$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3105D04777E11EFB3F75352C4F9AE02.roa File: E3105D04777E11EFB3F75352C4F9AE02.roa (raw, json) Hash identifier: cAiqdNWzTF0sxkzvHv6yM/PcMz/pHk5XzQwUuq8wOgo= Subject key identifier: 85:C2:CF:55:54:A6:24:67:D6:23:4E:AD:35:11:F4:AB:E6:99:B7:83 Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Certificate serial: AD Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3105D04777E11EFB3F75352C4F9AE02.roa Signing time: Wed 09 Jul 2025 07:43:17 +0000 ROA not before: Wed 09 Jul 2025 07:43:17 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 59253 IP address blocks: 103.64.18.0/24 maxlen: 24 103.64.19.0/24 maxlen: 24 2405:a280:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Validity Not Before: Jul 9 07:43:17 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=686e1d95-1b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ef:83:12:4e:56:e7:f6:bc:02:58:ee:65:15: 2d:a7:6a:fb:ba:d7:5f:0b:5f:9f:c2:f8:c1:67:9e: 34:bc:58:89:10:24:f8:d7:b7:3b:1b:ba:d6:3c:cf: 1b:b9:ba:2d:94:72:f9:20:c5:96:30:ea:b0:a0:c0: ee:1a:70:40:32:a0:7c:a7:75:ae:c3:f2:65:e9:08: 57:c7:6d:16:f1:99:20:cd:ff:2c:6d:e8:60:3d:45: 0b:76:f1:a8:d3:7c:ee:a3:79:1e:4d:c1:f0:46:b0: de:00:70:af:f7:02:b6:f0:62:ed:f5:e3:f2:4b:a4: 0a:6c:a1:a1:e1:99:15:4f:e4:02:52:68:2d:7a:72: 8c:9b:35:bc:a8:7b:e3:9d:d5:90:52:7b:3e:12:23: a6:d5:2e:24:36:b3:d9:b3:7e:9c:62:c7:ac:ea:d7: 8b:52:af:96:c6:80:d0:88:60:08:38:2a:1f:9a:24: 24:01:b6:fe:06:83:c6:4e:0b:21:fd:a1:04:61:b4: b7:93:cf:e1:45:0e:8e:7f:7d:3c:16:d2:72:ff:6e: b5:bb:c7:38:4f:3a:bf:83:11:ce:a3:b7:4c:e0:8e: 86:45:71:af:3f:e6:84:28:b1:64:c9:0b:b3:3b:ab: 95:92:77:a7:02:f1:a7:00:a7:e6:df:1d:96:4d:48: d4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C2:CF:55:54:A6:24:67:D6:23:4E:AD:35:11:F4:AB:E6:99:B7:83 X509v3 Authority Key Identifier: keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3105D04777E11EFB3F75352C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.64.18.0/23 IPv6: 2405:a280:22::/48 Signature Algorithm: sha256WithRSAEncryption 70:e5:0f:ef:20:18:0e:91:0c:b5:74:31:5e:62:53:d4:e9:c2: fa:02:f3:62:ff:97:df:43:d2:34:8d:a2:bb:28:50:cf:3a:3e: d8:83:b9:66:fc:e9:e4:d9:c3:23:92:f4:bc:5f:f4:3b:4b:b9: e8:18:7e:ec:a8:05:90:e5:b1:b1:f4:c3:26:35:a2:b9:8a:9d: a6:f1:09:24:f3:61:32:c4:e5:9f:e9:8c:85:ca:1c:90:4b:52: e5:b3:61:f5:55:9a:ff:84:a0:ac:3d:0c:7a:4a:f7:4a:c5:c3: 44:c2:c0:da:68:c6:dd:0b:df:26:00:0b:df:6a:f9:8f:61:9d: aa:e0:c2:1c:ac:2d:02:26:e0:13:8b:e2:71:58:b5:8b:ee:fd: 86:2c:ed:10:a1:1e:98:a5:79:c8:ce:05:4e:52:79:4e:3b:50: 1b:72:17:5a:5d:32:a1:fd:38:c5:11:16:32:e4:1b:50:22:6b: 1f:49:5f:5f:9d:9e:16:64:bd:b4:1b:16:83:d5:b6:6f:7b:0d: 71:9a:15:e6:b4:00:1a:d1:86:53:f6:95:47:62:da:e6:f5:fd: ac:03:2f:7d:af:5a:b1:42:fa:44:f8:3b:d7:ec:19:ea:dc:2a: 7f:5b:49:5a:d7:e1:3d:91:d4:0c:58:93:ba:9c:9d:6f:1c:f8: 6f:9f:64:06 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5MkMxMTAvBgNVBAUTKDgxN0REMzgwMkYyNkU1N0VDRTgyNjVDRTg2MjZGQ0JC OUM2NEU5RDQwHhcNMjUwNzA5MDc0MzE3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZlMWQ5NS0xYjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoe+DEk5W5/a8AljuZRUtp2r7utdfC1+fwvjBZ540vFiJECT417c7G7rWPM8b ubotlHL5IMWWMOqwoMDuGnBAMqB8p3Wuw/Jl6QhXx20W8Zkgzf8sbehgPUULdvGo 03zuo3keTcHwRrDeAHCv9wK28GLt9ePyS6QKbKGh4ZkVT+QCUmgtenKMmzW8qHvj ndWQUns+EiOm1S4kNrPZs36cYses6teLUq+WxoDQiGAIOCofmiQkAbb+BoPGTgsh /aEEYbS3k8/hRQ6Of308FtJy/261u8c4Tzq/gxHOo7dM4I6GRXGvP+aEKLFkyQuz O6uVknenAvGnAKfm3x2WTUjUkQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIXCz1VU piRn1iNOrTUR9KvmmbeDMB8GA1UdIwQYMBaAFIF904AvJuV+zoJlzoYm/LucZOnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDkyQy9FMkMwNzdERTc3 NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVYN09nbVhPaGliOHU1eGs2 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dYM1RnQzhtNVg3T2dtWE9oaWI4dTV4azZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA5MkMvRTJDMDc3REU3NzY2MTFFRkI1NUVEMjc5QzRGOUFFMDIvRTMxMDVEMDQ3 NzdFMTFFRkIzRjc1MzUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnQBIwDwQCAAIwCQMHACQFooAAIjANBgkqhkiG9w0BAQsF AAOCAQEAcOUP7yAYDpEMtXQxXmJT1OnC+gLzYv+X30PSNI2iuyhQzzo+2IO5Zvzp 5NnDI5L0vF/0O0u56Bh+7KgFkOWxsfTDJjWiuYqdpvEJJPNhMsTln+mMhcockEtS 5bNh9VWa/4SgrD0Mekr3SsXDRMLA2mjG3QvfJgAL32r5j2GdquDCHKwtAibgE4vi cVi1i+79hiztEKEemKV5yM4FTlJ5TjtQG3IXWl0yof04xREWMuQbUCJrH0lfX52e FmS9tBsWg9W2b3sNcZoV5rQAGtGGU/aVR2La5vX9rAMvfa9asUL6RPg71+wZ6twq f1tJWtfhPZHUDFiTupydbxz4b59kBg== -----END CERTIFICATE-----Generated at Sun Jul 20 14:06:39 2025 by rpki-client