$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/4CF19A6EAEDC11EF99753F71C4F9AE02.roa File: 4CF19A6EAEDC11EF99753F71C4F9AE02.roa (raw, json) Hash identifier: PfT2gUtvmaQ5ysA5Tk+EQ/4QCBmSm12o3beYYarK2gM= Subject key identifier: 67:79:C0:30:1A:94:2C:8C:08:6A:00:D8:C4:66:5E:67:F6:CB:D0:08 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 1133 Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/4CF19A6EAEDC11EF99753F71C4F9AE02.roa Signing time: Mon 09 Jun 2025 01:08:10 +0000 ROA not before: Mon 09 Jun 2025 01:08:10 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 0 IP address blocks: 103.140.8.0/23 maxlen: 23 103.140.8.0/24 maxlen: 24 103.149.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4403 (0x1133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Jun 9 01:08:10 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=684633fa-a140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:b8:c0:bf:b3:c7:3d:12:3a:65:c1:a5:e9: 17:64:c1:03:c8:e0:34:a9:ab:8d:e3:d6:11:6b:5d: 20:b7:e5:98:c5:68:db:ac:ec:9d:dd:af:da:df:93: 34:c1:bc:5c:4b:66:9f:43:4f:96:b2:6b:ae:10:9b: df:18:7d:c0:13:fc:7b:1a:9c:f6:01:75:7c:06:8b: c1:6c:d1:63:5d:3b:90:03:b3:f0:e5:96:81:66:b8: 09:8e:2b:05:a4:a5:bc:fb:c9:71:59:9f:1f:4f:c1: dc:23:08:e5:51:ab:f7:c5:a1:74:1f:04:f7:40:e7: 50:e3:88:82:c3:38:bd:1c:cc:e7:7e:2a:f7:b5:75: a5:b8:9b:18:31:15:03:1a:2e:b6:49:e8:af:ee:1b: b3:86:9e:eb:b1:de:e0:4b:f8:d5:da:d4:3d:6d:2a: fd:d3:52:98:bd:79:0b:0c:35:32:79:77:e1:dc:52: 50:65:2c:fd:12:93:9d:a6:0e:51:c8:d4:65:ab:bb: 5f:63:5f:ef:69:f3:59:68:f9:11:8b:9c:b6:a0:46: e3:bb:f2:55:a3:b5:61:dd:db:9e:94:84:d4:3d:b8: 58:a5:5c:26:a4:41:c8:d6:db:44:46:92:19:fc:a5: 4b:e8:25:95:39:93:e7:49:36:a7:bc:b5:e5:4e:ba: d1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:79:C0:30:1A:94:2C:8C:08:6A:00:D8:C4:66:5E:67:F6:CB:D0:08 X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/4CF19A6EAEDC11EF99753F71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.8.0/23 103.149.144.0/23 Signature Algorithm: sha256WithRSAEncryption a0:55:52:de:2b:d4:f7:7a:5d:fa:39:ca:6e:65:a7:5b:48:97: 71:ef:09:78:59:29:67:02:86:75:b3:28:09:4b:66:4b:88:2f: 86:cf:a2:1d:b5:9c:3f:05:f7:b3:3b:f0:b8:a8:43:77:5b:37: 3d:8c:86:38:04:bb:b1:87:ea:a5:d9:30:9d:d7:60:d4:ca:35: 6d:5f:f3:29:ac:b3:bb:c1:87:4b:ab:7f:6a:ab:93:32:9e:fe: 13:37:d1:af:83:f1:5b:df:87:56:d5:e3:f5:53:1d:47:6b:12: 1a:96:8c:1f:01:8b:c8:ad:fe:19:d5:4b:aa:b9:00:7d:37:5c: 47:90:0e:f8:dc:de:c9:cb:5d:ba:5f:e7:da:f9:51:fc:56:ff: 5b:fc:a6:70:da:24:f7:e3:ee:95:f3:40:05:8a:af:c3:13:af: 37:24:a9:37:dc:cf:51:ea:88:e1:1f:d9:d1:5a:ee:84:bd:32: 9b:fc:07:cf:db:90:bd:12:b3:f9:c6:c2:2c:26:e0:67:2e:9c: ad:38:0e:9b:5b:70:43:f2:1b:21:41:5b:63:93:a5:92:05:52: 3d:b8:a1:c8:2a:3c:7f:06:a0:09:a4:4b:ec:7e:6f:dd:88:31: 2f:a9:b1:03:ee:0c:07:3b:e8:e8:23:a0:08:89:38:8a:3f:a9: ba:f9:0c:b1 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICETMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjUwNjA5MDEwODEwWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ2MzNmYS1hMTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJG4wL+zxz0SOmXBpekXZMEDyOA0qauN49YRa10gt+WYxWjbrOyd3a/a35M0 wbxcS2afQ0+WsmuuEJvfGH3AE/x7Gpz2AXV8BovBbNFjXTuQA7Pw5ZaBZrgJjisF pKW8+8lxWZ8fT8HcIwjlUav3xaF0HwT3QOdQ44iCwzi9HMznfir3tXWluJsYMRUD Gi62Seiv7huzhp7rsd7gS/jV2tQ9bSr901KYvXkLDDUyeXfh3FJQZSz9EpOdpg5R yNRlq7tfY1/vafNZaPkRi5y2oEbju/JVo7Vh3duelITUPbhYpVwmpEHI1ttERpIZ /KVL6CWVOZPnSTanvLXlTrrRMQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGd5wDAa lCyMCGoA2MRmXmf2y9AIMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvNENGMTlBNkVB RURDMTFFRjk5NzUzRjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnjAgDBAFnlZAwDQYJKoZIhvcNAQELBQADggEBAKBVUt4r 1Pd6Xfo5ym5lp1tIl3HvCXhZKWcChnWzKAlLZkuIL4bPoh21nD8F97M78LioQ3db Nz2MhjgEu7GH6qXZMJ3XYNTKNW1f8ymss7vBh0urf2qrkzKe/hM30a+D8Vvfh1bV 4/VTHUdrEhqWjB8Bi8it/hnVS6q5AH03XEeQDvjc3snLXbpf59r5UfxW/1v8pnDa JPfj7pXzQAWKr8MTrzckqTfcz1HqiOEf2dFa7oS9Mpv8B8/bkL0Ss/nGwiwm4Gcu nK04DptbcEPyGyFBW2OTpZIFUj24ocgqPH8GoAmkS+x+b92IMS+psQPuDAc76Ogj oAiJOIo/qbr5DLE= -----END CERTIFICATE-----Generated at Sun Jun 15 10:25:27 2025 by rpki-client