$ rpki-client -vvf rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/81FC4E285E4211F086D4C383C4F9AE02.roa File: 81FC4E285E4211F086D4C383C4F9AE02.roa (raw, json) Hash identifier: Mf2+h64oIkKVCrmHAT8VYLEu5usAeOj24IncTZPlL1A= Subject key identifier: 6F:C2:56:16:88:63:1B:90:B1:E7:DE:07:A7:CB:6F:28:DA:A7:E0:2D Certificate issuer: /CN=A917638D/serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6 Certificate serial: 097C Authority key identifier: F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/81FC4E285E4211F086D4C383C4F9AE02.roa Signing time: Wed 16 Jul 2025 20:36:33 +0000 ROA not before: Wed 16 Jul 2025 20:36:33 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 140594 IP address blocks: 103.150.206.0/23 maxlen: 23 103.150.206.0/24 maxlen: 24 103.150.207.0/24 maxlen: 24 2001:df3:8a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2428 (0x97c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917638D, serialNumber=F0E766FB319224823CA79D36720C51EDFCADCFE6 Validity Not Before: Jul 16 20:36:33 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68780d51-4104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c3:73:8e:06:f5:54:19:0d:87:33:58:d1:70: a6:0b:1f:22:bb:ab:c0:e0:18:97:53:54:64:eb:17: dc:65:62:f2:a1:57:d6:85:b9:45:1e:21:23:00:89: 74:61:d9:dc:d1:b2:47:dd:fc:e7:4f:b0:6f:9a:df: 2a:2f:8d:78:db:c7:de:70:34:6a:87:d5:fc:fc:ab: e3:28:ca:c2:f4:a2:4d:e4:1d:95:b0:de:e7:b9:40: ae:f5:16:12:b7:2c:fb:4f:f4:d5:87:4b:c0:d4:a2: 12:ae:8b:bd:26:bb:10:e3:e0:3d:a6:0e:98:19:58: 76:73:af:b7:40:a6:33:d0:09:fe:2f:de:02:37:04: d4:41:b4:20:42:25:0a:3b:e8:a9:47:1a:ee:49:d0: 0c:aa:01:17:a3:18:cb:62:f4:57:bd:b2:88:0d:ec: ba:7c:93:e3:3d:90:65:15:b0:61:e9:9c:51:bc:45: fc:77:72:90:fa:81:96:59:eb:58:a4:19:3a:f2:29: 6f:8e:57:f1:dd:42:c4:66:af:81:d2:54:01:26:d7: f9:08:14:d3:17:2a:ea:da:1f:b1:0f:95:f4:bf:ee: e8:a8:97:66:53:25:b3:fa:92:0a:30:69:b4:ba:d2: 95:c1:07:c1:17:47:64:a4:22:d1:7c:00:7d:50:29: 40:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C2:56:16:88:63:1B:90:B1:E7:DE:07:A7:CB:6F:28:DA:A7:E0:2D X509v3 Authority Key Identifier: keyid:F0:E7:66:FB:31:92:24:82:3C:A7:9D:36:72:0C:51:ED:FC:AD:CF:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/8Odm-zGSJII8p502cgxR7fytz-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Odm-zGSJII8p502cgxR7fytz-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917638D/0259B61E97B511EA99475A6DC4F9AE02/81FC4E285E4211F086D4C383C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.206.0/23 IPv6: 