$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/ACDB8DBE580E11F0B8659C80C4F9AE02.roa File: ACDB8DBE580E11F0B8659C80C4F9AE02.roa (raw, json) Hash identifier: e7XClEaujJTyVqwcNVjTlhw6/M87veeTyexkcDvwPFc= Subject key identifier: 5F:E7:0F:5F:F6:89:5C:BD:67:4E:DE:58:EE:6E:92:40:44:4C:5D:3B Certificate issuer: /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6 Certificate serial: 072B Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/ACDB8DBE580E11F0B8659C80C4F9AE02.roa Signing time: Thu 03 Jul 2025 13:07:30 +0000 ROA not before: Thu 03 Jul 2025 13:07:30 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 134455 IP address blocks: 103.160.92.0/23 maxlen: 23 103.160.93.0/24 maxlen: 24 2406:e7c0::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1835 (0x72b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FD1D, serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6 Validity Not Before: Jul 3 13:07:30 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68668092-f852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:51:aa:74:84:3b:bf:db:09:16:b8:d3:1c:ca: 11:2e:75:51:a6:91:4c:87:38:e0:76:f2:bf:ac:da: c8:07:45:a2:d3:82:bf:77:0f:d8:e4:f9:fe:d5:a0: 44:96:67:fc:22:38:4a:f1:4c:4d:e1:20:d8:32:07: 39:91:c3:11:13:7e:bb:a8:9a:50:73:97:d9:9c:f2: 70:4a:3a:f0:12:45:36:44:cf:d6:f8:8d:83:5a:67: 92:24:d5:d0:77:37:84:0e:88:a6:1e:e5:52:51:2f: e8:38:78:eb:ae:8d:cb:74:31:44:41:42:80:54:0e: 08:f4:78:7b:3f:aa:90:03:6c:34:7c:15:aa:fe:87: 98:70:b3:dd:3c:00:64:7d:d7:4d:fa:b7:6d:20:26: e3:13:39:dd:fd:6e:cf:26:66:52:e9:f3:e3:b5:ae: 3c:84:0c:f3:0d:0d:22:aa:fc:75:fa:70:bd:0a:be: 16:2c:64:74:49:f4:97:47:41:0d:6d:40:56:44:e6: c1:4a:9d:4b:73:b5:b6:3a:a3:46:43:23:91:e0:9f: 4c:f3:9e:ce:ee:f2:2a:a0:a1:32:b8:74:92:8c:ee: aa:f7:6a:24:23:6e:fd:b4:b2:18:ec:21:a6:73:34: 8c:24:27:2c:3d:80:a1:e8:f7:8e:93:9b:03:a5:98: dd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E7:0F:5F:F6:89:5C:BD:67:4E:DE:58:EE:6E:92:40:44:4C:5D:3B X509v3 Authority Key Identifier: keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/ACDB8DBE580E11F0B8659C80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.160.92.0/23 IPv6: 2406:e7c0::/32 Signature Algorithm: sha256WithRSAEncryption 7a:6d:37:f3:24:c4:da:02:3d:d9:75:a0:e4:39:ff:55:f6:23: 6d:d0:1c:e9:52:70:03:98:0c:3a:8f:02:7b:9a:19:17:4c:1c: 99:cd:70:95:4e:19:a1:86:85:b3:07:46:1c:e9:7a:b5:e2:10: cd:f7:49:7f:9f:80:d2:6b:87:04:48:9d:bb:1d:c0:16:e6:a7: 94:fb:5c:48:cf:e6:0f:fc:56:5c:20:eb:33:76:9a:e9:f2:6e: 27:07:df:72:b3:97:5e:c2:7f:97:6e:5d:4a:3a:62:ae:29:33: 8b:3f:ec:fd:7a:67:9c:31:7d:88:6d:32:85:9d:62:73:ee:37: 11:09:06:3a:1f:4a:f6:64:ee:83:d0:88:3b:af:3a:ac:d9:35: 79:73:a8:19:af:3c:f1:89:5d:c8:ef:f4:70:51:4c:93:68:81: 24:22:99:ea:bb:e1:0b:c1:4e:a3:a1:ed:61:df:2f:48:fa:33: b7:7a:55:eb:45:54:f1:fe:f8:37:be:31:9c:a6:31:dd:c3:54: 1f:fb:39:8f:e7:fd:d3:99:e9:25:56:8e:32:52:91:0e:ae:46: a5:c8:35:b1:9c:58:cb:35:4e:3f:ab:ea:a4:dc:23:bd:ac:00: 76:6e:02:e8:27:f7:4a:66:a9:07:a9:56:f2:5f:15:d0:46:b9: a5:8f:fd:ee -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEMUQxMTAvBgNVBAUTKDNGNzMxMzYzRkU0NzQwNDYxQTU5Qzg4RkE3NjdCRDhB MzZFQzBERjYwHhcNMjUwNzAzMTMwNzMwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY2ODA5Mi1mODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FGqdIQ7v9sJFrjTHMoRLnVRppFMhzjgdvK/rNrIB0Wi04K/dw/Y5Pn+1aBE lmf8IjhK8UxN4SDYMgc5kcMRE367qJpQc5fZnPJwSjrwEkU2RM/W+I2DWmeSJNXQ dzeEDoimHuVSUS/oOHjrro3LdDFEQUKAVA4I9Hh7P6qQA2w0fBWq/oeYcLPdPABk fddN+rdtICbjEznd/W7PJmZS6fPjta48hAzzDQ0iqvx1+nC9Cr4WLGR0SfSXR0EN bUBWRObBSp1Lc7W2OqNGQyOR4J9M857O7vIqoKEyuHSSjO6q92okI279tLIY7CGm czSMJCcsPYCh6PeOk5sDpZjdRwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFF/nD1/2 iVy9Z07eWO5ukkBETF07MB8GA1UdIwQYMBaAFD9zE2P+R0BGGlnIj6dnvYo27A32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQxRC84QURFMzNGQzQx MkUxMUVCOUE5NzRDMTZDNEY5QUUwMi9QM01UWV81SFFFWWFXY2lQcDJlOWlqYnNE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AzTVRZXzVIUUVZYVdjaVBwMmU5aWpic0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUZEMUQvOEFERTMzRkM0MTJFMTFFQjlBOTc0QzE2QzRGOUFFMDIvQUNEQjhEQkU1 ODBFMTFGMEI4NjU5QzgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnoFwwDQQCAAIwBwMFACQG58AwDQYJKoZIhvcNAQELBQAD ggEBAHptN/MkxNoCPdl1oOQ5/1X2I23QHOlScAOYDDqPAnuaGRdMHJnNcJVOGaGG hbMHRhzperXiEM33SX+fgNJrhwRInbsdwBbmp5T7XEjP5g/8Vlwg6zN2munybicH 33Kzl17Cf5duXUo6Yq4pM4s/7P16Z5wxfYhtMoWdYnPuNxEJBjofSvZk7oPQiDuv OqzZNXlzqBmvPPGJXcjv9HBRTJNogSQimeq74QvBTqOh7WHfL0j6M7d6VetFVPH+ +De+MZymMd3DVB/7OY/n/dOZ6SVWjjJSkQ6uRqXINbGcWMs1Tj+r6qTcI72sAHZu Augn90pmqQepVvJfFdBGuaWP/e4= -----END CERTIFICATE-----Generated at Mon Jul 21 05:55:29 2025 by rpki-client