$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/69318772F69C11EFBD339C7FC4F9AE02.roa File: 69318772F69C11EFBD339C7FC4F9AE02.roa (raw, json) Hash identifier: I9RDWTqokuHw9TsN7dqHWL1mxEAi762R7COmcfJ37Kc= Subject key identifier: 4E:2C:D1:E3:69:E9:AF:64:0C:B3:97:28:4F:D3:8E:27:73:ED:85:30 Certificate issuer: /CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Certificate serial: 079D Authority key identifier: B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/69318772F69C11EFBD339C7FC4F9AE02.roa Signing time: Tue 22 Jul 2025 09:15:53 +0000 ROA not before: Tue 22 Jul 2025 09:15:53 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 134712 IP address blocks: 103.158.4.0/23 maxlen: 23 103.158.4.0/24 maxlen: 24 103.158.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1949 (0x79d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA00, serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Validity Not Before: Jul 22 09:15:53 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=687f56c8-1c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:59:32:5e:cb:5d:38:d3:32:2b:fe:39:a1:51: 23:b5:c6:51:1f:3a:06:7a:a8:88:5c:bc:07:14:51: 1a:df:57:47:69:30:4b:d6:62:f9:6b:53:4d:e1:43: 8f:c1:9b:64:a3:3a:51:7c:ef:31:d8:84:3a:a7:dd: 75:c6:13:83:23:22:17:26:fc:ac:9f:5b:d6:5b:d1: 34:a2:d1:8b:f3:d5:37:dd:86:82:af:06:7c:2a:cc: 1c:d3:ef:f6:02:99:6e:73:95:8f:d2:0c:14:dd:fa: c4:6b:e2:82:52:18:96:54:97:36:7f:53:9e:e2:65: 1c:66:64:68:76:2b:31:ab:f3:e2:69:93:30:d1:79: 81:93:ab:1a:60:a2:56:04:83:09:8f:e3:6f:22:7c: 76:1b:f7:21:11:76:cc:29:24:8e:3a:c1:28:d8:a7: 01:94:55:80:15:bf:c7:f4:3c:e7:ce:de:19:6a:6c: e7:6c:9e:61:22:bc:0b:e4:a1:e2:36:31:dc:1a:f2: cc:0a:3b:b3:1b:fa:4c:46:dd:7e:c6:fa:29:75:00: 6d:20:8e:0c:a6:80:7a:94:6a:53:13:f2:4e:fb:96: ef:21:8a:7d:55:93:5b:15:dc:a3:34:20:df:ce:9e: 26:65:89:12:0a:7f:0c:7b:77:95:76:e8:2c:3a:3d: 97:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2C:D1:E3:69:E9:AF:64:0C:B3:97:28:4F:D3:8E:27:73:ED:85:30 X509v3 Authority Key Identifier: keyid:B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/69318772F69C11EFBD339C7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.4.0/23 Signature Algorithm: sha256WithRSAEncryption b5:c1:39:51:40:d7:24:25:a2:df:fb:4e:75:27:ba:b8:59:86: 1a:20:9f:15:c6:3d:a3:3f:4d:d5:bd:b4:25:ce:97:07:38:39: 5d:2b:c9:38:4b:0a:8f:b9:91:7f:e8:94:de:b7:aa:3c:a5:ed: f5:90:36:34:5c:c2:2c:00:a5:84:43:fe:c0:bc:28:05:ce:c8: 33:ed:cb:d4:9e:c1:c5:5f:9f:48:8d:ea:4d:94:e6:6e:ba:ba: 80:fc:d7:b8:b7:c1:52:c0:9a:f0:19:5a:9b:a6:b2:41:b3:c9: 8d:ad:bd:97:80:1b:0f:eb:63:58:80:50:39:16:c2:89:49:51: ab:b5:90:33:93:1d:e7:bf:8c:9a:08:5b:fa:bf:98:bf:91:28: 39:09:ee:9a:2e:55:9a:80:32:02:47:ad:4a:88:95:94:3e:0f: 31:54:43:27:0d:f4:9c:e0:83:c2:f0:e0:4f:95:af:64:9d:2f: 54:8b:c6:97:c9:62:8d:61:d8:91:c6:1d:31:50:1a:50:1f:62: 5e:13:52:de:76:3d:18:ee:e6:54:07:ce:b2:03:7c:c7:68:2e: 51:8b:d7:8b:c4:f0:ad:a2:7e:7c:72:8c:b4:0b:f1:51:b6:e2: 99:7f:fb:8e:a4:f4:a4:e1:e4:0f:ff:72:b6:53:32:22:db:ea: 21:b9:1d:ff -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBMDAxMTAvBgNVBAUTKEIxRUVDNTlFRDU2MUEwREIzRDdENDBDMzBBRjJBQjZG RUQyOTdBOTgwHhcNMjUwNzIyMDkxNTUzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdmNTZjOC0xYzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVkyXstdONMyK/45oVEjtcZRHzoGeqiIXLwHFFEa31dHaTBL1mL5a1NN4UOP wZtkozpRfO8x2IQ6p911xhODIyIXJvysn1vWW9E0otGL89U33YaCrwZ8Kswc0+/2 Apluc5WP0gwU3frEa+KCUhiWVJc2f1Oe4mUcZmRodisxq/PiaZMw0XmBk6saYKJW BIMJj+NvInx2G/chEXbMKSSOOsEo2KcBlFWAFb/H9Dznzt4ZamznbJ5hIrwL5KHi NjHcGvLMCjuzG/pMRt1+xvopdQBtII4MpoB6lGpTE/JO+5bvIYp9VZNbFdyjNCDf zp4mZYkSCn8Me3eVdugsOj2XGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFE4s0eNp 6a9kDLOXKE/Tjidz7YUwMB8GA1UdIwQYMBaAFLHuxZ7VYaDbPX1Awwryq2/tKXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREEwMC83REQ3NTBEQzFD RTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9OczlmVUREQ3ZLcmItMHBl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlN0ZudFZob05zOWZVRERDdktyYi0wcGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRBMDAvN0RENzUwREMxQ0UyMTFFQjlBQUI0OTc3QzRGOUFFMDIvNjkzMTg3NzJG NjlDMTFFRkJEMzM5QzdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnngQwDQYJKoZIhvcNAQELBQADggEBALXBOVFA1yQlot/7 TnUnurhZhhognxXGPaM/TdW9tCXOlwc4OV0ryThLCo+5kX/olN63qjyl7fWQNjRc wiwApYRD/sC8KAXOyDPty9SewcVfn0iN6k2U5m66uoD817i3wVLAmvAZWpumskGz yY2tvZeAGw/rY1iAUDkWwolJUau1kDOTHee/jJoIW/q/mL+RKDkJ7pouVZqAMgJH rUqIlZQ+DzFUQycN9Jzgg8Lw4E+Vr2SdL1SLxpfJYo1h2JHGHTFQGlAfYl4TUt52 PRju5lQHzrIDfMdoLlGL14vE8K2ifnxyjLQL8VG24pl/+46k9KTh5A//crZTMiLb 6iG5Hf8= -----END CERTIFICATE-----Generated at Sat Aug 9 23:19:05 2025 by rpki-client