$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/BF97791C4B6C11F0843D3567C4F9AE02.roa File: BF97791C4B6C11F0843D3567C4F9AE02.roa (raw, json) Hash identifier: gGTp+vz6cxtSToJPADyEB0H+BiOLt3KWmtNaWUj3u5s= Subject key identifier: 55:DF:43:A0:18:07:75:51:3C:B1:8A:6C:A5:50:5F:6D:FA:98:20:45 Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Certificate serial: 04E6 Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/BF97791C4B6C11F0843D3567C4F9AE02.roa Signing time: Tue 17 Jun 2025 11:18:09 +0000 ROA not before: Tue 17 Jun 2025 11:18:09 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 834 IP address blocks: 103.73.220.0/24 maxlen: 24 103.73.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 11:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1254 (0x4e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Validity Not Before: Jun 17 11:18:09 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=68514ef1-6552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:34:b0:b8:72:d6:c0:75:8d:9d:6c:7d:a7:ca: 78:db:25:55:df:47:51:79:6a:99:e6:1c:e5:fa:c1: 4d:8c:c2:37:37:4a:97:ac:f8:42:e1:5a:cf:fc:31: 3e:a0:e1:b6:cd:1d:e1:5b:74:21:ad:c5:8b:93:94: ef:fd:bf:42:00:25:52:85:ae:20:f3:46:e8:87:33: 20:60:47:3e:2a:b6:1d:19:f7:72:bf:c6:cc:00:cc: 89:1f:19:a2:e1:e1:19:c7:52:cb:3e:49:c1:2f:3d: d1:f9:ef:9a:7f:e1:27:31:2e:b9:f0:30:2d:45:0c: 87:28:18:a9:be:f9:06:79:f4:2d:3a:a9:1a:06:52: cd:c5:f4:5f:bc:db:72:e4:1c:49:e3:e1:2b:e8:db: 64:4d:2e:53:79:48:d3:e6:f8:e4:ef:a8:0e:75:0f: d2:2d:b9:14:c2:ba:89:e0:71:8e:5a:85:b8:7e:d4: 00:30:54:4f:51:91:43:0c:90:45:a6:08:58:7c:b6: 8b:11:da:1d:57:12:a8:b2:1f:c6:50:d9:72:df:bb: 54:53:9a:8f:9d:79:35:eb:0c:6f:6d:af:e6:ca:bb: 7e:06:61:f1:77:dc:e3:86:0d:22:48:06:bc:5b:f2: 38:fd:8f:da:e7:31:4a:a5:22:69:fb:5a:fc:80:a3: d8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:DF:43:A0:18:07:75:51:3C:B1:8A:6C:A5:50:5F:6D:FA:98:20:45 X509v3 Authority Key Identifier: keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/BF97791C4B6C11F0843D3567C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.220.0/24 103.73.222.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:f3:c2:2d:7e:0d:a4:7a:8b:05:c7:72:b4:a4:6d:06:30:d9: b2:db:45:c1:8d:6d:e7:73:a5:98:a9:50:90:95:46:62:98:44: aa:89:a1:7e:7e:d7:2d:a5:db:31:c8:87:c7:91:65:3a:c9:da: 81:55:b5:a4:5f:76:b6:b1:87:d5:bb:94:7b:99:98:de:a8:d6: 36:84:26:df:57:09:d8:f2:79:38:a7:36:24:25:e2:a4:28:d4: 9d:b6:d6:8e:33:84:70:34:ad:64:b9:fb:ca:cc:db:37:e3:32: 0c:4e:73:f9:7f:7f:4d:12:5a:9a:33:cd:d7:0c:a0:9a:08:3c: 2d:6c:d8:31:5b:7d:20:cf:42:29:cb:6a:8d:5d:a0:a0:0c:03: d8:a8:f8:9b:33:c3:68:f4:6b:ad:ca:ff:13:46:6f:7b:97:6a: f8:f0:86:f2:8b:54:eb:44:7c:8f:54:61:b8:1b:d3:39:8c:4f: fe:a8:d2:a2:9c:da:ad:5b:b1:f2:47:c0:34:9b:fe:c6:31:4d: f7:6f:d3:e3:a2:e0:15:60:f3:87:c6:f5:ae:75:98:f2:f0:ba: 94:11:df:4a:f4:cf:2e:c3:93:5d:9b:86:c4:45:f4:b6:bd:cf: 97:9e:bd:65:f8:c6:6c:ba:64:b5:42:ff:09:00:24:dc:a6:8d: fe:c5:82:9c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew OTA2RkVEODIwHhcNMjUwNjE3MTExODA5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUxNGVmMS02NTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjSwuHLWwHWNnWx9p8p42yVV30dReWqZ5hzl+sFNjMI3N0qXrPhC4VrP/DE+ oOG2zR3hW3QhrcWLk5Tv/b9CACVSha4g80bohzMgYEc+KrYdGfdyv8bMAMyJHxmi 4eEZx1LLPknBLz3R+e+af+EnMS658DAtRQyHKBipvvkGefQtOqkaBlLNxfRfvNty 5BxJ4+Er6NtkTS5TeUjT5vjk76gOdQ/SLbkUwrqJ4HGOWoW4ftQAMFRPUZFDDJBF pghYfLaLEdodVxKosh/GUNly37tUU5qPnXk16wxvba/myrt+BmHxd9zjhg0iSAa8 W/I4/Y/a5zFKpSJp+1r8gKPYYwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFXfQ6AY B3VRPLGKbKVQX236mCBFMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg4RDQvMkY1OEU0NzIyRTUwMTFFQ0EwNEI2QzI1QzRGOUFFMDIvQkY5Nzc5MUM0 QjZDMTFGMDg0M0QzNTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnSdwDBABnSd4wDQYJKoZIhvcNAQELBQADggEBAD3zwi1+ DaR6iwXHcrSkbQYw2bLbRcGNbedzpZipUJCVRmKYRKqJoX5+1y2l2zHIh8eRZTrJ 2oFVtaRfdraxh9W7lHuZmN6o1jaEJt9XCdjyeTinNiQl4qQo1J221o4zhHA0rWS5 +8rM2zfjMgxOc/l/f00SWpozzdcMoJoIPC1s2DFbfSDPQinLao1doKAMA9io+Jsz w2j0a63K/xNGb3uXavjwhvKLVOtEfI9UYbgb0zmMT/6o0qKc2q1bsfJHwDSb/sYx Tfdv0+Oi4BVg84fG9a51mPLwupQR30r0zy7Dk12bhsRF9La9z5eevWX4xmy6ZLVC /wkAJNymjf7Fgpw= -----END CERTIFICATE-----Generated at Wed Jun 18 19:43:45 2025 by rpki-client