$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa File: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (raw, json) Hash identifier: 8N17MFKiZRA58NKBpmx9ZFKXCm0hJsn02fp1o1On+1I= Subject key identifier: D2:23:C5:FE:A1:72:21:CB:A0:A8:46:50:B5:21:8A:AC:E5:B4:67:2D Certificate issuer: /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF Certificate serial: 042C Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa Signing time: Fri 01 Aug 2025 01:37:50 +0000 ROA not before: Fri 01 Aug 2025 01:37:50 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 140900 IP address blocks: 103.179.246.0/24 maxlen: 24 103.179.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1068 (0x42c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0AAD, serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF Validity Not Before: Aug 1 01:37:50 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=688c1a6e-244a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e5:3b:6e:18:62:4a:0c:a3:2b:1c:19:41:c6: 8d:35:63:27:b3:c7:ef:6e:90:a8:09:4c:88:b2:d0: e0:ae:49:14:0a:19:df:9c:52:b3:f5:a5:4c:ed:5f: 70:43:8d:f9:36:02:7b:a7:c3:a5:16:b8:a2:fb:ae: cc:4d:94:d6:7a:cd:59:d9:ca:f0:7a:8b:e9:b5:14: 6b:66:85:84:09:7b:49:26:a6:cc:0c:98:67:00:4e: 01:35:2f:a4:8f:2a:71:a6:c8:05:aa:9f:24:0c:b2: 89:af:02:6e:b1:b3:b6:3d:99:45:ee:cb:97:65:9d: bf:3b:94:00:d2:ad:ae:4c:93:81:03:28:43:4e:0d: 36:38:f9:f1:d4:ba:e6:a4:47:b1:70:dd:b5:90:47: 63:79:c0:f5:24:2b:a9:11:41:24:76:cc:84:07:0e: 28:95:31:66:a2:19:26:69:5a:b3:5d:d0:7d:03:d2: cf:2a:5e:c3:00:01:c4:9f:e9:2b:ef:de:ab:fe:f3: d2:cf:c9:25:bf:c4:5d:2c:71:a1:f4:0f:27:de:a2: 2d:44:60:ec:cb:5a:97:f1:cf:8f:ae:34:59:86:11: e7:11:0a:ef:d2:ea:f0:a2:46:2a:82:c9:62:9b:12: ae:cd:32:e7:ba:a4:82:7d:77:81:1e:88:eb:31:29: 2b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:23:C5:FE:A1:72:21:CB:A0:A8:46:50:B5:21:8A:AC:E5:B4:67:2D X509v3 Authority Key Identifier: keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/0BE6F39E79E611EC99DA1B51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.246.0/23 Signature Algorithm: sha256WithRSAEncryption 69:a9:5b:83:dd:11:76:65:86:61:ed:f3:48:d1:77:90:6d:30: d5:c5:26:9c:c0:a8:3c:d2:c7:18:85:65:83:cc:33:40:eb:73: 05:ae:d2:3d:00:f5:8c:f4:61:63:93:38:f8:13:00:11:e8:31: 34:55:14:f2:f4:0a:5e:21:19:f2:67:6b:1f:1c:cc:60:76:2f: b3:72:4a:a6:5e:6c:a3:7b:80:0e:d4:de:42:27:81:fb:46:de: cc:97:30:47:73:55:ae:42:6e:11:d0:bb:1b:1e:5e:64:82:f3: 1b:45:b6:df:d9:2a:c0:3e:d1:7f:27:50:27:4b:83:5e:ce:fa: fa:7c:a6:72:a5:18:b0:ff:35:fe:f0:1e:92:c4:18:de:43:7e: ed:d0:72:2a:c9:5c:22:18:0c:4a:91:88:9b:e9:62:56:5f:9b: 5f:9e:36:fc:1b:3f:94:b6:9f:6f:32:1c:7f:b8:04:65:dc:65: fb:3a:d7:5b:93:25:20:18:f7:29:2a:2e:2d:5e:a7:6b:01:70: 34:f2:0f:17:d0:7a:4e:8d:93:c7:4b:50:5e:82:b6:0e:a9:64: 45:ce:9f:c3:cd:5a:56:f0:f7:33:34:d7:ad:a9:a5:df:e4:9f: 8b:af:92:4c:21:44:e8:07:d6:15:64:df:17:bf:99:f1:83:b9: 05:28:c1:96 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBBQUQxMTAvBgNVBAUTKDAwMTczNDdEQTNGMzVCNzUzOTUxQkRGNEIxQjA3Rjc2 MUUzRDlFQkYwHhcNMjUwODAxMDEzNzUwWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhjMWE2ZS0yNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+U7bhhiSgyjKxwZQcaNNWMns8fvbpCoCUyIstDgrkkUChnfnFKz9aVM7V9w Q435NgJ7p8OlFrii+67MTZTWes1Z2crweovptRRrZoWECXtJJqbMDJhnAE4BNS+k jypxpsgFqp8kDLKJrwJusbO2PZlF7suXZZ2/O5QA0q2uTJOBAyhDTg02OPnx1Lrm pEexcN21kEdjecD1JCupEUEkdsyEBw4olTFmohkmaVqzXdB9A9LPKl7DAAHEn+kr 796r/vPSz8klv8RdLHGh9A8n3qItRGDsy1qX8c+PrjRZhhHnEQrv0urwokYqgsli mxKuzTLnuqSCfXeBHojrMSkroQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNIjxf6h ciHLoKhGULUhiqzltGctMB8GA1UdIwQYMBaAFAAXNH2j81t1OVG99LGwf3YePZ6/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEFBRC8wREU1QjQwRTc5 RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelczVTVVYjMwc2JCX2RoNDlu cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCYzBmYVB6VzNVNVViMzBzYkJfZGg0OW5yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBBQUQvMERFNUI0MEU3OUUyMTFFQ0I1MDEzMTQ4QzRGOUFFMDIvMEJFNkYzOUU3 OUU2MTFFQzk5REExQjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFns/YwDQYJKoZIhvcNAQELBQADggEBAGmpW4PdEXZlhmHt 80jRd5BtMNXFJpzAqDzSxxiFZYPMM0DrcwWu0j0A9Yz0YWOTOPgTABHoMTRVFPL0 Cl4hGfJnax8czGB2L7NySqZebKN7gA7U3kIngftG3syXMEdzVa5CbhHQuxseXmSC 8xtFtt/ZKsA+0X8nUCdLg17O+vp8pnKlGLD/Nf7wHpLEGN5Dfu3QcirJXCIYDEqR iJvpYlZfm1+eNvwbP5S2n28yHH+4BGXcZfs611uTJSAY9ykqLi1ep2sBcDTyDxfQ ek6Nk8dLUF6Ctg6pZEXOn8PNWlbw9zM0162ppd/kn4uvkkwhROgH1hVk3xe/mfGD uQUowZY= -----END CERTIFICATE-----Generated at Sun Aug 10 19:55:23 2025 by rpki-client