$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/4E150C0890FD11E98DB54881C4F9AE02.roa File: 4E150C0890FD11E98DB54881C4F9AE02.roa (raw, json) Hash identifier: dB+hpclNcZTfVrplk+B2uDeZoqPu8XwgAkOEwxQUS0E= Subject key identifier: 7A:C5:8A:1F:16:DA:BA:63:FD:6C:A8:1C:A6:15:B2:77:DD:34:BA:87 Certificate issuer: /CN=A91FC1B8/serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD Certificate serial: 0EAD Authority key identifier: 6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/4E150C0890FD11E98DB54881C4F9AE02.roa Signing time: Mon 14 Jul 2025 18:26:47 +0000 ROA not before: Mon 14 Jul 2025 18:26:47 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 139196 IP address blocks: 103.139.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3757 (0xead) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC1B8, serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD Validity Not Before: Jul 14 18:26:47 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68754be7-206d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f9:d2:e1:36:2a:84:dc:38:9a:b1:cc:b6:89: 9e:3a:ff:e9:b8:69:e0:5e:33:dd:2f:d8:09:f7:25: f5:b3:c2:10:27:93:4b:77:6a:89:20:9f:40:af:6d: 6b:09:f3:7c:ea:6b:a5:fc:0d:bb:ca:80:21:72:bc: 7f:df:c0:31:93:f4:48:26:5b:a5:05:1a:5b:3c:c1: 23:e7:7d:79:76:81:c8:9a:ec:6e:03:6a:ae:6f:6e: 9a:69:4f:97:a8:6f:d2:d5:12:e4:e4:0c:16:9c:4c: 05:55:9f:a5:6d:ba:7e:71:f3:48:a7:61:31:b0:28: e2:58:c0:f8:31:67:20:3b:d9:d8:ca:19:b3:42:ed: 64:f8:a7:77:53:e1:79:18:6e:5a:b3:ef:a3:51:42: 3a:71:3c:f0:7a:7e:8b:ba:1c:cb:4f:fa:a6:98:80: 96:6f:49:19:4f:34:0b:2a:f3:a6:99:ad:d1:c0:cd: 5d:d5:e1:a8:a6:24:e3:04:a2:b9:10:62:3d:ee:55: 00:33:7e:bf:ce:0c:0a:12:ad:8b:34:f2:19:3f:27: 2f:e5:d3:8a:1a:65:26:a5:78:0e:5b:c4:a1:72:91: d6:ce:47:10:8e:67:65:30:cc:d8:36:bc:2d:29:7e: c2:7f:78:81:52:78:70:53:d2:34:bc:7f:18:4d:3f: 29:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C5:8A:1F:16:DA:BA:63:FD:6C:A8:1C:A6:15:B2:77:DD:34:BA:87 X509v3 Authority Key Identifier: keyid:6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/4E150C0890FD11E98DB54881C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.152.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:36:67:fe:19:3f:a1:6f:30:d0:cc:dd:25:3e:a7:e4:ff:12: 09:e4:f1:04:10:20:79:98:32:d1:2a:7d:ca:77:91:90:84:a7: 02:3f:fd:d2:55:ae:5a:9b:c0:5f:dc:fe:7a:d5:59:6a:31:00: 04:3f:b1:a9:e5:cb:84:22:1d:fb:1c:e7:43:54:3e:2c:d2:4e: f1:8d:df:de:a6:15:4f:3b:5c:64:76:54:6b:5f:60:3d:13:9d: 15:94:18:7b:d7:72:5b:ac:c7:a3:c6:bb:4a:8f:70:26:40:46: 6f:7a:60:cb:09:01:da:61:aa:89:31:91:f6:89:f6:dc:85:5f: 38:41:63:70:1b:ce:47:69:27:65:ce:1a:5f:a6:ef:02:d2:93: d5:01:3f:0b:12:53:de:59:15:81:ec:6f:77:a3:07:9f:f4:37: a6:bf:3e:cb:e6:ed:eb:1a:13:7a:1b:7f:45:dd:90:5a:08:63: b0:fa:40:58:35:0f:fb:05:f6:0c:37:c7:4e:22:5c:f0:a3:ce: 8b:13:f0:86:27:d7:d6:7a:17:3f:97:d0:0d:24:e1:86:cd:04: 01:40:db:95:d2:d3:0e:90:a1:7d:1b:d7:7d:78:ab:75:d5:c3: 2d:dc:fe:4f:3c:4a:14:43:b0:bd:56:7d:5a:7e:41:dd:69:d3: 05:f5:f0:da -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMxQjgxMTAvBgNVBAUTKDZEN0Q4MDU3NkM0QjNCRTZBRkY0MzFGOEQzMjMzOEY3 MUZERjAxREQwHhcNMjUwNzE0MTgyNjQ3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1NGJlNy0yMDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8fnS4TYqhNw4mrHMtomeOv/puGngXjPdL9gJ9yX1s8IQJ5NLd2qJIJ9Ar21r CfN86mul/A27yoAhcrx/38Axk/RIJlulBRpbPMEj5315doHImuxuA2qub26aaU+X qG/S1RLk5AwWnEwFVZ+lbbp+cfNIp2ExsCjiWMD4MWcgO9nYyhmzQu1k+Kd3U+F5 GG5as++jUUI6cTzwen6LuhzLT/qmmICWb0kZTzQLKvOmma3RwM1d1eGopiTjBKK5 EGI97lUAM36/zgwKEq2LNPIZPycv5dOKGmUmpXgOW8ShcpHWzkcQjmdlMMzYNrwt KX7Cf3iBUnhwU9I0vH8YTT8p3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHrFih8W 2rpj/WyoHKYVsnfdNLqHMB8GA1UdIwQYMBaAFG19gFdsSzvmr/Qx+NMjOPcf3wHd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFCOC9GQkRFOTlGQTkw RkIxMUU5OTJENTk4N0ZDNEY5QUUwMi9iWDJBVjJ4TE8tYXY5REg0MHlNNDl4X2ZB ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYMkFWMnhMTy1hdjlESDQweU00OXhfZkFkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkMxQjgvRkJERTk5RkE5MEZCMTFFOTkyRDU5ODdGQzRGOUFFMDIvNEUxNTBDMDg5 MEZEMTFFOThEQjU0ODgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABni5gwDQYJKoZIhvcNAQELBQADggEBAGo2Z/4ZP6FvMNDM 3SU+p+T/Egnk8QQQIHmYMtEqfcp3kZCEpwI//dJVrlqbwF/c/nrVWWoxAAQ/sanl y4QiHfsc50NUPizSTvGN396mFU87XGR2VGtfYD0TnRWUGHvXclusx6PGu0qPcCZA Rm96YMsJAdphqokxkfaJ9tyFXzhBY3AbzkdpJ2XOGl+m7wLSk9UBPwsSU95ZFYHs b3ejB5/0N6a/Psvm7esaE3obf0XdkFoIY7D6QFg1D/sF9gw3x04iXPCjzosT8IYn 19Z6Fz+X0A0k4YbNBAFA25XS0w6QoX0b1314q3XVwy3c/k88ShRDsL1WfVp+Qd1p 0wX18No= -----END CERTIFICATE-----Generated at Sun Aug 10 04:17:25 2025 by rpki-client