$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/CD095756AF1211EAA486D140C4F9AE02.roa File: CD095756AF1211EAA486D140C4F9AE02.roa (raw, json) Hash identifier: BN8Ep61fnfM1f+urtXittrNLSdUFc4Y/zcFURFkKMy8= Subject key identifier: DA:E6:E1:36:73:21:71:77:2D:69:89:07:05:C9:D0:44:01:96:B2:54 Certificate issuer: /CN=A91AEE26/serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6 Certificate serial: 090D Authority key identifier: 50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/CD095756AF1211EAA486D140C4F9AE02.roa Signing time: Thu 31 Jul 2025 21:31:27 +0000 ROA not before: Thu 31 Jul 2025 21:31:27 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 139194 IP address blocks: 103.139.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2317 (0x90d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE26, serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6 Validity Not Before: Jul 31 21:31:27 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=688be0af-da70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:be:a6:7c:82:e7:cb:82:5e:19:1c:2c:7a:73: 01:6f:cc:5a:11:9b:ed:0b:1d:7f:b1:4a:95:72:12: 81:d1:b8:86:ca:b5:e7:50:fe:d5:e6:8b:8a:74:fa: de:0d:b0:6f:e9:e1:17:18:1f:ee:05:f7:d1:a6:58: f5:bd:78:18:4d:02:cb:2c:08:9a:5b:4e:6a:3b:34: fd:e9:fe:a2:fa:fa:f8:e4:e2:56:7c:fe:33:17:71: 9b:02:9a:3a:ba:83:08:12:19:e1:09:d6:c2:71:6f: e1:e7:f1:ef:ab:41:9d:fa:8e:39:1c:db:b4:53:74: 45:1d:5d:78:eb:88:8c:76:d1:4d:42:fb:2e:e0:5e: 82:1c:cf:6c:0d:d7:37:57:a9:a2:b0:8e:14:7e:16: 0d:45:48:ac:b1:d1:06:ff:1c:7d:43:af:81:30:c4: dd:41:7f:90:6b:7e:7a:23:1f:f9:d7:5d:c8:b6:29: ca:33:f7:72:06:ba:5c:a7:34:44:8d:ae:07:01:ec: 86:2d:7d:df:6e:6c:3a:30:8c:52:76:84:5c:52:8b: 0f:52:22:44:94:d9:fc:89:4f:1d:86:6a:f5:55:82: 2a:12:35:f3:8d:1c:1a:de:dd:02:a0:43:75:80:03: be:aa:5b:78:b9:c7:fb:b3:a9:0e:18:48:00:ca:28: cb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E6:E1:36:73:21:71:77:2D:69:89:07:05:C9:D0:44:01:96:B2:54 X509v3 Authority Key Identifier: keyid:50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/CD095756AF1211EAA486D140C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.151.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:84:00:33:ad:09:89:49:1b:9f:ef:03:34:3c:be:d4:25:5c: ad:25:41:7a:13:8f:03:d4:d5:1b:0e:99:70:3c:91:35:45:67: c5:0a:0a:26:e1:f5:40:3f:fc:2e:ae:47:5d:e3:21:c2:5a:60: fe:0f:ad:2f:a0:30:0b:26:d7:f9:7a:b3:96:ee:83:54:22:a2: f5:b2:7f:a2:61:c9:b6:63:08:b5:d0:25:6e:5e:b0:79:59:17: 2f:ed:4d:08:8e:50:35:97:80:9a:52:2c:8f:ce:75:86:86:a1: ba:b9:e7:ec:2a:51:d7:4d:3f:a6:8f:e1:b3:87:b3:a5:ab:a5: 1c:27:40:d6:98:c6:c5:5a:79:ee:3a:89:38:64:29:9c:30:d5: 5d:99:94:5a:1d:d2:ff:83:bc:d6:b4:04:8c:24:2e:87:5c:d6: a7:89:42:f9:ca:48:73:11:af:87:13:28:62:98:f3:de:6e:6e: a7:d5:d7:a2:88:f4:70:b6:73:e2:bd:72:46:54:b9:47:99:23: a9:59:a5:df:7e:a7:bd:4e:18:9d:4f:4b:3d:cc:33:1e:2a:fd: 8a:7f:04:e1:c3:6c:26:72:e4:a7:75:7d:23:37:35:22:08:bb: 19:56:7e:28:5b:cc:f9:6e:67:63:ee:26:80:3e:e0:fe:cb:5a: 9a:06:b1:9a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFMjYxMTAvBgNVBAUTKDUwRkE4RThENEUyOTk3RkY1REU2MDhEQTc4Q0FDNjU0 Q0NEMTY5QjYwHhcNMjUwNzMxMjEzMTI3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhiZTBhZi1kYTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7b6mfILny4JeGRwsenMBb8xaEZvtCx1/sUqVchKB0biGyrXnUP7V5ouKdPre DbBv6eEXGB/uBffRplj1vXgYTQLLLAiaW05qOzT96f6i+vr45OJWfP4zF3GbApo6 uoMIEhnhCdbCcW/h5/Hvq0Gd+o45HNu0U3RFHV1464iMdtFNQvsu4F6CHM9sDdc3 V6misI4UfhYNRUissdEG/xx9Q6+BMMTdQX+Qa356Ix/5113ItinKM/dyBrpcpzRE ja4HAeyGLX3fbmw6MIxSdoRcUosPUiJElNn8iU8dhmr1VYIqEjXzjRwa3t0CoEN1 gAO+qlt4ucf7s6kOGEgAyijLrQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNrm4TZz IXF3LWmJBwXJ0EQBlrJUMB8GA1UdIwQYMBaAFFD6jo1OKZf/XeYI2njKxlTM0Wm2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUUyNi9BN0MxNjEwQ0FG MTAxMUVBQkY2MUQzM0FDNEY5QUUwMi9VUHFPalU0cGxfOWQ1Z2phZU1yR1ZNelJh YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VQcU9qVTRwbF85ZDVnamFlTXJHVk16UmFiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUVFMjYvQTdDMTYxMENBRjEwMTFFQUJGNjFEMzNBQzRGOUFFMDIvQ0QwOTU3NTZB RjEyMTFFQUE0ODZEMTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABni5cwDQYJKoZIhvcNAQELBQADggEBAHqEADOtCYlJG5/v AzQ8vtQlXK0lQXoTjwPU1RsOmXA8kTVFZ8UKCibh9UA//C6uR13jIcJaYP4PrS+g MAsm1/l6s5bug1QiovWyf6JhybZjCLXQJW5esHlZFy/tTQiOUDWXgJpSLI/OdYaG obq55+wqUddNP6aP4bOHs6WrpRwnQNaYxsVaee46iThkKZww1V2ZlFod0v+DvNa0 BIwkLodc1qeJQvnKSHMRr4cTKGKY895ubqfV16KI9HC2c+K9ckZUuUeZI6lZpd9+ p71OGJ1PSz3MMx4q/Yp/BOHDbCZy5Kd1fSM3NSIIuxlWfihbzPluZ2PuJoA+4P7L WpoGsZo= -----END CERTIFICATE-----Generated at Sun Aug 10 03:53:15 2025 by rpki-client