$ rpki-client -vvf rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/76C5241CF47311EC8721C33DC4F9AE02.roa File: 76C5241CF47311EC8721C33DC4F9AE02.roa (raw, json) Hash identifier: k+SbCpllhZI/PId+36V/JG+wlkp2Gdvk2xv/XzOQ3v8= Subject key identifier: 28:E8:E3:2A:67:52:69:F1:02:D5:62:C4:21:29:02:CE:F9:FF:49:F5 Certificate issuer: /CN=A91D506C/serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37 Certificate serial: 02D8 Authority key identifier: DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/76C5241CF47311EC8721C33DC4F9AE02.roa Signing time: Fri 25 Jul 2025 02:08:53 +0000 ROA not before: Fri 25 Jul 2025 02:08:53 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 149985 IP address blocks: 103.190.34.0/23 maxlen: 23 103.190.34.0/24 maxlen: 24 103.190.35.0/24 maxlen: 24 2001:df0:e340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D506C, serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37 Validity Not Before: Jul 25 02:08:53 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6882e735-9abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:a4:c2:ec:73:91:8d:00:d8:75:85:ac:a6: da:ae:a4:c2:d7:3c:9a:84:4e:c8:f3:00:92:23:34: de:73:c9:1a:03:1a:e6:33:bc:8d:5f:aa:1f:cc:8c: 0a:70:90:be:89:11:ff:99:3b:63:5a:8f:63:71:3a: c0:68:7f:45:d3:72:48:c6:8a:57:7a:30:d9:be:a1: 9e:70:b1:20:5b:94:97:9c:3c:0e:cb:93:66:79:72: fe:ba:55:59:9d:0a:25:f7:3d:5f:4b:c0:b7:6c:6c: 1e:af:8e:00:0e:4e:df:89:5b:ec:dc:48:7b:a7:7a: 96:78:b1:71:60:92:a8:f1:83:38:a5:c5:c5:86:76: 42:a7:52:6c:0b:cc:a1:f7:39:ef:b3:bb:53:c3:bd: 7f:47:bd:bf:2d:7b:f2:33:ae:cf:4a:ca:c9:5f:db: 77:1c:b2:3b:cd:18:8b:d3:77:b4:05:63:4d:c3:6e: 83:1d:84:e8:82:4e:69:9e:96:e3:5c:58:84:d0:57: 09:df:72:92:d6:b5:0a:07:ea:ff:26:21:5b:e1:8d: a1:cf:a4:4b:5f:f9:af:aa:56:45:d4:a7:a7:d9:59: 87:c8:7c:f0:68:5d:03:da:4b:e4:63:aa:d9:de:30: 9c:41:8a:c8:69:2d:b1:4f:d8:0c:c4:39:2a:a4:70: e8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E8:E3:2A:67:52:69:F1:02:D5:62:C4:21:29:02:CE:F9:FF:49:F5 X509v3 Authority Key Identifier: keyid:DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/76C5241CF47311EC8721C33DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.34.0/23 IPv6: 2001:df0:e340::/48 Signature Algorithm: sha256WithRSAEncryption 60:f5:6c:0c:dc:dc:c6:48:2d:e7:c1:ba:79:20:1f:3c:31:b8: 36:97:6a:62:b8:c3:03:c5:f5:16:ea:35:18:9b:5f:22:73:32: b7:24:13:6f:28:5b:44:b0:a3:53:eb:28:de:e1:ee:92:91:9d: fa:59:e1:be:51:02:7b:6b:0c:7f:7e:e4:26:9d:6b:18:32:1c: ee:84:4b:62:29:3e:c2:ee:a4:40:22:f0:2b:33:20:1a:0c:d1: 2c:82:e2:83:04:5f:8b:5a:96:65:10:1e:73:ba:bb:79:00:bb: a1:3d:df:12:79:96:a2:15:f6:b5:d2:1b:c2:63:07:2e:6f:11: 7c:8b:3a:1b:73:4a:f3:b0:93:d0:cc:e2:31:00:bd:ae:89:22: e0:64:48:64:29:79:06:c2:be:70:cb:a1:de:0a:30:ce:f4:40: c5:00:51:7b:92:49:1b:75:10:19:15:ea:42:35:f1:80:68:6b: d2:fd:de:1e:db:2b:1b:d7:ce:d6:c3:fc:bc:48:da:38:51:67: c6:f7:55:2a:da:91:d6:59:49:4f:9e:ef:fb:49:30:2e:d7:bc: 83:0e:3f:1d:a1:86:61:d0:58:1b:fd:29:20:8e:ed:32:34:30: 09:52:0c:f6:f6:5c:5c:a1:74:54:7c:f6:e4:17:85:3b:12:d9: 4b:8b:c3:69 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwNkMxMTAvBgNVBAUTKEREOEYzRDk2M0ZBOEQxRjIyRDU3RjRERkIyOUFCRDcw RDI1NThFMzcwHhcNMjUwNzI1MDIwODUzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgyZTczNS05YWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2GkwuxzkY0A2HWFrKbarqTC1zyahE7I8wCSIzTec8kaAxrmM7yNX6ofzIwK cJC+iRH/mTtjWo9jcTrAaH9F03JIxopXejDZvqGecLEgW5SXnDwOy5NmeXL+ulVZ nQol9z1fS8C3bGwer44ADk7fiVvs3Eh7p3qWeLFxYJKo8YM4pcXFhnZCp1JsC8yh 9znvs7tTw71/R72/LXvyM67PSsrJX9t3HLI7zRiL03e0BWNNw26DHYTogk5pnpbj XFiE0FcJ33KS1rUKB+r/JiFb4Y2hz6RLX/mvqlZF1Ken2VmHyHzwaF0D2kvkY6rZ 3jCcQYrIaS2xT9gMxDkqpHDohQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCjo4ypn UmnxAtVixCEpAs75/0n1MB8GA1UdIwQYMBaAFN2PPZY/qNHyLVf037KavXDSVY43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTA2Qy80NjYxOEIxQ0Y0 NkUxMUVDOEM2MDcwMEZDNEY5QUUwMi8zWTg5bGotbzBmSXRWX1Rmc3BxOWNOSlZq amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZODlsai1vMGZJdFZfVGZzcHE5Y05KVmpqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDUwNkMvNDY2MThCMUNGNDZFMTFFQzhDNjA3MDBGQzRGOUFFMDIvNzZDNTI0MUNG NDczMTFFQzg3MjFDMzNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnviIwDwQCAAIwCQMHACABDfDjQDANBgkqhkiG9w0BAQsF AAOCAQEAYPVsDNzcxkgt58G6eSAfPDG4NpdqYrjDA8X1Fuo1GJtfInMytyQTbyhb RLCjU+so3uHukpGd+lnhvlECe2sMf37kJp1rGDIc7oRLYik+wu6kQCLwKzMgGgzR LILigwRfi1qWZRAec7q7eQC7oT3fEnmWohX2tdIbwmMHLm8RfIs6G3NK87CT0Mzi MQC9roki4GRIZCl5BsK+cMuh3gowzvRAxQBRe5JJG3UQGRXqQjXxgGhr0v3eHtsr G9fO1sP8vEjaOFFnxvdVKtqR1llJT57v+0kwLte8gw4/HaGGYdBYG/0pII7tMjQw CVIM9vZcXKF0VHz25BeFOxLZS4vDaQ== -----END CERTIFICATE-----Generated at Sun Aug 10 04:47:38 2025 by rpki-client