$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/682214D6505711F08AA6EA60C4F9AE02.roa File: 682214D6505711F08AA6EA60C4F9AE02.roa (raw, json) Hash identifier: ztEut1FShAJhALG4KnIlhTD4hI5UiyLdSis1Yu527BQ= Subject key identifier: 91:CE:C7:29:30:6B:14:70:BB:BB:1E:67:0B:4C:85:3D:48:CA:62:8D Certificate issuer: /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A Certificate serial: 197F Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/682214D6505711F08AA6EA60C4F9AE02.roa Signing time: Wed 16 Jul 2025 16:54:49 +0000 ROA not before: Wed 16 Jul 2025 16:54:49 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 132386 IP address blocks: 103.70.250.0/24 maxlen: 24 103.70.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6527 (0x197f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A Validity Not Before: Jul 16 16:54:49 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6877d959-5a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:44:af:b5:3c:ba:13:54:71:fb:ed:69:64:be: 5b:ee:c6:36:2e:a5:f7:4c:c7:d6:91:f7:ce:32:9f: ea:f8:d8:1e:c3:8e:1c:e1:d0:4f:00:11:27:62:13: 44:0d:30:ef:05:29:9b:ec:8f:aa:20:d9:e5:c9:1b: 80:42:3c:43:cf:ea:2f:5a:f3:cb:9b:80:3a:c1:b9: 78:ef:c4:bf:75:f0:4b:eb:91:c8:d9:95:7c:43:41: d7:a8:1d:11:71:23:86:87:3c:99:95:19:a2:8f:ee: 61:0e:07:72:b7:4f:4b:cd:3d:91:8d:10:d2:46:55: 27:bd:9d:fe:ac:b0:ed:c5:28:b1:bf:9c:f6:d1:c3: f2:c4:4c:ea:cd:7e:90:17:71:f7:04:84:1f:8c:49: 62:43:ff:6d:e7:d9:ea:ac:52:58:c6:6f:11:37:05: 0d:89:b0:ec:ee:7f:2d:04:50:18:19:be:a2:fb:f1: e7:c7:56:87:ab:22:e7:c7:c3:42:e7:33:17:60:27: f2:ce:11:77:ad:2a:c9:dc:17:4d:d3:e0:34:44:91: b4:43:74:f7:91:23:15:a8:c8:2f:bb:a0:e6:e2:ce: 71:ea:7e:b2:52:96:ee:38:00:c8:f8:42:af:2b:9c: 79:97:84:1c:03:c6:5e:de:69:61:dd:f5:b4:a8:58: a0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CE:C7:29:30:6B:14:70:BB:BB:1E:67:0B:4C:85:3D:48:CA:62:8D X509v3 Authority Key Identifier: keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/682214D6505711F08AA6EA60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.70.250.0/23 Signature Algorithm: sha256WithRSAEncryption d6:b2:f3:ca:25:54:a2:dc:7c:07:52:06:25:88:71:4a:ad:0d: 7f:5f:8d:7a:62:8b:75:cb:eb:6b:3c:87:e8:98:14:5f:ef:f3: 8c:38:1f:d1:78:96:2f:cc:57:b5:25:50:d9:2c:2e:b7:79:6e: 42:76:0b:02:f6:e5:a4:33:f9:42:1e:17:2b:98:09:fb:df:5b: 7e:16:6b:b3:19:1e:42:9f:42:54:0d:c0:bf:69:62:39:a1:2f: 6e:b7:03:43:98:db:dc:07:7e:08:54:87:5b:fd:14:96:0e:41: e5:05:0d:c6:55:b4:22:46:ad:ac:43:49:51:68:9a:a9:cc:a7: df:5e:31:28:29:2d:89:87:0a:73:4a:0f:47:4b:a3:86:8c:88: e9:1b:ff:a2:4b:d2:da:da:37:21:a4:1a:dd:1f:2d:b3:47:26: f3:d6:0c:e5:3d:b2:75:af:ad:fe:a7:06:bd:0a:10:ec:12:4f: d5:97:fc:0d:03:a0:34:1d:23:9b:9a:4c:67:ba:d6:31:e5:98: 9c:ef:3b:bc:11:d1:61:8e:46:cd:59:78:ac:aa:f0:b1:30:4b: 5a:69:a9:d5:2d:63:68:c3:c6:1f:70:9f:c2:c9:0d:bb:43:cd: 05:0c:23:9b:d1:79:59:0a:b9:dc:86:0f:a6:1c:69:1c:4e:7b: a3:4c:71:c6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMTkxMTAvBgNVBAUTKDZDRkQ1NkE3N0VBRDlFMTU5QkNCMThFQjZERTg2Mjcz NTA5MUI1NEEwHhcNMjUwNzE2MTY1NDQ5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc3ZDk1OS01YTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ESvtTy6E1Rx++1pZL5b7sY2LqX3TMfWkffOMp/q+Ngew44c4dBPABEnYhNE DTDvBSmb7I+qINnlyRuAQjxDz+ovWvPLm4A6wbl478S/dfBL65HI2ZV8Q0HXqB0R cSOGhzyZlRmij+5hDgdyt09LzT2RjRDSRlUnvZ3+rLDtxSixv5z20cPyxEzqzX6Q F3H3BIQfjEliQ/9t59nqrFJYxm8RNwUNibDs7n8tBFAYGb6i+/Hnx1aHqyLnx8NC 5zMXYCfyzhF3rSrJ3BdN0+A0RJG0Q3T3kSMVqMgvu6Dm4s5x6n6yUpbuOADI+EKv K5x5l4QcA8Ze3mlh3fW0qFigYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJHOxykw axRwu7seZwtMhT1IymKNMB8GA1UdIwQYMBaAFGz9Vqd+rZ4Vm8sY623oYnNQkbVK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMxOS84NjhERDY1NjhD MjYxMUU3QkMwNkM0NEVDNEY5QUUwMi9iUDFXcDM2dG5oV2J5eGpyYmVoaWMxQ1J0 VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JQMVdwMzZ0bmhXYnl4anJiZWhpYzFDUnRVby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEUzMTkvODY4REQ2NTY4QzI2MTFFN0JDMDZDNDRFQzRGOUFFMDIvNjgyMjE0RDY1 MDU3MTFGMDhBQTZFQTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnRvowDQYJKoZIhvcNAQELBQADggEBANay88olVKLcfAdS BiWIcUqtDX9fjXpii3XL62s8h+iYFF/v84w4H9F4li/MV7UlUNksLrd5bkJ2CwL2 5aQz+UIeFyuYCfvfW34Wa7MZHkKfQlQNwL9pYjmhL263A0OY29wHfghUh1v9FJYO QeUFDcZVtCJGraxDSVFomqnMp99eMSgpLYmHCnNKD0dLo4aMiOkb/6JL0traNyGk Gt0fLbNHJvPWDOU9snWvrf6nBr0KEOwST9WX/A0DoDQdI5uaTGe61jHlmJzvO7wR 0WGORs1ZeKyq8LEwS1ppqdUtY2jDxh9wn8LJDbtDzQUMI5vReVkKudyGD6YcaRxO e6NMccY= -----END CERTIFICATE-----Generated at Sun Jul 20 09:45:24 2025 by rpki-client