$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/4CDACDE4623711EA981B4B0DC4F9AE02.roa File: 4CDACDE4623711EA981B4B0DC4F9AE02.roa (raw, json) Hash identifier: 88hI432trJEvkk5tFX685ctlcqYgD99t/33EyCKQ5Xw= Subject key identifier: E1:C7:DE:A5:5E:B5:17:B7:2A:AF:0D:F3:D9:5F:19:81:CF:AB:72:2B Certificate issuer: /CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Certificate serial: 0B90 Authority key identifier: 58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/4CDACDE4623711EA981B4B0DC4F9AE02.roa Signing time: Sat 02 Aug 2025 19:30:08 +0000 ROA not before: Sat 02 Aug 2025 19:30:07 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 396982 IP address blocks: 103.20.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2960 (0xb90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7D85, serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Validity Not Before: Aug 2 19:30:07 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=688e673f-3be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:76:49:63:d6:5c:b0:dc:18:dd:3e:19:86:9e: d9:5c:20:39:8a:20:07:c8:64:89:71:ec:40:bf:d2: bc:9f:88:f0:64:81:f1:0f:09:bc:40:1a:a4:6d:c7: 0a:1c:21:0f:dc:69:6c:b2:77:c9:1e:3d:d3:a2:17: 48:8d:51:43:b1:c3:a6:e8:f5:53:b9:fa:d6:7e:e7: aa:07:1a:4c:67:1c:80:5c:22:4b:79:f2:91:4b:00: d3:2d:b3:f5:c8:39:7f:c0:20:38:bd:77:8f:af:b3: 13:32:69:ed:92:0a:f8:4e:ff:84:a6:16:9b:1c:4d: e0:80:ea:a7:9a:c5:3a:18:41:09:b3:fc:56:4b:d1: 5a:17:7a:77:88:ff:bf:93:8d:71:a3:98:c7:3e:ee: f9:37:6b:33:19:59:67:49:ec:ab:cd:7b:c9:a4:f0: 00:b5:63:d0:df:0a:39:5e:37:8c:a8:c7:0b:95:6a: 3f:e0:32:63:0d:94:d2:6b:d3:b6:35:55:d7:08:a4: ab:42:82:cb:d7:55:fd:f4:79:d9:a3:cf:06:9e:5e: ef:08:91:64:28:9f:5e:65:1f:d0:24:04:c6:61:d0: ba:88:00:70:74:0c:a5:de:6e:3f:71:98:c9:47:46: 15:9d:ee:a2:98:90:49:dd:7b:0f:a5:6f:a9:e6:9d: 9b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C7:DE:A5:5E:B5:17:B7:2A:AF:0D:F3:D9:5F:19:81:CF:AB:72:2B X509v3 Authority Key Identifier: keyid:58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/4CDACDE4623711EA981B4B0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.245.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:a7:9a:26:4c:28:1d:48:55:72:a3:e1:4a:34:21:f9:96:98: 36:29:24:46:20:5a:58:e5:13:fa:b1:b9:da:2e:3b:da:c2:04: 8f:fa:4f:e8:b3:8c:e9:14:31:de:e6:96:8a:b9:9e:0f:69:3c: 29:61:de:51:be:38:15:20:84:b5:12:e5:e8:cd:85:7e:e9:b4: b6:13:8e:fc:44:48:4f:98:e8:11:2b:10:ce:82:08:a3:a4:e9: 66:76:4d:26:a2:85:20:e9:67:9f:4d:18:a4:02:75:45:3d:3a: 5d:29:04:cd:4a:f7:5d:fc:d7:72:15:21:96:dd:13:31:f4:33: bd:58:b6:49:75:44:08:82:77:92:e6:d8:1e:1d:c2:fb:67:6e: ec:62:d6:5a:60:38:ee:c3:5b:82:f4:bc:0f:bf:90:62:35:b6: 64:f7:22:1d:3e:e1:de:67:41:2b:89:f4:92:cb:96:c5:06:5a: 80:70:76:be:f7:ac:cf:c8:1b:5f:46:ca:e7:49:cc:85:e5:13: df:7e:f0:46:8d:4f:38:1c:fb:d9:58:04:be:6e:80:1b:df:ec: 05:82:55:f7:ae:13:18:34:35:9d:11:00:f8:66:87:36:c9:54: 41:1f:9c:24:55:57:9b:d2:d2:4d:99:04:46:a9:55:39:4a:43: a7:e3:02:19 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdEODUxMTAvBgNVBAUTKDU4MjdFNEJEODcwMjc3RURGMEVCMTA1NjNBOUI0MUMx RTRCRTdDODEwHhcNMjUwODAyMTkzMDA3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlNjczZi0zYmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63ZJY9ZcsNwY3T4Zhp7ZXCA5iiAHyGSJcexAv9K8n4jwZIHxDwm8QBqkbccK HCEP3GlssnfJHj3TohdIjVFDscOm6PVTufrWfueqBxpMZxyAXCJLefKRSwDTLbP1 yDl/wCA4vXePr7MTMmntkgr4Tv+EphabHE3ggOqnmsU6GEEJs/xWS9FaF3p3iP+/ k41xo5jHPu75N2szGVlnSeyrzXvJpPAAtWPQ3wo5XjeMqMcLlWo/4DJjDZTSa9O2 NVXXCKSrQoLL11X99HnZo88Gnl7vCJFkKJ9eZR/QJATGYdC6iABwdAyl3m4/cZjJ R0YVne6imJBJ3XsPpW+p5p2bXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOHH3qVe tRe3Kq8N89lfGYHPq3IrMB8GA1UdIwQYMBaAFFgn5L2HAnft8OsQVjqbQcHkvnyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Q4NS82MkNFRDQ4RTMz RTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2QtM3c2eEJXT3B0QndlUy1m SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dDZmt2WWNDZC0zdzZ4QldPcHRCd2VTLWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTdEODUvNjJDRUQ0OEUzM0UyMTFFQUE0OTMyODg0QzRGOUFFMDIvNENEQUNERTQ2 MjM3MTFFQTk4MUI0QjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnFPUwDQYJKoZIhvcNAQELBQADggEBADunmiZMKB1IVXKj 4Uo0IfmWmDYpJEYgWljlE/qxudouO9rCBI/6T+izjOkUMd7mloq5ng9pPClh3lG+ OBUghLUS5ejNhX7ptLYTjvxESE+Y6BErEM6CCKOk6WZ2TSaihSDpZ59NGKQCdUU9 Ol0pBM1K913813IVIZbdEzH0M71Ytkl1RAiCd5Lm2B4dwvtnbuxi1lpgOO7DW4L0 vA+/kGI1tmT3Ih0+4d5nQSuJ9JLLlsUGWoBwdr73rM/IG19GyudJzIXlE99+8EaN Tzgc+9lYBL5ugBvf7AWCVfeuExg0NZ0RAPhmhzbJVEEfnCRVV5vS0k2ZBEapVTlK Q6fjAhk= -----END CERTIFICATE-----Generated at Mon Aug 11 02:04:27 2025 by rpki-client