$ rpki-client -vvf rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/C59B1D6E0C1811EDA9B32927C4F9AE02.roa File: C59B1D6E0C1811EDA9B32927C4F9AE02.roa (raw, json) Hash identifier: mxX4AKL91owHWzEHb/qZfzEc1LLhMztNgoc1pmTwinI= Subject key identifier: 48:31:8D:BC:BD:55:97:90:92:53:1C:39:6B:2B:51:A1:A2:46:20:27 Certificate issuer: /CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B Certificate serial: 02A8 Authority key identifier: AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/C59B1D6E0C1811EDA9B32927C4F9AE02.roa Signing time: Thu 07 Aug 2025 02:38:11 +0000 ROA not before: Thu 07 Aug 2025 02:38:11 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 150000 IP address blocks: 103.190.138.0/23 maxlen: 23 103.190.138.0/24 maxlen: 24 103.190.139.0/24 maxlen: 24 2001:df0:ee40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F213, serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B Validity Not Before: Aug 7 02:38:11 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68941193-50dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:3e:45:0f:32:20:ac:8d:c9:08:ef:c2:1d: 8f:ce:fe:65:f4:d0:95:30:6a:3c:31:fa:9f:bf:f6: a5:29:79:03:bf:67:90:b2:d4:c4:8a:13:48:e3:f6: b9:52:6e:e2:63:40:6f:1c:fb:47:95:47:c5:ed:e9: 8b:1a:4c:67:64:b9:2d:a8:81:f6:42:5c:cb:c3:77: 76:8c:3d:82:ad:68:05:96:51:af:a2:4d:0c:94:4a: 7c:f8:52:18:40:9b:0b:a2:dc:94:19:c4:68:96:84: f6:01:a0:97:1f:4e:c7:93:9a:ad:a3:37:0a:aa:98: f4:5f:e7:e1:a6:11:48:c8:5e:64:5f:12:41:8f:e4: 9e:ef:ef:eb:8f:71:2d:d8:ef:a8:e8:53:29:e1:00: 5a:1a:31:db:63:9f:cc:62:2d:19:a2:89:57:e3:fa: ce:76:cb:b2:26:de:1f:98:38:f7:89:2f:bc:c2:12: 2a:61:5d:40:3e:fb:be:cc:8b:df:ae:e6:d3:99:c1: b7:c8:2c:f8:71:ff:d5:11:a4:f4:1b:24:09:6b:8d: 84:df:a4:43:21:57:12:24:05:3c:23:c1:fb:9c:89: f1:cc:b7:f7:db:a3:86:b0:d0:c0:9a:e7:17:24:4c: 65:9d:59:a4:cc:b0:c0:a7:20:16:0b:e4:ad:b8:af: ed:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:31:8D:BC:BD:55:97:90:92:53:1C:39:6B:2B:51:A1:A2:46:20:27 X509v3 Authority Key Identifier: keyid:AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/C59B1D6E0C1811EDA9B32927C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.138.0/23 IPv6: 2001:df0:ee40::/48 Signature Algorithm: sha256WithRSAEncryption 82:24:73:d8:32:74:3f:bc:51:2f:d7:3c:d2:cc:1f:11:d2:e1: 76:cf:8d:50:ef:71:7d:44:b5:8c:34:31:0e:2f:8e:3f:ce:5f: 37:85:c9:ea:09:be:eb:6d:fc:c4:c9:cb:5a:f5:7d:74:ad:37: 58:de:39:4d:52:89:c5:7f:c3:3c:9d:57:fa:47:c6:3a:c3:a4: 34:7a:00:74:90:d1:76:61:1d:6e:fd:1d:bd:7d:83:b9:df:e7: f7:45:f5:db:4c:57:aa:a5:5a:fb:52:d3:43:81:92:06:7a:5e: 4f:47:85:48:e7:fd:a7:02:bb:6c:40:23:00:bf:7c:24:c5:27: f9:d3:c4:48:e4:93:e4:91:de:ee:2c:9e:d8:2c:c8:12:31:19: ea:e2:e1:89:d7:65:da:a3:a6:39:c0:14:41:86:8a:30:71:c5: c5:93:31:92:36:3d:d5:89:02:9e:05:b0:64:71:b7:04:e8:e5: 05:bd:b2:b0:35:6e:40:c8:9b:9c:59:ab:50:34:ad:54:42:e1: 2a:0a:c8:48:40:4c:11:fa:ad:48:71:c4:3a:4b:6d:74:bb:cd: aa:ba:98:76:7e:62:3b:50:ff:e3:ba:10:55:cf:a1:2a:cf:70: 6f:b6:2a:64:26:a0:5f:ff:2c:7c:89:c6:05:84:9e:a8:5d:d4: 30:0f:69:15 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyMTMxMTAvBgNVBAUTKEFDQ0U4MkI1RURGNEEyMUMzMjAxQjhFMkI0MDAwQzgz MjQ1MTM1MEIwHhcNMjUwODA3MDIzODExWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk0MTE5My01MGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN4+RQ8yIKyNyQjvwh2Pzv5l9NCVMGo8Mfqfv/alKXkDv2eQstTEihNI4/a5 Um7iY0BvHPtHlUfF7emLGkxnZLktqIH2QlzLw3d2jD2CrWgFllGvok0MlEp8+FIY QJsLotyUGcRoloT2AaCXH07Hk5qtozcKqpj0X+fhphFIyF5kXxJBj+Se7+/rj3Et 2O+o6FMp4QBaGjHbY5/MYi0ZoolX4/rOdsuyJt4fmDj3iS+8whIqYV1APvu+zIvf rubTmcG3yCz4cf/VEaT0GyQJa42E36RDIVcSJAU8I8H7nInxzLf326OGsNDAmucX JExlnVmkzLDApyAWC+StuK/tzwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEgxjby9 VZeQklMcOWsrUaGiRiAnMB8GA1UdIwQYMBaAFKzOgrXt9KIcMgG44rQADIMkUTUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIxMy83MjM0RERDNDBD MTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9od3lBYmppdEFBTWd5UlJO UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JNNkN0ZTMwb2h3eUFiaml0QUFNZ3lSUk5Rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUYyMTMvNzIzNEREQzQwQzE2MTFFREI0MDFGNDI1QzRGOUFFMDIvQzU5QjFENkUw QzE4MTFFREE5QjMyOTI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnvoowDwQCAAIwCQMHACABDfDuQDANBgkqhkiG9w0BAQsF AAOCAQEAgiRz2DJ0P7xRL9c80swfEdLhds+NUO9xfUS1jDQxDi+OP85fN4XJ6gm+ 6238xMnLWvV9dK03WN45TVKJxX/DPJ1X+kfGOsOkNHoAdJDRdmEdbv0dvX2Dud/n 90X120xXqqVa+1LTQ4GSBnpeT0eFSOf9pwK7bEAjAL98JMUn+dPESOST5JHe7iye 2CzIEjEZ6uLhiddl2qOmOcAUQYaKMHHFxZMxkjY91YkCngWwZHG3BOjlBb2ysDVu QMibnFmrUDStVELhKgrISEBMEfqtSHHEOkttdLvNqrqYdn5iO1D/47oQVc+hKs9w b7YqZCagX/8sfInGBYSeqF3UMA9pFQ== -----END CERTIFICATE-----Generated at Wed Nov 5 15:44:19 2025 by rpki-client