$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa File: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (raw, json) Hash identifier: 6hOTp4SmpuhM6odO1i0HOQXN93az6Qa4OUEoe22Ijvc= Subject key identifier: A4:DD:2C:93:85:D9:58:22:AF:11:66:EE:F8:97:60:0D:AB:5A:DF:2B Certificate issuer: /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Certificate serial: 12EA Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa Signing time: Mon 28 Jul 2025 17:26:23 +0000 ROA not before: Mon 28 Jul 2025 17:26:23 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 131247 IP address blocks: 103.68.116.0/22 maxlen: 22 103.68.116.0/23 maxlen: 23 103.68.116.0/24 maxlen: 24 103.68.117.0/24 maxlen: 24 103.68.118.0/23 maxlen: 23 103.68.118.0/24 maxlen: 24 103.68.119.0/24 maxlen: 24 103.230.208.0/22 maxlen: 22 103.230.208.0/23 maxlen: 23 103.230.208.0/24 maxlen: 24 103.230.209.0/24 maxlen: 24 103.230.210.0/23 maxlen: 23 103.230.210.0/24 maxlen: 24 103.230.211.0/24 maxlen: 24 2403:6ec0::/32 maxlen: 32 2403:6ec0:8000::/43 maxlen: 43 2403:6ec0:8020::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4842 (0x12ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Validity Not Before: Jul 28 17:26:23 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6887b2bf-0e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:70:b2:48:c5:84:8a:ae:68:0b:68:6b:84:4c: 9f:e2:0e:d0:d5:e8:f2:17:1c:52:49:6c:42:3d:f0: 94:bf:c7:02:ed:ce:b5:9b:ee:af:15:6c:1e:a3:65: 21:52:79:b7:81:a4:60:04:d7:2b:8e:f3:5b:20:98: cb:80:f8:ff:66:13:7f:d0:19:67:51:7a:b7:ca:f5: b5:ed:58:56:43:11:07:e3:0f:1d:2a:9f:fa:85:ab: 4d:08:ca:75:86:d4:a9:0e:71:36:b5:d6:74:4e:1a: b4:70:04:ca:43:7b:3e:c5:78:57:97:00:65:5d:66: 2e:95:86:ca:85:25:a1:fe:ed:05:05:d0:13:79:67: 5a:94:a0:c2:7b:8c:02:e9:18:65:65:a3:c4:99:e5: 7e:67:ef:0b:c6:1f:f0:62:18:24:c7:58:e8:04:b4: 15:5a:a2:d7:6e:42:b8:a8:98:de:b6:44:de:c4:79: 0d:83:3f:9c:f9:33:61:c6:02:cf:7e:da:13:1b:b1: 4f:08:25:6e:0d:0e:3d:51:1e:4e:14:89:6d:07:8f: c3:dd:c5:a6:c5:75:c8:bd:0f:5d:aa:3f:27:e8:f8: ac:07:45:30:0c:59:00:dc:54:5a:39:e2:ef:2c:a8: a3:6b:3b:5f:af:a6:90:43:b5:11:a9:6e:98:12:67: 01:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DD:2C:93:85:D9:58:22:AF:11:66:EE:F8:97:60:0D:AB:5A:DF:2B X509v3 Authority Key Identifier: keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.116.0/22 103.230.208.0/22 IPv6: 2403:6ec0::/32 Signature Algorithm: sha256WithRSAEncryption 