$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/56EE653C493411EF859C1D49C4F9AE02.roa File: 56EE653C493411EF859C1D49C4F9AE02.roa (raw, json) Hash identifier: wQ++k3Glz+d7dgoNoLdE2YsLmSTFLwKnNiedE1IG6QM= Subject key identifier: F1:7E:B8:DB:D5:F6:BA:54:BC:65:C8:03:F8:5B:95:B1:43:20:EA:58 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 34C9 Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/56EE653C493411EF859C1D49C4F9AE02.roa Signing time: Sat 02 Aug 2025 14:50:50 +0000 ROA not before: Sat 02 Aug 2025 14:50:50 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.195.128.0/24 maxlen: 24 103.195.129.0/24 maxlen: 24 103.195.130.0/24 maxlen: 24 103.212.169.0/24 maxlen: 24 103.212.170.0/24 maxlen: 24 160.202.137.0/24 maxlen: 24 160.202.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13513 (0x34c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Aug 2 14:50:50 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688e25c9-940b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b9:5c:df:0f:db:82:55:72:18:f7:f0:3d:e8: a8:2b:ef:da:76:42:7a:21:91:0c:54:2b:ba:4a:d4: ce:d7:66:82:6f:b3:ae:40:c3:20:96:5f:5f:c4:7a: f8:10:bb:9a:53:1f:a7:e2:7d:d1:6b:91:7c:a7:43: 6f:33:ed:70:80:8b:6b:7e:fd:7a:a7:5f:e0:41:c7: 1e:d3:5e:24:3c:d2:89:8f:c9:17:5e:37:e3:02:f3: b9:50:db:c5:8d:aa:ee:9f:56:35:c6:13:40:4c:af: 48:51:6f:f8:83:d8:3a:f7:b5:84:dd:c8:be:d0:3a: 8d:a8:75:0e:a3:0b:14:e3:49:33:b9:61:4f:df:35: 58:f9:2f:f0:68:d7:d7:f2:40:3b:bf:88:f0:d1:49: 94:2d:40:8c:ac:f3:aa:61:cc:53:21:6f:3b:08:91: f5:f1:87:83:c4:ad:8f:d3:e1:f5:5a:5d:ba:9a:d9: c1:48:53:49:21:cf:7e:e5:bc:5b:3e:b2:fc:29:8a: 6e:e6:e5:d0:cc:ae:8c:48:5b:de:16:9a:44:4b:ec: 88:b8:8a:28:47:e8:9d:63:45:c7:c6:05:9d:a9:96: 78:7e:c7:6d:cb:b5:08:85:4b:04:17:6c:cd:62:4f: 51:ce:85:96:47:41:e9:a7:0e:41:22:c6:10:9e:8f: cd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7E:B8:DB:D5:F6:BA:54:BC:65:C8:03:F8:5B:95:B1:43:20:EA:58 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/56EE653C493411EF859C1D49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.195.128.0-103.195.130.255 103.212.169.0-103.212.170.255 160.202.137.0-160.202.138.255 Signature Algorithm: sha256WithRSAEncryption 5e:5c:19:f0:61:c1:bb:c7:4c:a0:0d:56:e8:f3:d5:c5:91:f9: ab:4f:e2:9a:d8:fc:32:5c:2d:4d:12:0d:78:ae:3b:2f:1f:d9: 75:b6:31:bc:72:a6:30:bc:32:d8:6d:d7:67:1c:27:fc:29:ec: e4:6b:96:95:e8:24:2c:a7:de:0f:df:46:cb:a5:85:b8:cf:eb: 56:67:36:89:4b:ab:ae:b5:93:a2:f2:a1:1d:79:da:b1:3c:4d: 3b:5f:e8:1d:69:8f:dd:56:fd:60:79:54:b4:87:0c:87:15:be: 93:11:bd:5c:17:6d:54:17:97:fa:ea:fc:60:6d:2f:dc:d7:8e: cc:f9:bb:e8:67:c3:cc:b2:ee:2d:2e:87:b7:09:96:42:61:62: e3:ac:aa:fb:66:b3:41:81:1a:5e:9e:1f:b4:38:6a:59:d3:f6: 0c:fb:a5:84:dd:9e:8e:23:88:91:26:e8:cb:4f:b4:b3:5f:0a: 04:79:66:29:62:55:1f:dd:00:6f:a0:d3:fd:36:27:87:da:9f: ce:31:8a:3a:d5:89:fe:fa:e3:33:97:4f:4e:4e:ac:75:eb:59: 43:74:06:aa:15:f6:1e:2f:0d:4c:40:18:bc:7d:99:57:b1:0a: 81:3c:30:c3:ec:62:e4:f3:41:50:99:60:1f:95:77:27:31:24: 0f:eb:73:94 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICNMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjUwODAyMTQ1MDUwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlMjVjOS05NDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rlc3w/bglVyGPfwPeioK+/adkJ6IZEMVCu6StTO12aCb7OuQMMgll9fxHr4 ELuaUx+n4n3Ra5F8p0NvM+1wgItrfv16p1/gQcce014kPNKJj8kXXjfjAvO5UNvF jarun1Y1xhNATK9IUW/4g9g697WE3ci+0DqNqHUOowsU40kzuWFP3zVY+S/waNfX 8kA7v4jw0UmULUCMrPOqYcxTIW87CJH18YeDxK2P0+H1Wl26mtnBSFNJIc9+5bxb PrL8KYpu5uXQzK6MSFveFppES+yIuIooR+idY0XHxgWdqZZ4fsdty7UIhUsEF2zN Yk9RzoWWR0Hppw5BIsYQno/NkwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFPF+uNvV 9rpUvGXIA/hblbFDIOpYMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkzNTAvMzkxM0JDQTAxRDg3MTFFMkI0MkIwMkRGMDhCMDJDRDIvNTZFRTY1M0M0 OTM0MTFFRjg1OUMxRDQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMDAEAgABMCowDAMEB2fDgAMEAGfDgjAMAwQAZ9SpAwQAZ9SqMAwDBACgyokD BACgyoowDQYJKoZIhvcNAQELBQADggEBAF5cGfBhwbvHTKANVujz1cWR+atP4prY /DJcLU0SDXiuOy8f2XW2MbxypjC8Mtht12ccJ/wp7ORrlpXoJCyn3g/fRsulhbjP 61ZnNolLq661k6LyoR152rE8TTtf6B1pj91W/WB5VLSHDIcVvpMRvVwXbVQXl/rq /GBtL9zXjsz5u+hnw8yy7i0uh7cJlkJhYuOsqvtms0GBGl6eH7Q4alnT9gz7pYTd no4jiJEm6MtPtLNfCgR5ZiliVR/dAG+g0/02J4fan84xijrVif764zOXT05OrHXr WUN0BqoV9h4vDUxAGLx9mVexCoE8MMPsYuTzQVCZYB+VdycxJA/rc5Q= -----END CERTIFICATE-----Generated at Sat Aug 9 15:10:38 2025 by rpki-client