$ rpki-client -vvf rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa File: F9D16F1CC7D811EDB42DFF20C4F9AE02.roa (raw, json) Hash identifier: +JzejbKc1NZP24NoPrMtMcVkZZ9hm7s276rW0zhe0b0= Subject key identifier: 6D:57:E4:B7:D6:4A:EF:5F:D4:7D:B8:41:4A:FC:88:74:91:A1:53:5F Certificate issuer: /CN=A91F88F4/serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90 Certificate serial: 0AEF Authority key identifier: B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa Signing time: Sat 24 May 2025 19:34:44 +0000 ROA not before: Sat 24 May 2025 19:34:44 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135311 IP address blocks: 103.213.240.0/23 maxlen: 24 103.213.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2799 (0xaef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F88F4, serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90 Validity Not Before: May 24 19:34:44 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68321f54-f626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:12:be:d8:de:96:15:2f:5f:90:40:fb:8b: 65:fd:bb:9e:00:bd:41:1a:cb:9b:cd:81:ea:70:7d: 64:44:ba:a3:74:9c:b7:4f:a5:b2:ce:8f:2f:80:96: c5:7b:23:db:fd:52:e0:6f:15:a8:4b:94:27:4e:76: 94:25:0c:ab:a1:9c:dd:8f:47:b6:a7:fe:76:cc:18: 46:22:73:9b:c9:3d:ee:ca:2b:3b:b4:d7:6d:3f:79: b3:3a:83:ff:15:eb:8a:3e:b7:aa:a8:7d:00:fc:db: 29:e8:ec:f2:56:24:91:32:ba:bc:25:ea:09:d5:f4: 78:64:14:fd:5e:b1:e6:e9:67:d6:8b:44:2f:fa:18: cc:6f:6e:14:68:d6:6b:6b:1b:31:5e:b6:5e:03:28: f2:1d:a1:2a:e4:4f:0a:d2:74:8c:d1:e0:df:2d:bf: 4d:9a:ad:b6:39:f6:95:47:09:be:5d:1b:89:09:cb: 77:7e:f1:8d:2b:81:1e:98:c6:4f:b5:05:27:15:75: 97:5d:49:0e:e0:40:79:35:3e:4d:32:51:a6:93:f7: 2d:38:cf:3f:c7:ae:04:55:a1:55:2f:60:bb:6c:28: d8:08:87:5f:00:ed:7e:5e:76:e4:49:67:59:ab:59: f3:ff:c3:e3:fd:51:05:7c:e1:90:c3:f9:e2:2a:eb: 75:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:57:E4:B7:D6:4A:EF:5F:D4:7D:B8:41:4A:FC:88:74:91:A1:53:5F X509v3 Authority Key Identifier: keyid:B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/F9D16F1CC7D811EDB42DFF20C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.213.240.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:dd:82:31:b5:2b:f9:64:a8:d6:9d:16:97:c8:cd:5e:94:7d: ea:3b:9f:55:fa:74:f7:95:57:61:c7:08:73:e9:4f:27:16:d9: bf:bc:fc:78:de:31:73:69:31:1e:b1:70:5c:c6:99:f5:82:d2: db:fa:ad:b0:8d:61:a1:9f:1b:6a:69:5a:bc:42:93:43:f4:a1: 6a:2b:ab:f1:cc:9b:9a:9f:9a:ba:79:ff:9d:09:6a:52:cb:e4: f9:2e:26:7d:a5:95:61:0e:51:75:b3:7a:da:93:19:67:90:b0: 5f:b2:e5:b1:46:ae:3f:9f:df:32:e0:4e:af:8b:d0:ca:13:90: 15:07:b9:d3:af:3f:d6:90:ea:fd:1e:50:56:60:96:f1:3e:63: fc:00:9b:81:b9:01:10:13:34:03:29:bb:46:9f:3b:91:eb:fc: 3c:b2:50:0b:ef:2b:bf:86:dd:f3:50:81:39:f2:83:23:1c:9f: 4b:e9:27:51:c1:f9:9f:2e:69:1b:1a:7c:b4:58:d9:12:b0:17: 18:6d:38:97:c8:37:1f:d4:3c:4e:8f:3d:af:74:b4:f3:8c:cb: 7a:c9:d5:f7:d8:86:b6:c6:80:50:bd:dd:ec:23:90:e8:60:70: f4:95:ee:13:9f:c5:72:18:ac:25:6b:ec:85:98:87:5c:74:0e: 1c:58:6c:3a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg4RjQxMTAvBgNVBAUTKEIxODRDMzVGNkFFREJGQjg1RERBNDExM0YyNzUyRTBD ODlDQTNBOTAwHhcNMjUwNTI0MTkzNDQ0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODMyMWY1NC1mNjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwj0SvtjelhUvX5BA+4tl/bueAL1BGsubzYHqcH1kRLqjdJy3T6Wyzo8vgJbF eyPb/VLgbxWoS5QnTnaUJQyroZzdj0e2p/52zBhGInObyT3uyis7tNdtP3mzOoP/ FeuKPreqqH0A/Nsp6OzyViSRMrq8JeoJ1fR4ZBT9XrHm6WfWi0Qv+hjMb24UaNZr axsxXrZeAyjyHaEq5E8K0nSM0eDfLb9Nmq22OfaVRwm+XRuJCct3fvGNK4EemMZP tQUnFXWXXUkO4EB5NT5NMlGmk/ctOM8/x64EVaFVL2C7bCjYCIdfAO1+XnbkSWdZ q1nz/8Pj/VEFfOGQw/niKut1RwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG1X5LfW Su9f1H24QUr8iHSRoVNfMB8GA1UdIwQYMBaAFLGEw19q7b+4XdpBE/J1LgyJyjqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODhGNC8wN0FFNzdDQzQ4 Q0MxMUVBQUVGNTAxNTFDNEY5QUUwMi9zWVREWDJydHY3aGQya0VUOG5VdURJbktP cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZVERYMnJ0djdoZDJrRVQ4blV1REluS09wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg4RjQvMDdBRTc3Q0M0OENDMTFFQUFFRjUwMTUxQzRGOUFFMDIvRjlEMTZGMUND N0Q4MTFFREI0MkRGRjIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn1fAwDQYJKoZIhvcNAQELBQADggEBAF/dgjG1K/lkqNad FpfIzV6Ufeo7n1X6dPeVV2HHCHPpTycW2b+8/HjeMXNpMR6xcFzGmfWC0tv6rbCN YaGfG2ppWrxCk0P0oWorq/HMm5qfmrp5/50JalLL5PkuJn2llWEOUXWzetqTGWeQ sF+y5bFGrj+f3zLgTq+L0MoTkBUHudOvP9aQ6v0eUFZglvE+Y/wAm4G5ARATNAMp u0afO5Hr/DyyUAvvK7+G3fNQgTnygyMcn0vpJ1HB+Z8uaRsafLRY2RKwFxhtOJfI Nx/UPE6PPa90tPOMy3rJ1ffYhrbGgFC93ewjkOhgcPSV7hOfxXIYrCVr7IWYh1x0 DhxYbDo= -----END CERTIFICATE-----Generated at Sun Jun 15 10:25:39 2025 by rpki-client