$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/649A355C5F0F11EBBDB7C113C4F9AE02.roa File: 649A355C5F0F11EBBDB7C113C4F9AE02.roa (raw, json) Hash identifier: 1FGtJ70RwOEt2vELLPRWi7Z3eHoh6/fo9RZfKjZFNaM= Subject key identifier: F0:12:DD:26:04:9E:03:F4:17:71:0D:76:F1:E3:52:0A:3C:62:A6:87 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 094B Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/649A355C5F0F11EBBDB7C113C4F9AE02.roa Signing time: Fri 04 Jul 2025 21:01:30 +0000 ROA not before: Fri 04 Jul 2025 21:01:30 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 136950 IP address blocks: 103.151.44.0/23 maxlen: 23 103.151.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2379 (0x94b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: Jul 4 21:01:30 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6868412a-783a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4f:54:a4:34:24:55:44:f5:53:06:48:ce:ab: df:03:20:ca:7b:31:aa:5f:1c:bf:29:3b:0a:20:4b: f4:4c:af:35:f3:79:27:65:84:d0:4b:ed:a8:b1:16: 5c:4c:24:ca:db:0c:93:30:13:cc:d0:9b:61:42:18: 9c:a6:ba:b5:44:20:bc:99:87:dc:a0:df:05:da:fe: 43:77:d4:87:c1:d8:3f:c2:c9:68:fa:d4:6d:a6:f1: fd:d3:45:0f:c4:c6:3a:fe:a7:ac:f2:38:d1:fd:a1: 37:bf:20:ce:fc:c5:e8:5e:a5:6e:57:11:23:73:1a: 22:46:96:a5:fb:22:6c:e2:4f:3d:11:49:a6:09:dd: 13:bf:f6:ee:4b:53:43:f0:a3:76:e7:4b:8b:53:03: e4:72:b3:0f:a6:38:f7:52:24:71:e1:90:9a:c0:83: 25:60:9f:39:04:da:0f:ff:fb:b1:fe:b7:f2:db:31: 98:19:1c:f3:16:f2:12:12:71:af:f4:02:e1:0b:f9: a9:e1:3c:24:87:ee:58:5a:f6:8e:e0:49:09:e1:e0: bb:f1:fa:16:ba:12:74:0a:cb:46:6d:12:7f:53:65: dc:5a:c1:b6:3c:d3:b8:6d:e0:05:69:7e:58:c8:41: 6d:56:89:1d:ec:0d:a9:a5:07:d3:90:f3:67:65:0c: e3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:12:DD:26:04:9E:03:F4:17:71:0D:76:F1:E3:52:0A:3C:62:A6:87 X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/649A355C5F0F11EBBDB7C113C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.44.0/23 Signature Algorithm: sha256WithRSAEncryption 95:10:40:39:32:33:5b:e3:ce:42:f9:46:0c:ad:bf:aa:59:03: 52:d2:35:26:04:38:52:24:c3:c5:17:cf:ae:53:d7:fe:40:6c: 99:96:0a:7d:36:20:f8:97:e4:98:2a:eb:ea:11:27:e1:13:72: c3:0e:b8:54:e5:2e:43:f6:62:dd:87:fa:7d:12:05:65:02:0f: 94:6b:36:24:7a:6f:c9:3c:a7:fa:5e:01:eb:92:52:51:f2:1d: 18:d2:34:ac:96:01:ac:10:c9:74:0c:08:a8:33:2b:d0:ef:c8: cb:d3:4a:69:a4:ce:d7:45:1b:15:cf:c1:8f:0c:a0:b0:56:36: 10:d3:3b:0a:56:c4:f1:7b:41:aa:4c:32:2c:ca:56:df:7d:61: 17:25:d7:43:31:c3:3f:1e:3b:b0:e7:1a:a6:5f:38:f3:f7:4b: b4:f5:a6:8f:43:5a:11:73:af:89:7b:33:e1:8a:68:65:d3:da: 80:71:3e:46:b8:7d:d9:5e:51:27:76:50:af:bd:dd:53:22:59: 21:e9:6d:bf:6e:15:4c:89:ab:69:51:00:75:25:dc:ea:a4:da: 4f:c4:f5:ef:b4:d2:dc:6f:df:c2:32:ad:7e:13:d8:3a:37:a9: fb:16:81:17:d1:13:5b:2f:0c:92:de:28:ad:b8:46:e1:fb:94: 58:a4:ca:53 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjUwNzA0MjEwMTMwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4NDEyYS03ODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsU9UpDQkVUT1UwZIzqvfAyDKezGqXxy/KTsKIEv0TK8183knZYTQS+2osRZc TCTK2wyTMBPM0JthQhicprq1RCC8mYfcoN8F2v5Dd9SHwdg/wslo+tRtpvH900UP xMY6/qes8jjR/aE3vyDO/MXoXqVuVxEjcxoiRpal+yJs4k89EUmmCd0Tv/buS1ND 8KN250uLUwPkcrMPpjj3UiRx4ZCawIMlYJ85BNoP//ux/rfy2zGYGRzzFvISEnGv 9ALhC/mp4Twkh+5YWvaO4EkJ4eC78foWuhJ0CstGbRJ/U2XcWsG2PNO4beAFaX5Y yEFtVokd7A2ppQfTkPNnZQzjiQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPAS3SYE ngP0F3ENdvHjUgo8YqaHMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0UzNkIvN0MyQzYyNDBBMDkxMTFFQUE5NDI3QzQ0QzRGOUFFMDIvNjQ5QTM1NUM1 RjBGMTFFQkJEQjdDMTEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlywwDQYJKoZIhvcNAQELBQADggEBAJUQQDkyM1vjzkL5 Rgytv6pZA1LSNSYEOFIkw8UXz65T1/5AbJmWCn02IPiX5Jgq6+oRJ+ETcsMOuFTl LkP2Yt2H+n0SBWUCD5RrNiR6b8k8p/peAeuSUlHyHRjSNKyWAawQyXQMCKgzK9Dv yMvTSmmkztdFGxXPwY8MoLBWNhDTOwpWxPF7QapMMizKVt99YRcl10Mxwz8eO7Dn GqZfOPP3S7T1po9DWhFzr4l7M+GKaGXT2oBxPka4fdleUSd2UK+93VMiWSHpbb9u FUyJq2lRAHUl3Oqk2k/E9e+00txv38IyrX4T2Do3qfsWgRfRE1svDJLeKK24RuH7 lFikylM= -----END CERTIFICATE-----Generated at Sun Jul 20 11:43:11 2025 by rpki-client