$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/2D153A4648B711F0B6D4592EC4F9AE02.roa File: 2D153A4648B711F0B6D4592EC4F9AE02.roa (raw, json) Hash identifier: VSUYP4XH4W6UbM3Jx/voaBKaxnmkjCV3eOna45KZu3o= Subject key identifier: 89:22:A7:D9:56:D1:AB:84:35:42:AA:A8:B0:09:09:8A:D9:26:E4:18 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 0315 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/2D153A4648B711F0B6D4592EC4F9AE02.roa Signing time: Sat 14 Jun 2025 00:33:22 +0000 ROA not before: Sat 14 Jun 2025 00:33:22 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 44259 IP address blocks: 103.26.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 789 (0x315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Jun 14 00:33:22 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=684cc352-e3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:48:4d:ec:59:65:f7:d4:ec:b7:3b:2e:6e: 34:21:1a:a9:84:6e:ae:36:9b:c8:bd:11:51:a2:49: 1d:8b:fa:d3:f9:40:7d:7b:e7:db:c0:c9:e1:2a:b0: 7e:d1:e2:2c:47:77:5c:2a:59:b5:a2:1b:47:8f:5b: 8b:d2:a9:f3:45:3e:b8:02:78:da:84:a4:63:d8:de: 58:bd:36:a0:1d:92:fe:be:47:28:22:a7:17:44:e9: 77:04:02:cc:e5:40:d1:dc:3a:13:10:e0:5d:17:23: ae:f8:ed:8e:6c:e3:51:0b:4e:16:86:a4:66:7d:02: 31:01:14:50:10:d1:b8:38:88:38:d6:5e:88:a2:22: 1c:c9:1e:6f:26:d4:46:0e:37:f1:d0:3e:9e:cc:ca: f6:95:a0:96:22:28:ca:6b:ea:1c:4d:8b:f3:93:fb: 62:57:75:76:2b:11:31:cd:be:92:02:bb:92:0c:9b: c3:e2:5f:11:a1:e1:c9:00:a6:aa:74:c3:92:72:48: 37:5f:0a:8b:20:dc:be:29:af:f1:e7:c2:33:4b:b4: 34:7e:94:43:8d:ae:ae:c8:c4:67:aa:e7:e0:92:a1: 88:88:c5:54:7a:66:2f:b2:8d:fa:8e:7a:d0:ea:61: 5e:d7:e0:e3:e5:ed:5a:e9:ef:36:61:20:16:71:b0: bc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:22:A7:D9:56:D1:AB:84:35:42:AA:A8:B0:09:09:8A:D9:26:E4:18 X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/2D153A4648B711F0B6D4592EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.26.10.0/24 Signature Algorithm: sha256WithRSAEncryption ce:f2:78:1c:a6:b0:95:0c:90:64:45:df:a5:9a:66:6e:96:34: 66:b1:d4:22:a3:24:34:68:39:14:7b:37:9f:46:77:f1:21:ad: d5:4e:25:01:2f:0a:85:05:bc:c7:d5:86:a5:76:f0:ef:04:33: 51:17:7c:a2:4f:1b:87:05:81:65:b2:8e:db:54:c8:7c:f5:3a: bd:b5:03:61:4c:24:42:64:95:cc:22:7f:fc:bb:4e:42:aa:80: c6:5c:df:0e:ce:4f:ef:46:90:b8:e0:bb:e1:ba:b6:c9:9a:4c: 94:0a:39:1e:fd:62:24:89:57:40:ff:d0:48:25:9c:b8:9e:f4: a3:5d:64:e5:64:94:f1:49:86:98:91:24:72:a3:07:c4:08:73: a8:c2:6a:4e:57:4c:02:94:59:2f:0b:7f:a8:33:1f:be:98:8d: 9d:b5:56:55:e8:ce:69:3a:14:90:28:95:b8:93:b3:38:a4:fb: 35:fb:87:7d:8d:27:4b:ef:87:e8:55:c2:21:3e:f9:4a:49:6f: 5f:4b:20:e0:99:5b:99:2c:35:49:47:22:a3:35:08:14:1b:15: 78:b4:ac:99:44:9c:d2:32:e2:ba:49:7e:23:41:15:c1:01:30: 93:63:9b:47:64:61:5f:0e:f6:57:d1:a9:b7:20:95:43:5a:93: 99:81:b9:35 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjUwNjE0MDAzMzIyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRjYzM1Mi1lM2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKhITexZZffU7Lc7Lm40IRqphG6uNpvIvRFRokkdi/rT+UB9e+fbwMnhKrB+ 0eIsR3dcKlm1ohtHj1uL0qnzRT64AnjahKRj2N5YvTagHZL+vkcoIqcXROl3BALM 5UDR3DoTEOBdFyOu+O2ObONRC04WhqRmfQIxARRQENG4OIg41l6IoiIcyR5vJtRG Djfx0D6ezMr2laCWIijKa+ocTYvzk/tiV3V2KxExzb6SAruSDJvD4l8RoeHJAKaq dMOSckg3XwqLINy+Ka/x58IzS7Q0fpRDja6uyMRnqufgkqGIiMVUemYvso36jnrQ 6mFe1+Dj5e1a6e82YSAWcbC8lQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIkip9lW 0auENUKqqLAJCYrZJuQYMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRFMzIvNzIwOTU5RkMwMUMwMTFFREJEN0M2RjU4QzRGOUFFMDIvMkQxNTNBNDY0 OEI3MTFGMEI2RDQ1OTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnGgowDQYJKoZIhvcNAQELBQADggEBAM7yeBymsJUMkGRF 36WaZm6WNGax1CKjJDRoORR7N59Gd/EhrdVOJQEvCoUFvMfVhqV28O8EM1EXfKJP G4cFgWWyjttUyHz1Or21A2FMJEJklcwif/y7TkKqgMZc3w7OT+9GkLjgu+G6tsma TJQKOR79YiSJV0D/0EglnLie9KNdZOVklPFJhpiRJHKjB8QIc6jCak5XTAKUWS8L f6gzH76YjZ21VlXozmk6FJAolbiTszik+zX7h32NJ0vvh+hVwiE++UpJb19LIOCZ W5ksNUlHIqM1CBQbFXi0rJlEnNIy4rpJfiNBFcEBMJNjm0dkYV8O9lfRqbcglUNa k5mBuTU= -----END CERTIFICATE-----Generated at Fri Jun 20 22:04:58 2025 by rpki-client