$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/B288EC9C870811F0A371DD81C4F9AE02.roa File: B288EC9C870811F0A371DD81C4F9AE02.roa (raw, json) Hash identifier: cVthiOIDdLWiZzDyUtVlwdbqz40uE9Bzt6WIOO6ykNM= Subject key identifier: 47:01:DF:4A:1B:31:FA:FA:D8:B3:80:A2:DE:26:B9:9E:B0:E5:BB:94 Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Certificate serial: 0244 Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/B288EC9C870811F0A371DD81C4F9AE02.roa Signing time: Mon 01 Sep 2025 07:53:07 +0000 ROA not before: Mon 01 Sep 2025 07:53:07 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 138004 IP address blocks: 103.10.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Validity Not Before: Sep 1 07:53:07 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68b550e3-fd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d0:0f:fc:2f:d6:6d:8c:30:52:a0:b4:7d:35: e0:b6:6d:03:3c:ae:4a:8f:5d:b1:8d:63:e5:3a:b6: fb:34:af:2d:9e:31:94:01:a3:40:72:7b:b0:7c:d0: ae:b3:b3:00:ad:58:36:a8:74:45:48:11:5b:5b:3d: e1:0f:67:6d:47:4e:45:e5:80:a1:5d:16:66:b2:fc: 38:6e:24:57:0a:25:5a:48:82:7e:e6:ef:b9:d0:f8: aa:57:aa:19:f8:d8:f2:33:e3:c0:f8:ad:de:4a:e9: 92:25:a5:07:13:c5:da:02:0d:57:8e:37:74:58:cc: e5:cd:0e:13:6c:b3:b8:62:10:5d:48:29:84:60:85: 01:bb:05:6f:4e:94:cc:22:e2:51:c7:26:f7:7d:51: 9a:27:8a:fa:ec:c4:1b:26:d2:8b:eb:d0:13:df:f6: 30:cf:1e:d6:87:6a:77:63:79:71:81:26:cd:b1:19: df:68:d7:35:e3:2f:4d:6b:e4:db:3c:8f:82:2c:07: dc:43:9d:23:9c:f7:46:7c:e2:8c:c2:bc:19:93:a3: 2d:9e:5b:67:ff:24:73:0c:eb:32:88:25:47:40:cf: 6c:2a:d9:77:b9:5f:3b:3f:63:fe:35:ba:13:32:ef: 58:69:83:78:c2:de:2a:6d:87:52:26:2f:4f:0e:d4: c9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:01:DF:4A:1B:31:FA:FA:D8:B3:80:A2:DE:26:B9:9E:B0:E5:BB:94 X509v3 Authority Key Identifier: keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/B288EC9C870811F0A371DD81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.194.0/24 Signature Algorithm: sha256WithRSAEncryption bb:ac:5e:37:74:23:a1:32:4b:12:ca:7d:e1:6f:18:4d:3b:8a: b8:60:bc:ab:75:f2:b9:55:52:91:91:0f:4d:d4:c4:12:a2:6d: da:58:f5:c7:a0:de:7d:8c:3a:77:f6:34:63:2e:53:e3:ee:55: 30:46:d2:14:c9:11:84:2c:c3:9f:07:5c:6f:7e:0d:cf:c5:72: 7f:bd:a4:84:44:8b:e8:af:f3:9c:3c:7c:d9:bd:73:7a:cf:2b: 64:35:63:a3:84:5c:2c:9b:a8:9c:eb:d4:bd:98:d4:88:dc:b4: 08:28:65:2f:e3:45:e9:16:96:27:a9:22:17:c2:a3:db:cf:03: 87:47:8a:f2:bc:fd:a8:a2:dc:36:9b:f4:97:f4:22:51:3a:6d: 32:5e:fa:cd:a1:72:ee:92:f7:d1:b1:3c:a8:2c:8e:9d:64:46: db:59:73:59:f0:d1:e2:84:38:7c:a8:b1:b7:2a:7d:3f:66:c0: 59:a6:8e:14:d7:dd:31:0e:7d:4a:7d:17:62:18:d1:3f:a7:f0: 4b:de:81:5a:84:46:20:f9:7d:68:74:87:80:94:f6:9b:fe:2d: ce:76:6e:10:80:19:f5:be:00:e7:cc:6a:f4:8d:00:51:b0:73: 22:e3:ad:6c:96:2d:37:a8:43:d0:d8:62:de:c9:64:06:a4:47: 0f:5c:8d:ee -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBRDYxMTAvBgNVBAUTKDUzMzJGOUFGMzA1MkNGM0Y4NUVBQkREMEFBRDY4MTUy Mzk1MkU2NTYwHhcNMjUwOTAxMDc1MzA3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI1NTBlMy1mZDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNAP/C/WbYwwUqC0fTXgtm0DPK5Kj12xjWPlOrb7NK8tnjGUAaNAcnuwfNCu s7MArVg2qHRFSBFbWz3hD2dtR05F5YChXRZmsvw4biRXCiVaSIJ+5u+50PiqV6oZ +NjyM+PA+K3eSumSJaUHE8XaAg1Xjjd0WMzlzQ4TbLO4YhBdSCmEYIUBuwVvTpTM IuJRxyb3fVGaJ4r67MQbJtKL69AT3/Ywzx7Wh2p3Y3lxgSbNsRnfaNc14y9Na+Tb PI+CLAfcQ50jnPdGfOKMwrwZk6Mtnltn/yRzDOsyiCVHQM9sKtl3uV87P2P+NboT Mu9YaYN4wt4qbYdSJi9PDtTJMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEcB30ob Mfr62LOAot4muZ6w5buUMB8GA1UdIwQYMBaAFFMy+a8wUs8/heq90KrWgVI5UuZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkFENi9ENjRGNEU5QzNB RjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6LUY2cjNRcXRhQlVqbFM1 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6TDVyekJTenotRjZyM1FxdGFCVWpsUzVsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJBRDYvRDY0RjRFOUMzQUYyMTFFREE4NDJDNTc2QzRGOUFFMDIvQjI4OEVDOUM4 NzA4MTFGMEEzNzFERDgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnCsIwDQYJKoZIhvcNAQELBQADggEBALusXjd0I6EySxLK feFvGE07irhgvKt18rlVUpGRD03UxBKibdpY9ceg3n2MOnf2NGMuU+PuVTBG0hTJ EYQsw58HXG9+Dc/Fcn+9pIREi+iv85w8fNm9c3rPK2Q1Y6OEXCybqJzr1L2Y1Ijc tAgoZS/jRekWliepIhfCo9vPA4dHivK8/aii3Dab9Jf0IlE6bTJe+s2hcu6S99Gx PKgsjp1kRttZc1nw0eKEOHyosbcqfT9mwFmmjhTX3TEOfUp9F2IY0T+n8EvegVqE RiD5fWh0h4CU9pv+Lc52bhCAGfW+AOfMavSNAFGwcyLjrWyWLTeoQ9DYYt7JZAak Rw9cje4= -----END CERTIFICATE-----Generated at Mon Sep 8 16:09:25 2025 by rpki-client