$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/EF66DDE4E46A11EB9552D31BC4F9AE02.roa File: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (raw, json) Hash identifier: ucL3j8TnFmy+7V5qbIqZDaLy79WcFoXLeH1a5In6i8E= Subject key identifier: 4C:75:58:A4:62:8F:09:E1:B6:9F:C9:46:A9:22:CD:9F:31:43:7E:D9 Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Certificate serial: 0FE0 Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/EF66DDE4E46A11EB9552D31BC4F9AE02.roa Signing time: Thu 20 Mar 2025 17:26:46 +0000 ROA not before: Thu 20 Mar 2025 17:26:46 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 138584 IP address blocks: 103.133.200.0/22 maxlen: 22 103.133.200.0/24 maxlen: 24 103.133.201.0/24 maxlen: 24 103.133.202.0/24 maxlen: 24 103.133.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4064 (0xfe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC22, serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Validity Not Before: Mar 20 17:26:46 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67dc4fd5-6e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:1b:f2:0c:8d:e6:2b:4f:17:d3:08:61:f3: c4:c2:c0:af:8d:72:0e:4d:9d:57:80:a7:1a:9e:de: 1a:bc:40:cb:91:8d:61:a1:66:9a:b0:87:d1:a2:6e: 3a:2f:6d:1a:f5:49:0e:3f:69:a1:6c:aa:d8:c1:4e: ec:1e:60:23:09:7c:bd:df:29:f5:cd:58:32:16:a7: 38:e6:1f:5e:0a:09:bf:09:a2:03:00:c8:db:a0:79: ac:fe:bd:0b:ee:10:e3:91:e7:42:9f:d8:c0:57:77: 32:da:71:62:b5:09:63:eb:6d:87:af:68:bb:b7:cd: a0:2a:6e:c6:dd:f8:76:ce:17:2e:8e:fe:01:7f:42: 6e:05:67:ca:67:7c:dd:5e:ff:1f:90:31:fe:e3:34: 0d:e8:d0:77:82:9f:82:bd:6d:43:21:a0:b7:b2:d9: 01:19:c2:c7:17:0e:fd:a5:83:a0:28:ac:3a:75:88: b5:38:8f:e8:7f:fb:5e:a0:8b:31:e2:97:32:fa:5c: 71:5c:f0:de:a9:dd:64:64:4f:38:cc:1d:7d:4c:12: c3:d7:40:16:1c:7b:ab:08:5d:24:ba:b4:d1:b6:eb: b1:29:02:4d:01:85:16:91:0c:54:76:06:59:1f:a7: 14:bc:01:cc:e5:2d:ec:01:e1:98:36:57:39:2c:ed: 76:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:75:58:A4:62:8F:09:E1:B6:9F:C9:46:A9:22:CD:9F:31:43:7E:D9 X509v3 Authority Key Identifier: keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/EF66DDE4E46A11EB9552D31BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.200.0/22 Signature Algorithm: sha256WithRSAEncryption b6:8e:85:a1:c1:50:06:7d:77:f2:e9:e3:2b:35:73:a2:ee:38: 35:c9:7a:5f:67:0d:f6:a2:53:df:7e:78:04:27:21:54:1b:77: cd:b3:93:4b:50:13:4b:d1:1a:a0:99:4e:91:8e:5a:b7:df:e8: 7b:4c:6e:2c:a0:95:fa:c9:55:71:cd:58:57:67:66:df:b0:c7: ba:07:94:3d:0e:b1:b7:5b:6e:17:97:4d:8d:72:43:1f:ab:63: 1c:db:72:76:ec:0c:2f:d0:80:76:41:80:9c:c6:ab:50:81:f1: 5a:09:34:c5:8f:42:31:ee:0e:dd:3c:85:f9:7b:21:f5:8c:7f: fe:01:f9:44:2f:f7:96:de:99:15:6b:59:c8:00:cc:05:45:0a: ec:19:af:24:26:16:d2:58:8b:62:d6:30:88:df:e7:21:b0:50: 78:83:18:fd:3f:8f:29:f3:c4:aa:d5:5e:01:63:ff:4e:60:10: 92:43:05:1b:20:31:67:39:57:f0:d9:04:a3:65:de:47:0b:41: af:78:02:25:00:8c:c5:f2:c2:c2:e9:46:4d:1a:d7:5d:4f:be: 95:15:0a:30:15:4c:2e:55:fe:4d:21:47:76:12:3c:52:37:73: a0:b2:3d:f4:3e:a9:70:9c:8d:71:fd:ec:f4:7f:77:95:f7:f7: 0d:a8:8f:62 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDMjIxMTAvBgNVBAUTKDI4RjVFNjVENzUwNTk2MURDNTUwQTk0OTI0REJDRUZC QjY3Njk0QkQwHhcNMjUwMzIwMTcyNjQ2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RjNGZkNS02ZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtN8b8gyN5itPF9MIYfPEwsCvjXIOTZ1XgKcant4avEDLkY1hoWaasIfRom46 L20a9UkOP2mhbKrYwU7sHmAjCXy93yn1zVgyFqc45h9eCgm/CaIDAMjboHms/r0L 7hDjkedCn9jAV3cy2nFitQlj622Hr2i7t82gKm7G3fh2zhcujv4Bf0JuBWfKZ3zd Xv8fkDH+4zQN6NB3gp+CvW1DIaC3stkBGcLHFw79pYOgKKw6dYi1OI/of/teoIsx 4pcy+lxxXPDeqd1kZE84zB19TBLD10AWHHurCF0kurTRtuuxKQJNAYUWkQxUdgZZ H6cUvAHM5S3sAeGYNlc5LO12iQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEx1WKRi jwnhtp/JRqkizZ8xQ37ZMB8GA1UdIwQYMBaAFCj15l11BZYdxVCpSSTbzvu2dpS9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0MyMi82OTA2QzZGQTRD NzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxoM0ZVS2xKSk52Ty03WjJs TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQWG1YWFVGbGgzRlVLbEpKTnZPLTdaMmxMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNDMjIvNjkwNkM2RkE0Qzc0MTFFOUI3QzRCQjU1QzRGOUFFMDIvRUY2NkRERTRF NDZBMTFFQjk1NTJEMzFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnhcgwDQYJKoZIhvcNAQELBQADggEBALaOhaHBUAZ9d/Lp 4ys1c6LuODXJel9nDfaiU99+eAQnIVQbd82zk0tQE0vRGqCZTpGOWrff6HtMbiyg lfrJVXHNWFdnZt+wx7oHlD0OsbdbbheXTY1yQx+rYxzbcnbsDC/QgHZBgJzGq1CB 8VoJNMWPQjHuDt08hfl7IfWMf/4B+UQv95bemRVrWcgAzAVFCuwZryQmFtJYi2LW MIjf5yGwUHiDGP0/jynzxKrVXgFj/05gEJJDBRsgMWc5V/DZBKNl3kcLQa94AiUA jMXywsLpRk0a111PvpUVCjAVTC5V/k0hR3YSPFI3c6CyPfQ+qXCcjXH97PR/d5X3 9w2oj2I= -----END CERTIFICATE-----Generated at Wed Nov 5 05:15:06 2025 by rpki-client