$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/38DEC3C04ED611ED84336740C4F9AE02.roa File: 38DEC3C04ED611ED84336740C4F9AE02.roa (raw, json) Hash identifier: GwA8WNqmVW1s9tawzkiqtYC7xFjjdtlbsl+Ur+WNSNc= Subject key identifier: 58:86:E3:F6:F0:32:E6:D2:F9:6F:AE:64:67:3C:2B:DE:E3:5B:E1:EF Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Certificate serial: 019F Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/38DEC3C04ED611ED84336740C4F9AE02.roa Signing time: Wed 25 Dec 2024 02:05:47 +0000 ROA not before: Wed 25 Dec 2024 02:05:47 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 132136 IP address blocks: 103.247.116.0/24 maxlen: 24 2001:df7:6a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Validity Not Before: Dec 25 02:05:47 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676b687a-4e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:91:22:7e:91:f7:a1:5b:a0:05:19:39:4a: 81:83:7b:7b:bf:08:c5:fc:8f:7d:b7:31:c2:db:5f: 4c:dc:cd:a8:45:53:41:7a:02:36:cc:ba:7c:b1:df: 60:55:74:b8:74:4c:7b:d0:e8:ac:90:40:fb:ff:a6: 46:da:a1:dc:25:30:c6:8e:a0:00:38:cf:a3:9e:1e: 69:da:12:d8:1b:bd:27:c8:b7:f0:2e:42:da:90:a4: 47:51:94:e1:8c:8b:4e:87:cf:1c:34:6e:88:01:bc: 9a:fe:6d:d2:34:87:bb:d6:90:4c:65:49:8a:f6:d2: b2:84:35:f9:7b:44:bf:b7:87:97:47:28:01:16:0e: 9a:24:66:19:9c:08:33:fe:38:5f:95:46:b2:d2:d4: ae:07:ec:e1:1f:78:45:c8:b6:e2:6b:c7:c4:e0:57: 2e:31:5e:fa:10:30:6f:f5:44:e6:e0:cb:42:17:26: 90:49:5e:62:5d:67:bd:28:98:a3:43:cf:0d:cf:86: 9d:94:1b:be:e0:aa:3d:98:a0:29:6e:fc:a7:1f:a7: 1e:8e:a6:ef:d3:25:c2:2e:e9:42:4a:bf:3e:ae:14: 46:1e:6b:df:34:e9:4b:74:bc:5d:a4:a8:14:52:aa: 5b:b5:85:48:8b:31:af:50:8a:a6:3b:dc:15:e4:f4: b7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:86:E3:F6:F0:32:E6:D2:F9:6F:AE:64:67:3C:2B:DE:E3:5B:E1:EF X509v3 Authority Key Identifier: keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/38DEC3C04ED611ED84336740C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.247.116.0/24 IPv6: 2001:df7:6a00::/48 Signature Algorithm: sha256WithRSAEncryption 62:6b:36:e2:d0:90:43:0e:b0:8d:bf:9b:17:f1:07:88:02:2c: 20:3f:30:f1:5f:3f:25:64:4a:fd:98:5f:6c:21:f0:09:7e:07: 0e:68:95:c0:7d:1a:c9:8a:16:87:79:b8:c0:7f:3b:a2:05:8e: 50:3c:9b:e6:3b:3e:61:d4:0f:7f:3b:1e:b9:c4:d1:0d:79:fa: b1:bb:bc:d9:9d:60:f0:af:55:9e:90:6a:54:33:ff:39:ea:fa: 9f:fd:17:a7:5d:7e:55:b8:ba:0a:92:53:1a:57:ae:56:73:95: f5:8f:fe:2a:44:6b:d6:2d:d6:4a:b7:4d:51:ee:7a:67:6f:93: 63:6f:a2:e0:dd:cb:6e:c3:06:bf:d4:39:32:f2:24:49:61:25: dc:81:d5:55:f4:7a:b0:07:a5:72:5e:7c:3e:aa:33:67:04:fa: 78:14:7d:94:eb:c4:e1:0f:b5:12:3f:e8:1a:48:23:65:13:15: 41:3e:62:a0:83:9c:61:5a:a9:7c:57:42:d3:f4:90:38:21:2e: 7c:68:7a:fb:bc:22:f3:df:d3:01:59:48:30:3d:8c:3e:27:db: db:55:e5:6b:3d:31:06:d9:0d:3e:58:b1:d4:33:a2:2d:9d:39: 27:54:c5:d7:26:cc:78:ee:5a:a7:47:81:7e:41:a0:5e:6f:e2: c3:19:17:16 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0MTkxMTAvBgNVBAUTKDg5NUZCM0NFMkY5QzJFNDdCOTE0QkIyQTZCNjZDNzdE NTM5N0E0MEEwHhcNMjQxMjI1MDIwNTQ3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZiNjg3YS00ZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIKRIn6R96FboAUZOUqBg3t7vwjF/I99tzHC219M3M2oRVNBegI2zLp8sd9g VXS4dEx70OiskED7/6ZG2qHcJTDGjqAAOM+jnh5p2hLYG70nyLfwLkLakKRHUZTh jItOh88cNG6IAbya/m3SNIe71pBMZUmK9tKyhDX5e0S/t4eXRygBFg6aJGYZnAgz /jhflUay0tSuB+zhH3hFyLbia8fE4FcuMV76EDBv9UTm4MtCFyaQSV5iXWe9KJij Q88Nz4adlBu+4Ko9mKApbvynH6cejqbv0yXCLulCSr8+rhRGHmvfNOlLdLxdpKgU UqpbtYVIizGvUIqmO9wV5PS31QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFiG4/bw MubS+W+uZGc8K97jW+HvMB8GA1UdIwQYMBaAFIlfs84vnC5HuRS7Kmtmx31Tl6QK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQxOS9GQTZFMzZDQzRF RDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xrZTVGTHNxYTJiSGZWT1hw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWLXp6aS1jTGtlNUZMc3FhMmJIZlZPWHBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTY0MTkvRkE2RTM2Q0M0RUQzMTFFREE1RTUzMDQwQzRGOUFFMDIvMzhERUMzQzA0 RUQ2MTFFRDg0MzM2NzQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABn93QwDwQCAAIwCQMHACABDfdqADANBgkqhkiG9w0BAQsF AAOCAQEAYms24tCQQw6wjb+bF/EHiAIsID8w8V8/JWRK/ZhfbCHwCX4HDmiVwH0a yYoWh3m4wH87ogWOUDyb5js+YdQPfzseucTRDXn6sbu82Z1g8K9VnpBqVDP/Oer6 n/0Xp11+Vbi6CpJTGleuVnOV9Y/+KkRr1i3WSrdNUe56Z2+TY2+i4N3LbsMGv9Q5 MvIkSWEl3IHVVfR6sAelcl58PqozZwT6eBR9lOvE4Q+1Ej/oGkgjZRMVQT5ioIOc YVqpfFdC0/SQOCEufGh6+7wi89/TAVlIMD2MPifb21Xlaz0xBtkNPlix1DOiLZ05 J1TF1ybMeO5ap0eBfkGgXm/iwxkXFg== -----END CERTIFICATE-----Generated at Wed Nov 5 17:05:35 2025 by rpki-client