$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/CC1ACE7A6BC711F098C3B76CC4F9AE02.roa File: CC1ACE7A6BC711F098C3B76CC4F9AE02.roa (raw, json) Hash identifier: 56NWFLr0dC6w6GZlh7YAHTC6nXr9P2oaly4CuqAwl34= Subject key identifier: 8E:0E:71:91:13:1F:81:7A:02:88:A6:9B:90:FD:95:05:30:95:DA:75 Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Certificate serial: 02C4 Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/CC1ACE7A6BC711F098C3B76CC4F9AE02.roa Signing time: Mon 28 Jul 2025 15:30:31 +0000 ROA not before: Mon 28 Jul 2025 15:30:31 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 151835 IP address blocks: 103.190.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 708 (0x2c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Validity Not Before: Jul 28 15:30:31 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=68879797-8933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b6:ce:5f:16:42:bd:8a:d5:83:16:d1:10:aa: f2:61:dd:4a:71:13:14:08:c4:47:94:80:5f:1c:3e: a6:cb:12:b8:9a:c2:1f:ba:58:20:5b:1d:c0:00:05: 62:d1:d5:30:69:b4:b0:7b:f6:4e:6e:82:c4:6e:64: 29:77:09:81:0a:4d:d2:a3:b8:7e:24:da:19:46:15: 93:e3:fe:21:58:d5:18:4a:dc:df:33:16:ea:f2:8d: 51:5c:48:d1:3a:3e:3e:91:7d:ee:0b:56:14:f3:fa: 5a:a9:90:9c:40:9f:48:03:11:97:5c:9f:bc:c2:c2: 29:b7:b9:f5:7f:7f:28:2d:d2:e4:76:e1:fb:bb:20: 1d:1a:7d:72:81:96:51:0a:cc:65:ba:18:13:54:91: 6c:0c:7b:e4:c4:90:65:0e:87:76:60:54:14:03:a4: 65:1b:8e:7c:31:d3:62:fb:48:fc:06:e2:f6:22:c4: 32:60:36:fe:db:7b:37:40:b2:96:61:66:7c:ba:51: 9e:0c:e2:c8:0e:13:0f:83:4a:17:72:81:f8:a3:54: ca:2f:3a:56:11:14:69:fa:b4:19:bb:2d:eb:1d:ea: ee:fd:08:df:26:e3:3c:e2:d0:32:d3:6b:d0:a0:5c: a3:6a:e9:95:f4:30:8f:a2:78:3a:e5:56:39:ce:c6: 34:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0E:71:91:13:1F:81:7A:02:88:A6:9B:90:FD:95:05:30:95:DA:75 X509v3 Authority Key Identifier: keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/CC1ACE7A6BC711F098C3B76CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.72.0/24 Signature Algorithm: sha256WithRSAEncryption 76:2e:66:91:78:ca:34:7a:ac:2e:6f:48:ae:4b:60:89:f3:90: 83:1c:23:ab:92:c8:21:fd:b5:8a:ff:aa:ab:3c:ad:88:08:db: 20:d0:49:9a:87:2b:e5:f5:b7:fa:23:0c:59:d5:f3:84:c3:4a: 3e:d3:85:aa:cf:88:10:5a:5a:60:df:10:4c:86:e0:72:f8:89: 2d:e2:9c:8f:a3:62:db:44:7e:88:3a:dc:5f:72:b7:d5:8e:e9: 05:40:2f:bc:58:c9:07:21:80:88:1a:ec:2e:3e:87:21:22:ae: 57:96:63:39:28:35:aa:b4:3f:7c:e6:e2:97:1a:2a:0d:6a:c2: b7:0f:bc:27:fc:d9:f6:77:d0:5a:53:10:3a:c8:4d:d8:f1:6d: db:52:90:93:a3:72:24:34:b0:c6:c7:27:d3:ee:77:84:fa:81: 0e:a9:d5:47:56:63:2b:96:74:68:e9:f8:c9:e4:5c:3e:4a:e1: 92:78:11:94:47:1f:d4:42:d0:b3:c1:47:2e:38:e3:9c:a7:d2: 3d:a0:2b:c0:da:7c:47:33:e9:a3:01:d1:27:9c:db:6e:41:ab: 85:a7:b4:19:10:94:76:4f:88:f6:ad:a5:6b:91:cc:e7:e4:ac: 53:7d:f1:80:5a:2a:06:52:b7:0e:f4:ed:35:a5:e3:f8:d7:38: 52:f4:9c:26 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QTMxMTAvBgNVBAUTKDJGQzQzMEYxRTIxNUNCRDdFMDhGMjY0Mzg4MzcwMzUw MDJERTMxQTkwHhcNMjUwNzI4MTUzMDMxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg3OTc5Ny04OTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8LbOXxZCvYrVgxbREKryYd1KcRMUCMRHlIBfHD6myxK4msIfulggWx3AAAVi 0dUwabSwe/ZOboLEbmQpdwmBCk3So7h+JNoZRhWT4/4hWNUYStzfMxbq8o1RXEjR Oj4+kX3uC1YU8/paqZCcQJ9IAxGXXJ+8wsIpt7n1f38oLdLkduH7uyAdGn1ygZZR CsxluhgTVJFsDHvkxJBlDod2YFQUA6RlG458MdNi+0j8BuL2IsQyYDb+23s3QLKW YWZ8ulGeDOLIDhMPg0oXcoH4o1TKLzpWERRp+rQZuy3rHeru/QjfJuM84tAy02vQ oFyjaumV9DCPong65VY5zsY0gwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI4OcZET H4F6Aoimm5D9lQUwldp1MB8GA1UdIwQYMBaAFC/EMPHiFcvX4I8mQ4g3A1AC3jGp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhBMy85NjY1MEYzOEZE MTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5ZmdqeVpEaURjRFVBTGVN YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UXc4ZUlWeTlmZ2p5WkRpRGNEVUFMZU1hay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0I4QTMvOTY2NTBGMzhGRDE3MTFFQzgyODk4MzY1QzRGOUFFMDIvQ0MxQUNFN0E2 QkM3MTFGMDk4QzNCNzZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnvkgwDQYJKoZIhvcNAQELBQADggEBAHYuZpF4yjR6rC5v SK5LYInzkIMcI6uSyCH9tYr/qqs8rYgI2yDQSZqHK+X1t/ojDFnV84TDSj7TharP iBBaWmDfEEyG4HL4iS3inI+jYttEfog63F9yt9WO6QVAL7xYyQchgIga7C4+hyEi rleWYzkoNaq0P3zm4pcaKg1qwrcPvCf82fZ30FpTEDrITdjxbdtSkJOjciQ0sMbH J9Pud4T6gQ6p1UdWYyuWdGjp+MnkXD5K4ZJ4EZRHH9RC0LPBRy4445yn0j2gK8Da fEcz6aMB0Sec225Bq4WntBkQlHZPiPatpWuRzOfkrFN98YBaKgZStw707TWl4/jX OFL0nCY= -----END CERTIFICATE-----Generated at Sun Aug 10 03:45:03 2025 by rpki-client