$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/1CDBD11CAE3711ECB61BED46C4F9AE02.roa File: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (raw, json) Hash identifier: 2gg461BffUf/xT7BkrRnrVM5ZugLJyBnhbCMdi11J1w= Subject key identifier: 35:3D:22:1F:6A:7F:FD:B8:96:AF:A6:A1:EB:68:52:3A:A4:B2:C4:56 Certificate issuer: /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Certificate serial: 0396 Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/1CDBD11CAE3711ECB61BED46C4F9AE02.roa Signing time: Sun 03 Aug 2025 01:38:42 +0000 ROA not before: Sun 03 Aug 2025 01:38:42 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9919 IP address blocks: 103.30.252.0/24 maxlen: 24 103.30.254.0/24 maxlen: 24 103.70.180.0/24 maxlen: 24 103.193.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 918 (0x396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Validity Not Before: Aug 3 01:38:42 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=688ebda1-d5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:73:c3:4d:36:6c:98:83:5f:2e:6e:5a:fb:be: d2:47:7d:fc:3c:22:1c:22:84:ac:16:1a:cb:c3:d0: e9:ce:3f:37:09:a1:bd:24:2c:56:b2:dc:2f:77:f6: e4:47:47:d3:fa:40:78:b9:b4:56:fe:60:8f:73:a4: 6b:ef:3b:45:32:38:81:d1:fd:c2:1b:ab:67:1f:58: 93:d7:2d:f7:30:6d:80:da:08:16:59:e1:36:8d:df: 8a:73:3e:b3:41:ce:87:94:dc:de:9f:70:c2:d7:ef: 60:5b:73:3f:e3:4a:e4:dd:d8:eb:de:5f:21:08:dd: 15:d4:b0:21:ae:3e:ed:21:ba:6a:d8:0d:57:3b:30: 94:2e:56:a7:ec:bb:43:f3:9e:70:3f:e1:9c:ca:f4: 82:3c:89:87:11:7b:dc:c7:07:0a:a3:80:2c:da:1a: a0:da:2a:f0:76:e9:04:14:da:17:14:94:6c:e5:0f: 37:18:dd:e6:14:33:82:2c:2b:dd:af:dc:71:8c:fa: 2e:9b:82:b0:9e:3b:86:91:4c:28:f5:6b:10:45:fb: 9f:1f:a4:38:12:97:b0:7c:31:de:07:3d:e6:b6:eb: 42:59:59:a5:c4:88:12:49:12:a8:5e:d8:65:38:d9: 3d:5f:c0:95:71:24:21:79:fc:47:49:46:41:89:c4: b0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3D:22:1F:6A:7F:FD:B8:96:AF:A6:A1:EB:68:52:3A:A4:B2:C4:56 X509v3 Authority Key Identifier: keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/1CDBD11CAE3711ECB61BED46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.30.252.0/24 103.30.254.0/24 103.70.180.0/24 103.193.184.0/22 Signature Algorithm: sha256WithRSAEncryption e9:ec:f9:e4:d6:97:61:1d:68:67:c3:29:43:9b:70:ef:ea:92: 95:09:55:d1:0d:29:9b:63:ee:38:1f:a7:45:8c:a9:f2:03:e4: 1e:da:85:cc:b7:01:bd:ed:38:ef:23:44:14:47:60:5f:70:5e: d0:aa:8a:db:57:d2:32:95:01:f7:69:f8:8c:8b:36:a1:d6:d7: f0:c3:47:c5:c3:02:23:12:d1:7f:d9:9b:d3:10:2c:0f:85:53: 53:aa:d1:a3:6a:7a:0e:40:dc:ba:f0:58:e0:20:76:15:12:99: fb:be:a2:4b:0c:6c:1e:8c:5c:35:64:1c:fb:e6:52:37:af:34: 67:17:94:a0:e3:2c:cb:da:09:4d:df:93:ea:25:dc:38:ea:4c: e5:37:41:68:73:43:f5:79:53:c4:75:e0:92:a7:0b:51:12:a7: be:41:d3:eb:6c:14:39:1f:7a:3b:db:69:e0:5d:e6:7c:9c:6a: f0:05:f2:38:a3:31:7e:63:a6:1d:e5:8d:ca:f9:7d:b5:e2:07: 29:5b:ad:3a:d2:10:8c:43:07:2d:57:f7:db:cf:6c:6f:70:85: 16:50:a4:03:f0:63:f4:58:69:d1:16:9a:2b:98:30:4d:3d:8a: 3c:ca:9c:ca:19:64:01:4a:33:9e:31:e1:c2:71:22:38:31:f8: 93:59:da:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTkxMTAvBgNVBAUTKDk2NUQ3OUI4ODk2N0UyODdFNkE1MTUzQTEwNEZDMTRF QzExODVCMTEwHhcNMjUwODAzMDEzODQyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlYmRhMS1kNWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnPDTTZsmINfLm5a+77SR338PCIcIoSsFhrLw9Dpzj83CaG9JCxWstwvd/bk R0fT+kB4ubRW/mCPc6Rr7ztFMjiB0f3CG6tnH1iT1y33MG2A2ggWWeE2jd+Kcz6z Qc6HlNzen3DC1+9gW3M/40rk3djr3l8hCN0V1LAhrj7tIbpq2A1XOzCULlan7LtD 855wP+GcyvSCPImHEXvcxwcKo4As2hqg2irwdukEFNoXFJRs5Q83GN3mFDOCLCvd r9xxjPoum4KwnjuGkUwo9WsQRfufH6Q4EpewfDHeBz3mtutCWVmlxIgSSRKoXthl ONk9X8CVcSQhefxHSUZBicSw5QIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFDU9Ih9q f/24lq+moetoUjqkssRWMB8GA1UdIwQYMBaAFJZdebiJZ+KH5qUVOhBPwU7BGFsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1OS9DMTRGNTVDRUFF MzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRvZm1wUlU2RUVfQlRzRVlX eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xsMTV1SWxuNG9mbXBSVTZFRV9CVHNFWVd4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY4NTkvQzE0RjU1Q0VBRTMzMTFFQzlGQTYwRjQzQzRGOUFFMDIvMUNEQkQxMUNB RTM3MTFFQ0I2MUJFRDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABnHvwDBABnHv4DBABnRrQDBAJnwbgwDQYJKoZIhvcNAQEL BQADggEBAOns+eTWl2EdaGfDKUObcO/qkpUJVdENKZtj7jgfp0WMqfID5B7ahcy3 Ab3tOO8jRBRHYF9wXtCqittX0jKVAfdp+IyLNqHW1/DDR8XDAiMS0X/Zm9MQLA+F U1Oq0aNqeg5A3LrwWOAgdhUSmfu+oksMbB6MXDVkHPvmUjevNGcXlKDjLMvaCU3f k+ol3DjqTOU3QWhzQ/V5U8R14JKnC1ESp75B0+tsFDkfejvbaeBd5nycavAF8jij MX5jph3ljcr5fbXiBylbrTrSEIxDBy1X99vPbG9whRZQpAPwY/RYadEWmiuYME09 ijzKnMoZZAFKM54x4cJxIjgx+JNZ2ks= -----END CERTIFICATE-----Generated at Sat Aug 9 14:26:51 2025 by rpki-client