$ rpki-client -vvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/09DBF798B76311E6AF11523EC4F9AE02.roa File: 09DBF798B76311E6AF11523EC4F9AE02.roa (raw, json) Hash identifier: KJtFM/La7mL3fu5dlcMqDcraRcAtERap2FuVwdqAgkc= Subject key identifier: 53:76:50:2E:1F:F9:12:6E:31:C5:D3:A5:48:97:41:43:D5:51:AA:BA Certificate issuer: /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Certificate serial: 1D46 Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/09DBF798B76311E6AF11523EC4F9AE02.roa Signing time: Tue 22 Jul 2025 16:24:08 +0000 ROA not before: Tue 22 Jul 2025 16:24:08 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132248 IP address blocks: 103.71.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7494 (0x1d46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B588F, serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Validity Not Before: Jul 22 16:24:08 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=687fbb27-3662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a0:b6:17:9a:53:75:05:94:e5:f8:24:34:55: 1f:3e:55:f6:34:f6:60:47:fd:53:c6:47:90:79:be: c0:1e:43:b0:30:c4:5e:4f:88:2e:d7:f4:81:3a:d5: e0:29:10:1e:5b:d1:6b:29:25:ba:07:d0:e7:bb:12: 72:8c:a6:f8:63:16:5a:f2:99:92:25:10:6f:0d:a6: 8b:bf:4a:ad:8a:92:cd:6b:5b:56:ac:48:78:e4:a5: e7:a0:4a:c5:ae:96:1b:14:de:53:b6:21:fa:99:e2: 29:a9:c9:58:82:79:8f:59:36:26:40:6a:9c:7b:23: 24:96:b3:51:5a:f9:8f:a0:6b:92:a9:92:4c:b9:6b: 61:6c:ba:ed:b1:37:59:7b:23:78:c7:b4:79:d5:63: 52:1a:ad:cf:6b:70:5f:76:af:9e:a9:b0:96:f0:e4: 47:eb:5b:3c:d8:de:d9:9a:39:4b:6f:5b:a6:6b:c6: 73:f5:81:28:e8:f3:b3:49:c1:15:e3:1f:20:56:46: 6d:71:d4:1c:1b:2b:7b:37:60:70:70:c7:de:0c:80: c4:65:2f:f0:50:ac:ea:ef:15:b7:3f:64:ee:5a:90: 40:ef:c8:54:c0:ed:ba:39:b5:cc:78:da:bc:70:aa: a8:4f:c4:3b:27:50:67:45:f1:7c:c3:0f:e9:ae:0b: 32:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:76:50:2E:1F:F9:12:6E:31:C5:D3:A5:48:97:41:43:D5:51:AA:BA X509v3 Authority Key Identifier: keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/09DBF798B76311E6AF11523EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.71.204.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:f4:06:e2:b4:3d:7c:f2:1c:33:78:d5:10:2f:00:f3:e6:2c: f4:ca:85:1e:12:d5:63:65:3f:75:a8:ea:6f:8e:2b:82:fb:d7: 22:33:30:ba:c9:1e:de:c5:9b:cf:8f:29:90:53:30:d6:da:b6: fc:38:37:38:33:81:38:c0:25:b4:16:29:5e:ec:1c:5a:69:22: 68:27:ef:9b:82:db:23:a6:16:ac:18:4e:72:35:a9:f2:35:7b: 49:33:9e:d2:49:88:49:7b:9c:db:9f:1c:1c:49:6d:3c:e2:88: 05:c9:18:bc:ea:79:c1:95:c3:29:31:69:98:c8:75:1a:d7:fe: 98:b4:be:d3:86:9a:cb:c5:60:be:e4:ce:3b:80:93:df:c4:78: 0c:4f:5e:66:df:1d:da:ab:81:43:d6:0c:fe:94:3d:c4:13:ff: 88:83:69:fa:1d:45:6d:11:94:76:b7:f3:04:3c:54:e9:8a:27: 0f:1f:39:f7:df:8b:18:52:ba:52:12:ec:d6:ec:bc:d0:e6:1e: ff:87:8c:05:3f:fc:86:dd:6e:bc:3f:de:4c:d5:6a:fc:cb:0e: a0:84:f5:f1:f1:91:da:e6:7a:7e:e7:4a:f5:6f:e4:df:91:a5: 65:94:96:db:ae:14:4f:03:da:51:14:cd:6a:41:1d:bd:4a:1b: 35:c6:ba:36 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4OEYxMTAvBgNVBAUTKDBERkExNDcwRTNDOUVCMjFGMTdCMDM3QjA0Q0Y0RUQ1 NDI0RUYzQzkwHhcNMjUwNzIyMTYyNDA4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdmYmIyNy0zNjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqC2F5pTdQWU5fgkNFUfPlX2NPZgR/1TxkeQeb7AHkOwMMReT4gu1/SBOtXg KRAeW9FrKSW6B9DnuxJyjKb4YxZa8pmSJRBvDaaLv0qtipLNa1tWrEh45KXnoErF rpYbFN5TtiH6meIpqclYgnmPWTYmQGqceyMklrNRWvmPoGuSqZJMuWthbLrtsTdZ eyN4x7R51WNSGq3Pa3Bfdq+eqbCW8ORH61s82N7ZmjlLb1uma8Zz9YEo6POzScEV 4x8gVkZtcdQcGyt7N2BwcMfeDIDEZS/wUKzq7xW3P2TuWpBA78hUwO26ObXMeNq8 cKqoT8Q7J1BnRfF8ww/prgsyQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFN2UC4f +RJuMcXTpUiXQUPVUaq6MB8GA1UdIwQYMBaAFA36FHDjyesh8XsDewTPTtVCTvPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTg4Ri83ODREOTRCOEI3 NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5SHhld043Qk05TzFVSk84 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Rmb1VjT1BKNnlIeGV3TjdCTTlPMVVKTzg4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU4OEYvNzg0RDk0QjhCNzYxMTFFNkIxMTc1QTNDQzRGOUFFMDIvMDlEQkY3OThC NzYzMTFFNkFGMTE1MjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnR8wwDQYJKoZIhvcNAQELBQADggEBAC/0BuK0PXzyHDN4 1RAvAPPmLPTKhR4S1WNlP3Wo6m+OK4L71yIzMLrJHt7Fm8+PKZBTMNbatvw4Nzgz gTjAJbQWKV7sHFppImgn75uC2yOmFqwYTnI1qfI1e0kzntJJiEl7nNufHBxJbTzi iAXJGLzqecGVwykxaZjIdRrX/pi0vtOGmsvFYL7kzjuAk9/EeAxPXmbfHdqrgUPW DP6UPcQT/4iDafodRW0RlHa38wQ8VOmKJw8fOfffixhSulIS7NbsvNDmHv+HjAU/ /Ibdbrw/3kzVavzLDqCE9fHxkdrmen7nSvVv5N+RpWWUltuuFE8D2lEUzWpBHb1K GzXGujY= -----END CERTIFICATE-----Generated at Tue Aug 12 19:04:16 2025 by rpki-client