$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/FD120CC2D94411EDA95E3613C4F9AE02.roa File: FD120CC2D94411EDA95E3613C4F9AE02.roa (raw, json) Hash identifier: u8GCpF3JjtF0fC5bHONBso6P9ZKL07gluzKPfJhmpXI= Subject key identifier: 85:72:97:44:B5:5F:1F:F4:D4:13:BA:9E:B2:EF:55:2C:86:86:A9:A0 Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0D8F Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/FD120CC2D94411EDA95E3613C4F9AE02.roa Signing time: Tue 06 May 2025 18:27:31 +0000 ROA not before: Tue 06 May 2025 18:27:31 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 138968 IP address blocks: 103.38.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3471 (0xd8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: May 6 18:27:31 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681a5493-5703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6d:bd:47:4a:e1:00:aa:88:b1:b8:13:86:bf: 04:55:80:be:63:6e:a1:5e:70:46:23:26:6f:fe:6e: 33:69:47:1f:ec:da:bf:1c:98:ce:5a:d6:5c:d3:00: e3:d7:29:d1:a0:bf:3b:19:7d:a4:25:bb:7d:0b:f5: f6:58:5a:47:89:69:62:31:ec:6d:4e:24:d0:70:ed: 58:f0:66:3f:de:20:4c:cd:ae:c2:53:6d:7d:b3:5c: 2c:7b:b8:aa:5b:23:d8:20:b1:5e:ca:18:58:d2:76: d3:29:d5:8f:56:09:89:51:76:15:c4:45:d8:a6:7d: a7:86:94:f3:36:16:6d:39:a5:db:a6:cf:3f:56:d8: 99:94:ee:7b:11:f8:d2:01:10:d5:79:a6:9d:fd:ef: 65:b3:dd:12:ef:6e:ab:91:22:82:04:d1:d4:97:c8: 70:c7:2f:2a:0c:1a:fb:7c:9c:c2:9f:39:7c:b8:05: 3c:b5:7e:47:b8:43:e5:0f:cd:22:50:f3:85:41:32: e1:ac:c4:06:2c:3b:64:85:dd:bf:c2:2b:71:03:7b: 33:15:46:38:f4:b6:33:3f:d4:90:57:e1:47:82:08: 6d:e7:9f:f2:85:f9:3c:70:9f:2c:ba:07:99:8f:c8: 23:64:87:1d:50:60:59:7f:4f:87:fc:57:29:aa:b3: 73:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:72:97:44:B5:5F:1F:F4:D4:13:BA:9E:B2:EF:55:2C:86:86:A9:A0 X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/FD120CC2D94411EDA95E3613C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.38.255.0/24 Signature Algorithm: sha256WithRSAEncryption 82:5c:9b:a4:3b:b7:91:19:62:01:06:10:7c:30:9e:26:96:b6: ab:53:15:ed:38:22:44:da:ab:f7:0b:c2:7e:3f:f3:a8:05:7b: d9:a7:ed:c4:4f:87:82:f0:50:ba:3b:ea:94:72:6a:fc:37:3a: 0b:2e:74:00:e8:e0:5c:f9:6c:71:67:26:36:f2:b4:10:02:fd: b9:7e:00:fe:62:12:81:3e:eb:b3:75:df:07:78:57:37:9d:f9: 80:6a:a7:83:51:0f:3b:c2:0d:65:38:3c:18:9a:ca:81:83:c3: 4b:6f:d0:7b:72:47:7b:e3:3b:52:62:8b:ee:5b:a2:19:0b:2c: 0f:44:b3:13:b1:2f:94:93:9f:41:e9:df:b0:f7:d9:17:f2:67: 2b:7d:72:0d:22:61:ca:92:98:b3:d5:4b:53:d6:88:3b:6f:60: 96:e6:8d:88:d0:bf:1d:bc:a6:87:eb:98:66:97:62:61:3d:f7: bc:5e:61:a5:23:cb:18:85:89:40:a4:be:89:57:23:9a:f5:79: fb:1f:43:f3:84:cf:dd:95:60:fa:f2:ac:80:4f:52:63:ab:42: b1:ab:4d:20:ac:ac:3f:d0:e8:7c:5f:ed:ff:b0:d6:de:82:c1: cd:98:c6:dc:17:95:43:76:0b:a1:cb:1c:56:f9:1c:c4:07:f6: fb:a5:36:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjUwNTA2MTgyNzMxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhNTQ5My01NzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2229R0rhAKqIsbgThr8EVYC+Y26hXnBGIyZv/m4zaUcf7Nq/HJjOWtZc0wDj 1ynRoL87GX2kJbt9C/X2WFpHiWliMextTiTQcO1Y8GY/3iBMza7CU219s1wse7iq WyPYILFeyhhY0nbTKdWPVgmJUXYVxEXYpn2nhpTzNhZtOaXbps8/VtiZlO57EfjS ARDVeaad/e9ls90S726rkSKCBNHUl8hwxy8qDBr7fJzCnzl8uAU8tX5HuEPlD80i UPOFQTLhrMQGLDtkhd2/witxA3szFUY49LYzP9SQV+FHgght55/yhfk8cJ8sugeZ j8gjZIcdUGBZf0+H/FcpqrNz9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIVyl0S1 Xx/01BO6nrLvVSyGhqmgMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTY4RjYvMzdEMDNERjZDRTI4MTFFOUE2QjZDMTdCQzRGOUFFMDIvRkQxMjBDQzJE OTQ0MTFFREE5NUUzNjEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnJv8wDQYJKoZIhvcNAQELBQADggEBAIJcm6Q7t5EZYgEG EHwwniaWtqtTFe04IkTaq/cLwn4/86gFe9mn7cRPh4LwULo76pRyavw3OgsudADo 4Fz5bHFnJjbytBAC/bl+AP5iEoE+67N13wd4Vzed+YBqp4NRDzvCDWU4PBiayoGD w0tv0HtyR3vjO1Jii+5bohkLLA9EsxOxL5STn0Hp37D32RfyZyt9cg0iYcqSmLPV S1PWiDtvYJbmjYjQvx28pofrmGaXYmE997xeYaUjyxiFiUCkvolXI5r1efsfQ/OE z92VYPryrIBPUmOrQrGrTSCsrD/Q6Hxf7f+w1t6Cwc2YxtwXlUN2C6HLHFb5HMQH 9vulNg0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:52:21 2025 by rpki-client