$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/1DE1E418EDE211EB8CEA3415C4F9AE02.roa File: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (raw, json) Hash identifier: +V/Zx8b6BYHTeFZwhHH+tuI5S8sFWblyU4r7DTnMltA= Subject key identifier: F2:1B:7C:3C:F7:2C:22:49:8D:4C:39:17:C4:FA:C0:E8:26:F4:B0:E5 Certificate issuer: /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535 Certificate serial: 0593 Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/1DE1E418EDE211EB8CEA3415C4F9AE02.roa Signing time: Thu 07 Aug 2025 00:05:22 +0000 ROA not before: Thu 07 Aug 2025 00:05:22 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 142541 IP address blocks: 103.87.88.0/24 maxlen: 24 103.168.193.0/24 maxlen: 24 103.254.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 23:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535 Validity Not Before: Aug 7 00:05:22 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6893edc1-cee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2d:77:13:90:6c:00:fb:43:ad:a0:9a:7d:3c: 8d:2d:d7:bc:30:3e:50:8e:51:d0:ff:62:f8:74:7d: fa:8c:61:09:24:6c:2d:c2:f0:fa:0f:11:83:e7:33: 91:d2:cb:e7:2b:70:06:da:30:e1:71:9a:67:f4:5d: 0b:a4:83:02:28:ef:bc:e6:4c:6d:d6:2b:a3:be:fb: 5b:c2:8b:9c:80:e7:50:e5:b4:1c:8f:12:bf:cf:90: 49:1c:e7:ae:f9:61:5a:81:fe:8d:02:9f:f9:76:87: 13:24:a5:62:39:6b:75:4a:79:9a:e4:fd:cd:3c:07: 58:15:65:3d:52:f8:06:8d:2f:0f:90:ca:c9:94:41: 49:74:ec:0c:7c:ea:3a:2b:9e:94:e8:df:e0:26:53: 6a:8c:96:66:1b:64:43:35:53:95:77:75:1b:6f:d0: c3:0e:e3:21:d5:4f:0d:ab:27:70:1f:73:fd:76:54: 2d:59:32:9d:97:44:6a:63:8f:23:bd:58:22:70:3b: 9b:2c:6c:ed:b4:35:5e:9d:d3:fb:a7:ff:a1:b8:ef: d2:46:a2:51:64:cb:1e:d5:61:14:38:9d:42:cc:0f: 67:10:ce:1b:f2:1d:1f:4a:d9:32:1c:0e:11:f2:73: 06:49:76:f9:47:9b:7d:e3:02:e9:3b:c0:4c:fd:7d: c0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1B:7C:3C:F7:2C:22:49:8D:4C:39:17:C4:FA:C0:E8:26:F4:B0:E5 X509v3 Authority Key Identifier: keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/1DE1E418EDE211EB8CEA3415C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.87.88.0/24 103.168.193.0/24 103.254.166.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:1d:b3:24:90:15:49:00:23:d8:41:10:48:70:e4:2e:58:2b: 2d:31:a1:9e:22:0f:18:4a:f0:55:58:b4:bd:9f:cf:d2:32:b8: 08:e9:7b:22:16:8f:6f:85:a6:48:07:cb:94:e5:b0:ad:b5:02: 75:e1:63:df:4b:b0:7a:8b:63:e2:b2:d1:11:fb:a9:4e:d2:d8: b4:94:59:e6:a2:6e:89:59:a5:c6:8e:78:ef:91:a6:70:e6:9d: 01:1f:7c:74:7f:b7:d1:b9:47:42:d8:e9:b9:ea:f4:87:6f:c7: 62:f6:01:d7:33:df:d1:59:4e:19:b1:be:41:8f:50:78:cb:b0: f0:95:df:04:66:7d:c6:d5:54:e2:76:9e:fc:1e:30:0a:75:17: 93:c1:e1:a5:80:0f:ce:f8:34:3c:a2:af:32:37:43:92:6d:0f: 77:8c:19:1c:79:57:8a:fe:8c:c4:25:97:f1:79:35:f4:c7:2c: a3:20:0f:5f:ea:64:27:7b:e3:b0:bc:25:29:8a:e5:c3:bd:ef: 2c:04:5a:f6:0b:13:9a:60:f1:b5:da:20:71:50:76:be:d3:09: 6b:60:e9:88:91:73:0c:b2:6f:e3:c3:8e:8d:f6:38:30:e1:11: d9:3f:a5:d3:f2:24:61:1a:33:a6:7b:ff:5c:d8:13:d3:61:6d: 02:f3:bb:f0 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFDMEIxMTAvBgNVBAUTKDRFQzM5N0Y3QTU1MEJFOTA0QzE4NkY5MjA4MTc3NDAw NzFEMjQ1MzUwHhcNMjUwODA3MDAwNTIyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkzZWRjMS1jZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArC13E5BsAPtDraCafTyNLde8MD5QjlHQ/2L4dH36jGEJJGwtwvD6DxGD5zOR 0svnK3AG2jDhcZpn9F0LpIMCKO+85kxt1iujvvtbwoucgOdQ5bQcjxK/z5BJHOeu +WFagf6NAp/5docTJKViOWt1Snma5P3NPAdYFWU9UvgGjS8PkMrJlEFJdOwMfOo6 K56U6N/gJlNqjJZmG2RDNVOVd3Ubb9DDDuMh1U8NqydwH3P9dlQtWTKdl0RqY48j vVgicDubLGzttDVendP7p/+huO/SRqJRZMse1WEUOJ1CzA9nEM4b8h0fStkyHA4R 8nMGSXb5R5t94wLpO8BM/X3AwwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPIbfDz3 LCJJjUw5F8T6wOgm9LDlMB8GA1UdIwQYMBaAFE7Dl/elUL6QTBhvkggXdABx0kU1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMwQi9CNzNBMTc5Q0U1 NUExMUVCQjlCRjg5NDJDNEY5QUUwMi9Uc09YOTZWUXZwQk1HRy1TQ0JkMEFISFNS VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RzT1g5NlZRdnBCTUdHLVNDQmQwQUhIU1JUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTFDMEIvQjczQTE3OUNFNTVBMTFFQkI5QkY4OTQyQzRGOUFFMDIvMURFMUU0MThF REUyMTFFQjhDRUEzNDE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnV1gDBABnqMEDBABn/qYwDQYJKoZIhvcNAQELBQADggEB AG4dsySQFUkAI9hBEEhw5C5YKy0xoZ4iDxhK8FVYtL2fz9IyuAjpeyIWj2+FpkgH y5TlsK21AnXhY99LsHqLY+Ky0RH7qU7S2LSUWeaibolZpcaOeO+RpnDmnQEffHR/ t9G5R0LY6bnq9Idvx2L2Adcz39FZThmxvkGPUHjLsPCV3wRmfcbVVOJ2nvweMAp1 F5PB4aWAD874NDyirzI3Q5JtD3eMGRx5V4r+jMQll/F5NfTHLKMgD1/qZCd747C8 JSmK5cO97ywEWvYLE5pg8bXaIHFQdr7TCWtg6YiRcwyyb+PDjo32ODDhEdk/pdPy JGEaM6Z7/1zYE9NhbQLzu/A= -----END CERTIFICATE-----Generated at Wed Aug 13 05:31:48 2025 by rpki-client