$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/4500A5A669BD11F0A024565FC4F9AE02.roa File: 4500A5A669BD11F0A024565FC4F9AE02.roa (raw, json) Hash identifier: LS599Y26OBxG7rAOCClwcDjWdQ4xPNZG0wJ1NF6kL3Y= Subject key identifier: 0A:F7:B8:A2:45:7C:C0:FD:20:E3:22:52:89:C0:0D:CA:BE:EA:49:46 Certificate issuer: /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B Certificate serial: 0873 Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/4500A5A669BD11F0A024565FC4F9AE02.roa Signing time: Sat 26 Jul 2025 01:10:07 +0000 ROA not before: Sat 26 Jul 2025 01:10:07 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 147261 IP address blocks: 103.72.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 21:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2163 (0x873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B Validity Not Before: Jul 26 01:10:07 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=68842aef-587c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:06:99:b8:52:2a:61:98:05:f5:e0:89:8d: 8d:81:31:97:4e:6b:8e:fe:84:5d:c4:86:c4:ac:d8: 41:0d:5e:da:cf:a1:c9:84:59:41:56:e4:e6:32:a0: 1c:d7:d6:7a:f1:9b:19:bd:fd:8b:8d:d5:eb:47:e7: e8:80:19:11:f8:70:d8:fc:98:0c:bf:9f:03:3b:ec: 67:2a:d0:89:b3:cd:82:29:90:82:ff:03:39:b1:c3: d8:35:0d:ed:13:82:6b:48:f2:09:36:3d:42:f2:e0: b9:12:3c:67:dc:0f:d1:e2:64:62:56:fc:06:64:23: 78:47:30:98:f4:4a:f0:f4:81:58:bc:99:48:bf:d3: cb:aa:f4:f4:5c:5c:bf:d7:c9:a6:37:4c:71:d5:cb: a8:87:d7:1e:39:2c:22:69:3b:96:57:4b:89:14:6b: e5:29:1c:26:1e:45:6b:1a:ae:39:a0:d0:fb:7a:f1: 1d:c8:6b:42:b9:69:e0:09:57:8d:b0:9e:b9:08:3b: b6:09:f5:51:fa:68:b2:35:6f:50:97:0f:36:ff:c9: 31:78:3e:41:65:f1:6d:7f:28:02:9a:2c:b0:76:5e: 24:60:e4:2d:c8:29:72:be:61:17:1f:67:93:0c:b3: 44:d6:95:4f:b9:33:af:fd:f8:05:a7:8f:a7:ea:f5: 74:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F7:B8:A2:45:7C:C0:FD:20:E3:22:52:89:C0:0D:CA:BE:EA:49:46 X509v3 Authority Key Identifier: keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/4500A5A669BD11F0A024565FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.102.0/24 Signature Algorithm: sha256WithRSAEncryption 46:db:6b:08:43:0e:bf:bf:ef:d8:ff:fc:38:18:25:09:c2:f1: cc:44:6b:08:57:4d:f3:b6:66:70:e2:1d:c4:eb:a7:d0:28:e4: da:9b:b0:36:5d:2a:13:42:c7:53:6f:af:cc:2b:58:4f:4b:29: 69:c6:7c:46:b4:e7:61:2f:7f:8c:00:c3:d7:1d:03:f7:e3:67: 4e:46:db:c9:c0:18:73:6c:69:93:ae:ae:4b:01:ed:7a:a3:82: c7:a3:f2:42:16:d5:d6:73:0f:a2:49:1d:94:78:bc:02:02:c7: a9:a4:a6:c4:fe:1d:40:a8:3f:88:ff:74:b6:98:2f:93:13:e5: f3:7f:7e:4b:05:d6:69:b0:f0:c6:0b:27:05:ae:b1:53:52:8d: d8:30:d3:bd:65:07:37:8e:e5:07:14:f5:69:1e:2f:ec:1e:18: cb:9d:d8:52:43:75:0e:f9:f3:19:e7:75:72:60:10:b0:27:01: b8:9d:d0:90:b6:20:e7:e0:54:3f:94:81:df:58:fb:eb:06:12: bc:0d:94:15:29:a8:8b:8b:6e:d1:98:ee:a9:c7:c6:55:0f:ab: 28:3f:c7:21:f0:e1:83:e4:90:34:9f:74:2d:f0:85:1a:63:6c: 80:4b:24:88:ac:64:b0:fe:53:74:b9:76:76:78:f0:d2:f0:ad: e4:3f:cb:fd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVGREYxMTAvBgNVBAUTKEU4QzIxQjAzQjY1MDgzQjIxQkZBMzc1MjZEMTJCMzQx RjI0OUNDOEIwHhcNMjUwNzI2MDExMDA3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg0MmFlZi01ODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlYGmbhSKmGYBfXgiY2NgTGXTmuO/oRdxIbErNhBDV7az6HJhFlBVuTmMqAc 19Z68ZsZvf2LjdXrR+fogBkR+HDY/JgMv58DO+xnKtCJs82CKZCC/wM5scPYNQ3t E4JrSPIJNj1C8uC5Ejxn3A/R4mRiVvwGZCN4RzCY9Erw9IFYvJlIv9PLqvT0XFy/ 18mmN0xx1cuoh9ceOSwiaTuWV0uJFGvlKRwmHkVrGq45oND7evEdyGtCuWngCVeN sJ65CDu2CfVR+miyNW9Qlw82/8kxeD5BZfFtfygCmiywdl4kYOQtyClyvmEXH2eT DLNE1pVPuTOv/fgFp4+n6vV02wIDAQABo4IClTCCApEwHQYDVR0OBBYEFAr3uKJF fMD9IOMiUonADcq+6klGMB8GA1UdIwQYMBaAFOjCGwO2UIOyG/o3Um0Ss0HyScyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUZERi8wQkREN0VBMkU5 MEMxMUVBOTY1QzJBMkZDNEY5QUUwMi82TUliQTdaUWc3SWItamRTYlJLelFmSkp6 SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZNSWJBN1pRZzdJYi1qZFNiUkt6UWZKSnpJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUVGREYvMEJERDdFQTJFOTBDMTFFQTk2NUMyQTJGQzRGOUFFMDIvNDUwMEE1QTY2 OUJEMTFGMEEwMjQ1NjVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnSGYwDQYJKoZIhvcNAQELBQADggEBAEbbawhDDr+/79j/ /DgYJQnC8cxEawhXTfO2ZnDiHcTrp9Ao5NqbsDZdKhNCx1Nvr8wrWE9LKWnGfEa0 52Evf4wAw9cdA/fjZ05G28nAGHNsaZOurksB7Xqjgsej8kIW1dZzD6JJHZR4vAIC x6mkpsT+HUCoP4j/dLaYL5MT5fN/fksF1mmw8MYLJwWusVNSjdgw071lBzeO5QcU 9WkeL+weGMud2FJDdQ758xnndXJgELAnAbid0JC2IOfgVD+Ugd9Y++sGErwNlBUp qIuLbtGY7qnHxlUPqyg/xyHw4YPkkDSfdC3whRpjbIBLJIisZLD+U3S5dnZ48NLw reQ/y/0= -----END CERTIFICATE-----Generated at Sun Jul 27 08:49:10 2025 by rpki-client