$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0B7FD7B0740A11EFBDFF2C20C4F9AE02.roa File: 0B7FD7B0740A11EFBDFF2C20C4F9AE02.roa (raw, json) Hash identifier: oII56lvEAt0xCw5VmrtlJXDanLz+r+hCzhg/BLAzeKY= Subject key identifier: ED:04:02:B0:79:72:26:D5:F6:D5:C7:21:A4:64:0E:92:23:37:0C:D4 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4CD5 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0B7FD7B0740A11EFBDFF2C20C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:52:49 +0000 ROA not before: Thu 28 Aug 2025 14:52:49 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131411 IP address blocks: 103.232.60.0/22 maxlen: 22 2001:df4:d200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19669 (0x4cd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:52:49 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d40-c1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:91:17:67:1a:16:05:a0:5d:03:93:08:a7:24: ae:06:cb:25:c7:d7:e7:9a:65:66:29:ee:83:7f:9f: 67:0f:16:4c:10:3f:9c:87:65:ef:96:66:cc:0c:5c: 19:84:d4:d3:94:ef:dc:3b:55:46:fb:41:92:0d:5e: 4a:b1:ae:0d:05:e4:a1:d1:7a:9a:e4:9d:cd:45:3e: d0:b0:48:cf:d6:f7:77:6d:a7:3f:0f:15:06:11:bd: bb:41:a1:39:18:66:1d:bb:a9:d8:08:ef:fd:f8:e6: d7:62:92:0d:9b:4a:19:1a:fa:e5:bc:d0:28:b3:bf: 57:6a:e0:e7:e5:dc:f0:33:ef:5a:e4:e7:62:43:8b: 32:33:c8:fd:94:f7:dc:5a:b5:04:1c:d6:26:7c:0d: c3:dd:bd:bd:a9:0a:cc:b7:ff:f8:a5:de:de:d3:9c: aa:95:e3:86:4b:2a:09:b0:ef:5e:ec:3b:94:21:e0: 7c:5b:b2:55:c0:03:db:c9:da:86:2f:d5:12:c9:e4: b2:90:40:47:e3:ba:63:b5:5b:9a:d1:be:6a:43:9c: 32:41:83:05:ff:7e:93:b1:4c:21:6b:d3:b5:0e:0c: 69:bf:f3:8d:78:88:2a:2d:ab:ee:a6:60:cb:03:af: ad:ed:33:0c:d0:2f:97:86:40:ed:64:7f:a2:a0:d4: 13:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:04:02:B0:79:72:26:D5:F6:D5:C7:21:A4:64:0E:92:23:37:0C:D4 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0B7FD7B0740A11EFBDFF2C20C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.232.60.0/22 IPv6: 2001:df4:d200::/48 Signature Algorithm: sha256WithRSAEncryption b1:a1:be:c3:82:90:a6:9a:21:60:12:bb:af:77:51:a6:f0:51: 9f:3e:eb:24:6b:e1:77:c1:31:fc:fe:1f:63:08:d0:2f:eb:0a: 54:cf:43:19:34:47:8a:ca:dd:0c:90:0c:e6:fd:81:0c:14:29: 81:72:62:1b:19:18:08:1d:dc:5d:f9:21:2e:8b:89:42:76:1b: 26:de:b2:20:fb:81:ae:cd:02:ab:84:df:6b:3b:18:20:d4:0c: b6:ad:a2:d8:12:80:95:7a:4e:73:fe:65:c1:3f:12:a2:85:31: cf:3d:d5:e3:dc:2a:78:cb:3e:e1:60:17:94:9a:7a:49:86:e4: 9d:a6:8f:05:74:01:8b:9d:8e:e7:64:58:7c:c7:69:98:8c:ad: f9:68:38:0e:b3:9e:32:d8:4a:63:ed:d4:3b:c8:32:84:37:3b: ac:fb:b6:f1:0b:d7:bc:0a:db:1b:e9:91:56:e3:ce:ae:38:88: 39:3f:e4:ed:e8:2c:dd:1a:f8:f9:35:44:66:86:73:a0:6a:be: 84:a6:01:d8:c4:9f:95:88:6d:66:99:56:37:15:bf:e2:8f:ab: 73:04:5f:ec:a4:59:a0:91:8b:e4:89:9c:2c:94:3b:47:a9:f4: b8:6c:d5:fc:e3:6b:71:f2:82:35:11:35:b5:df:45:f0:87:24: df:7e:1f:21 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICTNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MjQ5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQ0MC1jMWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5EXZxoWBaBdA5MIpySuBsslx9fnmmVmKe6Df59nDxZMED+ch2XvlmbMDFwZ hNTTlO/cO1VG+0GSDV5Ksa4NBeSh0Xqa5J3NRT7QsEjP1vd3bac/DxUGEb27QaE5 GGYdu6nYCO/9+ObXYpINm0oZGvrlvNAos79XauDn5dzwM+9a5OdiQ4syM8j9lPfc WrUEHNYmfA3D3b29qQrMt//4pd7e05yqleOGSyoJsO9e7DuUIeB8W7JVwAPbydqG L9USyeSykEBH47pjtVua0b5qQ5wyQYMF/36TsUwha9O1Dgxpv/ONeIgqLavupmDL A6+t7TMM0C+XhkDtZH+ioNQT9wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFO0EArB5 cibV9tXHIaRkDpIjNwzUMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMEI3RkQ3QjA3 NDBBMTFFRkJERkYyQzIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJn6DwwDwQCAAIwCQMHACABDfTSADANBgkqhkiG9w0BAQsF AAOCAQEAsaG+w4KQppohYBK7r3dRpvBRnz7rJGvhd8Ex/P4fYwjQL+sKVM9DGTRH isrdDJAM5v2BDBQpgXJiGxkYCB3cXfkhLouJQnYbJt6yIPuBrs0Cq4TfazsYINQM tq2i2BKAlXpOc/5lwT8SooUxzz3V49wqeMs+4WAXlJp6SYbknaaPBXQBi52O52RY fMdpmIyt+Wg4DrOeMthKY+3UO8gyhDc7rPu28QvXvArbG+mRVuPOrjiIOT/k7egs 3Rr4+TVEZoZzoGq+hKYB2MSflYhtZplWNxW/4o+rcwRf7KRZoJGL5ImcLJQ7R6n0 uGzV/ONrcfKCNRE1td9F8Ick334fIQ== -----END CERTIFICATE-----Generated at Wed Nov 5 02:18:47 2025 by rpki-client