$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/C416FBB02D6F11EEAC755B42C4F9AE02.roa File: C416FBB02D6F11EEAC755B42C4F9AE02.roa (raw, json) Hash identifier: Tq7rC2giNreq2mmMPPxtNpHrDUwHtrtyBLhfTo+mDLI= Subject key identifier: 22:50:54:1B:26:F6:74:AC:DB:2B:AA:EE:74:74:7A:EE:7F:F7:03:68 Certificate issuer: /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Certificate serial: 016A Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/C416FBB02D6F11EEAC755B42C4F9AE02.roa Signing time: Mon 23 Jun 2025 01:50:48 +0000 ROA not before: Mon 23 Jun 2025 01:50:48 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 151632 IP address blocks: 103.243.234.0/23 maxlen: 23 103.243.234.0/24 maxlen: 24 103.243.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Validity Not Before: Jun 23 01:50:48 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6858b2f8-d45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:60:dd:5c:0f:f1:6f:59:f9:f9:49:bf:ec: bf:b2:12:d9:02:0e:b1:97:59:cd:a7:45:8d:76:f8: 1b:e2:1b:c5:7a:87:59:6c:2b:0c:21:5f:4c:4a:fa: cf:1e:16:c7:38:91:96:68:da:77:05:27:c5:59:c2: c8:3e:3d:1f:f6:3a:43:8b:b2:11:dc:3c:13:c6:cb: 5b:de:e2:92:52:9a:36:72:95:61:fb:50:fb:46:76: 0c:f5:53:2f:01:8d:13:85:82:48:2d:0d:89:b5:55: d0:2e:5c:00:3e:5d:e7:b6:5f:f0:9c:e1:64:28:e1: 6e:a8:93:94:51:2e:65:a5:09:80:e2:89:9f:e2:0a: d6:a6:72:1b:cf:f1:47:93:86:18:1e:2c:c4:18:6f: be:2f:ed:53:e1:74:2a:ce:e7:43:ee:6a:7d:50:43: e7:1b:69:23:81:f0:2f:1f:c5:69:53:85:2e:e1:56: 55:01:f0:63:a8:88:7d:d0:88:83:9b:b6:59:ce:59: 92:01:da:70:ef:14:7f:43:95:5f:7d:46:0d:17:ad: 66:59:ac:00:52:df:b7:6c:59:60:2c:bd:fc:78:44: 62:65:12:06:55:59:47:55:d9:bd:1f:84:59:ef:e9: cb:c1:bc:8d:73:9f:49:ed:e0:6d:f1:b2:f5:73:b3: f5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:50:54:1B:26:F6:74:AC:DB:2B:AA:EE:74:74:7A:EE:7F:F7:03:68 X509v3 Authority Key Identifier: keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/C416FBB02D6F11EEAC755B42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.234.0/23 Signature Algorithm: sha256WithRSAEncryption 69:14:ec:e8:e0:3e:ac:45:a0:f4:93:3a:08:10:d1:e6:e2:46: 46:0c:52:9e:a2:7d:fb:d2:2a:b1:18:49:64:38:8e:b9:37:b8: f8:f6:33:fb:66:1a:ca:cc:a2:01:bf:60:ad:df:f4:1d:8a:db: 0d:32:3e:c1:00:4e:4c:80:bb:eb:db:db:cd:78:c5:fe:f4:55: 9e:45:32:7b:36:c6:8b:5c:88:9f:21:c4:35:f9:43:13:ca:fd: dd:88:85:4d:ae:ed:13:66:8f:ca:dc:74:c7:73:6a:51:6e:91: 8b:79:dd:ee:d2:2f:05:6c:61:50:ba:86:1c:52:cb:81:68:7a: 34:87:32:49:ff:fe:7b:a8:44:cd:b4:1e:c9:6b:f6:b4:87:3a: c8:af:29:30:91:f9:cf:99:84:ed:62:90:c1:3a:c4:d7:c7:e7: 60:43:8d:12:a0:f8:25:6c:5e:c4:2d:f0:d6:03:e3:47:2e:81: 9f:0d:fa:a7:3b:7c:0b:57:a6:4d:b1:2d:aa:6c:6f:72:19:dd: 8d:2a:94:4c:0e:fa:63:01:9e:c3:65:37:ed:a9:97:b2:28:03: 8e:62:a0:c7:a4:65:60:7b:68:26:a0:a5:fa:8f:f8:2d:b2:f7: 5a:1f:7c:78:29:5e:9f:78:39:1b:8a:41:fd:09:8f:53:3b:70: 3e:c8:03:ef -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3M0YxMTAvBgNVBAUTKDM1QzZEODQ4MzE2QzIxRDk5M0NGNkU0QzA2RDYwMURD MDVFRkM0RTEwHhcNMjUwNjIzMDE1MDQ4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU4YjJmOC1kNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueNg3VwP8W9Z+flJv+y/shLZAg6xl1nNp0WNdvgb4hvFeodZbCsMIV9MSvrP HhbHOJGWaNp3BSfFWcLIPj0f9jpDi7IR3DwTxstb3uKSUpo2cpVh+1D7RnYM9VMv AY0ThYJILQ2JtVXQLlwAPl3ntl/wnOFkKOFuqJOUUS5lpQmA4omf4grWpnIbz/FH k4YYHizEGG++L+1T4XQqzudD7mp9UEPnG2kjgfAvH8VpU4Uu4VZVAfBjqIh90IiD m7ZZzlmSAdpw7xR/Q5VffUYNF61mWawAUt+3bFlgLL38eERiZRIGVVlHVdm9H4RZ 7+nLwbyNc59J7eBt8bL1c7P1HwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCJQVBsm 9nSs2yuq7nR0eu5/9wNoMB8GA1UdIwQYMBaAFDXG2EgxbCHZk89uTAbWAdwF78Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDczRi8xRDE3RURCNDJC OTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lkbVR6MjVNQnRZQjNBWHZ4 T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jYllTREZzSWRtVHoyNU1CdFlCM0FYdnhPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQ3M0YvMUQxN0VEQjQyQjkwMTFFRThCNURFNDcwQzRGOUFFMDIvQzQxNkZCQjAy RDZGMTFFRUFDNzU1QjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn8+owDQYJKoZIhvcNAQELBQADggEBAGkU7OjgPqxFoPST OggQ0ebiRkYMUp6iffvSKrEYSWQ4jrk3uPj2M/tmGsrMogG/YK3f9B2K2w0yPsEA TkyAu+vb2814xf70VZ5FMns2xotciJ8hxDX5QxPK/d2IhU2u7RNmj8rcdMdzalFu kYt53e7SLwVsYVC6hhxSy4FoejSHMkn//nuoRM20Hslr9rSHOsivKTCR+c+ZhO1i kME6xNfH52BDjRKg+CVsXsQt8NYD40cugZ8N+qc7fAtXpk2xLapsb3IZ3Y0qlEwO +mMBnsNlN+2pl7IoA45ioMekZWB7aCagpfqP+C2y91offHgpXp94ORuKQf0Jj1M7 cD7IA+8= -----END CERTIFICATE-----Generated at Sat Aug 9 15:11:34 2025 by rpki-client