$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa File: 4A0A2DC8958011EE91C9DF80C4F9AE02.roa (raw, json) Hash identifier: bUdGzUMsneNxG9hyE+8dARr88oGYj+0Cl3zzp/qWtdU= Subject key identifier: 5B:7C:D4:C9:D6:66:BC:6E:B8:5B:4A:EF:A7:E2:78:DD:6D:D1:C7:80 Certificate issuer: /CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Certificate serial: 0134 Authority key identifier: 7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa Signing time: Thu 03 Jul 2025 05:09:44 +0000 ROA not before: Thu 03 Jul 2025 05:09:44 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45177 IP address blocks: 103.68.58.0/24 maxlen: 24 103.68.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FD0, serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Validity Not Before: Jul 3 05:09:44 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68661097-7088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:bf:cf:4c:b4:dd:14:3c:c1:ab:78:e7:74: db:79:4e:9a:a3:63:a0:1a:65:d0:51:df:1a:ca:83: 44:76:06:e8:71:08:71:79:fc:b1:da:f9:83:22:41: 60:d7:3d:8b:8b:5b:df:26:67:94:d7:fe:17:70:63: 02:3e:8f:66:7f:0f:fc:dc:d1:84:78:bc:e8:8b:2e: ba:1f:7b:c9:94:b8:4c:4a:89:4a:6a:c8:44:d4:4d: 20:e5:47:70:b4:85:16:32:c4:fe:83:fb:5f:d3:47: 9b:cc:28:e9:4b:12:60:2b:64:22:21:fe:84:13:c8: b9:9a:6d:58:88:af:c4:fb:96:c7:92:d3:3f:1a:05: a4:7a:32:e4:37:0b:5b:f9:b3:63:53:5e:95:9f:3b: 06:ad:87:ad:32:95:75:76:0e:d1:d1:44:36:bf:06: 2d:a9:81:30:b7:e3:15:56:ea:b8:9a:d4:c9:5a:86: 33:7f:56:56:b0:cc:ff:a0:e2:8c:ad:90:93:4a:a2: b8:37:5e:8a:6d:48:14:db:3b:df:3b:71:77:6c:c9: fa:72:a1:a9:96:ca:05:f5:2e:c1:f0:2d:92:6a:e8: 1f:01:7c:a9:47:d6:1c:f2:6a:d6:37:cd:84:da:2e: 17:bd:bc:7f:95:ab:04:86:b9:dc:fb:2b:76:72:5d: 71:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7C:D4:C9:D6:66:BC:6E:B8:5B:4A:EF:A7:E2:78:DD:6D:D1:C7:80 X509v3 Authority Key Identifier: keyid:7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.58.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:f2:69:ce:b5:3a:38:7a:dd:3a:e7:5e:5c:0d:dd:50:1c:de: 26:ca:99:dc:f8:a7:5b:62:a4:47:1c:f7:a0:aa:c9:9a:7f:d0: ac:d7:23:24:6e:07:39:e8:30:8d:f4:8f:df:c7:65:30:48:db: 26:d6:97:59:78:b4:09:71:c3:d0:6e:15:1a:47:20:3e:b8:66: 33:70:63:c1:39:34:89:40:31:23:44:da:46:93:fc:0e:d8:a9: 68:32:a9:68:e5:53:74:5f:c1:e4:07:62:75:3a:07:46:84:26: 21:ae:ac:c6:f0:73:c1:ff:6f:bc:c8:03:74:d6:83:03:a9:78: 68:cd:23:f2:01:71:95:a2:04:4a:8d:5b:8b:37:42:d9:d6:46: 42:6b:33:43:e8:29:cb:82:e4:6f:c0:f0:67:92:4c:bd:47:b2: bc:3f:dc:a3:16:66:4e:43:29:71:70:2b:d3:f9:9f:f7:1b:5a: d5:54:72:b2:a2:95:41:90:28:1c:3f:5d:87:15:77:c5:cc:6d: da:7c:60:0a:6d:3a:3b:04:38:eb:e0:8c:44:c7:5e:63:95:10: 45:6e:68:75:df:05:cd:18:19:1a:63:ec:7e:78:1b:b2:40:9a: f9:80:a4:c8:12:8c:3b:e1:d1:60:b2:e7:7b:93:cc:02:19:4e: 4d:77:90:6f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRDAxMTAvBgNVBAUTKDdBNUM0REQwQTNCQjlDRDgxNEIyMTc0QUY2OTNFM0Y3 NDE0Qjk5NUIwHhcNMjUwNzAzMDUwOTQ0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY2MTA5Ny03MDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjO/z0y03RQ8wat453TbeU6ao2OgGmXQUd8ayoNEdgbocQhxefyx2vmDIkFg 1z2Li1vfJmeU1/4XcGMCPo9mfw/83NGEeLzoiy66H3vJlLhMSolKashE1E0g5Udw tIUWMsT+g/tf00ebzCjpSxJgK2QiIf6EE8i5mm1YiK/E+5bHktM/GgWkejLkNwtb +bNjU16VnzsGrYetMpV1dg7R0UQ2vwYtqYEwt+MVVuq4mtTJWoYzf1ZWsMz/oOKM rZCTSqK4N16KbUgU2zvfO3F3bMn6cqGplsoF9S7B8C2SaugfAXypR9Yc8mrWN82E 2i4Xvbx/lasEhrnc+yt2cl1x6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFFt81MnW ZrxuuFtK76fieN1t0ceAMB8GA1UdIwQYMBaAFHpcTdCju5zYFLIXSvaT4/dBS5lb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZEMC8yQzlBQTMxQzk1 NzYxMUVFODJFRkNCMUNDNEY5QUUwMi9lbHhOMEtPN25OZ1VzaGRLOXBQajkwRkxt VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VseE4wS083bk5nVXNoZEs5cFBqOTBGTG1Wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODJGRDAvMkM5QUEzMUM5NTc2MTFFRTgyRUZDQjFDQzRGOUFFMDIvNEEwQTJEQzg5 NTgwMTFFRTkxQzlERjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnRDowDQYJKoZIhvcNAQELBQADggEBAA/yac61Ojh63Trn XlwN3VAc3ibKmdz4p1tipEcc96CqyZp/0KzXIyRuBznoMI30j9/HZTBI2ybWl1l4 tAlxw9BuFRpHID64ZjNwY8E5NIlAMSNE2kaT/A7YqWgyqWjlU3RfweQHYnU6B0aE JiGurMbwc8H/b7zIA3TWgwOpeGjNI/IBcZWiBEqNW4s3QtnWRkJrM0PoKcuC5G/A 8GeSTL1Hsrw/3KMWZk5DKXFwK9P5n/cbWtVUcrKilUGQKBw/XYcVd8XMbdp8YApt OjsEOOvgjETHXmOVEEVuaHXfBc0YGRpj7H54G7JAmvmApMgSjDvh0WCy53uTzAIZ Tk13kG8= -----END CERTIFICATE-----Generated at Sun Jul 20 22:31:38 2025 by rpki-client