$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/E723101E553D11E7B552CE31C4F9AE02.roa File: E723101E553D11E7B552CE31C4F9AE02.roa (raw, json) Hash identifier: CYv9JY9hI0P702N3lQBz+p9YJHwSjBcG7pv4fPI19/g= Subject key identifier: C8:DB:67:CF:77:81:AA:5D:29:86:19:57:9F:B8:9B:A1:CF:66:56:2A Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 1F42 Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/E723101E553D11E7B552CE31C4F9AE02.roa Signing time: Wed 06 Aug 2025 16:24:20 +0000 ROA not before: Wed 06 Aug 2025 16:24:20 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 58511 IP address blocks: 103.30.216.0/22 maxlen: 24 103.70.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8002 (0x1f42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: Aug 6 16:24:20 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=689381b4-d19a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:87:87:41:0f:36:88:c3:1b:eb:30:8b:95: 85:63:91:08:8f:4e:3f:28:6e:a5:fb:16:60:a5:38: eb:c1:76:4d:26:9d:0e:07:8e:8b:d2:18:f9:7e:e8: 63:ad:d1:66:26:6a:97:ee:2f:3e:c9:c2:f3:09:b0: 17:ac:05:d2:72:00:71:f6:ca:8e:af:75:79:7f:ed: 4b:b5:1a:75:c4:0f:68:ef:62:8b:77:6e:b1:e9:84: 5e:b8:2e:64:68:f2:e7:ad:85:72:60:30:99:df:1a: eb:8b:6e:53:26:38:16:2c:92:ee:fa:4a:a8:48:6e: 68:9d:e9:44:18:ad:7a:df:4e:dc:81:48:90:d6:d6: 34:ab:08:37:72:1c:c5:6b:ec:3f:f5:20:5b:7f:ec: c7:04:d4:49:01:aa:c5:07:ac:89:b5:7b:a9:13:95: 02:4b:d2:d1:07:c0:fc:72:91:11:50:43:8f:19:13: e2:29:de:26:b4:eb:16:40:4a:5b:97:8a:88:0d:70: 4a:60:d8:48:ba:39:6c:af:38:57:31:f9:db:04:af: 3d:32:20:20:8f:e0:b0:59:6c:f7:49:1f:cb:75:6c: f7:56:cd:f4:1e:b7:c4:35:3f:48:12:88:54:81:93: e7:07:9c:70:cd:2e:b8:7f:da:51:3b:da:dc:98:31: 95:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DB:67:CF:77:81:AA:5D:29:86:19:57:9F:B8:9B:A1:CF:66:56:2A X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/E723101E553D11E7B552CE31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.30.216.0/22 103.70.72.0/22 Signature Algorithm: sha256WithRSAEncryption b4:c6:57:60:3a:dd:2d:5e:48:e7:0b:8e:c4:44:23:85:e7:f0: c1:ca:e2:ef:df:79:70:69:e0:a5:8e:c8:ed:5d:9d:67:e4:60: 85:bd:ba:1c:55:dd:6e:60:63:23:e7:61:92:6c:f4:de:e9:61: 70:ed:9c:90:af:fd:fb:38:9b:10:1a:f8:69:d9:ff:b6:24:3e: a8:c4:03:50:7e:5c:fa:be:1d:a2:2e:51:ae:df:ae:63:59:c7: 4f:31:93:f2:57:b5:1f:d6:fc:0b:f0:79:87:bf:f4:50:01:b7: ab:cb:06:c5:75:8d:f5:57:69:e6:df:ad:15:cc:16:67:5b:4c: 2f:39:38:ac:99:01:9f:59:37:c2:55:05:c1:9d:9f:5d:80:d1: d1:75:49:6d:79:d6:4a:e2:ab:d3:ca:a4:96:70:67:01:93:c2: 09:1d:51:02:77:89:27:7c:b5:74:74:0a:72:7a:73:bd:f0:6a: 91:b9:0c:81:75:7b:02:9a:5e:8b:4b:ba:6d:43:c1:43:ad:f2: 00:b1:94:e1:bf:97:24:1e:0b:5b:c8:53:6e:12:87:06:42:eb: b2:fa:d1:24:0c:a8:32:cf:36:4b:42:69:40:c3:cf:56:d2:b7: cc:5d:bd:d6:d5:c2:8b:e7:e1:44:08:ef:fb:f8:47:10:d2:62: ad:b9:5d:41 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICH0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjUwODA2MTYyNDIwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkzODFiNC1kMTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvp6Hh0EPNojDG+swi5WFY5EIj04/KG6l+xZgpTjrwXZNJp0OB46L0hj5fuhj rdFmJmqX7i8+ycLzCbAXrAXScgBx9sqOr3V5f+1LtRp1xA9o72KLd26x6YReuC5k aPLnrYVyYDCZ3xrri25TJjgWLJLu+kqoSG5onelEGK16307cgUiQ1tY0qwg3chzF a+w/9SBbf+zHBNRJAarFB6yJtXupE5UCS9LRB8D8cpERUEOPGRPiKd4mtOsWQEpb l4qIDXBKYNhIujlsrzhXMfnbBK89MiAgj+CwWWz3SR/LdWz3Vs30HrfENT9IEohU gZPnB5xwzS64f9pRO9rcmDGVRwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMjbZ893 gapdKYYZV5+4m6HPZlYqMB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY5MzcvQTQ0N0JGREM1NTMwMTFFNkEzNjQyNzQ1QzRGOUFFMDIvRTcyMzEwMUU1 NTNEMTFFN0I1NTJDRTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnHtgDBAJnRkgwDQYJKoZIhvcNAQELBQADggEBALTGV2A6 3S1eSOcLjsREI4Xn8MHK4u/feXBp4KWOyO1dnWfkYIW9uhxV3W5gYyPnYZJs9N7p YXDtnJCv/fs4mxAa+GnZ/7YkPqjEA1B+XPq+HaIuUa7frmNZx08xk/JXtR/W/Avw eYe/9FABt6vLBsV1jfVXaebfrRXMFmdbTC85OKyZAZ9ZN8JVBcGdn12A0dF1SW15 1kriq9PKpJZwZwGTwgkdUQJ3iSd8tXR0CnJ6c73wapG5DIF1ewKaXotLum1DwUOt 8gCxlOG/lyQeC1vIU24ShwZC67L60SQMqDLPNktCaUDDz1bSt8xdvdbVwovn4UQI 7/v4RxDSYq25XUE= -----END CERTIFICATE-----Generated at Sun Aug 10 18:17:42 2025 by rpki-client