$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/C2AB1A10B64411E89321A417C4F9AE02.roa File: C2AB1A10B64411E89321A417C4F9AE02.roa (raw, json) Hash identifier: IqvtwPczbHtONnp7/SjDoKiW5eTz+eR8wc9lCI4pYs0= Subject key identifier: 78:FC:F2:2D:7D:F6:54:4E:A1:5F:13:99:2C:AA:C4:2F:CF:44:37:71 Certificate issuer: /CN=A91D8B7C/serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Certificate serial: 13D1 Authority key identifier: 24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/C2AB1A10B64411E89321A417C4F9AE02.roa Signing time: Fri 04 Jul 2025 17:26:37 +0000 ROA not before: Fri 04 Jul 2025 17:26:37 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 137952 IP address blocks: 103.118.44.0/22 maxlen: 22 103.118.44.0/24 maxlen: 24 103.118.45.0/24 maxlen: 24 103.118.46.0/24 maxlen: 24 103.118.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5073 (0x13d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B7C, serialNumber=24936E1369C90C1EDF91AF5072D73FE7457DC943 Validity Not Before: Jul 4 17:26:37 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68680ecd-a919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:2b:6e:9f:07:12:e4:23:6a:63:db:54:49: c8:4c:cf:10:47:63:05:c4:84:a1:45:5e:6a:22:f7: 6d:44:11:c6:0e:8e:14:83:25:21:0c:f1:d8:ff:ca: a1:1e:d6:bd:4c:f6:7b:3d:2a:c1:ba:d0:0b:15:9a: 9d:f8:47:61:42:59:8b:13:6c:e6:7c:2b:eb:c9:39: 4f:43:74:86:24:b7:15:0e:f9:22:bc:a6:4c:c9:e6: 36:67:3a:78:54:55:6f:57:80:76:d5:4e:68:05:4d: b1:64:9f:2b:85:7f:46:9e:78:a6:3b:cc:38:26:f1: 08:f5:79:3f:25:f0:74:33:21:f9:e3:24:0c:34:65: 93:01:ce:3c:03:7b:0e:1f:e6:de:1d:82:a6:8e:dc: 7f:b0:cd:4a:2b:48:4e:6e:cd:6e:13:8a:cd:64:ed: 4e:da:b4:ff:a6:62:04:d0:94:d1:d3:76:06:55:ac: ed:d4:72:9c:6d:9d:20:41:e0:41:c1:f7:9f:cb:fe: 09:3a:c3:d4:81:e0:cc:d8:c5:3d:59:3d:38:53:09: 64:73:ff:39:f4:87:23:f5:49:53:d1:da:44:08:fa: 5d:d8:ce:d2:e2:0b:9a:b6:6a:d4:81:29:77:f2:9b: f2:d1:33:aa:10:fb:34:18:4c:80:bb:23:bb:78:2c: ea:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FC:F2:2D:7D:F6:54:4E:A1:5F:13:99:2C:AA:C4:2F:CF:44:37:71 X509v3 Authority Key Identifier: keyid:24:93:6E:13:69:C9:0C:1E:DF:91:AF:50:72:D7:3F:E7:45:7D:C9:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/JJNuE2nJDB7fka9Qctc_50V9yUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJNuE2nJDB7fka9Qctc_50V9yUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B7C/95FDA1FA8F5611E893B1823AC4F9AE02/C2AB1A10B64411E89321A417C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.118.44.0/22 Signature