$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/DA7E3CA6E19811E8822B8E5CC4F9AE02.roa File: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (raw, json) Hash identifier: jn5qhVbEoategN8Wb9SpBQEDedH4bKopl8YHB2oNVaE= Subject key identifier: E2:9B:DA:C6:86:C8:E4:24:06:8B:77:E5:D8:F7:00:55:60:69:1D:79 Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Certificate serial: 121F Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/DA7E3CA6E19811E8822B8E5CC4F9AE02.roa Signing time: Tue 24 Jun 2025 17:09:10 +0000 ROA not before: Tue 24 Jun 2025 17:09:10 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 137947 IP address blocks: 103.118.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 17:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4639 (0x121f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E84A9, serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E Validity Not Before: Jun 24 17:09:10 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685adbb6-b1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4a:bb:c3:17:b0:91:6c:33:1d:7f:54:c4:4b: 91:2e:31:d7:15:96:49:f4:35:01:48:a2:c0:ed:7e: 81:df:58:ae:88:65:49:3a:79:24:68:70:de:1d:d7: 6c:4b:1f:87:3f:dc:1f:a8:90:df:a6:e9:e1:ee:5b: 44:a3:de:fa:cc:4b:d9:40:86:a9:5b:dc:d1:f6:31: a9:7a:78:4f:63:d4:d3:4a:ce:1d:ce:11:47:46:ce: 61:dd:19:d2:cb:a6:73:8c:11:47:e4:bd:2c:c1:5c: 4c:0d:4b:91:ad:ef:0d:2b:06:ba:ac:52:03:e0:1e: d3:40:33:a4:96:1a:20:94:54:53:c2:76:c8:5a:e5: b8:ae:26:5f:b3:48:2e:b3:e1:2c:fb:46:6b:94:1a: b9:50:1c:b7:96:e1:3e:a9:58:a9:de:5f:b7:70:e5: e5:c4:a6:f3:65:47:36:3c:fb:78:6a:91:d5:5c:48: 08:ad:ad:a0:b6:4c:7d:e2:53:21:c6:f9:13:04:c5: e9:96:1e:89:65:99:a5:a6:97:e6:f6:be:39:a6:ca: e6:eb:8a:30:24:d1:72:29:f1:0f:3c:3e:1e:69:db: ee:c6:2c:f9:01:a6:0a:f9:c0:59:59:24:d9:cf:f6: 21:75:6a:0e:59:cc:ee:5d:c9:1d:dd:54:5c:36:61: 26:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9B:DA:C6:86:C8:E4:24:06:8B:77:E5:D8:F7:00:55:60:69:1D:79 X509v3 Authority Key Identifier: keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/DA7E3CA6E19811E8822B8E5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.118.0.0/23 Signature Algorithm: sha256WithRSAEncryption 23:e2:75:b4:d6:56:56:7d:e3:8c:62:4b:4f:51:49:64:5c:70: 80:bc:71:12:78:24:86:b8:65:d8:ff:a4:c7:e4:59:f6:ce:6a: 3f:53:05:85:2d:f3:75:50:5b:fa:ba:ae:16:7b:91:cc:bf:92: 99:c3:04:14:78:8c:d7:5b:bc:e1:b9:6f:77:39:d4:d0:ad:3e: db:f5:2d:b7:73:e7:f8:56:6c:b4:28:09:ce:37:4a:b7:a7:3e: cc:63:d2:97:50:2f:d2:9a:96:15:c9:75:ee:24:7e:ab:82:48: 2f:61:75:33:89:2b:cc:3c:a0:76:91:20:30:8f:3a:fe:b5:43: be:23:cd:fd:ee:97:3e:84:20:1f:70:00:f5:25:b7:37:3e:bd: 85:63:4d:18:12:cb:57:1c:16:ff:26:2c:8a:04:f9:7c:54:b8: 03:ce:0e:4f:c1:88:0e:84:b1:a9:48:09:72:b2:57:da:fd:44: d8:8c:4a:5a:61:46:ce:08:eb:ea:f6:65:d2:a9:83:a3:51:98: 26:4a:75:14:fa:f1:d6:9f:cd:69:42:87:ec:e1:b7:40:fd:ed: ce:f3:f3:85:fe:ff:5c:b0:17:c2:ca:97:c8:5a:d0:7b:a3:18: b2:cf:09:6f:3b:10:3e:de:0d:be:ba:77:a5:7d:65:04:64:1d: ad:2e:51:d8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg0QTkxMTAvBgNVBAUTKDMwOTkzODcwRTkxMkNEMTkxRDgwQUNFRjMwMzU3QTU0 RkYzNEY4MkUwHhcNMjUwNjI0MTcwOTEwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVhZGJiNi1iMWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kq7wxewkWwzHX9UxEuRLjHXFZZJ9DUBSKLA7X6B31iuiGVJOnkkaHDeHdds Sx+HP9wfqJDfpunh7ltEo976zEvZQIapW9zR9jGpenhPY9TTSs4dzhFHRs5h3RnS y6ZzjBFH5L0swVxMDUuRre8NKwa6rFID4B7TQDOklhoglFRTwnbIWuW4riZfs0gu s+Es+0ZrlBq5UBy3luE+qVip3l+3cOXlxKbzZUc2PPt4apHVXEgIra2gtkx94lMh xvkTBMXplh6JZZmlppfm9r45psrm64owJNFyKfEPPD4eadvuxiz5AaYK+cBZWSTZ z/YhdWoOWczuXckd3VRcNmEmzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOKb2saG yOQkBot35dj3AFVgaR15MB8GA1UdIwQYMBaAFDCZOHDpEs0ZHYCs7zA1elT/NPgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODRBOS82QTkwQTlDMEUx OTcxMUU4Qjk0QzA1NThDNEY5QUUwMi9NSms0Y09rU3pSa2RnS3p2TURWNlZQODAt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01KazRjT2tTelJrZGdLenZNRFY2VlA4MC1DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg0QTkvNkE5MEE5QzBFMTk3MTFFOEI5NEMwNTU4QzRGOUFFMDIvREE3RTNDQTZF MTk4MTFFODgyMkI4RTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFndgAwDQYJKoZIhvcNAQELBQADggEBACPidbTWVlZ944xi S09RSWRccIC8cRJ4JIa4Zdj/pMfkWfbOaj9TBYUt83VQW/q6rhZ7kcy/kpnDBBR4 jNdbvOG5b3c51NCtPtv1Lbdz5/hWbLQoCc43SrenPsxj0pdQL9KalhXJde4kfquC SC9hdTOJK8w8oHaRIDCPOv61Q74jzf3ulz6EIB9wAPUltzc+vYVjTRgSy1ccFv8m LIoE+XxUuAPODk/BiA6EsalICXKyV9r9RNiMSlphRs4I6+r2ZdKpg6NRmCZKdRT6 8dafzWlCh+zht0D97c7z84X+/1ywF8LKl8ha0HujGLLPCW87ED7eDb66d6V9ZQRk Ha0uUdg= -----END CERTIFICATE-----Generated at Wed Aug 13 05:58:26 2025 by rpki-client