$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4D4EE370408A11EE91A09746C4F9AE02.roa File: 4D4EE370408A11EE91A09746C4F9AE02.roa (raw, json) Hash identifier: /SphmDOXIGkmk4Dx70JMdSpOBjmQfa6XPTmojFUioL8= Subject key identifier: E4:83:9B:D5:64:A7:2E:B8:38:FA:23:CA:08:3D:2A:9E:53:DB:EB:B1 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3912 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4D4EE370408A11EE91A09746C4F9AE02.roa Signing time: Fri 04 Jul 2025 14:50:29 +0000 ROA not before: Fri 04 Jul 2025 14:50:29 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.104.86.0/24 maxlen: 24 103.253.240.0/22 maxlen: 22 144.48.40.0/22 maxlen: 24 211.44.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14610 (0x3912) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Jul 4 14:50:29 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6867ea35-fa43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:3b:82:be:14:f9:15:e1:c4:e9:51:55:65: c2:9b:12:41:da:84:10:8b:28:78:90:ac:83:98:19: 9c:e1:9f:10:1d:01:73:bf:f0:c7:f0:cf:42:d7:1c: 7b:c4:70:22:79:b3:31:9c:47:83:96:2c:cd:81:a3: ea:4c:59:2c:31:2c:9b:7f:23:b1:30:78:5c:f1:f2: f9:be:b3:da:05:98:78:df:86:e0:ac:31:a8:f2:03: 7f:dd:da:27:3f:2e:5e:05:95:d9:62:43:23:4c:e2: 83:c2:b7:92:51:10:c4:e3:5a:cd:d6:2e:48:a0:15: 21:82:a9:86:34:8f:27:ef:67:db:a9:f9:2e:02:5c: 45:80:a6:a5:7c:f7:58:1d:37:7c:61:08:26:3a:ce: db:95:39:1d:8d:36:28:f8:d8:02:fb:f9:b0:33:d7: 6f:78:26:58:08:8f:f9:26:b9:c6:c5:6a:c2:04:2b: 4c:d0:34:28:ba:1b:0c:d2:c0:76:34:25:9c:28:04: d4:e3:aa:af:76:44:61:db:b9:72:6a:67:b4:23:83: 22:e5:84:93:06:a9:6d:14:4e:2c:4f:2f:10:2b:28: 0f:f1:47:bd:8a:50:cc:58:1c:9c:48:a9:8f:a9:fc: 80:4b:e6:eb:a4:55:05:ec:b5:fc:94:c0:b8:b8:4a: 59:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:83:9B:D5:64:A7:2E:B8:38:FA:23:CA:08:3D:2A:9E:53:DB:EB:B1 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4D4EE370408A11EE91A09746C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.86.0/24 103.253.240.0/22 144.48.40.0/22 211.44.103.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:a4:4c:68:d9:81:20:47:88:23:17:c6:b3:96:ef:03:4e:3e: 4f:54:71:76:2a:50:f9:f7:2c:94:d3:fa:7d:99:d7:02:5e:37: 95:fd:49:fd:2c:73:9d:1a:c3:42:5c:f0:6c:7a:e5:ac:d4:b1: 5b:8d:a1:2b:cf:b5:64:8d:3a:ca:f6:57:3c:98:e4:e0:9a:25: 9d:86:97:ab:ca:79:45:53:22:e7:cb:5b:46:72:40:45:a9:01: 7a:0e:cd:9e:de:de:4c:71:32:27:bf:55:88:f8:c6:4e:87:5c: 56:49:64:3c:97:59:13:f6:89:9c:80:c8:d2:95:54:0c:67:2a: 21:3c:cb:cd:df:e7:b1:22:b8:cc:08:f5:a2:ed:76:0a:f5:a0: ce:57:f2:2c:bb:08:d5:b1:d3:03:ca:7a:b3:5e:09:9f:2e:6f: a5:96:0e:d2:8a:c4:8e:d6:e7:78:9c:59:c5:4d:71:3f:39:fa: 6f:8a:56:72:29:86:00:ac:56:40:bf:0d:03:38:ba:2e:ed:2a: 23:f2:29:2d:81:1d:42:21:6a:23:2f:19:b8:86:12:d4:14:aa: 98:21:94:04:0f:40:b0:13:6d:6b:d1:0d:23:d4:c7:3d:05:9e: 9f:9d:d0:f1:67:6e:50:62:3f:20:b1:d8:bb:29:de:8e:17:c2: 92:a5:2c:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICORIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUwNzA0MTQ1MDI5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY3ZWEzNS1mYTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiI7gr4U+RXhxOlRVWXCmxJB2oQQiyh4kKyDmBmc4Z8QHQFzv/DH8M9C1xx7 xHAiebMxnEeDlizNgaPqTFksMSybfyOxMHhc8fL5vrPaBZh434bgrDGo8gN/3don Py5eBZXZYkMjTOKDwreSURDE41rN1i5IoBUhgqmGNI8n72fbqfkuAlxFgKalfPdY HTd8YQgmOs7blTkdjTYo+NgC+/mwM9dveCZYCI/5JrnGxWrCBCtM0DQouhsM0sB2 NCWcKATU46qvdkRh27lyame0I4Mi5YSTBqltFE4sTy8QKygP8Ue9ilDMWBycSKmP qfyAS+brpFUF7LX8lMC4uEpZywIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFOSDm9Vk py64OPojygg9Kp5T2+uxMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNEQ0RUUzNzA0 MDhBMTFFRTkxQTA5NzQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABnaFYDBAJn/fADBAKQMCgDBADTLGcwDQYJKoZIhvcNAQEL BQADggEBAB6kTGjZgSBHiCMXxrOW7wNOPk9UcXYqUPn3LJTT+n2Z1wJeN5X9Sf0s c50aw0Jc8Gx65azUsVuNoSvPtWSNOsr2VzyY5OCaJZ2Gl6vKeUVTIufLW0ZyQEWp AXoOzZ7e3kxxMie/VYj4xk6HXFZJZDyXWRP2iZyAyNKVVAxnKiE8y83f57EiuMwI 9aLtdgr1oM5X8iy7CNWx0wPKerNeCZ8ub6WWDtKKxI7W53icWcVNcT85+m+KVnIp hgCsVkC/DQM4ui7tKiPyKS2BHUIhaiMvGbiGEtQUqpghlAQPQLATbWvRDSPUxz0F np+d0PFnblBiPyCx2Lsp3o4XwpKlLAE= -----END CERTIFICATE-----Generated at Tue Jul 22 11:55:56 2025 by rpki-client