$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa File: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (raw, json) Hash identifier: mEWfsTcA2IvJ08SERafVpG79nAxQN7WQ08fS/psaf1M= Subject key identifier: 3F:A8:7D:07:3D:ED:27:69:71:95:35:EC:B5:E5:9E:31:D0:AE:DD:51 Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Certificate serial: 014E Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa Signing time: Wed 23 Jul 2025 04:40:33 +0000 ROA not before: Wed 23 Jul 2025 04:40:33 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151355 IP address blocks: 103.209.212.0/24 maxlen: 24 103.209.213.0/24 maxlen: 24 2001:df2:7f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F79, serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Validity Not Before: Jul 23 04:40:33 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=688067c1-8435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c0:ef:20:8b:b6:8c:e9:d1:0f:ec:e4:fa:ec: 25:de:2f:75:3d:f1:cf:ee:9e:4a:a4:36:bb:f3:c4: 63:df:f1:a3:45:8c:b6:cd:43:64:8d:f9:14:5c:a6: ae:b8:95:0b:4a:71:a9:46:d0:ca:c4:81:d1:c1:f5: 54:60:a6:25:2e:af:d4:09:65:2c:ec:af:02:a9:cb: 4d:63:ab:03:fe:42:c9:02:4e:10:24:f5:e3:56:a4: f9:40:cd:3d:54:18:58:78:74:76:e4:07:7e:6f:ef: ba:0e:c5:1e:58:f8:58:db:97:d9:9d:cb:c3:d1:4e: 4c:35:2c:95:e6:61:93:7f:3c:23:f2:39:ad:d3:6e: 72:e7:4a:7b:3d:67:29:76:24:40:29:85:89:c1:6c: 75:79:e1:d4:e7:d8:f6:42:82:20:95:2e:0c:7f:dd: 12:51:90:10:e4:14:ba:79:6a:31:04:70:fb:0d:04: 9c:2a:d6:bc:ef:18:3d:57:50:54:58:a5:24:0b:16: c1:eb:04:46:b8:8f:80:b3:e8:91:1f:f0:21:56:21: c1:2a:cf:d3:cd:6f:3d:63:18:7a:5d:8f:9b:de:86: c0:74:15:31:38:ca:5e:56:e1:67:37:2d:40:38:67: f1:bc:30:b1:2b:e0:a2:17:cb:27:8c:a6:91:be:84: 0c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A8:7D:07:3D:ED:27:69:71:95:35:EC:B5:E5:9E:31:D0:AE:DD:51 X509v3 Authority Key Identifier: keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.212.0/23 IPv6: 2001:df2:7f40::/48 Signature Algorithm: sha256WithRSAEncryption 7c:b1:3a:58:07:3c:ae:ae:e7:07:51:e4:b8:5c:43:f4:01:a8: cd:13:55:88:d0:66:fd:20:78:29:bd:03:92:1e:ef:8c:17:c9: ac:30:b1:d2:7c:00:95:44:2f:77:54:b0:d9:b6:8f:ac:e8:90: 61:a2:34:f0:b9:d0:e5:b2:94:f2:da:2d:6e:3c:d9:15:5c:89: 4d:54:40:0d:66:58:15:50:32:6b:e6:2f:c6:34:05:9e:97:07: 04:54:3c:8c:26:f9:53:94:ef:91:c7:ef:79:f9:a8:90:39:f2: fa:56:b4:b9:6c:4a:c4:73:eb:cb:c7:5a:96:70:a8:cd:c5:02: e7:c8:b7:e7:8c:97:e3:ff:a8:2c:be:10:f7:79:18:75:4c:4e: 9d:6e:c7:81:ba:c6:f0:73:4a:6e:84:20:c3:44:ec:83:07:bf: a6:1c:e9:02:13:e0:9b:fa:2b:48:a9:af:8c:73:e4:dd:83:14: 66:4c:bd:57:66:25:a7:26:a9:da:ad:59:8c:bf:4e:ef:c0:d3: 64:d9:61:31:16:8f:e8:d7:20:76:59:60:1c:f9:c4:75:9e:2a: 32:89:8c:38:55:17:19:7f:3a:8a:6b:14:1e:bf:05:93:70:fc: 62:0e:c5:7f:9c:5d:01:fb:ed:7c:0d:7e:52:8e:9c:6b:bd:14: 51:a2:93:ea -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGNzkxMTAvBgNVBAUTKDI1RjlEQjYwMDdBREY2RjU3RUM0RUZGN0E2MkJGNEQ0 MkRBNzVFQzUwHhcNMjUwNzIzMDQ0MDMzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgwNjdjMS04NDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcDvIIu2jOnRD+zk+uwl3i91PfHP7p5KpDa788Rj3/GjRYy2zUNkjfkUXKau uJULSnGpRtDKxIHRwfVUYKYlLq/UCWUs7K8CqctNY6sD/kLJAk4QJPXjVqT5QM09 VBhYeHR25Ad+b++6DsUeWPhY25fZncvD0U5MNSyV5mGTfzwj8jmt025y50p7PWcp diRAKYWJwWx1eeHU59j2QoIglS4Mf90SUZAQ5BS6eWoxBHD7DQScKta87xg9V1BU WKUkCxbB6wRGuI+As+iRH/AhViHBKs/TzW89Yxh6XY+b3obAdBUxOMpeVuFnNy1A OGfxvDCxK+CiF8snjKaRvoQMdwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFD+ofQc9 7SdpcZU17LXlnjHQrt1RMB8GA1UdIwQYMBaAFCX522AHrfb1fsTv96Yr9NQtp17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y3OS9GQTMxQTJCMjZG MUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2Vi14T18zcGl2MDFDMm5Y c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmbmJZQWV0OXZWLXhPXzNwaXYwMUMyblhzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDNGNzkvRkEzMUEyQjI2RjFBMTFFRThEMzJFMDY0QzRGOUFFMDIvRjRDRENFNjY2 RjFDMTFFRThDQTNGMjZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFn0dQwDwQCAAIwCQMHACABDfJ/QDANBgkqhkiG9w0BAQsF AAOCAQEAfLE6WAc8rq7nB1HkuFxD9AGozRNViNBm/SB4Kb0Dkh7vjBfJrDCx0nwA lUQvd1Sw2baPrOiQYaI08LnQ5bKU8totbjzZFVyJTVRADWZYFVAya+YvxjQFnpcH BFQ8jCb5U5TvkcfvefmokDny+la0uWxKxHPry8dalnCozcUC58i354yX4/+oLL4Q 93kYdUxOnW7HgbrG8HNKboQgw0Tsgwe/phzpAhPgm/orSKmvjHPk3YMUZky9V2Yl pyap2q1ZjL9O78DTZNlhMRaP6NcgdllgHPnEdZ4qMomMOFUXGX86imsUHr8Fk3D8 Yg7Ff5xdAfvtfA1+Uo6ca70UUaKT6g== -----END CERTIFICATE-----Generated at Sun Aug 10 16:02:51 2025 by rpki-client