$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/17C68D301C0311EE9B0F2938C4F9AE02.roa File: 17C68D301C0311EE9B0F2938C4F9AE02.roa (raw, json) Hash identifier: iplB9XZjSOwQ5O2H5iEJJvDG/Nz+QwUOR0kvaV5InLg= Subject key identifier: A5:8F:DA:49:16:8E:58:81:E4:DB:3A:9B:27:8B:93:61:29:E6:A8:14 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 019A Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/17C68D301C0311EE9B0F2938C4F9AE02.roa Signing time: Thu 31 Jul 2025 04:10:59 +0000 ROA not before: Thu 31 Jul 2025 04:10:59 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139780 IP address blocks: 103.225.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Jul 31 04:10:59 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688aecd3-7769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:cc:a2:22:2d:c1:5d:f9:2f:5d:23:10:53:51: c8:b7:17:32:00:a4:4a:45:b5:31:59:f9:fb:a3:94: f3:07:4c:c4:70:5e:45:6a:53:29:f8:b9:f4:23:8f: 0e:2f:e5:94:5a:8e:57:7e:8b:bd:70:8d:8e:05:0a: cc:fa:b8:56:68:f4:7b:5e:f0:c3:03:af:81:7a:99: c4:b6:03:4e:cb:2e:de:0d:fa:f0:08:35:04:c5:d9: 23:77:09:33:ca:24:b2:10:2f:d5:58:63:32:b6:67: d9:a2:57:6f:ef:92:84:63:8d:e4:8b:d1:c2:56:e0: a5:06:0a:76:e6:28:f3:7e:3e:6b:76:ce:45:33:33: 0a:18:9d:d9:0c:3d:b0:bb:e8:38:5f:78:96:8a:b3: f9:cd:51:63:8c:2d:83:c8:4b:01:16:2d:48:d4:74: 6e:d4:9b:15:ae:da:ba:5f:1e:31:12:8e:f2:b4:31: 7d:34:8f:bf:68:aa:33:e8:07:f7:5e:99:bf:31:33: 66:32:d6:a4:5e:99:56:98:48:df:7c:a6:c0:ff:a1: 12:1a:19:d2:f3:99:b1:3c:cb:e9:1d:a1:27:34:a2: 39:0a:e3:35:cf:af:f9:a1:ec:b8:20:6c:4a:93:dd: aa:bf:74:99:5a:91:69:b0:b3:72:5c:12:06:ee:6a: f7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8F:DA:49:16:8E:58:81:E4:DB:3A:9B:27:8B:93:61:29:E6:A8:14 X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/17C68D301C0311EE9B0F2938C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.225.219.0/24 Signature Algorithm: sha256WithRSAEncryption 26:e4:ee:0b:76:23:7d:e5:78:55:31:0d:58:5f:9f:e7:2a:01: bb:d9:ca:08:df:04:7a:de:f2:45:0b:bf:28:88:e8:c4:88:7f: 2a:8c:d5:40:0f:b6:9a:f6:5c:42:0a:e2:f1:6d:98:0b:96:e3: b4:b0:be:5f:7f:ba:94:91:eb:06:0e:22:8b:8b:8e:a0:de:4d: 7d:5d:f4:cb:6c:a6:ea:83:cc:c2:18:dc:f2:ba:fd:41:96:c0: 41:d1:36:70:43:4e:c8:8e:95:19:e8:a7:13:bc:ac:22:8a:4d: b0:2e:af:67:1d:57:af:d5:1c:4e:57:2d:f0:8b:24:14:6f:0b: 25:84:31:ea:0c:c6:d2:79:3e:77:9a:f6:23:e1:78:2f:00:2b: b7:60:23:9c:43:35:b6:97:df:74:96:33:4c:2b:af:05:f1:d6: 79:9a:c3:3f:e6:ca:de:f4:78:33:d0:0e:46:57:2a:4b:a7:fc: 9b:5c:3e:2a:9c:4f:21:54:fb:0c:32:d6:1e:5b:1f:30:04:1f: a6:e9:fe:86:16:59:f0:85:d4:ab:f5:69:37:19:4f:95:04:2c: 9e:4b:20:a8:0b:22:a0:a5:2d:e9:42:36:fd:61:07:64:e6:20: a5:de:ff:51:be:87:57:3b:d3:e3:c5:00:89:13:9a:36:57:ba: 39:e2:3f:d3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjUwNzMxMDQxMDU5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhZWNkMy03NzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7syiIi3BXfkvXSMQU1HItxcyAKRKRbUxWfn7o5TzB0zEcF5FalMp+Ln0I48O L+WUWo5Xfou9cI2OBQrM+rhWaPR7XvDDA6+BepnEtgNOyy7eDfrwCDUExdkjdwkz yiSyEC/VWGMytmfZoldv75KEY43ki9HCVuClBgp25ijzfj5rds5FMzMKGJ3ZDD2w u+g4X3iWirP5zVFjjC2DyEsBFi1I1HRu1JsVrtq6Xx4xEo7ytDF9NI+/aKoz6Af3 Xpm/MTNmMtakXplWmEjffKbA/6ESGhnS85mxPMvpHaEnNKI5CuM1z6/5oey4IGxK k92qv3SZWpFpsLNyXBIG7mr3cQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKWP2kkW jliB5Ns6myeLk2Ep5qgUMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzU3MkIvRjdFNUMxNjgwRTlBMTFFRUE2NDQ5RTcxQzRGOUFFMDIvMTdDNjhEMzAx QzAzMTFFRTlCMEYyOTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn4dswDQYJKoZIhvcNAQELBQADggEBACbk7gt2I33leFUx DVhfn+cqAbvZygjfBHre8kULvyiI6MSIfyqM1UAPtpr2XEIK4vFtmAuW47Swvl9/ upSR6wYOIouLjqDeTX1d9MtspuqDzMIY3PK6/UGWwEHRNnBDTsiOlRnopxO8rCKK TbAur2cdV6/VHE5XLfCLJBRvCyWEMeoMxtJ5Pnea9iPheC8AK7dgI5xDNbaX33SW M0wrrwXx1nmawz/myt70eDPQDkZXKkun/JtcPiqcTyFU+wwy1h5bHzAEH6bp/oYW WfCF1Kv1aTcZT5UELJ5LIKgLIqClLelCNv1hB2TmIKXe/1G+h1c70+PFAIkTmjZX ujniP9M= -----END CERTIFICATE-----Generated at Mon Aug 11 10:31:20 2025 by rpki-client