$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/13DE95F668FA11EFAE700D5FC4F9AE02.roa File: 13DE95F668FA11EFAE700D5FC4F9AE02.roa (raw, json) Hash identifier: CWmRoXyI8djvZbQWvBLpL+DLa+AiV1dhvDwiE3HLKt4= Subject key identifier: D6:EB:4B:BB:5C:B0:08:27:6E:8D:6B:BE:7D:21:A7:8A:37:51:76:AC Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Certificate serial: 0C0F Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/13DE95F668FA11EFAE700D5FC4F9AE02.roa Signing time: Thu 24 Jul 2025 12:09:28 +0000 ROA not before: Thu 24 Jul 2025 12:09:28 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 131464 IP address blocks: 103.198.132.0/24 maxlen: 24 103.198.133.0/24 maxlen: 24 103.198.134.0/23 maxlen: 23 103.198.134.0/24 maxlen: 24 103.198.135.0/24 maxlen: 24 2403:60c0:100::/40 maxlen: 40 2403:60c0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3087 (0xc0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Validity Not Before: Jul 24 12:09:28 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68822277-f645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:23:07:07:5e:a0:a4:5c:93:6b:b8:a6:f0: c4:7f:1e:99:fd:fd:27:d0:90:fc:5e:06:59:54:6c: 19:15:12:d1:f1:e5:e8:36:02:ed:52:35:db:a1:39: 03:cb:4a:61:0b:17:53:ba:c0:77:26:f4:68:cc:e0: 82:93:dd:7b:8f:b5:de:96:3f:f4:9f:89:6e:d0:f5: 80:bc:ec:aa:df:c5:f7:73:dd:46:08:83:19:a5:d5: a8:9e:0f:d9:e9:55:50:30:d1:00:60:be:48:31:2e: 8d:14:5f:eb:ee:53:43:fe:0f:78:aa:8d:83:52:e4: 9e:c5:31:14:05:53:0b:6b:42:00:95:40:af:3f:68: 6d:f0:68:4b:b3:54:a0:02:68:1c:06:70:2f:c3:48: 02:5b:42:54:73:e7:59:bd:c2:d7:0e:d7:8f:85:1c: 85:4b:78:cc:3d:2a:f4:30:a2:ee:49:26:4b:d0:b3: 62:eb:1a:b0:23:f6:ca:9b:fa:f4:70:7a:ce:42:6c: 4e:38:d1:71:11:f3:57:85:92:95:02:60:83:68:0f: 03:41:f9:23:5a:a0:94:45:14:cf:25:0f:0b:0e:bc: a0:16:c4:8a:29:2c:38:0a:9e:7a:67:87:2a:5d:5f: c9:34:ec:71:9e:3b:0e:bc:4b:e4:fb:22:25:57:36: fb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EB:4B:BB:5C:B0:08:27:6E:8D:6B:BE:7D:21:A7:8A:37:51:76:AC X509v3 Authority Key Identifier: keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/13DE95F668FA11EFAE700D5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.198.132.0/22 IPv6: 2403:60c0:100::/40 Signature Algorithm: sha256WithRSAEncryption 02:42:ed:5d:66:dc:f8:e1:3f:d0:44:43:17:63:d0:cb:00:ae: 59:33:b2:51:e8:fc:84:eb:d9:b2:1f:e8:4c:19:41:ab:cd:16: 2d:39:cf:cb:dd:46:37:aa:97:f6:ae:8c:d2:b1:3e:58:73:6e: 0f:a7:73:9f:c6:00:5c:51:35:35:73:45:7b:a4:ba:3c:60:ad: d8:f0:94:a8:4a:a9:60:cc:5b:4d:d6:41:a4:e0:6e:79:a9:e8: 8f:3f:97:f4:87:6d:23:ee:93:f0:db:78:72:24:99:88:a5:49: b6:df:09:26:8c:7b:62:d0:0c:95:fd:86:f7:62:6e:d4:ab:e9: d7:3c:d1:7e:a9:05:06:ca:43:49:f5:77:3d:ee:aa:67:1b:82: 4e:f0:f0:c9:36:64:2c:37:63:b9:a4:1f:48:c4:b5:b7:95:53: fe:51:1c:b6:a9:ac:2a:78:d9:2e:b3:12:09:e8:8a:f3:65:69: 49:94:48:f9:d9:ac:ac:76:f6:06:42:02:4a:c7:4d:97:50:22: fb:72:06:a7:62:1e:6e:dd:07:61:69:bc:d1:2c:5b:1b:a8:ca: c8:29:cb:3b:5c:94:cf:41:3a:eb:cd:bc:4b:62:1e:0e:b9:7a: 54:60:b3:42:8e:9b:11:7c:28:51:f9:a6:e4:f4:ad:a9:75:3d: a0:27:04:71 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICDA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE2Q0YxMTAvBgNVBAUTKDgyOUYwRjQwODg0REQ5OTExMjEwMDVCMDdEMDlBMkNC RkZCNERFQzYwHhcNMjUwNzI0MTIwOTI4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgyMjI3Ny1mNjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcwjBwdeoKRck2u4pvDEfx6Z/f0n0JD8XgZZVGwZFRLR8eXoNgLtUjXboTkD y0phCxdTusB3JvRozOCCk917j7Xelj/0n4lu0PWAvOyq38X3c91GCIMZpdWong/Z 6VVQMNEAYL5IMS6NFF/r7lND/g94qo2DUuSexTEUBVMLa0IAlUCvP2ht8GhLs1Sg AmgcBnAvw0gCW0JUc+dZvcLXDtePhRyFS3jMPSr0MKLuSSZL0LNi6xqwI/bKm/r0 cHrOQmxOONFxEfNXhZKVAmCDaA8DQfkjWqCURRTPJQ8LDrygFsSKKSw4Cp56Z4cq XV/JNOxxnjsOvEvk+yIlVzb71wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNbrS7tc sAgnbo1rvn0hp4o3UXasMB8GA1UdIwQYMBaAFIKfD0CITdmREhAFsH0Josv/tN7G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTZDRi8yQ0FENTA4ODE5 QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJaRVNFQVd3ZlFtaXlfLTAz c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwOFBRSWhOMlpFU0VBV3dmUW1peV8tMDNzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTE2Q0YvMkNBRDUwODgxOUEyMTFFQUFFODExQzcxQzRGOUFFMDIvMTNERTk1RjY2 OEZBMTFFRkFFNzAwRDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAJnxoQwDgQCAAIwCAMGACQDYMABMA0GCSqGSIb3DQEBCwUA A4IBAQACQu1dZtz44T/QREMXY9DLAK5ZM7JR6PyE69myH+hMGUGrzRYtOc/L3UY3 qpf2rozSsT5Yc24Pp3OfxgBcUTU1c0V7pLo8YK3Y8JSoSqlgzFtN1kGk4G55qeiP P5f0h20j7pPw23hyJJmIpUm23wkmjHti0AyV/Yb3Ym7Uq+nXPNF+qQUGykNJ9Xc9 7qpnG4JO8PDJNmQsN2O5pB9IxLW3lVP+URy2qawqeNkusxIJ6IrzZWlJlEj52ays dvYGQgJKx02XUCL7cganYh5u3QdhabzRLFsbqMrIKcs7XJTPQTrrzbxLYh4OuXpU YLNCjpsRfChR+abk9K2pdT2gJwRx -----END CERTIFICATE-----Generated at Mon Aug 11 10:44:43 2025 by rpki-client