$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/CA455C5CE0B311ECBC9BEA63C4F9AE02.roa File: CA455C5CE0B311ECBC9BEA63C4F9AE02.roa (raw, json) Hash identifier: +ZSBEXRcgClmiO74ln8lB46inGp0vsN6jKOzaxEdX6k= Subject key identifier: 32:F3:CB:B5:E4:9C:36:01:04:B9:5C:1D:29:34:A1:E0:FD:F0:05:70 Certificate issuer: /CN=A917F4F2/serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8 Certificate serial: 02E4 Authority key identifier: 5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/CA455C5CE0B311ECBC9BEA63C4F9AE02.roa Signing time: Tue 13 May 2025 01:28:50 +0000 ROA not before: Tue 13 May 2025 01:28:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136471 IP address blocks: 103.89.73.0/24 maxlen: 24 103.179.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 740 (0x2e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4F2, serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8 Validity Not Before: May 13 01:28:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6822a051-b3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:83:51:50:0d:81:7d:bb:1e:41:e4:bf:dd: 92:f2:79:96:83:97:be:26:2a:85:15:7c:69:a7:bd: fb:4a:6f:f2:ad:9e:4a:9f:99:6c:c4:78:f7:93:8f: 38:ea:16:8e:38:c6:a4:3e:6f:e6:76:2b:04:81:77: 2c:27:a8:23:d9:d6:7f:c3:1c:d2:56:7c:43:3f:b8: fa:35:e1:f0:75:51:58:7d:e1:1c:0b:74:18:2f:f5: a9:2e:42:16:65:87:21:2f:24:02:ed:94:d7:a3:fe: 0b:fd:e9:72:80:25:b5:21:9f:01:47:54:c2:7f:fe: bc:1e:db:4f:65:9e:07:36:6e:0f:bb:73:6b:49:3f: 7d:0a:31:c2:a2:e2:af:16:5a:d1:da:65:cf:39:7c: 59:cc:92:0c:18:f0:42:3e:d0:e8:a5:6d:01:7b:c7: e9:a4:c2:e3:b0:c0:4e:7c:73:a7:ce:3a:8f:83:bb: 81:4e:cd:a1:d9:6d:28:b4:e1:7b:d2:31:aa:ff:8a: 42:5f:b2:15:83:d9:ea:75:58:ac:81:90:df:06:d9: 9d:fa:bb:9f:45:8b:e0:5a:cf:4d:da:a0:c8:a1:1a: 40:10:b4:ec:9a:ca:54:40:fa:8d:71:f3:cc:58:f6: 5f:ef:48:75:1c:ba:99:3c:53:7b:e8:c9:dd:e9:18: 78:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F3:CB:B5:E4:9C:36:01:04:B9:5C:1D:29:34:A1:E0:FD:F0:05:70 X509v3 Authority Key Identifier: keyid:5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/CA455C5CE0B311ECBC9BEA63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.89.73.0/24 103.179.116.0/24 Signature Algorithm: sha256WithRSAEncryption 29:10:34:43:a1:fc:49:67:f0:15:8b:22:5c:52:e5:f5:65:4e: 6a:84:34:0c:75:a8:94:10:ab:a9:fe:7b:0b:66:c8:6c:50:1c: 63:f1:ef:90:a1:61:e2:3e:86:54:e4:f2:19:51:7e:2a:ee:83: 35:de:5a:6c:17:89:be:e0:46:3f:84:da:90:0d:60:4c:85:3e: 6b:94:f5:67:0b:44:c5:5e:27:7f:d5:d8:ac:86:52:e7:3a:a4: 9a:bf:11:52:05:49:31:e2:c5:e4:69:8f:eb:83:90:21:19:7f: fd:f1:b4:53:32:f4:27:75:9f:e6:82:f9:3d:b7:3d:85:f8:db: b3:da:72:01:2c:fa:c9:ea:60:32:16:00:e1:15:5e:17:22:e5: 75:07:b5:67:f9:c3:b9:58:58:7f:c9:84:a2:1a:0c:27:6c:03: d8:54:1f:3e:84:53:4c:b8:e6:0c:fb:18:5a:f4:58:04:8c:e3: 1e:c9:3c:03:13:4a:56:d5:ce:6f:a1:c9:e6:8d:7a:81:54:3c: 30:e0:91:cc:67:e6:c4:33:68:90:e7:8d:14:e0:73:82:bf:6a: 71:e3:6e:7c:1e:1a:84:f4:f5:82:29:d9:ee:c5:e7:2c:f5:b8: 84:05:89:5b:02:1c:68:3b:aa:0e:8c:44:bd:94:b2:8f:fc:75: 2e:5f:7c:35 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RjIxMTAvBgNVBAUTKDVDQkNGQkNGOUY0MDYzQTc5ODAyMkE4RjFFMjY5RkJE RkVBMzZGRjgwHhcNMjUwNTEzMDEyODUwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODIyYTA1MS1iM2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIWDUVANgX27HkHkv92S8nmWg5e+JiqFFXxpp737Sm/yrZ5Kn5lsxHj3k484 6haOOMakPm/mdisEgXcsJ6gj2dZ/wxzSVnxDP7j6NeHwdVFYfeEcC3QYL/WpLkIW ZYchLyQC7ZTXo/4L/elygCW1IZ8BR1TCf/68HttPZZ4HNm4Pu3NrST99CjHCouKv FlrR2mXPOXxZzJIMGPBCPtDopW0Be8fppMLjsMBOfHOnzjqPg7uBTs2h2W0otOF7 0jGq/4pCX7IVg9nqdVisgZDfBtmd+rufRYvgWs9N2qDIoRpAELTsmspUQPqNcfPM WPZf70h1HLqZPFN76Mnd6Rh4EQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDLzy7Xk nDYBBLlcHSk0oeD98AVwMB8GA1UdIwQYMBaAFFy8+8+fQGOnmAIqjx4mn73+o2/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjRGMi8zNEQ1NTQzMkUw QUYxMUVDODI5MDJGNkRDNEY5QUUwMi9YTHo3ejU5QVk2ZVlBaXFQSGlhZnZmNmpi X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hMejd6NTlBWTZlWUFpcVBIaWFmdmY2amJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Y0RjIvMzRENTU0MzJFMEFGMTFFQzgyOTAyRjZEQzRGOUFFMDIvQ0E0NTVDNUNF MEIzMTFFQ0JDOUJFQTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnWUkDBABns3QwDQYJKoZIhvcNAQELBQADggEBACkQNEOh /Eln8BWLIlxS5fVlTmqENAx1qJQQq6n+ewtmyGxQHGPx75ChYeI+hlTk8hlRfiru gzXeWmwXib7gRj+E2pANYEyFPmuU9WcLRMVeJ3/V2KyGUuc6pJq/EVIFSTHixeRp j+uDkCEZf/3xtFMy9Cd1n+aC+T23PYX427PacgEs+snqYDIWAOEVXhci5XUHtWf5 w7lYWH/JhKIaDCdsA9hUHz6EU0y45gz7GFr0WASM4x7JPAMTSlbVzm+hyeaNeoFU PDDgkcxn5sQzaJDnjRTgc4K/anHjbnweGoT09YIp2e7F5yz1uIQFiVsCHGg7qg6M RL2Uso/8dS5ffDU= -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:17 2025 by rpki-client