$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/D6250A324B6C11F094D55267C4F9AE02.roa File: D6250A324B6C11F094D55267C4F9AE02.roa (raw, json) Hash identifier: vgP57A+naUh4X2W7H7ghSJjYhOBFJArEb0Hbvmd08w0= Subject key identifier: 9E:65:EB:10:39:6C:98:C4:44:66:E2:09:04:3A:90:1E:89:24:53:A9 Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Certificate serial: 04E8 Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/D6250A324B6C11F094D55267C4F9AE02.roa Signing time: Tue 17 Jun 2025 11:18:47 +0000 ROA not before: Tue 17 Jun 2025 11:18:47 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 9304 IP address blocks: 103.73.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Validity Not Before: Jun 17 11:18:47 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=68514f17-454a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9f:95:c0:5f:60:56:b5:a3:fd:8e:b3:a6:be: 03:28:f6:43:b2:39:50:09:ea:1a:11:91:ac:8d:9b: e5:e7:9b:85:30:f5:f7:21:fd:5c:46:9f:12:22:1d: b1:e2:02:96:c1:3d:14:c6:32:47:02:27:09:42:a8: fb:97:58:1d:a0:45:14:05:c0:a7:06:9b:d1:42:13: d7:27:34:b2:b2:30:5e:97:3a:39:1b:d9:74:66:60: 10:1f:50:93:89:ab:02:1d:15:86:0b:1b:42:f2:04: 07:90:c5:c9:42:dc:45:e4:36:eb:11:2f:65:40:f5: f3:ba:a1:92:6e:b8:23:23:0d:20:72:4b:52:92:fe: 1f:52:54:50:6d:6e:8a:66:a4:2e:d3:83:b7:a2:7a: 11:52:a9:a4:8f:81:37:98:33:bf:74:d9:9b:a3:63: ca:3c:c2:c0:04:6d:3e:5f:ab:8f:ff:ab:5a:b0:62: 18:4d:6f:4b:68:61:44:87:7b:b9:bb:aa:8a:b0:c3: c6:d7:d1:36:1f:75:63:4f:aa:cc:44:2c:fb:d7:98: e0:57:9a:7e:8b:53:81:14:48:d9:98:da:48:45:88: 05:4e:e9:7c:12:0c:76:ad:ff:8f:a5:19:67:a1:c8: a9:c1:2f:7f:b5:6d:03:ba:13:ac:8d:20:cf:a4:46: 7d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:65:EB:10:39:6C:98:C4:44:66:E2:09:04:3A:90:1E:89:24:53:A9 X509v3 Authority Key Identifier: keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/D6250A324B6C11F094D55267C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.73.221.0/24 Signature Algorithm: sha256WithRSAEncryption bb:89:d6:0e:ca:58:39:ab:cf:f1:02:fb:dc:f1:ac:b4:90:02: d1:ff:6c:c4:50:70:00:9b:40:c0:af:fe:c7:f6:c2:be:2d:23: 17:e1:28:27:8d:1a:b5:83:2e:89:9a:4a:2a:0a:54:5d:41:05: a7:68:7f:3f:d3:de:74:c4:2a:28:06:77:f0:4c:71:b2:9c:57: e8:3f:90:34:60:60:49:ba:dd:69:f0:cd:e7:24:be:bf:cd:7b: 39:36:af:f3:ee:d4:76:a9:a5:8e:91:be:1f:61:9a:ce:ff:7f: e6:b7:39:92:07:6f:a2:87:07:bb:43:31:41:b3:4f:17:b7:b3: 67:e3:95:b3:5e:1a:0c:c9:68:71:52:1d:15:58:d1:6b:7d:df: 96:3f:d2:3b:0c:18:1f:e2:5f:c6:40:b1:02:ba:00:b0:98:ff: b8:ba:74:55:12:d5:cc:0c:80:06:7a:3a:58:30:2d:59:1b:6d: 3b:6b:53:0a:c6:e5:63:1e:f5:8b:4b:2f:a5:df:53:98:55:87: 6a:58:0b:e0:96:37:bf:e4:02:67:ea:9b:93:1a:6e:17:b2:31: a2:4b:19:ed:74:cf:06:bb:d6:a8:66:19:8e:e9:7d:31:a8:e1: 64:36:5e:d5:b9:39:83:26:1f:07:37:86:6f:7b:14:0c:30:a3: 6b:33:7a:61 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew OTA2RkVEODIwHhcNMjUwNjE3MTExODQ3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUxNGYxNy00NTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6p+VwF9gVrWj/Y6zpr4DKPZDsjlQCeoaEZGsjZvl55uFMPX3If1cRp8SIh2x 4gKWwT0UxjJHAicJQqj7l1gdoEUUBcCnBpvRQhPXJzSysjBelzo5G9l0ZmAQH1CT iasCHRWGCxtC8gQHkMXJQtxF5DbrES9lQPXzuqGSbrgjIw0gcktSkv4fUlRQbW6K ZqQu04O3onoRUqmkj4E3mDO/dNmbo2PKPMLABG0+X6uP/6tasGIYTW9LaGFEh3u5 u6qKsMPG19E2H3VjT6rMRCz715jgV5p+i1OBFEjZmNpIRYgFTul8Egx2rf+PpRln ocipwS9/tW0DuhOsjSDPpEZ9iQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ5l6xA5 bJjERGbiCQQ6kB6JJFOpMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg4RDQvMkY1OEU0NzIyRTUwMTFFQ0EwNEI2QzI1QzRGOUFFMDIvRDYyNTBBMzI0 QjZDMTFGMDk0RDU1MjY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnSd0wDQYJKoZIhvcNAQELBQADggEBALuJ1g7KWDmrz/EC +9zxrLSQAtH/bMRQcACbQMCv/sf2wr4tIxfhKCeNGrWDLomaSioKVF1BBadofz/T 3nTEKigGd/BMcbKcV+g/kDRgYEm63Wnwzeckvr/Nezk2r/Pu1HappY6Rvh9hms7/ f+a3OZIHb6KHB7tDMUGzTxe3s2fjlbNeGgzJaHFSHRVY0Wt935Y/0jsMGB/iX8ZA sQK6ALCY/7i6dFUS1cwMgAZ6OlgwLVkbbTtrUwrG5WMe9YtLL6XfU5hVh2pYC+CW N7/kAmfqm5MabheyMaJLGe10zwa71qhmGY7pfTGo4WQ2XtW5OYMmHwc3hm97FAww o2szemE= -----END CERTIFICATE-----Generated at Thu Jun 19 19:40:57 2025 by rpki-client