$ rpki-client -vvf rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/4472E7B85B6011F0A2E8311CC4F9AE02.roa File: 4472E7B85B6011F0A2E8311CC4F9AE02.roa (raw, json) Hash identifier: T5/KdpDeKUQiXnSS9T8mbCWPeI35IszMHYXsXr691fk= Subject key identifier: 8A:4D:E2:A9:9D:7D:12:24:D1:C3:DE:26:4E:4D:A5:0A:8C:19:F2:1E Certificate issuer: /CN=A91618BC/serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Certificate serial: 04DB Authority key identifier: 1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/4472E7B85B6011F0A2E8311CC4F9AE02.roa Signing time: Mon 07 Jul 2025 18:29:07 +0000 ROA not before: Mon 07 Jul 2025 18:29:07 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 197537 IP address blocks: 103.168.154.0/24 maxlen: 24 103.168.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1243 (0x4db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618BC, serialNumber=1AEBCD82D7028343B745AD406739CDB92D4DFB77 Validity Not Before: Jul 7 18:29:07 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=686c11f3-96c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:5a:1a:29:ba:5b:44:a1:08:59:c0:33:f1:81: 82:b1:e5:cc:39:9b:a4:ef:32:22:7e:64:35:cf:95: 93:77:6d:21:88:58:27:0f:9d:0f:18:42:0a:f7:92: bd:36:04:35:aa:6c:0c:8d:55:e1:60:fa:b8:01:dc: 48:d9:27:dd:f2:34:30:d7:28:81:b1:27:06:09:b4: d5:b2:23:63:6d:dc:e5:32:b0:d7:00:3a:81:de:06: ca:c6:6c:e4:88:58:a8:0b:84:5f:29:85:45:0e:9e: 4d:91:f3:3d:57:a6:e2:95:6f:96:8c:81:ca:22:23: 9d:76:27:82:a2:c9:5f:50:90:18:ac:2d:25:39:2e: c8:9b:fd:f6:8e:fe:ed:6f:67:54:0c:5a:94:89:8b: 14:1a:85:cb:a0:0a:20:5b:41:1f:14:15:55:31:4f: a3:89:c0:c7:1f:b0:64:0e:73:a4:53:40:eb:62:95: 58:24:d8:77:e2:1a:c4:d1:7d:ab:97:43:98:57:98: 7e:b1:ca:e7:39:89:d4:3e:e8:9c:89:bd:77:8b:be: 67:86:56:2e:7f:da:19:2a:a6:70:d2:a2:c7:6b:22: 46:9b:43:9a:ec:31:de:10:1c:49:5a:4d:37:21:2c: df:03:d5:d3:ef:a5:cb:7b:2c:9e:02:5f:fc:3d:59: be:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4D:E2:A9:9D:7D:12:24:D1:C3:DE:26:4E:4D:A5:0A:8C:19:F2:1E X509v3 Authority Key Identifier: keyid:1A:EB:CD:82:D7:02:83:43:B7:45:AD:40:67:39:CD:B9:2D:4D:FB:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/GuvNgtcCg0O3Ra1AZznNuS1N-3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuvNgtcCg0O3Ra1AZznNuS1N-3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618BC/ED7B62AC5D8711EC9C1D702CC4F9AE02/4472E7B85B6011F0A2E8311CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.154.