$ rpki-client -vvf rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/8B2E3BA270BD11ED970C535FC4F9AE02.roa File: 8B2E3BA270BD11ED970C535FC4F9AE02.roa (raw, json) Hash identifier: 5VH2eBCf4hkjUtJHqHQPv/5yN4SkQaCzRWcunhO07pE= Subject key identifier: 37:37:22:EF:57:29:04:CC:28:80:BC:99:A7:97:E3:18:9F:7D:3F:00 Certificate issuer: /CN=A914F22A/serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Certificate serial: 138D Authority key identifier: 56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/8B2E3BA270BD11ED970C535FC4F9AE02.roa Signing time: Wed 16 Jul 2025 17:25:52 +0000 ROA not before: Wed 16 Jul 2025 17:25:52 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 135604 IP address blocks: 103.68.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5005 (0x138d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F22A, serialNumber=56AF1CD0B4E07D000C64AB016C33F786A0DD90FA Validity Not Before: Jul 16 17:25:52 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6877e0a0-da6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:35:cd:43:6f:b8:71:0f:fa:34:2a:5d:c1:b6: b2:03:03:1e:1b:cc:4d:fc:72:32:3a:a7:89:85:14: 5e:9e:4f:b8:2e:48:91:6c:6e:0a:d2:0b:6d:1d:54: 4a:8b:5b:a3:fe:b0:ab:18:a0:e2:e1:bc:41:a2:17: e7:c2:e9:e8:32:10:fd:01:14:e1:01:60:dd:0b:74: fe:86:03:ef:54:20:b5:fb:13:38:d8:a5:1e:94:f9: 8d:dd:d1:68:58:07:d5:7f:81:d5:0a:4a:02:65:4f: 05:37:6f:2a:85:df:83:ba:e9:0c:88:56:d5:fd:84: 39:36:d7:af:2f:06:6f:0a:f1:cd:50:4e:09:9c:da: fa:f8:1f:9d:21:7a:f8:cc:27:47:b3:7c:49:d1:23: e9:aa:b1:4a:1c:39:f8:0e:60:17:20:4d:5d:ea:72: 47:16:62:3b:45:91:88:44:d5:fb:bb:cd:32:15:c2: 32:2b:c3:39:20:1b:13:98:7b:ca:97:9b:05:f4:bc: 04:22:e7:3d:b6:96:92:cf:93:f6:4a:f8:1c:79:cd: b3:23:8b:84:3f:25:3a:cd:b2:1f:22:56:d1:86:0a: 43:3c:b5:d7:71:43:52:25:d1:f6:17:2b:ae:6f:74: 91:c2:60:7c:39:de:90:2e:46:fe:da:b2:74:4b:da: 8a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:37:22:EF:57:29:04:CC:28:80:BC:99:A7:97:E3:18:9F:7D:3F:00 X509v3 Authority Key Identifier: keyid:56:AF:1C:D0:B4:E0:7D:00:0C:64:AB:01:6C:33:F7:86:A0:DD:90:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vq8c0LTgfQAMZKsBbDP3hqDdkPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F22A/7EEC1E4C9CD011E8B1612B7DC4F9AE02/8B2E3BA270BD11ED970C535FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.4.