$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/521FC3D8E74211EE9A78EC6EC4F9AE02.roa File: 521FC3D8E74211EE9A78EC6EC4F9AE02.roa (raw, json) Hash identifier: qnpodXGcflZPtD15FKTFuLS1TSDTJxyYFld/5PeHVPQ= Subject key identifier: 6A:9C:68:8C:00:2D:6E:31:1C:5D:6D:D8:1A:C2:BB:0E:5B:A9:08:6C Certificate issuer: /CN=A91AB574/serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Certificate serial: 0105 Authority key identifier: EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/521FC3D8E74211EE9A78EC6EC4F9AE02.roa Signing time: Fri 01 Aug 2025 06:41:59 +0000 ROA not before: Fri 01 Aug 2025 06:41:59 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 9449 IP address blocks: 103.197.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB574, serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Validity Not Before: Aug 1 06:41:59 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=688c61b7-b8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:c0:95:d2:87:10:55:d5:1d:fe:c0:34:bd: 2f:83:85:2e:b8:e0:0a:57:85:8b:9a:0b:48:6b:b5: aa:95:c9:49:c4:40:b6:50:58:59:5e:d3:88:b5:8b: ac:ab:de:9b:99:e3:fa:c4:ae:e5:a7:2f:1e:d0:9d: e8:1a:fa:34:e6:0f:38:f5:7b:a7:e1:dc:b9:f0:90: af:3a:40:c0:c1:2e:0e:08:1c:bd:f4:1c:24:e2:74: 97:51:bc:d5:9a:1e:78:98:ed:8e:36:fd:6f:e2:49: b3:0d:6f:5a:77:68:92:a5:c4:ef:f7:b1:6d:0e:e2: 55:a4:6b:8a:3a:4c:c2:63:79:fd:78:f9:21:0a:40: 79:49:07:c3:7b:48:02:ef:ae:66:84:38:dd:98:03: 94:11:3a:ac:24:de:78:ec:5e:1b:e0:b4:55:b5:27: 34:16:b1:48:67:af:fb:dc:d3:f4:35:14:0c:d4:1a: fd:49:57:0e:c1:eb:c0:ed:a2:b2:b0:f5:5b:b5:b6: b5:f5:bc:09:a3:ef:d7:10:48:cb:a4:ba:b4:93:07: 94:e3:ec:ba:d9:4a:31:77:f2:63:f7:86:31:49:f0: 63:33:51:9e:df:d9:d2:32:b6:c8:e1:b3:e6:49:a3: a7:f9:b4:9c:67:fd:d1:62:6a:0e:3c:40:e9:10:7e: 14:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9C:68:8C:00:2D:6E:31:1C:5D:6D:D8:1A:C2:BB:0E:5B:A9:08:6C X509v3 Authority Key Identifier: keyid:EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/521FC3D8E74211EE9A78EC6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.252.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:54:92:6f:87:24:6b:09:8a:51:d7:f6:31:60:7d:02:48:a8: d5:0f:5b:8f:ee:7e:4e:b6:fb:26:e6:bc:37:20:62:47:1c:7c: ba:7a:58:e0:40:0d:cb:81:93:55:5c:cb:51:91:23:4d:08:a2: 76:64:e7:fd:4c:25:a5:7d:dc:ee:20:a8:58:d7:75:5d:87:44: 33:de:3a:01:9f:93:df:38:b7:ca:e9:bd:91:cb:35:26:55:ff: 06:ee:e2:07:f8:1c:3a:6d:4e:f4:f8:f1:eb:36:de:c2:d5:f7: 01:35:f3:2b:36:f9:84:69:d6:71:e9:ef:40:77:32:ef:04:70: 09:61:1b:01:9d:b9:9b:72:ee:43:e2:18:fe:23:08:ab:60:ec: 08:25:4f:86:98:8f:1f:99:78:cb:37:66:3d:c4:06:02:68:66: e0:de:d8:27:82:ad:7f:a2:de:be:32:ad:43:89:01:99:93:06: f6:0f:b6:88:e2:e2:55:6f:a5:c3:d2:7d:9b:a3:d8:29:f6:df: ac:a8:78:c3:3b:c1:f5:3f:0a:ec:f4:d2:5e:88:bd:c6:1a:fe: a8:c0:41:0d:b8:fe:95:6a:d2:22:af:3d:ee:b0:4c:10:99:fb: 7c:94:fc:49:68:37:d1:f4:24:8e:e7:24:35:fc:fb:9e:f3:23: 7d:d4:db:49 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI1NzQxMTAvBgNVBAUTKEVFNUEwQTBBMEQ1RTBGNUM2MjhEMUE3MDVCNUFDNjhG RUYyMEM0NkYwHhcNMjUwODAxMDY0MTU5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhjNjFiNy1iOGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxE7AldKHEFXVHf7ANL0vg4UuuOAKV4WLmgtIa7WqlclJxEC2UFhZXtOItYus q96bmeP6xK7lpy8e0J3oGvo05g849Xun4dy58JCvOkDAwS4OCBy99Bwk4nSXUbzV mh54mO2ONv1v4kmzDW9ad2iSpcTv97FtDuJVpGuKOkzCY3n9ePkhCkB5SQfDe0gC 765mhDjdmAOUETqsJN547F4b4LRVtSc0FrFIZ6/73NP0NRQM1Br9SVcOwevA7aKy sPVbtba19bwJo+/XEEjLpLq0kweU4+y62Uoxd/Jj94YxSfBjM1Ge39nSMrbI4bPm SaOn+bScZ/3RYmoOPEDpEH4UewIDAQABo4IClTCCApEwHQYDVR0OBBYEFGqcaIwA LW4xHF1t2BrCuw5bqQhsMB8GA1UdIwQYMBaAFO5aCgoNXg9cYo0acFtaxo/vIMRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjU3NC9GMDdFQkEyNkU3 NDExMUVFOTNFOEZDNkRDNEY5QUUwMi83bG9LQ2cxZUQxeGlqUnB3VzFyR2otOGd4 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdsb0tDZzFlRDF4aWpScHdXMXJHai04Z3hHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUI1NzQvRjA3RUJBMjZFNzQxMTFFRTkzRThGQzZEQzRGOUFFMDIvNTIxRkMzRDhF NzQyMTFFRTlBNzhFQzZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnxfwwDQYJKoZIhvcNAQELBQADggEBAB9Ukm+HJGsJilHX 9jFgfQJIqNUPW4/ufk62+ybmvDcgYkccfLp6WOBADcuBk1Vcy1GRI00IonZk5/1M JaV93O4gqFjXdV2HRDPeOgGfk984t8rpvZHLNSZV/wbu4gf4HDptTvT48es23sLV 9wE18ys2+YRp1nHp70B3Mu8EcAlhGwGduZty7kPiGP4jCKtg7AglT4aYjx+ZeMs3 Zj3EBgJoZuDe2CeCrX+i3r4yrUOJAZmTBvYPtoji4lVvpcPSfZuj2Cn236yoeMM7 wfU/Cuz00l6IvcYa/qjAQQ24/pVq0iKvPe6wTBCZ+3yU/EloN9H0JI7nJDX8+57z I33U20k= -----END CERTIFICATE-----Generated at Sat Aug 9 20:51:15 2025 by rpki-client