$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/690390E80FAA11EB8B893F1EC4F9AE02.roa File: 690390E80FAA11EB8B893F1EC4F9AE02.roa (raw, json) Hash identifier: 9FxIJk5By9GC/1mM3LBBThqiUIJi3J3T7y2yMdVI55E= Subject key identifier: BE:8C:98:B2:AB:E1:FF:1A:8E:EC:CC:73:4E:5A:38:61:93:F3:4E:B0 Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Certificate serial: 0D0F Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/690390E80FAA11EB8B893F1EC4F9AE02.roa Signing time: Fri 06 Jun 2025 18:22:40 +0000 ROA not before: Fri 06 Jun 2025 18:22:40 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 136480 IP address blocks: 103.116.56.0/22 maxlen: 22 103.116.56.0/23 maxlen: 23 103.116.56.0/24 maxlen: 24 103.116.57.0/24 maxlen: 24 103.116.58.0/23 maxlen: 23 103.116.58.0/24 maxlen: 24 103.116.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3343 (0xd0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B624E, serialNumber=54244F645DEA0D509668580D138E825279FB5678 Validity Not Before: Jun 6 18:22:40 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684331f0-3cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:70:f9:0c:8a:70:af:a0:e4:9f:dd:60:8c:1e: b3:f2:1f:90:92:3d:52:7b:2c:2c:9d:29:39:8b:1a: 18:84:50:21:94:13:5d:d3:18:e3:6c:c8:4e:5d:95: 71:bf:b9:4d:93:36:62:8c:9b:da:c1:31:a7:5b:9c: 94:c0:83:df:c3:4a:79:32:81:67:d8:6c:60:c3:0f: d3:4c:07:e7:5d:50:ea:60:21:e3:5b:db:fd:af:6c: 7a:e6:72:19:bc:18:cd:1b:2f:24:58:3e:06:9c:1c: a7:90:82:c5:0c:1c:06:59:ea:15:e7:47:f9:14:36: a3:64:7f:66:e5:ec:80:66:9d:54:ff:c6:00:02:3d: 9e:07:9a:b7:75:cc:8e:9d:7b:c8:fe:38:b2:f7:60: 6a:1f:e1:49:3e:f9:db:e2:d8:da:e1:a2:d5:93:89: d0:37:ba:50:39:ad:63:43:12:fa:5a:d7:fd:55:e2: 7c:58:a4:fb:31:00:32:4c:6c:98:f4:9e:26:82:c6: cd:2b:80:33:00:b4:71:0c:5a:d0:86:da:01:b0:b2: c9:7f:53:30:a6:ff:e1:16:6a:36:da:5b:33:f4:79: c8:ec:e2:e2:62:16:17:52:33:5e:80:a3:99:53:b3: d3:b1:72:97:4b:ec:d9:00:b9:50:67:5c:44:df:7f: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8C:98:B2:AB:E1:FF:1A:8E:EC:CC:73:4E:5A:38:61:93:F3:4E:B0 X509v3 Authority Key Identifier: keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/690390E80FAA11EB8B893F1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.56.0/22 Signature Algorithm: sha256WithRSAEncryption ae:7f:3a:b1:de:30:85:73:31:36:99:a9:82:a9:0b:cc:73:b3: bc:19:f4:b5:7e:28:7d:80:6d:e6:df:7a:37:2f:96:03:87:6b: ff:eb:1b:ab:fb:00:43:3b:08:f1:9d:2f:ae:24:9e:b0:61:4e: 8a:47:f8:95:f6:78:fe:18:02:37:35:7c:a9:b7:cc:dd:1f:ef: ae:90:13:8d:d3:95:ad:6f:da:36:4b:43:47:7c:9a:14:a4:12: 6a:f6:79:70:74:6c:a5:4f:2a:73:3f:65:22:a1:7a:90:df:31: 28:ea:c0:a5:b0:ed:14:6d:a8:51:1f:81:4c:db:9c:6b:14:d5: ed:9b:78:07:9f:80:94:03:b2:d2:ff:e9:ae:05:cd:38:ec:39: 51:43:4e:77:fb:64:dc:21:ff:df:1f:35:d9:bb:18:b8:eb:6b: d5:8b:a2:d3:a5:fc:9c:7b:8c:1e:29:49:a6:9f:3e:21:98:96: 8f:39:65:c0:35:15:ab:28:b4:03:9b:25:4a:4a:62:ab:d7:75: 29:24:f2:ab:e6:82:07:7a:bf:24:7f:6a:2e:7a:e1:7c:eb:23: 51:48:40:cb:8c:0f:b9:b0:7d:32:3a:a4:e4:98:2f:6e:bd:91: b9:88:47:97:a3:47:ac:cd:96:fa:f0:9b:ec:27:96:86:1d:53: 1b:8c:ca:d6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy NzlGQjU2NzgwHhcNMjUwNjA2MTgyMjQwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQzMzFmMC0zY2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6HD5DIpwr6Dkn91gjB6z8h+Qkj1SeywsnSk5ixoYhFAhlBNd0xjjbMhOXZVx v7lNkzZijJvawTGnW5yUwIPfw0p5MoFn2Gxgww/TTAfnXVDqYCHjW9v9r2x65nIZ vBjNGy8kWD4GnBynkILFDBwGWeoV50f5FDajZH9m5eyAZp1U/8YAAj2eB5q3dcyO nXvI/jiy92BqH+FJPvnb4tja4aLVk4nQN7pQOa1jQxL6Wtf9VeJ8WKT7MQAyTGyY 9J4mgsbNK4AzALRxDFrQhtoBsLLJf1Mwpv/hFmo22lsz9HnI7OLiYhYXUjNegKOZ U7PTsXKXS+zZALlQZ1xE339JywIDAQABo4IClTCCApEwHQYDVR0OBBYEFL6MmLKr 4f8ajuzMc05aOGGT806wMB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjYyNEUvQkQ5NUMzOEVFMDNFMTFFOUIyQjlEQTExQzRGOUFFMDIvNjkwMzkwRTgw RkFBMTFFQjhCODkzRjFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJndDgwDQYJKoZIhvcNAQELBQADggEBAK5/OrHeMIVzMTaZ qYKpC8xzs7wZ9LV+KH2AbebfejcvlgOHa//rG6v7AEM7CPGdL64knrBhTopH+JX2 eP4YAjc1fKm3zN0f766QE43Tla1v2jZLQ0d8mhSkEmr2eXB0bKVPKnM/ZSKhepDf MSjqwKWw7RRtqFEfgUzbnGsU1e2beAefgJQDstL/6a4FzTjsOVFDTnf7ZNwh/98f Ndm7GLjra9WLotOl/Jx7jB4pSaafPiGYlo85ZcA1FasotAObJUpKYqvXdSkk8qvm ggd6vyR/ai564XzrI1FIQMuMD7mwfTI6pOSYL269kbmIR5ejR6zNlvrwm+wnloYd UxuMytY= -----END CERTIFICATE-----Generated at Sun Jun 15 10:00:49 2025 by rpki-client