55:b1: 28:93:10:3c:18:47:5f:b2:e6:01:fd:39:60:6d:b7:7f:02:40: ef:19:b6:16:60:09:2b:2a:33:13:fd:36:74:fe:3d:58:0e:dd: 91:5c:11:a3:b9:de:c0:18:a1:b8:59:89:2b:a7:01:d9:cd:f3: d6:b8:8e:a9:dd:c5:8f:70:88:4a:6c:61:94:3d:fd:aa:29:b9: 83:0f:96:8d:6e:de:a7:04:0f:e7:d3:1f:54:19:eb:11:82:19: db:a9:fb:3a:d6:fa:69:00:53:bb:b8:20:0f:3c:58:1a:7d:39: 07:cf:2f:d8:92:78:b4:bc:66:27:1a:44:13:6e:a1:58:0d:e0: ec:fe:de:08:88:82:ea:ed:9c:2e:31:73:7e:57:15:e9:c1:36: 64:ec:7b:5c:66:3f:da:86:fc:c5:cb:85:63:87:be:18:f8:79: 52:63:1a:de:2a:8f:4b:7b:a3:4d:31:22:13:ed:d2:a5:d5:65: 40:47:8a:70:7c:b7:14:2f:4b:ed:02:42:72:24:c4:80:df:68: 16:2c:a7:57:84:34:2b:43:65:bc:2a:40:23:3e:09:69:f4:a2: 4f:59:f9:55:ca:cc:e9:e8:fa:c6:dc:a2:ef:86:d1:d1:88:1a: 2a:2d:a1:a7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1QUIxMTAvBgNVBAUTKDg0MDE4QzA4M0QxMEEzOUU3RjY4NUM0MUFFMTY2Mzcw QzZENzdBQzQwHhcNMjUwNjI0MTYyNjM1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVhZDFiYi02Yzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDIh/J9V1UnetPxD5TDRJCLHdOxPovPG1oz2TqU+arHhZ1yTQD3mV7v//k4e /jEvWnvrGZTQRJOtz/dJTfIW0QL7Y6RLCIfQNMtq1+BN983qBqrhprN1AGEdJiBf RRRm+ix9si4nEd8mFNhoCc7X6sIJaa+tM0rKcgCE9WSwG6RqQB3H2d9mkH/jZP1X HnrNDyx8loQ6nHL9Sde7jMxeNxtkR6Z/f+9wAImTRIT+bVxD3hl8mR3P5Hpyb7qZ 8PvpIyxPVsYwkMEQYEf7CcsH/0x60cUYURnqda6qgB4kb+1QGNOJL4nIm5lwiNhV v5QPjGmAbrLLA1ubjcNYa0bd7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFKhTB5Ee fWYfRfyD5cDJeSAFeMaZMB8GA1UdIwQYMBaAFIQBjAg9EKOef2hcQa4WY3DG13rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDVBQi8wNTI0M0FDNjRD MjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81NV9hRnhCcmhaamNNYlhl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hBR01DRDBRbzU1X2FGeEJyaFpqY01iWGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTA1QUIvMDUyNDNBQzY0QzI4MTFFNzk2OEFEMjExQzRGOUFFMDIvNEVGNDgzQzY0 QzI5MTFFNzhCRjFCRDEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnXoAwDQYJKoZIhvcNAQELBQADggEBAELlw7xZPD4rgzxi x5MNNXdVsSiTEDwYR1+y5gH9OWBtt38CQO8ZthZgCSsqMxP9NnT+PVgO3ZFcEaO5 3sAYobhZiSunAdnN89a4jqndxY9wiEpsYZQ9/aopuYMPlo1u3qcED+fTH1QZ6xGC Gdup+zrW+mkAU7u4IA88WBp9OQfPL9iSeLS8ZicaRBNuoVgN4Oz+3giIgurtnC4x c35XFenBNmTse1xmP9qG/MXLhWOHvhj4eVJjGt4qj0t7o00xIhPt0qXVZUBHinB8 txQvS+0CQnIkxIDfaBYsp1eENCtDZbwqQCM+CWn0ok9Z+VXKzOno+sbcou+G0dGI Giotoac= -----END CERTIFICATE-----Generated at Wed Aug 13 11:11:17 2025 by rpki-client