$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4E211A5C408A11EE91A09746C4F9AE02.roa File: 4E211A5C408A11EE91A09746C4F9AE02.roa (raw, json) Hash identifier: kfvn38ixprZNvoP8sdkWRE4Y87QEhE7Cfyn7D4FPsf4= Subject key identifier: 78:D4:70:AF:D9:CF:70:54:D4:19:68:DD:AF:59:E0:6F:81:E0:D1:67 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3914 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4E211A5C408A11EE91A09746C4F9AE02.roa Signing time: Fri 04 Jul 2025 14:50:31 +0000 ROA not before: Fri 04 Jul 2025 14:50:31 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 16509 IP address blocks: 103.104.86.0/24 maxlen: 24 103.182.250.0/24 maxlen: 24 103.182.251.0/24 maxlen: 24 103.188.89.0/24 maxlen: 24 103.253.240.0/22 maxlen: 22 144.48.40.0/22 maxlen: 24 203.191.134.0/24 maxlen: 24 203.191.135.0/24 maxlen: 24 211.44.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14612 (0x3914) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Jul 4 14:50:31 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6867ea37-a566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:33:c2:16:c5:d2:c6:7d:92:c6:62:cc:58:2b: 45:0a:6a:b6:bd:b5:8e:da:4f:46:c4:0d:41:6d:9f: ae:ec:72:c2:ea:42:90:19:4c:a4:f7:06:44:57:0d: a3:0c:72:15:36:4b:65:86:b9:85:7f:82:cd:fa:9e: e9:ee:9b:11:4e:09:01:56:56:1e:eb:89:31:0a:f1: ba:44:dc:e0:c8:c4:4d:26:e5:61:5b:64:33:b3:f2: 9c:f2:4e:37:3f:68:5e:95:82:c9:43:8e:4b:a7:d6: d7:7c:1f:bb:1f:0e:e8:43:2f:5b:31:7c:6a:0d:85: 67:b7:28:54:68:63:81:c4:25:87:ce:04:a5:db:b3: 4d:82:95:a3:11:9f:2b:82:03:6f:8a:33:e0:aa:70: a8:11:01:39:d6:81:da:ac:06:86:be:39:12:02:13: 1b:a7:ec:bf:05:59:8b:3e:d1:3b:1a:84:56:30:43: 2b:14:25:47:d1:0b:7c:d5:4f:9b:d5:56:a1:93:2c: 31:79:1c:44:1c:61:e6:24:43:9f:01:38:fa:14:d9: 91:1e:2b:bb:89:20:c0:a8:c1:ec:0f:dc:a7:c7:8f: 54:54:b4:94:b4:b9:ce:04:5f:56:e8:3b:a9:32:1c: 97:d7:2f:55:15:8b:6d:57:1e:4c:2a:e1:87:8c:8a: ff:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D4:70:AF:D9:CF:70:54:D4:19:68:DD:AF:59:E0:6F:81:E0:D1:67 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4E211A5C408A11EE91A09746C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.86.0/24 103.182.250.0/23 103.188.89.0/24 103.253.240.0/22 144.48.40.0/22 203.191.134.0/23 211.44.103.0/24 Signature Algorithm: sha256WithRSAEncryption 64:ad:a8:e4:06:3b:a0:ab:66:ab:27:39:a7:96:6b:c9:63:e9: 00:93:05:6b:8a:b4:b5:8d:97:15:de:83:f1:46:e9:eb:c3:bd: f6:39:14:28:ad:1a:e2:ba:b9:a3:52:0d:6f:ea:8a:48:65:6d: 67:75:42:0c:00:e5:ca:71:4f:cb:a6:2e:aa:ba:67:4e:d5:40: 22:fd:88:05:4b:a2:c1:7b:fb:30:f9:b8:44:f2:01:4b:88:f0: 9c:93:e8:fa:63:db:3d:b7:ae:62:8f:7f:35:85:65:a2:ad:f0: 07:a3:29:1a:56:4b:ad:f9:91:cb:46:f2:33:94:8c:a0:2c:35: 9c:03:20:b5:d4:f6:cf:90:13:15:9c:f7:ea:3d:46:62:40:a6: 80:18:15:95:76:89:ac:e3:1b:f6:7a:7d:e9:16:20:d8:cc:16: 74:f3:2a:0f:ef:ac:fb:7c:0a:45:7f:f4:f7:42:e3:45:2c:d0: 17:26:97:a5:eb:6f:60:da:f0:f9:96:f8:b0:53:7c:29:e8:b5: f0:2c:60:0e:70:9a:4d:a0:91:2e:fe:b9:e1:13:8d:28:e2:44: a5:6e:b9:c6:58:2b:0b:c7:66:48:9e:cf:ce:3d:29:3a:93:93: 2c:43:c7:4c:5a:6d:64:ea:0d:11:94:a2:c0:1e:1b:20:e4:14: a9:ed:6c:d6 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICORQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUwNzA0MTQ1MDMxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY3ZWEzNy1hNTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDPCFsXSxn2SxmLMWCtFCmq2vbWO2k9GxA1BbZ+u7HLC6kKQGUyk9wZEVw2j DHIVNktlhrmFf4LN+p7p7psRTgkBVlYe64kxCvG6RNzgyMRNJuVhW2Qzs/Kc8k43 P2helYLJQ45Lp9bXfB+7Hw7oQy9bMXxqDYVntyhUaGOBxCWHzgSl27NNgpWjEZ8r ggNvijPgqnCoEQE51oHarAaGvjkSAhMbp+y/BVmLPtE7GoRWMEMrFCVH0Qt81U+b 1VahkywxeRxEHGHmJEOfATj6FNmRHiu7iSDAqMHsD9ynx49UVLSUtLnOBF9W6Dup MhyX1y9VFYttVx5MKuGHjIr/twIDAQABo4ICuTCCArUwHQYDVR0OBBYEFHjUcK/Z z3BU1Blo3a9Z4G+B4NFnMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNEUyMTFBNUM0 MDhBMTFFRTkxQTA5NzQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMDAEAgABMCoDBABnaFYDBAFntvoDBABnvFkDBAJn/fADBAKQMCgDBAHLv4YD BADTLGcwDQYJKoZIhvcNAQELBQADggEBAGStqOQGO6CrZqsnOaeWa8lj6QCTBWuK tLWNlxXeg/FG6evDvfY5FCitGuK6uaNSDW/qikhlbWd1QgwA5cpxT8umLqq6Z07V QCL9iAVLosF7+zD5uETyAUuI8JyT6Ppj2z23rmKPfzWFZaKt8AejKRpWS635kctG 8jOUjKAsNZwDILXU9s+QExWc9+o9RmJApoAYFZV2iazjG/Z6fekWINjMFnTzKg/v rPt8CkV/9PdC40Us0Bcml6Xrb2Da8PmW+LBTfCnotfAsYA5wmk2gkS7+ueETjSji RKVuucZYKwvHZkiez849KTqTkyxDx0xabWTqDRGUosAeGyDkFKntbNY= -----END CERTIFICATE-----Generated at Tue Jul 22 12:05:05 2025 by rpki-client