$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/623705DA339111ED9249064BC4F9AE02.roa File: 623705DA339111ED9249064BC4F9AE02.roa (raw, json) Hash identifier: 3xXR0x6j8N4PVf2/cUiVsVNe4o0Qs5z+0StILd/4bVs= Subject key identifier: CF:0B:29:80:81:28:48:8A:A2:FD:AB:98:AB:1C:07:30:D6:F3:38:0F Certificate issuer: /CN=A91E22E5/serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615 Certificate serial: 0219 Authority key identifier: 23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/623705DA339111ED9249064BC4F9AE02.roa Signing time: Tue 27 May 2025 02:20:21 +0000 ROA not before: Tue 27 May 2025 02:20:21 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 133209 IP address blocks: 103.186.102.0/23 maxlen: 23 103.186.102.0/24 maxlen: 24 103.186.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E5, serialNumber=23EDEB74FD2340E47F01BC8BF7843B7691DC0615 Validity Not Before: May 27 02:20:21 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68352165-c283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:53:8e:37:c5:e1:bb:7a:3d:31:94:a4:4d: 58:30:c4:4a:f8:36:62:60:86:6b:28:6f:df:2b:5a: 1c:e2:eb:f5:85:17:88:82:22:be:11:34:38:0b:3e: 1d:f6:51:79:4d:dc:c4:86:01:70:1f:a9:ec:01:27: 94:f0:dd:fd:9d:45:2c:62:e2:df:4e:d8:28:80:9d: b4:e4:d4:01:d6:e2:1e:2a:35:09:7d:47:e6:29:74: 01:30:4f:55:fe:5f:11:3b:72:a8:94:9a:43:09:92: 4e:d3:b0:26:6c:ee:ee:d7:a6:7d:05:84:df:10:e2: ef:ac:a9:96:1c:f7:17:f7:79:24:16:92:70:91:61: 95:e8:74:bb:30:25:ed:d6:09:92:f5:50:27:1a:1c: 19:70:4b:41:1a:5e:a3:e1:e4:62:06:bb:f6:b0:17: 89:1b:23:90:30:aa:cb:c7:40:46:b7:c6:09:a0:bd: 8c:e3:59:79:de:60:0d:b2:c6:6c:4f:a0:09:7c:61: 49:ef:96:aa:c7:26:fd:8c:28:f4:47:6c:d5:06:83: ac:97:f1:84:d3:51:81:c0:d6:fe:66:2e:1b:b6:33: fc:80:b8:71:3e:0d:7e:6f:65:20:4d:fe:17:0d:f6: 5e:ec:59:4d:a1:48:17:b6:e6:fb:4c:36:42:42:c0: 8b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0B:29:80:81:28:48:8A:A2:FD:AB:98:AB:1C:07:30:D6:F3:38:0F X509v3 Authority Key Identifier: keyid:23:ED:EB:74:FD:23:40:E4:7F:01:BC:8B:F7:84:3B:76:91:DC:06:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/I-3rdP0jQOR_AbyL94Q7dpHcBhU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-3rdP0jQOR_AbyL94Q7dpHcBhU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E5/F5E34E64338D11ED97E3E25FC4F9AE02/623705DA339111ED9249064BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.102.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:0f:ef:3b:9f:8f:cb:45:3e:26:b5:e4:ea:65:78:e5:7a:3e: 50:ec:ea:20:a9:a4:da:ee:84:2f:8e:0a:03:2b:8b:3a:10:4d: 73:34:ff:c3:21:ca:77:cc:9b:b4:04:04:d0:46:33:8a:29:f1: 91:58:1d:3c:33:25:58:a9:9b:2f:97:2b:84:33:ca:b5:77:4a: 13:84:5e:04:c4:0f:f2:6d:fb:50:8d:b3:63:12:94:4f:87:90: 5f:55:29:56:91:7f:04:7a:9d:f6:31:7c:76:d4:7a:27:08:9e: 07:5f:41:05:75:20:5c:b2:73:4e:0b:50:0f:e9:a2:1f:e0:fc: 87:41:24:e5:0c:5b:e1:1f:cd:28:31:fe:6b:3e:13:fc:d9:31: aa:fd:f8:f2:e2:44:10:fc:fc:ca:d8:38:8b:a8:2f:ce:93:eb: d2:3e:e1:8d:bb:c9:6f:eb:64:80:f5:e1:f2:5b:36:7c:b6:0a: d7:ac:f6:c7:d1:3e:81:1c:f7:ce:4d:64:bc:d5:4d:87:ef:e5: 6a:1d:88:7f:dd:60:6c:5a:80:c0:8d:9d:58:8e:5b:a5:89:1e: 92:32:11:10:ed:2f:78:5c:ec:05:3a:1a:00:a3:a2:14:86:54: 16:d9:62:8e:60:e9:5c:58:44:de:0c:ac:44:9f:58:7f:c5:23: 24:d9:7c:af -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTUxMTAvBgNVBAUTKDIzRURFQjc0RkQyMzQwRTQ3RjAxQkM4QkY3ODQzQjc2 OTFEQzA2MTUwHhcNMjUwNTI3MDIyMDIxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM1MjE2NS1jMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAhTjjfF4bt6PTGUpE1YMMRK+DZiYIZrKG/fK1oc4uv1hReIgiK+ETQ4Cz4d 9lF5TdzEhgFwH6nsASeU8N39nUUsYuLfTtgogJ205NQB1uIeKjUJfUfmKXQBME9V /l8RO3KolJpDCZJO07AmbO7u16Z9BYTfEOLvrKmWHPcX93kkFpJwkWGV6HS7MCXt 1gmS9VAnGhwZcEtBGl6j4eRiBrv2sBeJGyOQMKrLx0BGt8YJoL2M41l53mANssZs T6AJfGFJ75aqxyb9jCj0R2zVBoOsl/GE01GBwNb+Zi4btjP8gLhxPg1+b2UgTf4X DfZe7FlNoUgXtub7TDZCQsCL7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFM8LKYCB KEiKov2rmKscBzDW8zgPMB8GA1UdIwQYMBaAFCPt63T9I0DkfwG8i/eEO3aR3AYV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFNS9GNUUzNEU2NDMz OEQxMUVEOTdFM0UyNUZDNEY5QUUwMi9JLTNyZFAwalFPUl9BYnlMOTRRN2RwSGNC aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktM3JkUDBqUU9SX0FieUw5NFE3ZHBIY0JoVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTIyRTUvRjVFMzRFNjQzMzhEMTFFRDk3RTNFMjVGQzRGOUFFMDIvNjIzNzA1REEz MzkxMTFFRDkyNDkwNjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnumYwDQYJKoZIhvcNAQELBQADggEBACsP7zufj8tFPia1 5OpleOV6PlDs6iCppNruhC+OCgMrizoQTXM0/8MhynfMm7QEBNBGM4op8ZFYHTwz JVipmy+XK4QzyrV3ShOEXgTED/Jt+1CNs2MSlE+HkF9VKVaRfwR6nfYxfHbUeicI ngdfQQV1IFyyc04LUA/poh/g/IdBJOUMW+EfzSgx/ms+E/zZMar9+PLiRBD8/MrY OIuoL86T69I+4Y27yW/rZID14fJbNny2Ctes9sfRPoEc985NZLzVTYfv5WodiH/d YGxagMCNnViOW6WJHpIyERDtL3hc7AU6GgCjohSGVBbZYo5g6VxYRN4MrESfWH/F IyTZfK8= -----END CERTIFICATE-----Generated at Wed Jun 18 15:17:01 2025 by rpki-client