$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa File: BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa (raw, json) Hash identifier: 4q86TaevYN4wi8FIhE98uWT6GCxVtXHFfpTKfJMTYtk= Subject key identifier: C0:E3:AE:AC:A3:99:4C:0B:A0:5E:B7:BC:B4:0B:C1:BA:A2:20:D9:B4 Certificate issuer: /CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D Certificate serial: 0323 Authority key identifier: D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa Signing time: Fri 11 Jul 2025 02:07:17 +0000 ROA not before: Fri 11 Jul 2025 02:07:17 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149833 IP address blocks: 103.187.140.0/23 maxlen: 23 103.187.140.0/24 maxlen: 24 103.187.141.0/24 maxlen: 24 2400:7da0::/32 maxlen: 32 2400:7da0:1000::/36 maxlen: 36 2400:7da0:2000::/36 maxlen: 36 2400:7da0:3000::/36 maxlen: 36 2400:7da0:4000::/36 maxlen: 36 2400:7da0:5000::/36 maxlen: 36 2400:7da0:6000::/36 maxlen: 36 2400:7da0:7000::/36 maxlen: 36 2400:7da0:8000::/36 maxlen: 36 2400:7da0:9000::/36 maxlen: 36 2400:7da0:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7B8, serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D Validity Not Before: Jul 11 02:07:17 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=687071d5-8e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:4a:7c:8b:ce:0d:fe:bd:fd:71:a3:c7:bd: 7a:84:c9:3f:11:e1:2d:f6:5f:47:02:b6:8f:45:14: af:04:0c:ab:e6:30:11:79:ef:3b:e4:80:bd:20:a3: 94:4f:62:49:a8:6e:9b:d1:e4:e9:6f:56:c6:0d:20: 67:ad:65:ec:d2:fb:31:0d:37:c1:ee:07:08:3e:eb: e6:71:fb:6e:77:ec:d2:c2:48:b7:06:81:d2:94:f2: 8b:f3:86:c4:89:30:67:91:ae:5d:4a:b2:76:d2:c0: 91:65:aa:65:04:0c:9d:31:05:8a:c7:3f:23:1c:36: c8:d1:42:34:ac:4d:05:af:84:6d:d2:88:3b:08:14: 64:a5:a7:a7:4b:c5:21:90:3f:2f:88:45:a2:e3:62: 49:22:34:01:d3:f5:29:8e:21:97:a3:50:06:cd:1c: 69:5e:49:d8:39:21:9e:d6:98:00:59:0c:ab:cc:af: 15:b4:ce:5b:93:73:2f:75:f5:e6:0f:6b:72:77:74: 5f:34:b9:24:eb:f8:6f:43:ff:e5:75:35:8d:d3:07: c0:8e:6f:bc:bb:4d:b5:83:90:1a:f6:54:7d:0b:8d: d4:83:b0:6c:a9:68:27:60:a0:60:ff:e1:1c:05:22: 99:54:51:61:bf:e1:3e:87:b2:99:d2:98:52:13:63: 44:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E3:AE:AC:A3:99:4C:0B:A0:5E:B7:BC:B4:0B:C1:BA:A2:20:D9:B4 X509v3 Authority Key Identifier: keyid:D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.187.140.0/23 IPv6: 2400:7da0::/32 Signature Algorithm: sha256WithRSAEncryption 51:13:d5:8b:2f:36:17:6b:1a:88:dc:9a:59:de:60:d1:56:be: a5:75:ec:b1:1d:96:7b:08:74:14:cd:5e:ce:35:95:a4:96:a2: e3:c9:5d:9e:34:ff:1f:24:59:5a:37:af:2c:b1:a0:d8:a8:64: f1:a2:dd:54:73:e1:6f:15:78:28:30:06:f3:49:48:f7:62:47: f2:bf:0f:8b:b4:34:69:e7:88:4e:8a:e5:c2:a6:2d:52:aa:e7: e0:5a:fc:a3:b1:3c:92:dd:05:7e:14:80:84:4a:de:0a:6c:2b: eb:47:a6:7c:7c:43:33:5c:20:39:9e:9f:a8:a7:da:4c:33:e5: bb:74:2e:4c:fd:08:b2:74:ca:06:59:44:94:b7:21:aa:75:c1: 64:1a:29:bd:ed:38:0d:0a:40:ea:f3:89:8c:9f:da:1a:0b:71: e7:a8:d9:38:72:14:54:7f:c9:51:22:d5:1c:aa:3c:e9:fb:d6: 0f:84:1d:cc:c7:fc:1a:94:86:19:fb:a8:c7:bf:31:ef:57:36: ea:af:2c:b9:6a:d2:ef:c9:32:46:8e:1c:51:ce:de:7f:1b:f0: 5a:2c:f4:12:77:cd:46:61:14:81:34:8b:8c:f0:26:0e:2b:0a: 0d:1c:99:91:bf:da:57:8a:70:f0:20:3b:9b:3a:8c:1d:b8:10: 4b:dd:d2:ec -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QjgxMTAvBgNVBAUTKEQ3OUVBODc2Qzg0ODAxM0Q3MDRFMzIwM0FGN0Q2MDg2 REIwMkM3OUQwHhcNMjUwNzExMDIwNzE3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODcwNzFkNS04ZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuM1KfIvODf69/XGjx716hMk/EeEt9l9HAraPRRSvBAyr5jARee875IC9IKOU T2JJqG6b0eTpb1bGDSBnrWXs0vsxDTfB7gcIPuvmcftud+zSwki3BoHSlPKL84bE iTBnka5dSrJ20sCRZaplBAydMQWKxz8jHDbI0UI0rE0Fr4Rt0og7CBRkpaenS8Uh kD8viEWi42JJIjQB0/UpjiGXo1AGzRxpXknYOSGe1pgAWQyrzK8VtM5bk3MvdfXm D2tyd3RfNLkk6/hvQ//ldTWN0wfAjm+8u021g5Aa9lR9C43Ug7BsqWgnYKBg/+Ec BSKZVFFhv+E+h7KZ0phSE2NEtQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMDjrqyj mUwLoF63vLQLwbqiINm0MB8GA1UdIwQYMBaAFNeeqHbISAE9cE4yA699YIbbAsed MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCOC80REUxNkNFNEQ4 MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFUMXdUaklEcjMxZ2h0c0N4 NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1Nm9kc2hJQVQxd1RqSURyMzFnaHRzQ3g1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUI3QjgvNERFMTZDRTREODE4MTFFQ0I2NDkzRDVBQzRGOUFFMDIvQkQ4QUFFQkFE NkJFMTFFRUFBRkY1MDQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnu4wwDQQCAAIwBwMFACQAfaAwDQYJKoZIhvcNAQELBQAD ggEBAFET1YsvNhdrGojcmlneYNFWvqV17LEdlnsIdBTNXs41laSWouPJXZ40/x8k WVo3ryyxoNioZPGi3VRz4W8VeCgwBvNJSPdiR/K/D4u0NGnniE6K5cKmLVKq5+Ba /KOxPJLdBX4UgIRK3gpsK+tHpnx8QzNcIDmen6in2kwz5bt0Lkz9CLJ0ygZZRJS3 Iap1wWQaKb3tOA0KQOrziYyf2hoLceeo2ThyFFR/yVEi1RyqPOn71g+EHczH/BqU hhn7qMe/Me9XNuqvLLlq0u/JMkaOHFHO3n8b8Fos9BJ3zUZhFIE0i4zwJg4rCg0c mZG/2leKcPAgO5s6jB24EEvd0uw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:00 2025 by rpki-client