$ rpki-client -vvf rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/48E696FE9ED611ECAC3B1777C4F9AE02.roa File: 48E696FE9ED611ECAC3B1777C4F9AE02.roa (raw, json) Hash identifier: ZP8ElmGfPMLtflDNufeuYkV4RrUXM2kvIdWmHBB6yMQ= Subject key identifier: 32:D7:E9:44:F8:7B:61:1D:3E:5A:E8:61:2E:C0:5F:2C:00:A5:05:91 Certificate issuer: /CN=A918235E/serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Certificate serial: 03AC Authority key identifier: AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/48E696FE9ED611ECAC3B1777C4F9AE02.roa Signing time: Sat 05 Jul 2025 01:38:39 +0000 ROA not before: Sat 05 Jul 2025 01:38:39 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 63984 IP address blocks: 103.57.151.0/24 maxlen: 24 103.68.104.0/24 maxlen: 24 103.204.82.0/23 maxlen: 23 103.204.82.0/24 maxlen: 24 103.204.83.0/24 maxlen: 24 2400:6120::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 940 (0x3ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918235E, serialNumber=AAEFDCA925DAC98FDAD18C857F9F1DE586A051B6 Validity Not Before: Jul 5 01:38:39 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6868821f-5bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:e8:b5:7a:e4:ea:2e:2d:9a:22:f7:b6:e0: 10:3b:87:15:4a:2a:2e:74:35:9d:c8:7a:26:b7:a0: ce:a2:2e:75:c0:2a:a9:5c:83:a0:38:18:b8:72:7a: 1c:1e:b5:06:f4:7f:de:00:d1:af:c6:73:a7:57:88: 27:55:65:3a:15:f5:8e:69:c8:f9:c5:35:02:61:a7: cb:a8:cc:ee:fd:53:75:a5:b8:99:71:68:14:c6:11: b9:99:bc:f1:54:ca:bd:05:ce:84:02:68:f6:0b:20: 9d:b3:17:ab:5f:52:84:a2:f2:8d:41:0f:c9:36:9a: 65:94:66:74:44:bd:49:ad:f9:ae:23:80:fe:15:06: 59:4d:5e:58:9b:df:24:b7:94:21:f6:c1:0f:a9:3d: 67:12:88:19:cf:29:ba:1c:1a:17:42:71:f8:fa:6e: bf:64:df:12:6e:40:4e:ee:e5:79:a0:e8:46:65:5b: 2d:15:5d:0f:7c:5a:c8:a7:ea:25:b3:08:c0:21:74: 71:f3:46:0c:31:0f:3f:18:c6:c9:57:fa:8e:31:0e: 3b:cd:b0:ab:8d:76:ca:72:19:7d:44:e4:72:9a:6e: 98:67:32:6c:5c:9e:00:b1:0c:5e:65:8d:c8:38:0b: 6e:21:9e:b7:b2:91:83:d8:1b:f9:0c:a3:b2:ac:37: eb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D7:E9:44:F8:7B:61:1D:3E:5A:E8:61:2E:C0:5F:2C:00:A5:05:91 X509v3 Authority Key Identifier: keyid:AA:EF:DC:A9:25:DA:C9:8F:DA:D1:8C:85:7F:9F:1D:E5:86:A0:51:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/qu_cqSXayY_a0YyFf58d5YagUbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qu_cqSXayY_a0YyFf58d5YagUbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918235E/9690EE0C9ED311EC8F48B974C4F9AE02/48E696FE9ED611ECAC3B1777C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.57.151.0/24 103.68.104.0/24 103.204.82.0/23 IPv6: 