$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa File: C4928820F06C11EC91459B5CC4F9AE02.roa (raw, json) Hash identifier: UN/nfQHhGfzyZRq2W+uh9scaawp6d2w2Zs3dhUguHjk= Subject key identifier: 57:02:D3:39:34:46:EE:E0:06:8B:A1:52:44:34:7F:2F:A0:54:61:0E Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Certificate serial: 02EC Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa Signing time: Mon 07 Jul 2025 02:07:31 +0000 ROA not before: Mon 07 Jul 2025 02:07:31 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140646 IP address blocks: 103.189.212.0/23 maxlen: 23 103.189.212.0/24 maxlen: 24 103.189.213.0/24 maxlen: 24 2400:88e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Validity Not Before: Jul 7 02:07:31 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=686b2be3-e642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:90:dd:48:70:ea:10:49:bb:e2:f8:38:54: 3a:eb:64:72:53:fc:06:cc:31:b6:4e:e3:09:a3:01: 47:05:95:a1:ad:11:64:b8:d7:48:c6:9e:e1:d2:34: f1:93:3d:46:d1:07:c5:e7:a6:6e:ad:0b:c0:90:fd: 6c:a9:71:54:f2:03:59:60:55:30:d3:b2:8d:40:c0: 8d:2e:44:96:bb:e1:70:ca:d2:8d:4f:76:ed:00:d2: 97:8f:81:65:69:bb:39:58:d8:c0:b8:f4:02:61:c7: dd:b3:26:bf:66:6d:36:ea:d4:e1:f1:a1:40:da:6a: 8d:a6:26:4e:c3:d8:d4:3e:1d:5e:ed:59:fc:77:25: 31:42:03:a2:13:ae:f2:33:e0:a3:77:57:3c:b1:d2: 3f:8f:86:01:c0:6a:b2:4e:57:ab:6a:ee:4b:b0:da: a2:40:12:24:b1:e8:27:f2:f3:94:df:4e:89:4e:63: e7:e4:9d:6f:73:0d:51:34:f3:36:c4:2f:0a:96:74: 74:f8:62:c7:ff:c8:17:5d:ea:9b:04:cc:56:6f:30: 6f:8e:d5:37:b9:1f:c6:a3:2f:fd:63:33:f5:80:bf: 2c:6f:21:44:25:14:43:56:95:e0:2b:7a:b3:49:60: f4:8c:28:10:06:7c:7e:e6:2f:38:1e:40:fe:82:ca: 7a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:02:D3:39:34:46:EE:E0:06:8B:A1:52:44:34:7F:2F:A0:54:61:0E X509v3 Authority Key Identifier: keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/C4928820F06C11EC91459B5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.212.0/23 IPv6: 2400:88e0::/32 Signature Algorithm: sha256WithRSAEncryption 8d:3e:dc:06:7f:1b:67:93:46:19:e5:d5:d7:f5:23:7c:f0:59: 98:bd:c8:9b:8c:62:c4:75:73:ae:ff:12:6d:c2:66:71:a4:7e: e9:05:9d:eb:71:b2:b7:7d:06:5e:45:6e:b1:13:c9:5f:42:6f: 21:47:02:5c:6d:a2:cc:da:8b:2b:d9:9f:bf:e3:05:28:93:fc: df:1f:76:f8:ae:b4:40:61:c2:cb:ba:90:f0:4c:9a:36:20:7d: c3:cb:9d:b6:5a:5c:88:06:de:a7:00:a4:de:d9:7c:d5:b1:06: 87:4f:2e:ca:3c:a6:e2:a5:ce:c4:28:9e:74:60:aa:95:27:fe: d0:bb:45:63:95:2a:6c:0f:ae:cd:28:28:13:68:da:d8:d2:d5: b5:e3:ae:3d:25:94:ca:21:53:b4:d5:82:5c:82:2d:5d:2a:31: 18:1d:05:4d:68:6e:5d:a8:86:82:24:ef:ce:cf:3d:a2:bc:18: c8:c0:67:29:d3:89:1f:6f:e6:b2:90:bc:e8:6a:df:39:31:20: 70:84:72:f3:87:dc:7a:a1:5d:1d:d7:a9:46:e5:08:ea:d9:d6: d8:f0:1f:41:f2:63:73:1d:6f:3f:3e:f6:0d:60:85:2c:c6:12: eb:84:d1:02:9b:1f:df:07:ef:af:e8:ae:76:b1:c4:4b:ac:29: be:ef:d7:92 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx QzgxMzJERjEwHhcNMjUwNzA3MDIwNzMxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZiMmJlMy1lNjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI6Q3Uhw6hBJu+L4OFQ662RyU/wGzDG2TuMJowFHBZWhrRFkuNdIxp7h0jTx kz1G0QfF56ZurQvAkP1sqXFU8gNZYFUw07KNQMCNLkSWu+FwytKNT3btANKXj4Fl abs5WNjAuPQCYcfdsya/Zm026tTh8aFA2mqNpiZOw9jUPh1e7Vn8dyUxQgOiE67y M+Cjd1c8sdI/j4YBwGqyTlerau5LsNqiQBIksegn8vOU306JTmPn5J1vcw1RNPM2 xC8KlnR0+GLH/8gXXeqbBMxWbzBvjtU3uR/Goy/9YzP1gL8sbyFEJRRDVpXgK3qz SWD0jCgQBnx+5i84HkD+gsp6YwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFcC0zk0 Ru7gBouhUkQ0fy+gVGEOMB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTEwM0YvRjhCNEJDRENGMDY2MTFFQ0E1NEMzNzQyQzRGOUFFMDIvQzQ5Mjg4MjBG MDZDMTFFQzkxNDU5QjVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnvdQwDQQCAAIwBwMFACQAiOAwDQYJKoZIhvcNAQELBQAD ggEBAI0+3AZ/G2eTRhnl1df1I3zwWZi9yJuMYsR1c67/Em3CZnGkfukFnetxsrd9 Bl5FbrETyV9CbyFHAlxtoszaiyvZn7/jBSiT/N8fdviutEBhwsu6kPBMmjYgfcPL nbZaXIgG3qcApN7ZfNWxBodPLso8puKlzsQonnRgqpUn/tC7RWOVKmwPrs0oKBNo 2tjS1bXjrj0llMohU7TVglyCLV0qMRgdBU1obl2ohoIk787PPaK8GMjAZynTiR9v 5rKQvOhq3zkxIHCEcvOH3HqhXR3XqUblCOrZ1tjwH0HyY3Mdbz8+9g1ghSzGEuuE 0QKbH98H76/ornaxxEusKb7v15I= -----END CERTIFICATE-----Generated at Mon Jul 21 12:43:34 2025 by rpki-client