2001:df3:8a80::/48 Signature Algorithm: sha256WithRSAEncryption 03:48:d5:27:91:ad:f6:fa:4f:47:37:7c:20:bf:1f:5b:86:ee: f4:ea:7a:50:9c:bf:60:58:95:10:f9:01:af:01:b1:37:23:98: 4d:fa:77:de:76:93:4e:43:13:f1:8d:28:95:a1:57:17:e2:02: dc:cb:9f:b5:a4:44:53:e1:68:aa:1c:5b:28:40:a6:ff:45:c5: b0:df:d7:b3:0d:63:e4:7c:5a:67:d9:82:bc:44:48:a8:82:17: 94:24:b9:41:d8:5b:2a:01:1e:7c:60:27:e8:f4:4e:e1:ac:50: 87:0e:d7:a3:5c:85:e3:4f:2f:e4:87:d4:62:8b:fd:69:19:c2: cc:c0:bd:42:b7:d7:09:8b:4b:d3:7a:4d:ae:bb:39:2b:29:d9: 42:fb:05:2c:88:73:3e:6b:54:11:4c:21:e0:1a:a0:97:4d:f2: 75:42:fc:5d:85:c1:4d:ce:29:7a:a4:80:cc:10:d2:5f:53:fb: 5a:2b:ce:65:64:bc:d5:56:04:87:7e:08:1e:93:98:cf:3e:95: d9:19:dd:71:9b:fd:57:49:63:62:94:a4:be:4c:58:e7:2c:74: 85:c2:f2:b8:1a:d0:5a:91:22:6c:7b:20:d0:21:31:92:0f:2c: 28:75:a1:80:df:0f:b9:9f:32:c2:fb:7f:04:9c:75:11:1d:7e: d7:1c:47:ed -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYzOEQxMTAvBgNVBAUTKEYwRTc2NkZCMzE5MjI0ODIzQ0E3OUQzNjcyMEM1MUVE RkNBRENGRTYwHhcNMjUwNzE2MjAzNjMzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc4MGQ1MS00MTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMNzjgb1VBkNhzNY0XCmCx8iu6vA4BiXU1Rk6xfcZWLyoVfWhblFHiEjAIl0 Ydnc0bJH3fznT7Bvmt8qL41428fecDRqh9X8/KvjKMrC9KJN5B2VsN7nuUCu9RYS tyz7T/TVh0vA1KISrou9JrsQ4+A9pg6YGVh2c6+3QKYz0An+L94CNwTUQbQgQiUK O+ipRxruSdAMqgEXoxjLYvRXvbKIDey6fJPjPZBlFbBh6ZxRvEX8d3KQ+oGWWetY pBk68ilvjlfx3ULEZq+B0lQBJtf5CBTTFyrq2h+xD5X0v+7oqJdmUyWz+pIKMGm0 utKVwQfBF0dkpCLRfAB9UClAkwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFG/CVhaI YxuQsefeB6fLbyjap+AtMB8GA1UdIwQYMBaAFPDnZvsxkiSCPKedNnIMUe38rc/m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjM4RC8wMjU5QjYxRTk3 QjUxMUVBOTk0NzVBNkRDNEY5QUUwMi84T2RtLXpHU0pJSThwNTAyY2d4UjdmeXR6 LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhPZG0tekdTSklJOHA1MDJjZ3hSN2Z5dHotWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzYzOEQvMDI1OUI2MUU5N0I1MTFFQTk5NDc1QTZEQzRGOUFFMDIvODFGQzRFMjg1 RTQyMTFGMDg2RDRDMzgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnls4wDwQCAAIwCQMHACABDfOKgDANBgkqhkiG9w0BAQsF AAOCAQEAA0jVJ5Gt9vpPRzd8IL8fW4bu9Op6UJy/YFiVEPkBrwGxNyOYTfp33naT TkMT8Y0olaFXF+IC3MuftaREU+FoqhxbKECm/0XFsN/Xsw1j5HxaZ9mCvERIqIIX lCS5QdhbKgEefGAn6PRO4axQhw7Xo1yF408v5IfUYov9aRnCzMC9QrfXCYtL03pN rrs5KynZQvsFLIhzPmtUEUwh4Bqgl03ydUL8XYXBTc4peqSAzBDSX1P7WivOZWS8 1VYEh34IHpOYzz6V2RndcZv9V0ljYpSkvkxY5yx0hcLyuBrQWpEibHsg0CExkg8s KHWhgN8PuZ8ywvt/BJx1ER1+1xxH7Q== -----END CERTIFICATE-----Generated at Sun Jul 20 07:48:23 2025 by rpki-client