$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/207C8A52AC7611EEB465AF75C4F9AE02.roa File: 207C8A52AC7611EEB465AF75C4F9AE02.roa (raw, json) Hash identifier: rk+SPflwPgB4vTfzwjF5uUSSjGvEoj32LpORFaq9djc= Subject key identifier: 0D:37:11:BC:6F:74:23:37:A7:6C:63:8A:2A:0B:C7:89:EA:A8:E2:27 Certificate issuer: /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Certificate serial: 016E Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/207C8A52AC7611EEB465AF75C4F9AE02.roa Signing time: Tue 03 Jun 2025 04:02:35 +0000 ROA not before: Tue 03 Jun 2025 04:02:35 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151340 IP address blocks: 103.204.32.0/24 maxlen: 24 103.204.33.0/24 maxlen: 24 2001:df2:7840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Validity Not Before: Jun 3 04:02:35 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=683e73db-b218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:99:59:37:40:1f:70:33:0c:5c:a9:b3:ea:bb: 97:d6:08:e4:50:3b:c2:f4:22:20:ce:ec:20:a6:e0: 76:c9:b3:53:ff:d3:6d:23:00:1d:fa:86:5c:82:66: f0:7a:84:d9:df:10:de:1a:89:53:41:26:13:e8:dc: 0b:1f:dc:96:6b:46:3c:6e:31:b0:c4:80:2d:eb:d8: d0:e3:61:b6:e3:53:87:39:cb:a4:04:39:fc:32:f0: 0e:9a:c1:ee:9d:2b:15:8f:aa:4f:b5:75:90:0a:58: 00:09:d7:61:fc:43:1e:3b:b6:46:d2:2a:ab:7c:10: 16:aa:0e:70:c4:9c:ff:e3:99:c8:80:3d:bb:2d:de: 5d:f0:d4:7d:31:31:a3:c5:e9:15:7b:67:e8:2d:2a: 0b:d7:dd:bd:34:6f:12:77:3c:78:e9:4b:02:1f:de: 8e:89:54:04:62:db:6a:62:8d:2f:ce:89:30:3e:7b: a4:27:1a:e0:a9:9b:96:6b:38:76:c2:25:86:0d:97: 3b:58:ea:0c:40:9d:5f:24:87:98:63:a4:5b:9d:e4: a7:b6:35:f3:c8:6e:0f:2e:81:2b:c1:ee:ed:b3:36: 79:cd:8d:07:98:b5:56:a9:3c:e8:1a:61:57:d8:de: fd:c0:24:db:bd:16:dc:ef:98:25:59:14:39:d0:dd: e2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:37:11:BC:6F:74:23:37:A7:6C:63:8A:2A:0B:C7:89:EA:A8:E2:27 X509v3 Authority Key Identifier: keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/207C8A52AC7611EEB465AF75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.32.0/23 IPv6: 2001:df2:7840::/48 Signature Algorithm: sha256WithRSAEncryption 92:95:76:c6:7e:81:82:dd:0b:1d:b9:7c:cf:cd:97:c5:12:c7: e4:01:eb:d2:28:be:4d:df:01:69:df:6c:3c:4f:00:62:a7:0b: 37:4f:8d:81:3c:a0:b7:7e:17:f8:49:c2:04:d8:8b:d3:15:94: d9:be:0f:b9:16:7f:dc:6c:dd:ee:1e:0f:5d:b7:2f:f0:64:70: 8c:51:09:38:65:9e:ee:9b:34:08:80:84:6e:5e:6f:20:ee:28: 40:14:a9:c5:77:3d:d9:8e:f9:e0:e2:ba:1c:cb:ad:23:53:72: b4:10:91:ee:00:cb:1b:a9:8c:54:4a:bf:b8:5b:1f:8d:78:a4: 0c:78:e5:a4:07:3c:16:7f:14:cc:a1:63:ca:1b:63:54:fd:a6: 55:40:3b:15:03:0d:ea:ec:34:6e:4c:2a:ba:e1:3d:43:ac:7d: b1:e3:c2:47:cf:ff:be:92:ac:dc:cc:aa:e3:76:3e:ff:36:ff: 49:bb:eb:f5:9a:d1:8e:83:e2:91:7c:05:07:9d:47:d4:25:dd: 83:5a:d2:5f:70:5d:b4:ee:ba:fb:8e:5d:6b:41:23:c6:99:fd: ac:04:c1:8f:26:72:ab:ef:a0:e1:1c:cf:60:a6:03:31:14:c0: e0:2f:65:ca:75:71:d9:d6:68:b3:2d:59:b6:12:83:92:e7:b6: e7:e4:16:27 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQzRDIxMTAvBgNVBAUTKEI2NzI3RURGRDM3RDFFMkMxNzVDMTA4MTFBMUQzOEFB MkFDNkM4OUMwHhcNMjUwNjAzMDQwMjM1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlNzNkYi1iMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZlZN0AfcDMMXKmz6ruX1gjkUDvC9CIgzuwgpuB2ybNT/9NtIwAd+oZcgmbw eoTZ3xDeGolTQSYT6NwLH9yWa0Y8bjGwxIAt69jQ42G241OHOcukBDn8MvAOmsHu nSsVj6pPtXWQClgACddh/EMeO7ZG0iqrfBAWqg5wxJz/45nIgD27Ld5d8NR9MTGj xekVe2foLSoL1929NG8Sdzx46UsCH96OiVQEYttqYo0vzokwPnukJxrgqZuWazh2 wiWGDZc7WOoMQJ1fJIeYY6RbneSntjXzyG4PLoErwe7tszZ5zY0HmLVWqTzoGmFX 2N79wCTbvRbc75glWRQ50N3i/wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFA03Ebxv dCM3p2xjiioLx4nqqOInMB8GA1UdIwQYMBaAFLZyft/TfR4sF1wQgRodOKoqxsic MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNEMi80MkMxRDhGODJD ODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhpd1hYQkNCR2gwNHFpckd5 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RuSi0zOU45SGl3WFhCQ0JHaDA0cWlyR3lKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkQzRDIvNDJDMUQ4RjgyQzg2MTFFRUE5Qjc0RjQzQzRGOUFFMDIvMjA3QzhBNTJB Qzc2MTFFRUI0NjVBRjc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnzCAwDwQCAAIwCQMHACABDfJ4QDANBgkqhkiG9w0BAQsF AAOCAQEAkpV2xn6Bgt0LHbl8z82XxRLH5AHr0ii+Td8Bad9sPE8AYqcLN0+NgTyg t34X+EnCBNiL0xWU2b4PuRZ/3Gzd7h4PXbcv8GRwjFEJOGWe7ps0CICEbl5vIO4o QBSpxXc92Y754OK6HMutI1NytBCR7gDLG6mMVEq/uFsfjXikDHjlpAc8Fn8UzKFj yhtjVP2mVUA7FQMN6uw0bkwquuE9Q6x9sePCR8//vpKs3Myq43Y+/zb/Sbvr9ZrR joPikXwFB51H1CXdg1rSX3BdtO66+45da0Ejxpn9rATBjyZyq++g4RzPYKYDMRTA 4C9lynVx2dZosy1ZthKDkue25+QWJw== -----END CERTIFICATE-----Generated at Fri Jun 20 16:30:49 2025 by rpki-client