Algorithm: sha256WithRSAEncryption 98:ff:e7:f8:10:c8:52:23:6a:21:bd:1e:cc:0f:04:fc:db:c3: cc:df:5e:dd:ed:ed:2c:41:a6:eb:92:39:e8:ab:0e:78:d9:e8: a1:c9:5d:d6:03:63:13:85:7c:6e:ef:b7:c5:76:a8:0a:22:62: e5:04:cc:dd:81:b4:62:2e:aa:f0:48:7f:d1:1b:a3:08:70:02: c2:ac:09:8b:71:22:43:db:3d:58:c2:1c:26:58:bb:ba:41:7c: b6:1f:bd:53:d9:68:18:2d:53:80:3a:13:57:3e:ac:60:c8:28: 2e:76:08:f0:76:0e:34:1b:0c:a8:af:35:67:59:b1:31:77:37: f0:4c:08:1b:84:c3:d1:03:5a:e1:f4:53:5d:4d:37:7d:07:2e: b2:ed:5e:7c:c1:8d:aa:6f:21:e6:d7:f8:88:ea:ef:63:95:9d: b4:88:82:ed:7f:c6:71:a0:e9:c0:8a:2c:53:c5:43:fd:0a:33: bc:e8:81:04:c0:19:f2:9d:8f:67:35:18:80:66:9e:68:3f:89: db:64:08:8d:f5:27:2f:c2:0d:af:91:a1:a1:d0:4a:04:2f:ea: f4:f9:ed:ae:a6:89:a3:44:43:5f:b4:6d:33:9f:b1:4c:87:bc: 8a:3e:54:6a:bb:01:c3:e9:32:01:69:33:76:05:8f:07:1f:bb: 8b:f5:6b:80 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICE9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCN0MxMTAvBgNVBAUTKDI0OTM2RTEzNjlDOTBDMUVERjkxQUY1MDcyRDczRkU3 NDU3REM5NDMwHhcNMjUwNzA0MTcyNjM3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4MGVjZC1hOTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfkrbp8HEuQjamPbVEnITM8QR2MFxIShRV5qIvdtRBHGDo4UgyUhDPHY/8qh Hta9TPZ7PSrButALFZqd+EdhQlmLE2zmfCvryTlPQ3SGJLcVDvkivKZMyeY2Zzp4 VFVvV4B21U5oBU2xZJ8rhX9GnnimO8w4JvEI9Xk/JfB0MyH54yQMNGWTAc48A3sO H+beHYKmjtx/sM1KK0hObs1uE4rNZO1O2rT/pmIE0JTR03YGVazt1HKcbZ0gQeBB wfefy/4JOsPUgeDM2MU9WT04Uwlkc/859Icj9UlT0dpECPpd2M7S4guatmrUgSl3 8pvy0TOqEPs0GEyAuyO7eCzqDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHj88i19 9lROoV8TmSyqxC/PRDdxMB8GA1UdIwQYMBaAFCSTbhNpyQwe35GvUHLXP+dFfclD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI3Qy85NUZEQTFGQThG NTYxMUU4OTNCMTgyM0FDNEY5QUUwMi9KSk51RTJuSkRCN2ZrYTlRY3RjXzUwVjl5 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pKTnVFMm5KREI3ZmthOVFjdGNfNTBWOXlVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDhCN0MvOTVGREExRkE4RjU2MTFFODkzQjE4MjNBQzRGOUFFMDIvQzJBQjFBMTBC NjQ0MTFFODkzMjFBNDE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJndiwwDQYJKoZIhvcNAQELBQADggEBAJj/5/gQyFIjaiG9 HswPBPzbw8zfXt3t7SxBpuuSOeirDnjZ6KHJXdYDYxOFfG7vt8V2qAoiYuUEzN2B tGIuqvBIf9EbowhwAsKsCYtxIkPbPVjCHCZYu7pBfLYfvVPZaBgtU4A6E1c+rGDI KC52CPB2DjQbDKivNWdZsTF3N/BMCBuEw9EDWuH0U11NN30HLrLtXnzBjapvIebX +Ijq72OVnbSIgu1/xnGg6cCKLFPFQ/0KM7zogQTAGfKdj2c1GIBmnmg/idtkCI31 Jy/CDa+RoaHQSgQv6vT57a6miaNEQ1+0bTOfsUyHvIo+VGq7AcPpMgFpM3YFjwcf u4v1a4A= -----END CERTIFICATE-----Generated at Sat Aug 9 23:19:34 2025 by rpki-client