$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/E48C805A9A7D11EF99ECF636C4F9AE02.roa File: E48C805A9A7D11EF99ECF636C4F9AE02.roa (raw, json) Hash identifier: tr8nToqsnObMIX+d5q+59UsiBeZ737YgcOHmw4Nrttw= Subject key identifier: 5E:2B:B0:2A:2B:5E:D2:3E:BF:F7:A7:FF:7E:43:5E:79:3B:A2:B2:E8 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 13B6 Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/E48C805A9A7D11EF99ECF636C4F9AE02.roa Signing time: Sat 05 Jul 2025 03:47:11 +0000 ROA not before: Sat 05 Jul 2025 03:47:11 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 395793 IP address blocks: 103.116.45.0/24 maxlen: 24 103.129.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5046 (0x13b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Jul 5 03:47:11 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6868a03f-e962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ef:3c:91:25:bc:68:ca:71:1b:67:58:42:f1: 8e:b5:7b:8a:b2:7d:ae:ac:c9:05:bb:a1:3a:17:6e: ed:62:12:c8:65:80:6d:f7:44:d1:b1:47:3e:37:77: f0:a4:4a:8b:56:48:9b:38:cb:95:28:f5:96:60:ff: 0f:81:32:a6:c2:50:28:48:86:82:af:98:5f:61:b1: da:51:45:12:d9:21:fa:6a:58:01:0e:fe:b8:7e:7d: d6:95:c0:23:df:a7:cf:6c:04:5a:3f:10:01:c7:cd: f2:79:b1:c3:35:8d:84:5b:2e:3d:15:5f:1b:0a:78: ee:96:ee:84:44:d5:11:9f:60:10:e9:f8:0a:d5:ef: 89:c9:40:47:bb:71:14:f7:39:2c:64:9c:09:8b:36: 8b:e0:98:60:3c:a1:d4:24:ff:75:77:2e:a0:fd:55: 70:29:97:22:61:14:4b:66:85:7b:a0:33:75:bd:ba: 6c:0d:ec:c2:26:90:cd:77:89:d1:a1:79:41:3a:8d: fc:e4:a7:9f:56:4d:1a:c7:0d:ee:a6:d8:9a:56:2b: 29:2f:17:d0:d8:12:14:f9:88:f0:8b:b6:5e:b3:75: 7e:6d:d2:22:2d:16:d2:9e:2d:f0:32:87:b6:31:4c: de:23:e5:e2:ff:84:f3:bb:24:e6:f2:d0:3d:ac:7c: 04:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2B:B0:2A:2B:5E:D2:3E:BF:F7:A7:FF:7E:43:5E:79:3B:A2:B2:E8 X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/E48C805A9A7D11EF99ECF636C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.45.0/24 103.129.197.0/24 Signature Algorithm: sha256WithRSAEncryption 40:29:b1:a2:f2:b7:a0:d5:c4:9b:de:61:5f:de:3f:76:bb:99: 1c:33:c0:11:1c:f2:4b:5f:32:64:5a:cc:83:d0:e1:e0:b9:6a: 68:9f:27:fe:b4:1c:e1:22:a6:23:a5:81:cf:b4:7e:0b:80:9c: f3:1a:49:2c:2b:1c:e3:55:9e:d1:0e:10:22:f8:99:0d:5d:af: c5:dd:ea:4f:6d:ce:12:cd:39:15:a7:37:7e:1a:5c:40:f0:b0: 09:17:b2:10:e7:9d:5c:a4:2d:15:4f:40:32:ef:13:96:94:aa: af:85:7f:79:7f:cd:90:c1:be:e8:c2:1e:f0:76:bb:98:9f:74: 92:9e:06:17:34:07:8e:2e:65:58:08:44:29:b7:5d:b4:1c:18: b7:50:73:12:5d:5a:4c:30:13:ad:b0:1f:02:fc:c7:15:c8:a6: 79:f1:57:85:c6:12:af:d3:cc:9d:b0:ea:7f:c4:6a:8f:73:eb: 3a:50:16:23:ed:39:0b:5a:2b:2a:75:88:d5:50:2d:21:36:9d: 30:06:94:6b:9a:76:16:5c:af:e0:8b:8c:4c:9a:f1:2f:b5:3b: 4a:82:a1:0f:5c:2e:a9:d5:fb:03:fb:1d:89:c4:ab:2c:34:f8: c8:48:8d:09:f8:5b:7d:9a:28:aa:ed:10:79:30:c3:d1:45:26: b9:3d:a5:20 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICE7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjUwNzA1MDM0NzExWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4YTAzZi1lOTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+88kSW8aMpxG2dYQvGOtXuKsn2urMkFu6E6F27tYhLIZYBt90TRsUc+N3fw pEqLVkibOMuVKPWWYP8PgTKmwlAoSIaCr5hfYbHaUUUS2SH6algBDv64fn3WlcAj 36fPbARaPxABx83yebHDNY2EWy49FV8bCnjulu6ERNURn2AQ6fgK1e+JyUBHu3EU 9zksZJwJizaL4JhgPKHUJP91dy6g/VVwKZciYRRLZoV7oDN1vbpsDezCJpDNd4nR oXlBOo385KefVk0axw3uptiaVispLxfQ2BIU+Yjwi7Zes3V+bdIiLRbSni3wMoe2 MUzeI+Xi/4TzuyTm8tA9rHwEWwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFF4rsCor XtI+v/en/35DXnk7orLoMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjBGMEQvMDhFQzJCMENBMzZFMTFFOEI4OTY2NjJCQzRGOUFFMDIvRTQ4QzgwNUE5 QTdEMTFFRjk5RUNGNjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABndC0DBABngcUwDQYJKoZIhvcNAQELBQADggEBAEApsaLy t6DVxJveYV/eP3a7mRwzwBEc8ktfMmRazIPQ4eC5amifJ/60HOEipiOlgc+0fguA nPMaSSwrHONVntEOECL4mQ1dr8Xd6k9tzhLNORWnN34aXEDwsAkXshDnnVykLRVP QDLvE5aUqq+Ff3l/zZDBvujCHvB2u5ifdJKeBhc0B44uZVgIRCm3XbQcGLdQcxJd WkwwE62wHwL8xxXIpnnxV4XGEq/TzJ2w6n/Eao9z6zpQFiPtOQtaKyp1iNVQLSE2 nTAGlGuadhZcr+CLjEya8S+1O0qCoQ9cLqnV+wP7HYnEqyw0+MhIjQn4W32aKKrt EHkww9FFJrk9pSA= -----END CERTIFICATE-----Generated at Sun Jul 20 03:46:18 2025 by rpki-client