$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/6558775AE7D811EF8D280E2FC4F9AE02.roa File: 6558775AE7D811EF8D280E2FC4F9AE02.roa (raw, json) Hash identifier: IULXHhlu5uT6Tg9jL/yk50UFaDGDqG8EJ1WnwAnbvbg= Subject key identifier: 39:A3:FA:7F:DA:D9:1F:D9:CA:3A:AE:D7:EB:D8:C2:19:E4:1E:86:7B Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Certificate serial: 0D80 Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/6558775AE7D811EF8D280E2FC4F9AE02.roa Signing time: Wed 02 Jul 2025 20:30:05 +0000 ROA not before: Wed 02 Jul 2025 20:30:05 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 138985 IP address blocks: 103.20.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 08:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3456 (0xd80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264 Validity Not Before: Jul 2 20:30:05 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686596cd-c9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ce:97:79:50:52:a3:b0:cc:ba:7c:1b:b8:c7: 31:3f:af:b6:b7:bb:ad:1b:a4:19:0f:3c:6d:6c:1f: 1d:d8:fc:4d:63:34:14:10:18:23:99:8f:89:ff:3e: af:ea:ed:1e:61:33:3a:f7:7c:d6:f0:dd:4f:46:d5: 7f:13:63:36:e0:93:9b:fe:78:57:61:f2:a7:d6:25: 9d:4d:bb:be:90:1b:0b:d9:e3:8b:3a:17:29:53:e3: 72:52:fd:9b:6f:2c:88:99:7c:76:ac:60:00:4b:a2: d2:a1:57:c0:a3:df:81:3d:01:a0:e4:8c:4d:f1:1e: 0c:40:58:e5:70:34:64:04:ea:c7:6f:d2:3e:c4:93: b8:15:00:77:e4:25:c1:9e:58:7a:e4:20:b2:21:1b: 94:bf:e7:bb:8a:bf:6b:da:f8:f2:d9:f8:7b:f5:db: c9:c2:33:52:4b:41:01:09:b7:6b:14:f1:3a:be:cb: 75:ed:e8:bd:e1:08:c5:e0:e2:bb:4f:86:63:5f:9b: e3:5a:11:bc:56:ad:d4:c1:6f:0d:97:1e:54:1e:09: 74:fd:0c:72:47:65:d7:6e:33:c7:6e:81:96:ff:fb: bf:8b:63:b6:34:51:91:e8:76:ef:e7:1e:bb:7a:9b: 8b:db:ff:13:34:c0:b7:87:02:c3:3c:fd:27:fb:6c: b7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A3:FA:7F:DA:D9:1F:D9:CA:3A:AE:D7:EB:D8:C2:19:E4:1E:86:7B X509v3 Authority Key Identifier: keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/6558775AE7D811EF8D280E2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.20.134.0/24 Signature Algorithm: sha256WithRSAEncryption 89:e3:a3:31:8b:d1:89:32:cd:5a:b5:77:7e:34:8e:4d:0c:49: bc:dc:eb:9d:b0:2e:fe:95:93:8b:35:98:9b:1f:80:c3:4f:2b: d4:ed:2a:c0:cb:20:94:10:d9:c7:a6:86:12:72:f5:c8:db:8d: c4:3b:09:99:b9:10:7e:1c:58:dc:9a:81:d2:0e:bf:ae:d7:9f: ee:82:c1:f8:5c:0c:bd:4c:91:3d:23:f3:0c:2e:57:a6:20:b1: ab:93:5d:a0:7e:37:a6:e2:a9:61:d6:c0:9c:36:32:f0:e6:fa: 23:f8:30:a7:72:21:64:63:3f:c6:db:a4:c9:70:fb:bb:5a:95: b0:6e:4c:15:7e:d1:b0:58:51:68:b5:fd:bf:b2:a3:6c:32:fa: 74:5b:32:a3:e5:6a:2e:fb:b5:c9:da:ad:03:a8:c2:33:c0:1d: 91:59:8a:d9:03:48:44:2e:5e:75:ab:97:b3:7d:07:84:bc:27: 8a:0a:c9:42:67:8d:a9:fb:44:60:be:51:da:49:9c:a7:f0:74: 5e:7c:b3:d1:fd:c9:db:03:f2:cd:99:98:ee:88:04:43:37:06: b8:9d:e5:e1:87:df:79:e6:2b:ef:d9:cb:a9:d5:a3:da:74:dc: d8:9e:ad:f8:ed:d0:40:33:65:73:72:d5:e7:83:7b:db:ae:d7: 51:e7:8f:f4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND NjczMkUyNjQwHhcNMjUwNzAyMjAzMDA1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1OTZjZC1jOWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw86XeVBSo7DMunwbuMcxP6+2t7utG6QZDzxtbB8d2PxNYzQUEBgjmY+J/z6v 6u0eYTM693zW8N1PRtV/E2M24JOb/nhXYfKn1iWdTbu+kBsL2eOLOhcpU+NyUv2b byyImXx2rGAAS6LSoVfAo9+BPQGg5IxN8R4MQFjlcDRkBOrHb9I+xJO4FQB35CXB nlh65CCyIRuUv+e7ir9r2vjy2fh79dvJwjNSS0EBCbdrFPE6vst17ei94QjF4OK7 T4ZjX5vjWhG8Vq3UwW8Nlx5UHgl0/QxyR2XXbjPHboGW//u/i2O2NFGR6Hbv5x67 epuL2/8TNMC3hwLDPP0n+2y3bQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDmj+n/a 2R/Zyjqu1+vYwhnkHoZ7MB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5 RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvNjU1ODc3NUFF N0Q4MTFFRjhEMjgwRTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnFIYwDQYJKoZIhvcNAQELBQADggEBAInjozGL0YkyzVq1 d340jk0MSbzc652wLv6Vk4s1mJsfgMNPK9TtKsDLIJQQ2cemhhJy9cjbjcQ7CZm5 EH4cWNyagdIOv67Xn+6CwfhcDL1MkT0j8wwuV6YgsauTXaB+N6biqWHWwJw2MvDm +iP4MKdyIWRjP8bbpMlw+7talbBuTBV+0bBYUWi1/b+yo2wy+nRbMqPlai77tcna rQOowjPAHZFZitkDSEQuXnWrl7N9B4S8J4oKyUJnjan7RGC+UdpJnKfwdF58s9H9 ydsD8s2ZmO6IBEM3Brid5eGH33nmK+/Zy6nVo9p03Nierfjt0EAzZXNy1eeDe9uu 11Hnj/Q= -----END CERTIFICATE-----Generated at Tue Jul 22 04:57:07 2025 by rpki-client