$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/17C20748736C11F08782972FC4F9AE02.roa File: 17C20748736C11F08782972FC4F9AE02.roa (raw, json) Hash identifier: uD/+VbEQuvKB4FlDEdrzat2jHSaev4WUMeRzTzDdRDA= Subject key identifier: B4:0D:87:7A:56:E8:E8:63:8B:20:9F:64:19:37:C2:99:DB:9E:32:33 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 0522 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/17C20748736C11F08782972FC4F9AE02.roa Signing time: Thu 07 Aug 2025 08:54:14 +0000 ROA not before: Thu 07 Aug 2025 08:54:14 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 152179 IP address blocks: 103.204.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Aug 7 08:54:14 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=689469b6-9f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:18:f6:7f:7f:e9:56:63:d3:bf:89:f5:7e: 0c:19:d8:60:c3:27:2c:36:80:62:2c:90:02:e6:96: 0f:98:2a:09:35:aa:98:40:82:67:0d:e3:43:f0:30: 69:78:77:d5:f2:65:80:80:91:6e:7d:5a:09:eb:6b: e4:e6:63:49:92:6c:92:2c:40:3c:bd:41:99:0e:b8: c8:4e:ce:ed:c3:d3:5b:0d:4c:d0:5d:bb:34:74:c7: f1:1f:b8:d7:fb:c9:50:94:41:6c:f1:ff:a4:70:88: a2:e2:10:60:62:fc:71:3a:d9:6e:53:75:0a:5a:97: f1:2b:80:ee:f9:82:25:c6:75:18:ef:f6:4e:f9:a1: da:68:54:a2:04:42:1a:6a:95:6b:4c:ff:5d:ca:b5: cd:3d:f3:1d:4f:cd:43:10:fb:58:47:2e:05:58:47: 20:d3:82:80:be:ad:a9:ca:3f:b4:ff:a1:d7:30:b9: 88:44:a2:1e:7d:0a:3b:3f:0c:dc:91:17:b0:90:55: 3d:e8:53:84:d3:9a:80:0e:cb:86:c7:de:54:1d:99: b7:cf:42:e9:19:e0:fb:30:1b:fa:3b:d9:fc:1f:b8: a5:be:a6:4e:33:aa:e6:5c:80:f6:b8:2d:b9:a9:30: ce:62:81:0f:2c:09:a5:7f:79:13:a6:77:09:d6:dc: 84:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0D:87:7A:56:E8:E8:63:8B:20:9F:64:19:37:C2:99:DB:9E:32:33 X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/17C20748736C11F08782972FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.20.0/24 Signature Algorithm: sha256WithRSAEncryption 30:3d:1c:29:0c:3d:53:4c:db:25:6c:4d:5b:ed:b6:77:82:4a: a0:69:d1:49:7d:25:88:04:48:3e:6d:99:74:9e:b8:96:3c:0f: d7:c6:e5:64:8b:c1:99:06:10:f4:02:b6:a1:78:93:00:64:d4: fd:18:15:10:ae:78:28:b3:72:57:e9:ce:2c:24:2e:28:ad:13: ca:99:8f:3d:bd:55:06:f9:f7:56:64:3f:06:42:80:ad:41:2e: b8:b9:74:3d:8a:be:66:17:24:a4:92:64:80:c4:b3:fd:27:5c: 3b:1d:92:7b:69:6b:16:16:d5:8b:33:44:25:29:08:bd:61:63: 2a:28:fd:44:e9:56:e9:9b:38:d9:f2:35:eb:07:8b:75:c0:f3: 77:98:a8:50:63:2c:6b:1b:9e:35:a1:a4:ba:34:e7:12:42:ab: f8:7c:fa:0c:10:21:4b:fe:df:b2:55:88:1f:4f:3c:29:bf:2a: c0:d8:50:8c:b9:7a:ad:f4:f9:5c:fb:f0:59:61:44:77:b1:cb: 0c:0b:6b:45:ed:24:02:71:74:7c:a5:83:61:c6:f2:92:b5:03: ab:2b:76:ca:c7:16:81:c3:60:cb:3c:05:b2:71:88:b9:0a:ca: 31:71:30:b4:56:cc:00:46:92:e5:11:19:fb:0a:08:30:e0:5e: d0:dc:9d:90 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjUwODA3MDg1NDE0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk0NjliNi05ZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzkY9n9/6VZj07+J9X4MGdhgwycsNoBiLJAC5pYPmCoJNaqYQIJnDeND8DBp eHfV8mWAgJFufVoJ62vk5mNJkmySLEA8vUGZDrjITs7tw9NbDUzQXbs0dMfxH7jX +8lQlEFs8f+kcIii4hBgYvxxOtluU3UKWpfxK4Du+YIlxnUY7/ZO+aHaaFSiBEIa apVrTP9dyrXNPfMdT81DEPtYRy4FWEcg04KAvq2pyj+0/6HXMLmIRKIefQo7Pwzc kRewkFU96FOE05qADsuGx95UHZm3z0LpGeD7MBv6O9n8H7ilvqZOM6rmXID2uC25 qTDOYoEPLAmlf3kTpncJ1tyENQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLQNh3pW 6OhjiyCfZBk3wpnbnjIzMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBEODcvRjY4M0NFRjIyMUVCMTFFQzkyNTAxODE5QzRGOUFFMDIvMTdDMjA3NDg3 MzZDMTFGMDg3ODI5NzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnzBQwDQYJKoZIhvcNAQELBQADggEBADA9HCkMPVNM2yVs TVvttneCSqBp0Ul9JYgESD5tmXSeuJY8D9fG5WSLwZkGEPQCtqF4kwBk1P0YFRCu eCizclfpziwkLiitE8qZjz29VQb591ZkPwZCgK1BLri5dD2KvmYXJKSSZIDEs/0n XDsdkntpaxYW1YszRCUpCL1hYyoo/UTpVumbONnyNesHi3XA83eYqFBjLGsbnjWh pLo05xJCq/h8+gwQIUv+37JViB9PPCm/KsDYUIy5eq30+Vz78FlhRHexywwLa0Xt JAJxdHylg2HG8pK1A6srdsrHFoHDYMs8BbJxiLkKyjFxMLRWzABGkuURGfsKCDDg XtDcnZA= -----END CERTIFICATE-----Generated at Sun Aug 10 18:48:35 2025 by rpki-client