$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1CD82986C36111E9A37AC46EC4F9AE02.roa File: 1CD82986C36111E9A37AC46EC4F9AE02.roa (raw, json) Hash identifier: UeNWqDuc6Ln+l4WWol/JGxPQ9/25U+hHn/L6mfBQ43Q= Subject key identifier: 8E:C4:C3:BE:CE:92:5A:68:2E:B8:5A:9B:AF:57:6F:70:BE:77:8C:46 Certificate issuer: /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Certificate serial: 0DB8 Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1CD82986C36111E9A37AC46EC4F9AE02.roa Signing time: Fri 04 Jul 2025 18:27:30 +0000 ROA not before: Fri 04 Jul 2025 18:27:30 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 2 IP address blocks: 103.29.28.0/24 maxlen: 24 103.250.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3512 (0xdb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63 Validity Not Before: Jul 4 18:27:30 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68681d12-c93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:92:5d:b7:00:84:30:9d:08:8d:09:f5:dd: ca:4e:35:11:ef:70:b6:73:d0:44:6d:48:0f:d0:be: 27:85:70:7d:7b:ed:38:b7:7d:55:b5:de:84:f4:3a: cf:f0:6a:62:28:31:6b:9e:33:06:20:86:49:3f:9b: 61:3d:d3:88:ed:2b:50:4d:03:9f:62:c0:81:29:61: c3:ca:8b:0e:2e:06:c1:df:35:69:08:28:42:59:23: 89:cf:43:4d:06:42:d5:71:34:41:a2:e0:72:d8:96: df:e4:40:44:0b:d3:df:da:fe:92:c4:93:39:d5:e0: 46:04:0c:dc:7f:b9:b2:b1:63:4e:6f:ae:1a:06:73: 77:1b:2a:a1:d5:bc:45:9c:72:22:6b:76:fd:07:d6: c5:55:86:a4:d8:8a:78:23:8b:7e:6c:8f:a7:1c:00: bb:9d:ed:5c:43:b5:fa:f3:5e:71:11:43:57:28:92: fd:f1:36:7a:2d:52:ff:e4:df:d2:9e:da:af:3b:67: 7a:8d:32:32:fa:84:2b:f1:b9:bf:05:40:0b:bc:df: 9b:7e:52:4a:dd:ae:90:e7:13:60:9a:e1:5a:0d:46: a9:7c:73:08:38:2e:f2:ba:58:b0:fd:f7:87:08:01: 78:a0:eb:35:ec:08:2b:51:1e:51:c3:a3:17:8c:58: fa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C4:C3:BE:CE:92:5A:68:2E:B8:5A:9B:AF:57:6F:70:BE:77:8C:46 X509v3 Authority Key Identifier: keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1CD82986C36111E9A37AC46EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.29.28.0/24 103.250.31.0/24 Signature Algorithm: sha256WithRSAEncryption 07:b3:c8:4f:a7:18:7e:47:59:76:ed:b6:5c:b4:4f:8f:8b:ed: 88:cb:0d:2b:01:67:e7:2a:a3:77:c7:3c:93:a0:02:65:80:d8: 9c:13:26:21:ff:36:9c:46:10:32:cb:40:38:7f:bd:c3:2b:b2: 6e:bf:3d:be:16:e9:83:a7:67:5a:fc:76:28:4f:63:91:f7:17: 2e:de:ec:d5:5a:53:1c:03:46:d1:a3:97:d3:2f:2c:2b:3f:6f: 54:41:7e:69:37:21:73:90:0d:85:e4:cf:3e:19:6e:da:a9:98: f8:22:31:f9:38:9c:dd:70:ee:e1:30:f9:b8:ea:db:ca:5d:86: 30:8e:fc:bc:20:89:d9:c1:2d:df:f2:65:be:de:e8:6e:7f:77: e1:bc:25:35:d4:13:3c:08:0b:67:16:7b:cb:37:19:23:90:fd: 50:77:20:5f:83:d8:63:1f:c4:15:98:aa:42:58:c4:33:eb:0b: 65:be:9b:56:df:7a:cf:5b:e2:2e:bf:36:e9:e0:c5:f3:f9:64: 9f:d2:d0:49:11:20:0a:c6:23:73:cc:3b:67:b3:bb:e6:f3:58: 44:92:61:77:09:a7:88:2a:c3:b8:75:1f:63:d0:44:cb:90:3d: 96:37:28:9b:3c:d6:05:e0:cc:c0:da:f4:e1:ce:18:63:16:2d: 3f:b0:d2:d1 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ1MjkxMTAvBgNVBAUTKEM5OEFGQkI0QkI5QUU5QjFBMjdBM0REM0FENTk1NkIz NEVEQTlDNjMwHhcNMjUwNzA0MTgyNzMwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4MWQxMi1jOTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuq+SXbcAhDCdCI0J9d3KTjUR73C2c9BEbUgP0L4nhXB9e+04t31Vtd6E9DrP 8GpiKDFrnjMGIIZJP5thPdOI7StQTQOfYsCBKWHDyosOLgbB3zVpCChCWSOJz0NN BkLVcTRBouBy2Jbf5EBEC9Pf2v6SxJM51eBGBAzcf7mysWNOb64aBnN3Gyqh1bxF nHIia3b9B9bFVYak2Ip4I4t+bI+nHAC7ne1cQ7X6815xEUNXKJL98TZ6LVL/5N/S ntqvO2d6jTIy+oQr8bm/BUALvN+bflJK3a6Q5xNgmuFaDUapfHMIOC7yuliw/feH CAF4oOs17AgrUR5Rw6MXjFj6ZQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFI7Ew77O klpoLrham69Xb3C+d4xGMB8GA1UdIwQYMBaAFMmK+7S7mumxono9061ZVrNO2pxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDUyOS8yMENGMkUxNEMz NjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZiR2llajNUclZsV3MwN2Fu R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lZcjd0THVhNmJHaWVqM1RyVmxXczA3YW5HTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ1MjkvMjBDRjJFMTRDMzYwMTFFOThBNUMwMjZEQzRGOUFFMDIvMUNEODI5ODZD MzYxMTFFOUEzN0FDNDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnHRwDBABn+h8wDQYJKoZIhvcNAQELBQADggEBAAezyE+n GH5HWXbttly0T4+L7YjLDSsBZ+cqo3fHPJOgAmWA2JwTJiH/NpxGEDLLQDh/vcMr sm6/Pb4W6YOnZ1r8dihPY5H3Fy7e7NVaUxwDRtGjl9MvLCs/b1RBfmk3IXOQDYXk zz4ZbtqpmPgiMfk4nN1w7uEw+bjq28pdhjCO/LwgidnBLd/yZb7e6G5/d+G8JTXU EzwIC2cWe8s3GSOQ/VB3IF+D2GMfxBWYqkJYxDPrC2W+m1bfes9b4i6/NungxfP5 ZJ/S0EkRIArGI3PMO2ezu+bzWESSYXcJp4gqw7h1H2PQRMuQPZY3KJs81gXgzMDa 9OHOGGMWLT+w0tE= -----END CERTIFICATE-----Generated at Mon Jul 21 02:47:42 2025 by rpki-client