$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/4EEEF95AEA4311EE86C1DD73C4F9AE02.roa File: 4EEEF95AEA4311EE86C1DD73C4F9AE02.roa (raw, json) Hash identifier: vK7zDAtMwxZ46qmtLmdd+XyPCpBAd+F+Ur4M7PgRHvc= Subject key identifier: 35:74:62:78:14:7A:CC:51:D7:32:40:E6:CF:53:35:3B:46:48:DE:82 Certificate issuer: /CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581 Certificate serial: 080E Authority key identifier: D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/4EEEF95AEA4311EE86C1DD73C4F9AE02.roa Signing time: Tue 08 Jul 2025 21:32:11 +0000 ROA not before: Tue 08 Jul 2025 21:32:11 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 132837 IP address blocks: 103.248.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2062 (0x80e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACF30, serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581 Validity Not Before: Jul 8 21:32:11 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=686d8e5a-f5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:74:39:0c:fd:22:5f:1c:49:1a:97:dd:8c:d6: fd:77:95:0d:f1:dd:68:19:98:1d:e6:d4:67:ce:1b: 29:ec:10:81:f9:6a:e2:a5:43:cd:c8:b2:8e:5d:f3: eb:3b:db:21:5d:68:95:4e:f0:31:36:88:77:ab:1e: 22:9c:d0:58:73:2d:f8:93:21:d0:79:6c:49:a6:3d: f0:bb:1a:ae:8e:b5:46:31:3a:bb:d6:0f:71:c2:97: 58:33:fc:1f:05:e9:dd:fe:bb:3d:ef:3e:28:09:35: 76:33:cb:b9:d8:22:b8:a5:b9:87:8a:4c:73:3f:c4: 25:f6:af:46:c3:41:b7:59:76:05:3c:6c:07:d6:dd: 6b:90:5f:8b:25:55:c7:5e:cc:d5:d8:fa:78:d6:65: 59:c5:92:f9:b5:ae:55:32:a5:08:79:3a:3f:7c:59: e4:06:19:3e:e8:ae:0a:27:6f:31:03:3d:10:94:2e: f3:cb:81:a0:12:a2:fe:a6:ad:7c:93:0d:db:83:00: 7e:78:ba:d9:26:5a:c5:95:26:e0:20:99:aa:58:c4: 20:fb:36:fc:9b:2e:67:fb:cd:f5:45:80:3e:15:e3: 82:b5:8c:e4:5a:ad:bd:03:31:76:09:10:21:2e:5e: 6a:f1:0c:bd:40:68:8e:24:1c:ab:9b:6e:11:3f:e9: e5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:74:62:78:14:7A:CC:51:D7:32:40:E6:CF:53:35:3B:46:48:DE:82 X509v3 Authority Key Identifier: keyid:D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/4EEEF95AEA4311EE86C1DD73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.248.108.0/22 Signature Algorithm: sha256WithRSAEncryption 68:c8:9b:f6:89:a9:aa:1e:aa:a7:70:67:90:00:53:52:ff:47: 38:14:b7:5a:2c:2d:45:0c:c9:02:4c:f5:b5:0c:bd:eb:aa:41: 4b:cc:f1:21:8c:f7:81:1e:10:a6:b6:9f:8f:0f:b3:1b:00:0b: 12:e7:a0:7f:4b:24:76:ee:92:4d:08:45:8b:71:43:3f:08:ee: 93:0c:b3:43:8c:3d:3e:f1:2c:23:34:83:79:0c:58:5c:6f:46: 11:b4:b1:d3:54:7d:7a:00:9b:91:d5:95:b1:31:84:c3:8b:10: 75:eb:02:a4:0f:aa:45:ee:6d:0f:bb:e2:45:a7:b7:e7:02:48: f9:ca:ee:53:25:4f:15:cf:19:09:9e:ae:14:dd:c6:55:43:25: 3d:d9:c4:e8:45:dc:6e:79:15:6f:5e:6e:02:ce:4d:bb:af:a8: e9:2f:d3:2f:90:e0:ee:90:da:8e:49:0c:6b:50:9d:81:6b:6b: c1:75:e9:43:28:80:4f:f4:0c:89:bd:5e:bf:80:d6:b6:0c:d5: 60:25:91:f1:65:8e:2b:e1:4c:27:ed:59:6b:0f:72:69:0c:76: c6:1e:2a:da:46:2e:e8:d8:01:b3:79:72:66:50:f2:85:8d:53: f0:a9:06:48:d2:80:e0:e2:7b:e8:74:46:ed:6b:a5:6d:a0:fc: 57:b3:2d:93 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGMzAxMTAvBgNVBAUTKEQzMjY3QUY5RkI5NjkwODlDM0MxMkFGRUJGRDBGREU5 QkQ4Njc1ODEwHhcNMjUwNzA4MjEzMjExWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZkOGU1YS1mNWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHQ5DP0iXxxJGpfdjNb9d5UN8d1oGZgd5tRnzhsp7BCB+WripUPNyLKOXfPr O9shXWiVTvAxNoh3qx4inNBYcy34kyHQeWxJpj3wuxqujrVGMTq71g9xwpdYM/wf Bend/rs97z4oCTV2M8u52CK4pbmHikxzP8Ql9q9Gw0G3WXYFPGwH1t1rkF+LJVXH XszV2Pp41mVZxZL5ta5VMqUIeTo/fFnkBhk+6K4KJ28xAz0QlC7zy4GgEqL+pq18 kw3bgwB+eLrZJlrFlSbgIJmqWMQg+zb8my5n+831RYA+FeOCtYzkWq29AzF2CRAh Ll5q8Qy9QGiOJByrm24RP+nleQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDV0YngU esxR1zJA5s9TNTtGSN6CMB8GA1UdIwQYMBaAFNMmevn7lpCJw8Eq/r/Q/em9hnWB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0YzMC8zQjkxMkYxMkYx ODIxMUVBQTUzNzk3MEFDNEY5QUUwMi8weVo2LWZ1V2tJbkR3U3ItdjlEOTZiMkdk WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB5WjYtZnVXa0luRHdTci12OUQ5NmIyR2RZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNGMzAvM0I5MTJGMTJGMTgyMTFFQUE1Mzc5NzBBQzRGOUFFMDIvNEVFRUY5NUFF QTQzMTFFRTg2QzFERDczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn+GwwDQYJKoZIhvcNAQELBQADggEBAGjIm/aJqaoeqqdw Z5AAU1L/RzgUt1osLUUMyQJM9bUMveuqQUvM8SGM94EeEKa2n48PsxsACxLnoH9L JHbukk0IRYtxQz8I7pMMs0OMPT7xLCM0g3kMWFxvRhG0sdNUfXoAm5HVlbExhMOL EHXrAqQPqkXubQ+74kWnt+cCSPnK7lMlTxXPGQmerhTdxlVDJT3ZxOhF3G55FW9e bgLOTbuvqOkv0y+Q4O6Q2o5JDGtQnYFra8F16UMogE/0DIm9Xr+A1rYM1WAlkfFl jivhTCftWWsPcmkMdsYeKtpGLujYAbN5cmZQ8oWNU/CpBkjSgODie+h0Ru1rpW2g /FezLZM= -----END CERTIFICATE-----Generated at Sun Aug 10 16:07:40 2025 by rpki-client