$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/568554A2493411EF859C1D49C4F9AE02.roa File: 568554A2493411EF859C1D49C4F9AE02.roa (raw, json) Hash identifier: GJHmEHrYuauLaoDyaheohJPV/H42AIm5/E806p4WrxY= Subject key identifier: 16:66:89:67:B5:D7:72:79:42:73:4A:4E:66:87:F6:42:C7:A5:75:1F Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 34C8 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/568554A2493411EF859C1D49C4F9AE02.roa Signing time: Sat 02 Aug 2025 14:50:49 +0000 ROA not before: Sat 02 Aug 2025 14:50:49 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.195.128.0/24 maxlen: 24 103.195.129.0/24 maxlen: 24 103.195.130.0/24 maxlen: 24 103.212.169.0/24 maxlen: 24 103.212.170.0/24 maxlen: 24 160.202.137.0/24 maxlen: 24 160.202.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13512 (0x34c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Aug 2 14:50:49 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688e25c9-b562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:be:fc:95:21:df:b1:8c:b3:ef:61:51:03:b2: 8f:1b:63:6f:aa:dc:01:59:aa:9a:8b:29:0b:97:81: af:b5:7d:96:7b:b9:fe:c5:68:4f:1a:c8:21:bf:0e: 7f:eb:67:f3:c0:01:38:50:0d:2f:fe:87:ce:c7:af: 16:a1:86:7b:9d:b2:81:07:95:f2:e7:6f:7a:b0:3f: 9e:02:f7:eb:b9:33:72:3f:86:e7:90:f2:58:69:c4: 44:ad:f3:e6:1e:55:fb:b3:79:fc:62:a5:63:03:c0: ce:66:a3:6e:ca:21:4f:e4:8f:90:11:58:05:c5:4b: 94:d1:52:ce:c9:05:a4:17:0e:e5:77:66:e4:fe:71: 8b:68:2d:72:68:3a:53:05:c5:05:4d:20:db:c9:3f: d2:da:6e:2f:27:e9:62:d3:ff:3a:2e:72:9e:42:6b: 33:67:c5:99:4b:be:3d:1a:75:e0:2c:de:db:f2:47: 8f:38:a0:58:13:8e:d7:51:5a:37:dc:77:c6:6c:d8: b5:e4:fb:5a:7d:d6:02:0e:54:d3:b5:a6:5a:9e:42: 0a:89:7f:48:3b:4a:7c:f7:75:f4:fd:87:6c:a2:52: 43:45:34:80:f2:57:42:78:c6:76:60:76:c4:cb:a8: 78:78:91:70:be:75:f1:2b:57:d5:74:78:ad:ee:b7: 6f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:66:89:67:B5:D7:72:79:42:73:4A:4E:66:87:F6:42:C7:A5:75:1F X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/568554A2493411EF859C1D49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.195.128.0-103.195.130.255 103.212.169.0-103.212.170.255 160.202.137.0-160.202.138.255 Signature Algorithm: sha256WithRSAEncryption 75:03:4d:d9:f6:14:55:05:e7:47:c0:e6:7e:59:c1:dd:5c:f1: 7e:03:87:65:f0:6b:03:c1:12:cc:3a:df:e3:22:2c:94:e7:80: ec:d8:d3:2c:fd:8c:5b:15:9a:9f:1e:ed:6f:4a:7b:94:86:b6: 5f:08:a4:59:0c:0d:ca:5e:a5:79:f8:c4:96:25:19:5e:5d:10: 7f:6f:29:da:12:9c:83:42:15:e9:f8:60:27:d9:2c:8f:5f:a2: 1a:96:1f:2e:ab:bf:39:4f:b3:09:a2:a3:0d:60:a4:23:4d:1d: fd:4d:0e:2e:d8:20:15:64:69:6e:c0:1b:b7:4c:da:9f:09:a3: 1e:b9:74:d5:78:21:81:a0:a3:f7:db:88:a0:4f:3c:cf:4f:49: a0:2a:3c:a8:31:07:90:bd:7f:40:d5:7c:4f:d4:cc:c6:13:a6: 20:c7:cb:8e:f6:62:18:4c:07:51:eb:54:47:f6:93:20:3c:93: 23:31:27:e7:a1:72:81:d2:64:f4:95:57:29:c7:c4:e1:9d:ef: 6f:ac:b1:21:16:5a:ef:37:bb:bc:73:f0:c6:a2:db:9e:ac:db: 6a:82:23:3c:a4:71:09:04:d1:72:cc:70:ed:fa:7a:50:e2:01: c5:9d:3b:cc:c9:6f:05:d3:bb:53:9f:93:bd:58:2c:8d:99:eb: 84:0a:83:d4 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICNMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjUwODAyMTQ1MDQ5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlMjVjOS1iNTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4778lSHfsYyz72FRA7KPG2NvqtwBWaqaiykLl4GvtX2We7n+xWhPGsghvw5/ 62fzwAE4UA0v/ofOx68WoYZ7nbKBB5Xy5296sD+eAvfruTNyP4bnkPJYacRErfPm HlX7s3n8YqVjA8DOZqNuyiFP5I+QEVgFxUuU0VLOyQWkFw7ld2bk/nGLaC1yaDpT BcUFTSDbyT/S2m4vJ+li0/86LnKeQmszZ8WZS749GnXgLN7b8kePOKBYE47XUVo3 3HfGbNi15PtafdYCDlTTtaZankIKiX9IO0p893X0/YdsolJDRTSA8ldCeMZ2YHbE y6h4eJFwvnXxK1fVdHit7rdvlQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFBZmiWe1 13J5QnNKTmaH9kLHpXUfMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkzNTAvMzkxM0JDQTAxRDg3MTFFMkI0MkIwMkRGMDhCMDJDRDIvNTY4NTU0QTI0 OTM0MTFFRjg1OUMxRDQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMDAEAgABMCowDAMEB2fDgAMEAGfDgjAMAwQAZ9SpAwQAZ9SqMAwDBACgyokD BACgyoowDQYJKoZIhvcNAQELBQADggEBAHUDTdn2FFUF50fA5n5Zwd1c8X4Dh2Xw awPBEsw63+MiLJTngOzY0yz9jFsVmp8e7W9Ke5SGtl8IpFkMDcpepXn4xJYlGV5d EH9vKdoSnINCFen4YCfZLI9fohqWHy6rvzlPswmiow1gpCNNHf1NDi7YIBVkaW7A G7dM2p8Jox65dNV4IYGgo/fbiKBPPM9PSaAqPKgxB5C9f0DVfE/UzMYTpiDHy472 YhhMB1HrVEf2kyA8kyMxJ+ehcoHSZPSVVynHxOGd72+ssSEWWu83u7xz8Mai256s 22qCIzykcQkE0XLMcO36elDiAcWdO8zJbwXTu1Ofk71YLI2Z64QKg9Q= -----END CERTIFICATE-----Generated at Sun Aug 10 05:41:17 2025 by rpki-client