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:e0:94:b7:de:4c:d7:6c:b2:0a:e0:8b:23:e1:9f:dd:0e:22: 0a:c8:6b:40:0d:78:01:5b:c2:bf:37:f8:5f:5a:ab:37:3a:d2: 04:09:f1:cc:f6:13:2d:a1:98:9f:6e:d7:c1:3a:27:c1:23:45: 35:f6:89:50:ed:f4:f2:81:2a:a3:09:73:5e:f7:5d:18:c3:61: 75:6d:d9:bb:92:8d:18:58:49:a1:87:9b:d0:74:42:85:d9:15: 78:7d:3c:45:ea:c3:92:93:6b:7b:3d:e9:14:4b:4c:f2:60:dd: 6e:1c:ab:ae:eb:e7:2a:0e:2e:1b:ff:3e:f6:98:47:80:cc:e0: 62:29:bb:60:63:60:f4:b0:1a:be:3b:e6:f0:60:33:87:cd:8e: 11:e8:81:af:d1:a0:a0:80:92:e4:07:c8:f5:b8:ac:b2:64:5a: a3:08:6a:da:d1:18:f5:c9:32:aa:e0:bb:e7:31:93:18:4a:c9: 9f:6a:a5:4a:37:0a:b8:63:83:b5:1a:e4:23:e9:28:c1:de:eb: 9b:ce:b9:c4:ce:33:0a:1d:dc:82:41:f6:c3:f4:fb:d6:28:a5: 47:d8:dc:6d:e3:e2:e4:f6:cd:59:26:2c:76:1e:a4:9a:f7:c2: 99:24:42:f8:39:6e:58:2c:81:23:7f:1e:38:7b:6c:cf:8c:c4: f5:f6:9a:84 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICE40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYyMkExMTAvBgNVBAUTKDU2QUYxQ0QwQjRFMDdEMDAwQzY0QUIwMTZDMzNGNzg2 QTBERDkwRkEwHhcNMjUwNzE2MTcyNTUyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc3ZTBhMC1kYTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTXNQ2+4cQ/6NCpdwbayAwMeG8xN/HIyOqeJhRRenk+4LkiRbG4K0gttHVRK i1uj/rCrGKDi4bxBohfnwunoMhD9ARThAWDdC3T+hgPvVCC1+xM42KUelPmN3dFo WAfVf4HVCkoCZU8FN28qhd+DuukMiFbV/YQ5NtevLwZvCvHNUE4JnNr6+B+dIXr4 zCdHs3xJ0SPpqrFKHDn4DmAXIE1d6nJHFmI7RZGIRNX7u80yFcIyK8M5IBsTmHvK l5sF9LwEIuc9tpaSz5P2Svgcec2zI4uEPyU6zbIfIlbRhgpDPLXXcUNSJdH2Fyuu b3SRwmB8Od6QLkb+2rJ0S9qKhwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDc3Iu9X KQTMKIC8maeX4xiffT8AMB8GA1UdIwQYMBaAFFavHNC04H0ADGSrAWwz94ag3ZD6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjIyQS83RUVDMUU0QzlD RDAxMUU4QjE2MTJCN0RDNEY5QUUwMi9WcThjMExUZ2ZRQU1aS3NCYkRQM2hxRGRr UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZxOGMwTFRnZlFBTVpLc0JiRFAzaHFEZGtQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEYyMkEvN0VFQzFFNEM5Q0QwMTFFOEIxNjEyQjdEQzRGOUFFMDIvOEIyRTNCQTI3 MEJEMTFFRDk3MEM1MzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnRAQwDQYJKoZIhvcNAQELBQADggEBACrglLfeTNdssgrg iyPhn90OIgrIa0ANeAFbwr83+F9aqzc60gQJ8cz2Ey2hmJ9u18E6J8EjRTX2iVDt 9PKBKqMJc173XRjDYXVt2buSjRhYSaGHm9B0QoXZFXh9PEXqw5KTa3s96RRLTPJg 3W4cq67r5yoOLhv/PvaYR4DM4GIpu2BjYPSwGr475vBgM4fNjhHoga/RoKCAkuQH yPW4rLJkWqMIatrRGPXJMqrgu+cxkxhKyZ9qpUo3Crhjg7Ua5CPpKMHe65vOucTO Mwod3IJB9sP0+9YopUfY3G3j4uT2zVkmLHYepJr3wpkkQvg5blgsgSN/Hjh7bM+M xPX2moQ= -----END CERTIFICATE-----Generated at Mon Jul 21 07:07:54 2025 by rpki-client