$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BEB276EECCE311EAA397205EC4F9AE02.roa File: BEB276EECCE311EAA397205EC4F9AE02.roa (raw, json) Hash identifier: TdVNysB3ntS2HR65IAfyKvgdlfFK4ozUli+BZdpaY/k= Subject key identifier: 08:19:5F:41:4B:BE:5F:CA:3B:12:0D:BB:AC:DC:AB:31:44:FC:C8:5D Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 0869 Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BEB276EECCE311EAA397205EC4F9AE02.roa Signing time: Wed 30 Jul 2025 21:01:58 +0000 ROA not before: Wed 30 Jul 2025 21:01:58 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45437 IP address blocks: 103.57.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2153 (0x869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: Jul 30 21:01:58 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=688a8846-a217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:b5:d2:16:21:87:b1:2f:29:b4:1d:0f:a6: 04:d8:7f:eb:28:d8:41:82:7c:99:1b:0e:a2:e8:74: c4:62:d1:81:da:22:38:29:b9:32:35:f1:7f:d7:e7: ad:26:d4:df:db:71:d4:04:65:0c:f3:16:d0:27:f9: 85:ef:c0:3e:78:e7:de:40:27:78:6d:cb:2f:a1:9a: 0f:74:14:08:3e:26:60:3d:6e:3a:c6:2c:e4:6c:a2: 67:1b:f0:8d:1a:8e:56:05:79:f9:88:b9:43:0a:de: a4:f2:1e:06:5e:12:f7:8f:b7:d4:6a:da:85:92:73: 5f:30:15:a2:e4:b9:99:60:6c:32:52:be:e7:a3:b3: 70:74:a1:ee:ac:03:9b:36:77:59:1b:97:9d:18:41: 02:82:d1:9e:52:98:0c:9e:7f:f4:63:36:89:e8:22: 91:bc:31:e1:49:10:72:2d:d2:ca:b0:a4:c7:4c:05: c3:61:00:0f:a8:95:b3:fb:4a:12:cc:67:d7:5a:d5: 2d:6d:bd:b5:56:d4:e8:1f:a7:16:9a:f0:20:d8:1c: ea:ac:d0:1c:d9:83:1d:4a:db:d7:84:bc:af:20:aa: 3d:a4:75:78:67:19:39:8e:79:9b:dc:32:b1:50:91: f7:68:3b:e8:96:24:74:3e:a6:d6:02:eb:ea:87:a5: e6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:19:5F:41:4B:BE:5F:CA:3B:12:0D:BB:AC:DC:AB:31:44:FC:C8:5D X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BEB276EECCE311EAA397205EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.57.3.0/24 Signature Algorithm: sha256WithRSAEncryption 79:76:55:47:d3:d0:48:71:55:9e:fa:3f:bd:0f:ee:49:a2:aa: ee:40:73:8e:84:57:78:34:b2:c1:5f:8c:9e:d7:71:ba:3d:7c: 3a:09:81:01:b4:1e:96:7e:3c:59:ba:bf:1b:44:6d:7b:84:03: 03:a6:19:77:d0:55:a1:a6:d7:42:4f:e9:45:1a:d5:99:65:4a: f9:60:26:d1:e1:0f:3f:74:2c:15:15:14:05:37:48:a9:cd:99: ef:7f:97:9c:28:1b:cf:a2:76:6c:e3:25:87:ba:75:cf:93:40: 4f:14:c1:45:fa:e1:b1:fd:e2:3b:5c:a8:93:ca:06:9d:c6:19: 6e:05:83:43:6f:c5:0a:ab:e4:84:87:3c:ac:a9:fe:e5:7e:8d: c7:2a:79:fd:2d:28:60:5f:9f:2a:e5:b5:8e:ed:e3:bb:b3:a7: 30:91:8b:05:ea:47:e4:9f:22:79:06:fe:51:74:1a:65:79:19: be:ab:30:43:e1:ff:b0:be:a8:e6:f0:84:35:42:f4:3a:5d:a2: 97:02:1c:a1:26:af:a3:c1:b8:ae:40:77:ab:55:84:20:a2:1b: 3d:49:0d:67:41:10:98:42:4e:93:a4:14:85:61:fb:f9:cb:e8: 15:84:ec:62:87:7f:15:64:97:d5:de:27:a2:f5:80:4c:43:ab: 9c:a2:2c:92 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjUwNzMwMjEwMTU4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhODg0Ni1hMjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4O10hYhh7EvKbQdD6YE2H/rKNhBgnyZGw6i6HTEYtGB2iI4KbkyNfF/1+et JtTf23HUBGUM8xbQJ/mF78A+eOfeQCd4bcsvoZoPdBQIPiZgPW46xizkbKJnG/CN Go5WBXn5iLlDCt6k8h4GXhL3j7fUatqFknNfMBWi5LmZYGwyUr7no7NwdKHurAOb NndZG5edGEECgtGeUpgMnn/0YzaJ6CKRvDHhSRByLdLKsKTHTAXDYQAPqJWz+0oS zGfXWtUtbb21VtToH6cWmvAg2BzqrNAc2YMdStvXhLyvIKo9pHV4Zxk5jnmb3DKx UJH3aDvoliR0PqbWAuvqh6XmCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAgZX0FL vl/KOxINu6zcqzFE/MhdMB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMwQzAvMDIyREJDQTRDQ0UzMTFFQUFGNzNGQzVEQzRGOUFFMDIvQkVCMjc2RUVD Q0UzMTFFQUEzOTcyMDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnOQMwDQYJKoZIhvcNAQELBQADggEBAHl2VUfT0EhxVZ76 P70P7kmiqu5Ac46EV3g0ssFfjJ7Xcbo9fDoJgQG0HpZ+PFm6vxtEbXuEAwOmGXfQ VaGm10JP6UUa1ZllSvlgJtHhDz90LBUVFAU3SKnNme9/l5woG8+idmzjJYe6dc+T QE8UwUX64bH94jtcqJPKBp3GGW4Fg0NvxQqr5ISHPKyp/uV+jccqef0tKGBfnyrl tY7t47uzpzCRiwXqR+SfInkG/lF0GmV5Gb6rMEPh/7C+qObwhDVC9DpdopcCHKEm r6PBuK5Ad6tVhCCiGz1JDWdBEJhCTpOkFIVh+/nL6BWE7GKHfxVkl9XeJ6L1gExD q5yiLJI= -----END CERTIFICATE-----Generated at Sun Aug 10 05:34:59 2025 by rpki-client