$ rpki-client -vvf rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/72CE4D80958411EEB3748B58C4F9AE02.roa File: 72CE4D80958411EEB3748B58C4F9AE02.roa (raw, json) Hash identifier: GyK0WIBreUywAdxh5kO624MwwPbx0zTO9wpPeKdWbNg= Subject key identifier: 3E:52:45:B9:A7:62:C6:61:7C:9C:50:0F:79:3B:F5:13:D2:AE:5B:18 Certificate issuer: /CN=A91957D1/serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6 Certificate serial: 0123 Authority key identifier: 90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/72CE4D80958411EEB3748B58C4F9AE02.roa Signing time: Fri 13 Jun 2025 03:54:43 +0000 ROA not before: Fri 13 Jun 2025 03:54:43 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 58580 IP address blocks: 103.54.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91957D1, serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6 Validity Not Before: Jun 13 03:54:43 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=684ba103-b9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e8:ae:37:a9:22:a8:b1:10:d0:c7:42:34:65: e8:92:96:b0:6b:db:a8:aa:b2:5e:a5:d8:76:6f:0c: 23:87:76:64:ed:96:e7:c0:96:67:fb:14:77:f6:a7: b4:84:4f:89:65:25:47:6a:98:af:00:46:71:9f:01: 91:9c:bd:fa:ad:41:82:68:b9:f7:6d:b5:ea:6a:dc: b6:e4:69:eb:9d:1b:13:ef:96:7e:73:b3:84:8f:70: 43:a7:a8:b0:bc:02:53:b9:fa:75:aa:1d:fd:78:dc: 9f:d3:d6:09:9e:df:9b:eb:d9:33:66:cd:7d:9e:a6: aa:93:23:86:ad:c2:a8:fd:40:d3:f2:cb:6c:14:ff: 14:8d:37:a8:97:8e:1e:d6:65:1d:97:f0:b1:94:51: f5:db:5b:c8:fa:ef:11:15:40:71:75:5a:34:35:49: 68:07:05:77:94:bc:d9:a9:f4:fc:6c:2e:8e:db:14: 38:2b:da:48:42:12:28:20:f3:73:f1:52:67:e6:e3: 49:33:05:7d:47:5e:7e:4e:eb:46:6b:c4:3b:da:93: e0:bf:36:cb:24:4b:4f:4b:66:a4:d6:e4:58:c0:94: b0:dd:92:4f:39:56:8b:ae:ca:3f:8b:97:c1:41:71: de:f1:23:10:37:c0:d0:f7:e1:22:ac:84:73:e3:d8: 07:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:52:45:B9:A7:62:C6:61:7C:9C:50:0F:79:3B:F5:13:D2:AE:5B:18 X509v3 Authority Key Identifier: keyid:90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/72CE4D80958411EEB3748B58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.54.232.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:48:44:1e:7a:4b:3e:6a:74:a0:bd:a9:98:2a:c7:cc:4c:8a: 43:ca:a9:37:17:67:96:c9:ab:76:98:03:0d:7d:75:6e:a6:c2: 51:55:03:f2:8c:4f:2b:8c:64:7c:03:ae:71:28:92:a0:35:8c: f7:85:0e:74:c4:8f:9c:dc:4a:f0:d6:b3:87:f5:5d:e6:ad:d8: 0c:85:d2:cd:a2:10:54:b8:05:8c:84:38:57:b6:df:c3:92:a7: c2:52:18:81:74:53:0f:5d:70:f8:71:0a:99:60:22:13:c6:93: 1a:29:9c:8a:53:30:2c:d7:45:c4:5a:c8:e0:bf:6b:9f:89:62: da:e8:df:64:ea:f8:3c:31:db:b2:c0:e7:aa:c4:0c:93:d5:8f: 47:a9:e5:c9:11:95:c8:24:82:9d:77:8b:de:cc:e3:f0:ce:2a: b7:0d:62:06:3d:d1:99:ca:f6:73:2e:50:30:ee:c7:17:09:52: 52:6f:65:66:71:c8:1e:07:16:7b:53:1a:1f:e9:ad:8b:55:63: 6c:07:5b:73:e3:65:94:8b:77:b9:03:6f:0a:5d:49:60:b4:23: 11:c6:c9:e6:b2:2d:21:08:0e:f6:55:0d:92:fe:07:1e:11:b7: d7:ed:f8:ad:64:7a:06:83:d8:14:64:87:99:9d:59:6e:f2:1b: 14:59:7d:d9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU3RDExMTAvBgNVBAUTKDkwMzdDMEIyOUUzNzA5MkE4Mzg1MkNFNEI4ODVCNzc2 QTdDMUUzQjYwHhcNMjUwNjEzMDM1NDQzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRiYTEwMy1iOWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uiuN6kiqLEQ0MdCNGXokpawa9uoqrJepdh2bwwjh3Zk7ZbnwJZn+xR39qe0 hE+JZSVHapivAEZxnwGRnL36rUGCaLn3bbXqaty25GnrnRsT75Z+c7OEj3BDp6iw vAJTufp1qh39eNyf09YJnt+b69kzZs19nqaqkyOGrcKo/UDT8stsFP8UjTeol44e 1mUdl/CxlFH121vI+u8RFUBxdVo0NUloBwV3lLzZqfT8bC6O2xQ4K9pIQhIoIPNz 8VJn5uNJMwV9R15+TutGa8Q72pPgvzbLJEtPS2ak1uRYwJSw3ZJPOVaLrso/i5fB QXHe8SMQN8DQ9+EirIRz49gHVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD5SRbmn YsZhfJxQD3k79RPSrlsYMB8GA1UdIwQYMBaAFJA3wLKeNwkqg4Us5LiFt3anweO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTdEMS9GMDUzNzc5NDkz QkQxMUVFODFGODBBNTJDNEY5QUUwMi9rRGZBc3A0M0NTcURoU3prdUlXM2RxZkI0 N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tEZkFzcDQzQ1NxRGhTemt1SVczZHFmQjQ3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTU3RDEvRjA1Mzc3OTQ5M0JEMTFFRTgxRjgwQTUyQzRGOUFFMDIvNzJDRTREODA5 NTg0MTFFRUIzNzQ4QjU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnNugwDQYJKoZIhvcNAQELBQADggEBAC5IRB56Sz5qdKC9 qZgqx8xMikPKqTcXZ5bJq3aYAw19dW6mwlFVA/KMTyuMZHwDrnEokqA1jPeFDnTE j5zcSvDWs4f1Xeat2AyF0s2iEFS4BYyEOFe238OSp8JSGIF0Uw9dcPhxCplgIhPG kxopnIpTMCzXRcRayOC/a5+JYtro32Tq+Dwx27LA56rEDJPVj0ep5ckRlcgkgp13 i97M4/DOKrcNYgY90ZnK9nMuUDDuxxcJUlJvZWZxyB4HFntTGh/prYtVY2wHW3Pj ZZSLd7kDbwpdSWC0IxHGyeayLSEIDvZVDZL+Bx4Rt9ft+K1kegaD2BRkh5mdWW7y GxRZfdk= -----END CERTIFICATE-----Generated at Sun Jun 15 09:52:44 2025 by rpki-client