$ rpki-client -vvf rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/DBE8B4205F0F11ECA6315D2AC4F9AE02.roa File: DBE8B4205F0F11ECA6315D2AC4F9AE02.roa (raw, json) Hash identifier: jwlLH9aehVTXk9pUZLFV4it1GAP8lE1rTRj2qtnhA8Y= Subject key identifier: 75:C6:08:24:03:AA:E5:8B:A9:B6:6E:D3:D7:7A:49:0B:10:72:C2:FC Certificate issuer: /CN=A91E331D/serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1 Certificate serial: 03FE Authority key identifier: 57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/DBE8B4205F0F11ECA6315D2AC4F9AE02.roa Signing time: Wed 05 Feb 2025 00:33:05 +0000 ROA not before: Wed 05 Feb 2025 00:33:05 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 149168 IP address blocks: 103.177.186.0/23 maxlen: 24 2001:df0:28c0::/48 maxlen: 56 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1022 (0x3fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E331D, serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1 Validity Not Before: Feb 5 00:33:05 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a2b1c1-fced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:33:30:75:7d:9b:aa:8b:95:a4:e1:1c:ee:cb: ab:36:d5:b6:a8:46:19:15:a6:bb:1e:b6:4b:f9:77: e1:15:88:6d:0e:c2:64:01:79:ff:2f:f0:e6:92:17: 4a:91:4f:28:9d:9c:30:bc:30:f9:f6:72:9e:d4:3c: 96:f7:e4:ac:e9:af:e5:8b:1a:77:2a:f3:02:34:5e: c7:36:d3:c1:f9:0d:de:8d:f5:8e:88:5e:09:71:ad: bf:2d:37:e6:80:c3:24:e1:3d:2d:22:82:3d:87:76: 78:aa:b3:65:11:6f:80:20:25:28:e3:2e:67:2f:95: 00:9c:1d:db:21:75:a3:2a:54:3a:47:3f:81:2b:f6: 18:a8:c8:8f:c0:16:38:14:7d:4f:45:1b:cb:00:3e: 2b:a3:d8:4f:68:d1:70:fc:16:f9:92:96:4b:6f:c6: bb:50:2e:af:14:c4:4a:5f:cf:ca:81:70:74:85:63: 20:ed:75:f8:48:24:fd:21:ea:c0:79:f8:be:e1:d8: bb:c7:94:16:da:61:57:fd:7f:10:7e:21:b9:98:f5: 91:1f:83:e3:bd:ed:81:28:01:a3:64:8c:73:93:19: a0:7b:75:2b:81:c2:5b:fa:44:4c:a4:3f:ae:ce:94: 0f:bf:34:15:4b:2a:13:e1:f7:79:33:ae:5b:bd:bb: 73:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C6:08:24:03:AA:E5:8B:A9:B6:6E:D3:D7:7A:49:0B:10:72:C2:FC X509v3 Authority Key Identifier: keyid:57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/DBE8B4205F0F11ECA6315D2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.177.186.0/23 IPv6: 2001:df0:28c0::/48 Signature Algorithm: sha256WithRSAEncryption 73:49:75:67:14:7b:0c:5d:cc:7b:55:73:0f:a9:8b:e9:64:51: 60:38:75:cd:cc:37:5c:9a:64:82:8d:0b:8b:b5:54:e6:14:23: fa:60:e4:75:27:a1:b1:c0:f0:53:83:8f:2a:de:39:f1:cf:9c: 36:3d:22:7a:4b:d6:bf:9e:a7:18:b4:e7:19:20:76:75:4c:26: be:ad:30:9f:39:f2:a8:c4:74:30:ab:39:30:d6:a6:a2:60:7d: b0:13:62:44:f1:df:09:77:b4:fb:d8:2a:69:b8:fa:a3:2b:25: 06:fb:d9:74:3f:4d:85:84:64:05:11:51:58:30:90:48:9e:42: 4e:91:6c:f6:d9:af:33:e4:a8:9c:2c:42:ee:11:3d:e2:2a:86: 37:af:e0:5d:0c:dc:65:1a:d8:62:0f:e8:2b:52:de:41:70:75: 3b:46:bc:6c:74:f7:bb:e1:ef:bb:6f:1e:ed:16:42:75:37:89: 6f:db:50:16:bc:9f:c0:2d:6e:5d:ee:c7:ee:92:f6:36:a1:54: 49:d2:61:c4:2e:24:cc:29:26:f1:61:30:10:e7:ed:a7:bc:85: dc:3e:ed:ce:07:b8:40:1a:8e:82:8e:14:15:5b:5d:12:b7:fb: c8:05:e4:80:8a:1a:0c:9f:c4:91:00:16:42:ac:c6:71:88:24: 7c:ac:d9:cf -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzMUQxMTAvBgNVBAUTKDU3MkU3NjBEQkNFNkQ2NTU1MzA5OEIwMTdFRkMzMkVD QjFDRUNBRTEwHhcNMjUwMjA1MDAzMzA1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyYjFjMS1mY2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jMwdX2bqouVpOEc7surNtW2qEYZFaa7HrZL+XfhFYhtDsJkAXn/L/DmkhdK kU8onZwwvDD59nKe1DyW9+Ss6a/lixp3KvMCNF7HNtPB+Q3ejfWOiF4Jca2/LTfm gMMk4T0tIoI9h3Z4qrNlEW+AICUo4y5nL5UAnB3bIXWjKlQ6Rz+BK/YYqMiPwBY4 FH1PRRvLAD4ro9hPaNFw/Bb5kpZLb8a7UC6vFMRKX8/KgXB0hWMg7XX4SCT9IerA efi+4di7x5QW2mFX/X8QfiG5mPWRH4Pjve2BKAGjZIxzkxmge3UrgcJb+kRMpD+u zpQPvzQVSyoT4fd5M65bvbtzYQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHXGCCQD quWLqbZu09d6SQsQcsL8MB8GA1UdIwQYMBaAFFcudg285tZVUwmLAX78Muyxzsrh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzMxRC9FNzYxMENDRTVG MEMxMUVDQTkxNDQ0MjZDNEY5QUUwMi9WeTUyRGJ6bTFsVlRDWXNCZnZ3eTdMSE95 dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5NTJEYnptMWxWVENZc0Jmdnd5N0xIT3l1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTMzMUQvRTc2MTBDQ0U1RjBDMTFFQ0E5MTQ0NDI2QzRGOUFFMDIvREJFOEI0MjA1 RjBGMTFFQ0E2MzE1RDJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnsbowDwQCAAIwCQMHACABDfAowDANBgkqhkiG9w0BAQsF AAOCAQEAc0l1ZxR7DF3Me1VzD6mL6WRRYDh1zcw3XJpkgo0Li7VU5hQj+mDkdSeh scDwU4OPKt458c+cNj0iekvWv56nGLTnGSB2dUwmvq0wnznyqMR0MKs5MNamomB9 sBNiRPHfCXe0+9gqabj6oyslBvvZdD9NhYRkBRFRWDCQSJ5CTpFs9tmvM+SonCxC 7hE94iqGN6/gXQzcZRrYYg/oK1LeQXB1O0a8bHT3u+Hvu28e7RZCdTeJb9tQFryf wC1uXe7H7pL2NqFUSdJhxC4kzCkm8WEwEOftp7yF3D7tzge4QBqOgo4UFVtdErf7 yAXkgIoaDJ/EkQAWQqzGcYgkfKzZzw== -----END CERTIFICATE-----Generated at Wed Nov 5 13:55:58 2025 by rpki-client