2400:6120::/32 Signature Algorithm: sha256WithRSAEncryption 07:57:32:ce:08:94:37:08:c4:8e:19:48:71:83:76:77:8b:1e: 41:e2:7e:21:c9:29:29:f2:fe:9a:68:a1:1c:4d:f5:bf:3c:01: a2:ab:82:28:70:33:57:1c:61:91:6e:e3:f7:45:71:02:c8:64: ce:df:cf:8e:3c:57:ef:4a:71:98:2e:d6:7b:39:46:de:65:53: 0e:69:ef:49:5a:52:3d:a5:e7:86:23:eb:ac:78:28:13:5a:21: 96:6d:9d:a5:d6:ae:42:47:65:a0:5c:1d:f2:ed:d4:15:55:f7: 7c:58:aa:87:b8:ec:7f:07:b1:54:45:d7:83:ec:0c:a5:0d:32: c5:46:fe:79:bf:65:73:9a:ac:23:39:83:08:f6:13:a2:25:8d: de:d4:ce:69:84:cc:b1:02:d2:84:d7:1e:a6:c3:a0:56:c0:3b: bf:05:9b:e2:66:a7:d6:51:6f:09:ba:f2:9d:7f:50:c7:8e:2c: 88:fa:7b:15:73:15:5e:95:40:f0:19:76:9c:35:a5:87:de:d6: 4c:8a:bb:1e:ea:27:1b:c9:83:0d:9b:81:25:23:d8:0d:8a:56: 68:78:d5:6a:7d:65:06:79:59:9b:1d:c4:b2:ae:8e:bd:3c:17: 96:26:a5:37:4d:b4:4e:a6:29:a5:48:a9:f0:d9:22:67:1f:96: 65:f5:a6:09 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICA6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIzNUUxMTAvBgNVBAUTKEFBRUZEQ0E5MjVEQUM5OEZEQUQxOEM4NTdGOUYxREU1 ODZBMDUxQjYwHhcNMjUwNzA1MDEzODM5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4ODIxZi01YmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0LotXrk6i4tmiL3tuAQO4cVSioudDWdyHomt6DOoi51wCqpXIOgOBi4cnoc HrUG9H/eANGvxnOnV4gnVWU6FfWOacj5xTUCYafLqMzu/VN1pbiZcWgUxhG5mbzx VMq9Bc6EAmj2CyCdsxerX1KEovKNQQ/JNppllGZ0RL1JrfmuI4D+FQZZTV5Ym98k t5Qh9sEPqT1nEogZzym6HBoXQnH4+m6/ZN8SbkBO7uV5oOhGZVstFV0PfFrIp+ol swjAIXRx80YMMQ8/GMbJV/qOMQ47zbCrjXbKchl9RORymm6YZzJsXJ4AsQxeZY3I OAtuIZ63spGD2Bv5DKOyrDfr1wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFDLX6UT4 e2EdPlroYS7AXywApQWRMB8GA1UdIwQYMBaAFKrv3Kkl2smP2tGMhX+fHeWGoFG2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjM1RS85NjkwRUUwQzlF RDMxMUVDOEY0OEI5NzRDNEY5QUUwMi9xdV9jcVNYYXlZX2EwWXlGZjU4ZDVZYWdV YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F1X2NxU1hheVlfYTBZeUZmNThkNVlhZ1ViWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODIzNUUvOTY5MEVFMEM5RUQzMTFFQzhGNDhCOTc0QzRGOUFFMDIvNDhFNjk2RkU5 RUQ2MTFFQ0FDM0IxNzc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBABnOZcDBABnRGgDBAFnzFIwDQQCAAIwBwMFACQAYSAwDQYJ KoZIhvcNAQELBQADggEBAAdXMs4IlDcIxI4ZSHGDdneLHkHifiHJKSny/ppooRxN 9b88AaKrgihwM1ccYZFu4/dFcQLIZM7fz448V+9KcZgu1ns5Rt5lUw5p70laUj2l 54Yj66x4KBNaIZZtnaXWrkJHZaBcHfLt1BVV93xYqoe47H8HsVRF14PsDKUNMsVG /nm/ZXOarCM5gwj2E6Iljd7UzmmEzLEC0oTXHqbDoFbAO78Fm+Jmp9ZRbwm68p1/ UMeOLIj6exVzFV6VQPAZdpw1pYfe1kyKux7qJxvJgw2bgSUj2A2KVmh41Wp9ZQZ5 WZsdxLKujr08F5YmpTdNtE6mKaVIqfDZImcflmX1pgk= -----END CERTIFICATE-----Generated at Sun Jul 20 07:45:07 2025 by rpki-client