$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/1C43D57EAE3711ECB61BED46C4F9AE02.roa File: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (raw, json) Hash identifier: ZnO5JlWoEl5dNZhohsJyvbgouMlAXBiHwRW5x4khv3w= Subject key identifier: EF:6E:F3:99:DF:8B:B3:FB:56:A6:BC:00:A7:AA:CA:A8:E8:CA:25:76 Certificate issuer: /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Certificate serial: 0395 Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/1C43D57EAE3711ECB61BED46C4F9AE02.roa Signing time: Sun 03 Aug 2025 01:38:41 +0000 ROA not before: Sun 03 Aug 2025 01:38:41 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9311 IP address blocks: 103.30.253.0/24 maxlen: 24 103.30.255.0/24 maxlen: 24 103.70.181.0/24 maxlen: 24 103.70.182.0/24 maxlen: 24 103.70.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Validity Not Before: Aug 3 01:38:41 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=688ebda1-98bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:14:4d:d5:74:fd:70:ef:d6:d1:34:c7:38:8c: 23:89:cf:25:41:cc:3c:a9:ce:7d:b7:32:8b:25:59: 51:d1:e2:24:93:4f:99:44:78:cd:f5:22:5f:9e:8f: d4:e4:0d:84:a2:61:29:e9:67:f6:08:e4:47:c1:a5: 0d:e4:86:ce:e8:b6:2d:1f:79:b1:17:f4:21:7c:0e: aa:9d:f9:9a:a5:ac:01:4b:ae:57:b2:d4:4a:09:52: af:83:88:07:01:d7:d9:c1:c7:90:ca:8a:a1:d8:45: ad:a6:d9:de:52:29:7f:8a:40:a2:8c:54:5c:8d:98: e7:fb:4c:85:49:1e:9e:cc:2f:f1:54:e4:64:1a:fa: 6b:95:48:ec:9e:fd:69:f9:37:08:e6:45:c0:d1:d4: e6:b6:14:a6:d6:1c:98:2d:eb:8c:18:0f:35:21:fe: ed:e9:62:c5:b5:01:7a:44:b4:f8:05:51:b1:78:fd: ca:02:77:40:ce:9a:2e:aa:be:91:5e:ed:94:ba:0a: c5:b6:67:95:57:a8:8a:82:ee:8d:47:15:e5:ae:13: 4e:fa:2f:a1:7a:4e:5a:64:b4:e1:5f:e7:e8:0c:83: 23:f2:cc:4f:59:c6:9c:1e:6b:7e:48:d5:51:7d:dc: 5f:f0:d3:55:68:da:83:49:ef:2f:97:0f:2d:22:e5: 3f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6E:F3:99:DF:8B:B3:FB:56:A6:BC:00:A7:AA:CA:A8:E8:CA:25:76 X509v3 Authority Key Identifier: keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/1C43D57EAE3711ECB61BED46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.30.253.0/24 103.30.255.0/24 103.70.181.0-103.70.183.255 Signature Algorithm: sha256WithRSAEncryption bc:77:1f:6d:2f:06:1f:70:44:9f:39:32:66:81:b1:fe:a1:0c: e0:42:34:b8:f1:5a:11:e0:ee:e9:c6:91:a0:d4:b3:fd:4c:32: 61:c1:f4:cc:ad:89:45:30:8c:91:2b:e5:c5:b1:65:00:6c:63: 0c:1f:fa:2b:8b:25:e8:b3:db:5d:d3:e2:09:02:ea:26:9c:dd: 35:b4:ed:01:63:19:9d:12:de:8d:2e:40:ac:6c:2d:d1:b0:57: 4b:73:5c:96:7a:6b:5c:b8:83:4b:23:2f:f5:47:ad:7b:b6:16: bd:8a:fa:38:a3:d2:c6:4b:17:df:8b:38:ca:76:51:0c:47:30: 70:d7:44:35:00:fd:39:b0:7a:ea:5c:b8:1a:41:5b:84:59:7e: e6:02:b1:e6:94:ee:34:02:20:60:2d:e0:7d:f8:45:35:2b:0e: 37:1b:a5:51:01:f8:d7:7f:6f:f2:c7:0a:7c:55:9f:e4:77:87: 9a:21:77:f1:5f:8b:c4:31:76:35:1e:81:6d:5c:ba:61:7d:df: b0:b3:50:df:67:1b:f6:f8:fe:16:8a:2d:3a:9b:cc:6b:c6:88: 6c:b1:81:00:8e:2c:6f:91:7c:a7:e9:c7:9b:c8:d8:50:d6:b8: 26:59:53:59:7c:d0:36:4f:2f:62:2d:1f:f2:7e:e0:69:fd:d9: 44:f8:a7:53 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTkxMTAvBgNVBAUTKDk2NUQ3OUI4ODk2N0UyODdFNkE1MTUzQTEwNEZDMTRF QzExODVCMTEwHhcNMjUwODAzMDEzODQxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlYmRhMS05OGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxRN1XT9cO/W0TTHOIwjic8lQcw8qc59tzKLJVlR0eIkk0+ZRHjN9SJfno/U 5A2EomEp6Wf2CORHwaUN5IbO6LYtH3mxF/QhfA6qnfmapawBS65XstRKCVKvg4gH AdfZwceQyoqh2EWtptneUil/ikCijFRcjZjn+0yFSR6ezC/xVORkGvprlUjsnv1p +TcI5kXA0dTmthSm1hyYLeuMGA81If7t6WLFtQF6RLT4BVGxeP3KAndAzpouqr6R Xu2UugrFtmeVV6iKgu6NRxXlrhNO+i+hek5aZLThX+foDIMj8sxPWcacHmt+SNVR fdxf8NNVaNqDSe8vlw8tIuU/YQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFO9u85nf i7P7Vqa8AKeqyqjoyiV2MB8GA1UdIwQYMBaAFJZdebiJZ+KH5qUVOhBPwU7BGFsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1OS9DMTRGNTVDRUFF MzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRvZm1wUlU2RUVfQlRzRVlX eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xsMTV1SWxuNG9mbXBSVTZFRV9CVHNFWVd4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY4NTkvQzE0RjU1Q0VBRTMzMTFFQzlGQTYwRjQzQzRGOUFFMDIvMUM0M0Q1N0VB RTM3MTFFQ0I2MUJFRDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBABnHv0DBABnHv8wDAMEAGdGtQMEA2dGsDANBgkqhkiG9w0B AQsFAAOCAQEAvHcfbS8GH3BEnzkyZoGx/qEM4EI0uPFaEeDu6caRoNSz/UwyYcH0 zK2JRTCMkSvlxbFlAGxjDB/6K4sl6LPbXdPiCQLqJpzdNbTtAWMZnRLejS5ArGwt 0bBXS3NclnprXLiDSyMv9Uete7YWvYr6OKPSxksX34s4ynZRDEcwcNdENQD9ObB6 6ly4GkFbhFl+5gKx5pTuNAIgYC3gffhFNSsONxulUQH4139v8scKfFWf5HeHmiF3 8V+LxDF2NR6BbVy6YX3fsLNQ32cb9vj+FootOpvMa8aIbLGBAI4sb5F8p+nHm8jY UNa4JllTWXzQNk8vYi0f8n7gaf3ZRPinUw== -----END CERTIFICATE-----Generated at Mon Aug 11 04:11:07 2025 by rpki-client