$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/30E0A83C62F511ECA1FC5A6CC4F9AE02.roa File: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (raw, json) Hash identifier: VycFyv5t+loVs/y1sOBlV2psU6Ox9PEIROVSCHBVpH0= Subject key identifier: 96:85:44:AB:50:B7:BA:74:53:22:90:96:E1:28:30:A7:76:F2:C7:E8 Certificate issuer: /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Certificate serial: 0450 Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/30E0A83C62F511ECA1FC5A6CC4F9AE02.roa Signing time: Wed 23 Jul 2025 01:06:38 +0000 ROA not before: Wed 23 Jul 2025 01:06:38 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45532 IP address blocks: 103.142.142.0/23 maxlen: 24 2001:df1:4680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2 Validity Not Before: Jul 23 01:06:38 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6880359e-c893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:25:cc:84:17:9c:a5:8a:98:ad:3f:ac:a2:59: ed:ae:e4:0d:10:6c:0a:f9:f2:05:c3:c5:c9:85:3b: b0:dd:0b:4b:95:c1:9c:8f:e4:15:58:da:42:46:80: 89:3c:e8:1c:bb:e3:c6:34:3a:64:1d:45:99:f3:9d: 38:95:e9:cd:8e:9b:3c:34:c3:30:06:71:d9:c5:ba: 20:d1:f1:94:e6:52:c1:04:45:7d:27:d2:d9:ba:b5: 6d:bf:7f:d6:de:a4:ec:15:65:7b:1b:fd:58:4f:72: ac:ad:d4:dc:4c:b7:4a:07:93:9d:85:1e:27:1a:a8: f5:15:df:d0:f5:92:e9:a5:f3:3e:4b:09:67:7e:94: 05:7b:fe:e9:eb:b7:eb:36:fc:20:38:89:61:04:e5: e9:75:8d:75:cb:96:c6:81:bb:b0:ca:74:87:f7:0c: d8:00:b0:e8:c5:9e:77:0a:28:39:44:60:a1:06:e8: fb:1f:86:95:00:58:f7:27:26:0d:4f:b1:a7:08:59: 11:24:41:12:eb:3d:57:c6:04:7c:5e:54:57:5f:eb: 82:d0:b6:f7:ed:f6:99:98:1c:8d:06:0c:93:cf:b6: 69:8e:95:27:b7:32:51:56:cd:ae:62:a8:87:a7:a5: da:28:de:17:dd:ae:44:fc:e3:f6:95:a5:fe:da:41: 36:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:85:44:AB:50:B7:BA:74:53:22:90:96:E1:28:30:A7:76:F2:C7:E8 X509v3 Authority Key Identifier: keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/30E0A83C62F511ECA1FC5A6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.142.0/23 IPv6: 2001:df1:4680::/48 Signature Algorithm: sha256WithRSAEncryption a5:e7:33:d1:67:90:1f:26:cb:49:ce:14:0a:a8:8d:dd:c1:fe: 89:fd:3a:fd:7d:5a:24:f2:68:d4:37:f9:81:dd:10:e8:cd:ce: 35:a6:d5:8d:f2:58:b3:9d:76:ff:4e:e5:9b:60:cd:b7:fd:18: 84:93:30:c8:f3:2b:2f:ee:df:38:f2:67:64:b3:4e:cf:3a:e5: 38:33:32:4a:fb:90:c2:fd:f1:58:cd:89:6b:a2:9d:31:ac:b4: 45:27:a7:8c:df:e6:2f:e6:8e:6d:6b:1b:b2:6d:3f:7a:5c:a6: 73:95:5f:a2:6c:17:16:62:97:b4:41:70:53:ef:11:93:db:f5: 8d:a3:0f:ac:66:26:71:a5:66:32:32:7c:9f:6f:9f:df:17:1e: 57:d9:c7:0e:44:9d:74:3e:9a:59:0d:46:e3:26:eb:66:57:35: 44:d6:2a:43:ed:61:8f:af:a4:01:16:ce:af:2c:69:b1:d2:45: 9b:da:e3:b0:40:28:fb:38:69:10:ab:ab:d9:5a:68:68:17:c2: a1:f9:4e:4c:db:ee:c3:db:cd:de:7d:36:01:c6:29:79:a3:76: c0:31:fc:83:d8:f0:21:86:09:a2:5d:ee:aa:bc:57:6c:03:45: 8a:b3:1d:b8:ec:81:95:7e:22:53:13:70:91:12:43:60:c5:61: f1:87:5c:53 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzExM0IxMTAvBgNVBAUTKDFGMTFBNjE2RDczMkU0MTYzQjQ0RkVCNjI4NUVGRUVF NTg3QzZERDIwHhcNMjUwNzIzMDEwNjM4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgwMzU5ZS1jODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5iXMhBecpYqYrT+solntruQNEGwK+fIFw8XJhTuw3QtLlcGcj+QVWNpCRoCJ POgcu+PGNDpkHUWZ8504lenNjps8NMMwBnHZxbog0fGU5lLBBEV9J9LZurVtv3/W 3qTsFWV7G/1YT3KsrdTcTLdKB5OdhR4nGqj1Fd/Q9ZLppfM+SwlnfpQFe/7p67fr NvwgOIlhBOXpdY11y5bGgbuwynSH9wzYALDoxZ53Cig5RGChBuj7H4aVAFj3JyYN T7GnCFkRJEES6z1XxgR8XlRXX+uC0Lb37faZmByNBgyTz7ZpjpUntzJRVs2uYqiH p6XaKN4X3a5E/OP2laX+2kE2DQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJaFRKtQ t7p0UyKQluEoMKd28sfoMB8GA1UdIwQYMBaAFB8RphbXMuQWO0T+tihe/u5YfG3S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTEzQi83QkU3QzA5MDYy RjAxMUVDOTUyQjI5NjVDNEY5QUUwMi9IeEdtRnRjeTVCWTdSUDYyS0Y3LTdsaDhi ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4R21GdGN5NUJZN1JQNjJLRjctN2xoOGJkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzExM0IvN0JFN0MwOTA2MkYwMTFFQzk1MkIyOTY1QzRGOUFFMDIvMzBFMEE4M0M2 MkY1MTFFQ0ExRkM1QTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjo4wDwQCAAIwCQMHACABDfFGgDANBgkqhkiG9w0BAQsF AAOCAQEApecz0WeQHybLSc4UCqiN3cH+if06/X1aJPJo1Df5gd0Q6M3ONabVjfJY s512/07lm2DNt/0YhJMwyPMrL+7fOPJnZLNOzzrlODMySvuQwv3xWM2Ja6KdMay0 RSenjN/mL+aObWsbsm0/elymc5VfomwXFmKXtEFwU+8Rk9v1jaMPrGYmcaVmMjJ8 n2+f3xceV9nHDkSddD6aWQ1G4ybrZlc1RNYqQ+1hj6+kARbOryxpsdJFm9rjsEAo +zhpEKur2VpoaBfCoflOTNvuw9vN3n02AcYpeaN2wDH8g9jwIYYJol3uqrxXbANF irMduOyBlX4iUxNwkRJDYMVh8YdcUw== -----END CERTIFICATE-----Generated at Mon Aug 11 10:30:27 2025 by rpki-client