$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/5CBAC63066DF11F0935CCC36C4F9AE02.roa File: 5CBAC63066DF11F0935CCC36C4F9AE02.roa (raw, json) Hash identifier: MMhTJwyUJmHa7Fchm2S5tYiwrlXSG8WD1IWktZLzhpI= Subject key identifier: 8B:B6:AF:68:0B:F6:7F:C6:9C:13:C8:17:A1:3E:18:DD:10:A6:DA:ED Certificate issuer: /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Certificate serial: 0E02 Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/5CBAC63066DF11F0935CCC36C4F9AE02.roa Signing time: Tue 22 Jul 2025 09:36:37 +0000 ROA not before: Tue 22 Jul 2025 09:36:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140224 IP address blocks: 103.88.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3586 (0xe02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Validity Not Before: Jul 22 09:36:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=687f5ba5-260f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:18:a0:95:2c:02:4a:af:61:b9:63:30:65:62: eb:be:6b:0f:a3:b6:46:d1:26:25:53:e0:4e:8d:5f: 1d:1b:71:5a:f4:f5:68:59:92:ab:2e:d4:ec:a2:56: c9:1a:0d:d8:0d:ae:8a:9d:36:43:19:33:53:cb:3d: dd:5c:fa:a3:88:1c:24:62:5d:78:0e:44:93:22:67: 10:fd:66:ee:e6:17:e9:6c:60:e5:34:17:80:81:ec: 86:24:3e:e0:29:bb:2f:4d:8f:0c:6a:50:c3:20:54: 8d:3c:50:7e:e4:2f:00:37:34:58:f3:60:de:cf:e8: 6c:93:46:53:9e:b1:ae:b6:1c:34:98:00:e4:75:e1: 0e:8b:b1:dc:0e:08:8a:d2:60:0a:be:c8:09:44:08: cd:9b:c8:35:47:f7:81:e8:b5:96:a1:7d:69:79:19: 67:0d:ed:0a:61:e6:cb:6d:18:85:c5:d7:3b:73:19: 89:fd:19:fd:46:4b:b4:38:b0:db:1b:48:70:94:e3: c5:f4:21:91:be:d3:b2:cf:ee:91:fb:09:83:08:e9: f5:13:3d:90:43:e1:38:3c:21:45:17:f7:25:97:c3: 8c:25:6c:59:4a:37:8b:e4:9e:00:39:c3:97:52:89: cd:f3:22:1a:b3:c9:65:64:8e:aa:3f:46:f8:88:6f: d4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B6:AF:68:0B:F6:7F:C6:9C:13:C8:17:A1:3E:18:DD:10:A6:DA:ED X509v3 Authority Key Identifier: keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/5CBAC63066DF11F0935CCC36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.88.95.0/24 Signature Algorithm: sha256WithRSAEncryption 18:19:e4:1e:68:19:ff:c2:0f:13:27:0f:be:82:0e:7a:23:d7: d7:80:78:cd:0f:be:b4:d1:a2:18:0e:ae:9b:a7:d0:27:31:87: 4a:95:f1:ea:41:90:57:75:ea:0c:ba:e7:5f:24:97:39:aa:83: 05:68:1d:ea:45:db:27:55:81:c2:3a:b7:61:cc:89:c3:c5:6a: e5:be:29:e5:e7:c7:51:4f:3c:af:dd:fc:27:25:5a:71:84:75: 1f:46:43:54:81:cd:05:dc:9d:60:7f:55:eb:0c:d3:87:8c:9c: 5c:02:29:8f:02:0c:92:a5:05:da:61:05:c2:57:6d:68:98:bc: d2:76:c2:48:c5:fd:c2:fe:c8:00:f5:e3:07:ab:04:9d:b7:ff: 0f:c0:a1:59:5b:e1:bb:9b:5c:96:db:57:47:0a:c8:df:39:d4: 0b:9d:d8:fd:e3:2f:8b:24:12:af:fd:7c:24:8e:5b:24:84:36: 2f:cc:01:ad:1c:72:9c:cc:18:d0:ee:90:e2:6b:c8:be:ec:d9: 2f:5e:eb:4b:65:57:16:3e:28:57:90:f6:a9:51:65:77:55:4b: 71:57:56:d0:fe:29:1d:01:fb:d6:25:9a:1f:b8:dd:45:cb:6d: 23:a9:f7:63:5c:f1:ee:92:37:76:3e:a8:b5:5b:2c:ab:51:2d: c0:ac:0b:08 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFMTkxMTAvBgNVBAUTKDI1NTI5MEEwMUFBOUI5MTE4QjY2RUVEQTBGOTA1RjZE NDBEQjA1QUUwHhcNMjUwNzIyMDkzNjM3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdmNWJhNS0yNjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BiglSwCSq9huWMwZWLrvmsPo7ZG0SYlU+BOjV8dG3Fa9PVoWZKrLtTsolbJ Gg3YDa6KnTZDGTNTyz3dXPqjiBwkYl14DkSTImcQ/Wbu5hfpbGDlNBeAgeyGJD7g KbsvTY8MalDDIFSNPFB+5C8ANzRY82Dez+hsk0ZTnrGuthw0mADkdeEOi7HcDgiK 0mAKvsgJRAjNm8g1R/eB6LWWoX1peRlnDe0KYebLbRiFxdc7cxmJ/Rn9Rku0OLDb G0hwlOPF9CGRvtOyz+6R+wmDCOn1Ez2QQ+E4PCFFF/cll8OMJWxZSjeL5J4AOcOX UonN8yIas8llZI6qP0b4iG/UZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIu2r2gL 9n/GnBPIF6E+GN0QptrtMB8GA1UdIwQYMBaAFCVSkKAaqbkRi2bu2g+QX21A2wWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUUxOS8zNTZGMkYzRUMx QTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVSR0xadTdhRDVCZmJVRGJC YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWS1FvQnFwdVJHTFp1N2FENUJmYlVEYkJhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjlFMTkvMzU2RjJGM0VDMUE1MTFFOUE4QjhGMzM2QzRGOUFFMDIvNUNCQUM2MzA2 NkRGMTFGMDkzNUNDQzM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnWF8wDQYJKoZIhvcNAQELBQADggEBABgZ5B5oGf/CDxMn D76CDnoj19eAeM0PvrTRohgOrpun0Ccxh0qV8epBkFd16gy6518klzmqgwVoHepF 2ydVgcI6t2HMicPFauW+KeXnx1FPPK/d/CclWnGEdR9GQ1SBzQXcnWB/VesM04eM nFwCKY8CDJKlBdphBcJXbWiYvNJ2wkjF/cL+yAD14werBJ23/w/AoVlb4bubXJbb V0cKyN851Aud2P3jL4skEq/9fCSOWySENi/MAa0ccpzMGNDukOJryL7s2S9e60tl VxY+KFeQ9qlRZXdVS3FXVtD+KR0B+9Ylmh+43UXLbSOp92Nc8e6SN3Y+qLVbLKtR LcCsCwg= -----END CERTIFICATE-----Generated at Wed Aug 6 00:57:46 2025 by rpki-client