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:c8:93:87:b4:0d:6b:7d:b6:e4:bc:34:bb:0c:fd:33:9f:45: 94:a3:b7:1b:ed:34:a9:c6:b5:ff:47:7c:ac:d7:d2:5b:9c:4b: 86:f8:53:ac:27:58:2d:3b:d9:22:05:95:10:b8:38:7d:22:6d: 2e:a6:5e:ae:fa:c6:65:9b:3f:fc:1f:59:2e:8f:3b:3d:e5:f0: 9d:84:a9:71:44:c7:be:d7:1c:11:87:a3:95:9e:b1:a7:80:a1: 93:31:5d:9a:86:c9:dd:e3:e8:5b:08:43:11:ac:a6:7a:25:da: 78:f5:63:b3:2c:3a:b5:5e:ee:a5:81:88:d6:dd:62:9b:7d:b9: f7:40:bd:65:35:b7:f8:12:95:1e:f0:c4:65:48:f6:69:5f:65: c0:f7:21:f7:33:57:31:ae:9e:1f:ec:40:ea:1a:9e:1c:b6:f6: ea:b6:13:b4:74:9c:08:13:11:56:12:63:db:81:27:57:65:78: 59:f0:be:ef:53:f9:96:41:06:50:6b:d8:c3:f6:e5:ef:f7:c5: 6c:a3:17:a0:a1:dd:91:b6:b1:a7:39:07:46:45:2c:6f:73:b6: 4f:40:9e:39:04:4b:d2:8e:ad:0f:4e:97:49:4c:47:87:3d:e7: db:31:9d:4b:67:53:92:df:89:8a:a7:69:17:1b:2b:56:d0:11: 8f:f4:e2:46 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4QkMxMTAvBgNVBAUTKDFBRUJDRDgyRDcwMjgzNDNCNzQ1QUQ0MDY3MzlDREI5 MkQ0REZCNzcwHhcNMjUwNzA3MTgyOTA3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZjMTFmMy05NmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9FoaKbpbRKEIWcAz8YGCseXMOZuk7zIifmQ1z5WTd20hiFgnD50PGEIK95K9 NgQ1qmwMjVXhYPq4AdxI2Sfd8jQw1yiBsScGCbTVsiNjbdzlMrDXADqB3gbKxmzk iFioC4RfKYVFDp5NkfM9V6bilW+WjIHKIiOddieCoslfUJAYrC0lOS7Im/32jv7t b2dUDFqUiYsUGoXLoAogW0EfFBVVMU+jicDHH7BkDnOkU0DrYpVYJNh34hrE0X2r l0OYV5h+scrnOYnUPuicib13i75nhlYuf9oZKqZw0qLHayJGm0Oa7DHeEBxJWk03 ISzfA9XT76XLeyyeAl/8PVm+kQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIpN4qmd fRIk0cPeJk5NpQqMGfIeMB8GA1UdIwQYMBaAFBrrzYLXAoNDt0WtQGc5zbktTft3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThCQy9FRDdCNjJBQzVE ODcxMUVDOUMxRDcwMkNDNEY5QUUwMi9HdXZOZ3RjQ2cwTzNSYTFBWnpuTnVTMU4t M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d1dk5ndGNDZzBPM1JhMUFaem5OdVMxTi0zYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjE4QkMvRUQ3QjYyQUM1RDg3MTFFQzlDMUQ3MDJDQzRGOUFFMDIvNDQ3MkU3Qjg1 QjYwMTFGMEEyRTgzMTFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnqJowDQYJKoZIhvcNAQELBQADggEBAB3Ik4e0DWt9tuS8 NLsM/TOfRZSjtxvtNKnGtf9HfKzX0lucS4b4U6wnWC072SIFlRC4OH0ibS6mXq76 xmWbP/wfWS6POz3l8J2EqXFEx77XHBGHo5WesaeAoZMxXZqGyd3j6FsIQxGspnol 2nj1Y7MsOrVe7qWBiNbdYpt9ufdAvWU1t/gSlR7wxGVI9mlfZcD3IfczVzGunh/s QOoanhy29uq2E7R0nAgTEVYSY9uBJ1dleFnwvu9T+ZZBBlBr2MP25e/3xWyjF6Ch 3ZG2sac5B0ZFLG9ztk9AnjkES9KOrQ9Ol0lMR4c959sxnUtnU5LfiYqnaRcbK1bQ EY/04kY= -----END CERTIFICATE-----Generated at Sun Jul 20 16:31:54 2025 by rpki-client