5b:a9:f5:61:7c:83:96:4d:34:4f:d0:a8:8c:5f:06:c2:b4:c7: c1:37:ce:ef:09:0b:0e:78:ec:12:d2:ed:71:f8:b8:ea:a1:aa: f3:97:ee:29:2d:85:b3:69:fe:ac:91:c1:28:79:a3:a3:b6:a1: e9:f5:cb:01:b0:50:c0:78:66:52:87:e1:8d:fc:3a:36:34:dd: 2f:1c:85:20:30:1b:8b:1f:20:88:2e:0b:47:fe:48:27:a6:4f: 2b:73:9b:d3:b0:07:bc:c8:21:db:6f:3b:58:5a:7f:6f:22:20: 9c:60:56:20:e5:b5:90:0e:a4:8e:6c:2e:e8:50:98:47:fe:59: 0a:c0:17:66:1f:30:50:6d:7d:76:c5:04:9c:7f:c7:20:19:69: d6:1e:8f:69:76:8a:0f:78:81:ad:0f:57:75:7e:ba:b9:fa:ee: ab:6e:cc:8a:9a:81:5c:ac:4a:d0:3f:c2:aa:01:bb:23:70:77: 51:69:8e:74:e5:aa:7d:25:40:b1:67:af:76:c2:0e:5d:9f:ff: b8:fd:59:8c:8b:6d:7f:ba:61:db:7a:17:3a:3d:33:83:24:74: 91:24:3c:47:52:8e:6e:da:f3:f9:27:6e:30:54:8a:01:68:d7: 8b:7d:8e:52:ce:ac:64:31:da:0c:59:e7:59:7e:e5:44:96:72: 01:90:56:d4 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDRTQxMTAvBgNVBAUTKDI1MjlDODAzQ0IzOEU3NTFFMzY5NkFCNzk2MkQ4MjMx NDVGQ0Q2NTkwHhcNMjUwNzI4MTcyNjIzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg3YjJiZi0wZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HCySMWEiq5oC2hrhEyf4g7Q1ejyFxxSSWxCPfCUv8cC7c61m+6vFWweo2Uh Unm3gaRgBNcrjvNbIJjLgPj/ZhN/0BlnUXq3yvW17VhWQxEH4w8dKp/6hatNCMp1 htSpDnE2tdZ0Thq0cATKQ3s+xXhXlwBlXWYulYbKhSWh/u0FBdATeWdalKDCe4wC 6RhlZaPEmeV+Z+8Lxh/wYhgkx1joBLQVWqLXbkK4qJjetkTexHkNgz+c+TNhxgLP ftoTG7FPCCVuDQ49UR5OFIltB4/D3cWmxXXIvQ9dqj8n6PisB0UwDFkA3FRaOeLv LKijaztfr6aQQ7URqW6YEmcB4QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFKTdLJOF 2VgirxFm7viXYA2rWt8rMB8GA1UdIwQYMBaAFCUpyAPLOOdR42lqt5YtgjFF/NZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkNFNC8wOEVEMTc4OEJG QzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUxSGphV3EzbGkyQ01VWDgx bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTbklBOHM0NTFIamFXcTNsaTJDTVVYODFsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZDRTQvMDhFRDE3ODhCRkMwMTFFOEE2QTg1NTRCQzRGOUFFMDIvQjNENEFFQjhC RkMwMTFFOEE3RjQyMDRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnRHQDBAJn5tAwDQQCAAIwBwMFACQDbsAwDQYJKoZIhvcN AQELBQADggEBAFup9WF8g5ZNNE/QqIxfBsK0x8E3zu8JCw547BLS7XH4uOqhqvOX 7ikthbNp/qyRwSh5o6O2oen1ywGwUMB4ZlKH4Y38OjY03S8chSAwG4sfIIguC0f+ SCemTytzm9OwB7zIIdtvO1haf28iIJxgViDltZAOpI5sLuhQmEf+WQrAF2YfMFBt fXbFBJx/xyAZadYej2l2ig94ga0PV3V+urn67qtuzIqagVysStA/wqoBuyNwd1Fp jnTlqn0lQLFnr3bCDl2f/7j9WYyLbX+6Ydt6Fzo9M4MkdJEkPEdSjm7a8/knbjBU igFo14t9jlLOrGQx2gxZ51l+5USWcgGQVtQ= -----END CERTIFICATE-----Generated at Sun Aug 10 16:14:59 2025 by rpki-client