$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/57A5ACF20FE911EBB5AE5524C4F9AE02.roa File: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (raw, json) Hash identifier: Ia7YlzfnZVrXXaoAHWfWApYxD2x/ixMau7CG/ipkyT8= Subject key identifier: D8:B6:07:E2:EA:A6:0D:FA:31:C7:A6:DD:04:37:B5:77:03:6C:B8:93 Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Certificate serial: 0BE4 Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/57A5ACF20FE911EBB5AE5524C4F9AE02.roa Signing time: Tue 20 May 2025 19:14:30 +0000 ROA not before: Tue 20 May 2025 19:14:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 27281 IP address blocks: 103.229.8.0/24 maxlen: 24 103.229.9.0/24 maxlen: 24 103.229.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3044 (0xbe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Validity Not Before: May 20 19:14:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=682cd496-c9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b8:83:e7:80:08:bd:cc:66:24:59:57:c1:23: 0f:fc:0d:a6:08:16:e7:57:dc:34:2c:bb:f7:05:39: a7:02:ff:6b:2b:fe:14:d9:b7:62:2a:25:4e:1e:ae: ed:7a:bd:7a:61:29:a7:1b:4b:4e:d3:83:ec:66:44: c9:39:1e:c5:e1:56:06:c0:76:f8:2d:57:5d:02:f3: 5d:1b:b3:15:80:66:c3:2f:02:de:b8:39:0e:d0:bf: 11:71:32:d2:27:f1:14:d8:7d:8b:b4:59:28:e9:e0: 35:68:b7:2b:c8:03:bd:b2:56:d9:c1:77:83:ac:4a: 99:d9:86:30:62:43:42:36:57:20:1a:bb:43:be:40: a3:ea:ef:7a:92:de:da:c6:47:4a:71:59:12:ef:07: 7e:ce:94:f1:00:73:aa:da:ca:9c:90:72:aa:4b:09: a9:0a:aa:ac:ff:b8:d6:74:47:5c:b4:50:30:53:92: 4c:60:0b:cd:9b:dc:19:c9:54:d0:97:d2:0d:11:4e: 71:42:ae:ab:49:a6:a4:c5:ff:4b:36:2b:67:04:7e: 93:31:46:79:dc:0c:97:5c:7a:ff:5d:94:e4:1a:be: a5:19:51:c7:f6:ec:b8:cc:aa:0b:4b:b7:49:04:04: ca:08:5a:73:c0:a8:6b:51:0a:6b:83:5e:67:66:d7: d4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B6:07:E2:EA:A6:0D:FA:31:C7:A6:DD:04:37:B5:77:03:6C:B8:93 X509v3 Authority Key Identifier: keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/57A5ACF20FE911EBB5AE5524C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.8.0-103.229.10.255 Signature Algorithm: sha256WithRSAEncryption 49:af:93:ff:b4:43:74:99:92:2b:bd:08:22:5a:0d:c6:5a:2e: 82:12:67:43:28:c0:9e:f3:53:d4:23:47:88:84:23:58:2e:64: 5c:32:a8:3b:e7:06:f3:8d:24:eb:ec:e2:0e:46:1d:59:e6:4e: f7:d7:7c:a3:25:bb:01:96:b3:ba:9d:ff:74:9e:fc:b2:54:9d: 77:f3:75:1f:48:c0:8b:a6:0e:15:81:1a:4b:f2:47:f5:b1:17: 75:ee:d4:f9:73:4e:e7:9b:90:24:50:33:56:f0:f4:3a:71:29: d1:ea:b7:df:fe:28:53:c5:c9:c7:16:be:17:af:a9:d0:4e:34: ae:c5:b6:1a:5c:12:ae:2d:cd:b8:11:9e:77:56:c0:05:04:94: 0d:1c:3c:0b:a6:05:d2:9f:7d:0a:db:79:23:51:73:60:92:f2: 50:8a:9c:cd:df:d2:65:8c:d6:f5:f3:ff:31:c2:ea:87:f7:2d: ce:fb:3c:23:86:ed:bc:49:9f:e4:cf:8b:eb:b7:6a:69:d1:88: 4c:eb:cf:35:8a:08:eb:a9:4a:70:58:58:9f:ba:77:db:c7:78: 10:12:7d:e1:ad:ef:5f:56:2d:c0:d1:39:ee:4f:08:e9:4e:27: a1:d1:aa:5d:97:5b:23:b4:4a:bc:07:79:9f:54:7e:f1:29:6d: 08:38:19:52 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICC+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ3MEExMTAvBgNVBAUTKEVEMzMwODIwRkZBQkQwQUIyODQxQkE5M0U5MDJFQTY4 Mjk5MkRBQTkwHhcNMjUwNTIwMTkxNDMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJjZDQ5Ni1jOWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlbiD54AIvcxmJFlXwSMP/A2mCBbnV9w0LLv3BTmnAv9rK/4U2bdiKiVOHq7t er16YSmnG0tO04PsZkTJOR7F4VYGwHb4LVddAvNdG7MVgGbDLwLeuDkO0L8RcTLS J/EU2H2LtFko6eA1aLcryAO9slbZwXeDrEqZ2YYwYkNCNlcgGrtDvkCj6u96kt7a xkdKcVkS7wd+zpTxAHOq2sqckHKqSwmpCqqs/7jWdEdctFAwU5JMYAvNm9wZyVTQ l9INEU5xQq6rSaakxf9LNitnBH6TMUZ53AyXXHr/XZTkGr6lGVHH9uy4zKoLS7dJ BATKCFpzwKhrUQprg15nZtfU5wIDAQABo4ICnTCCApkwHQYDVR0OBBYEFNi2B+Lq pg36Mcem3QQ3tXcDbLiTMB8GA1UdIwQYMBaAFO0zCCD/q9CrKEG6k+kC6mgpktqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcwQS80MUFCRDI5RTFC ODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBLc29RYnFUNlFMcWFDbVMy cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUTUlJUC1yMEtzb1FicVQ2UUxxYUNtUzJxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQ3MEEvNDFBQkQyOUUxQjg2MTFFQTlDOUFGMjQzQzRGOUFFMDIvNTdBNUFDRjIw RkU5MTFFQkI1QUU1NTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEA2flCAMEAGflCjANBgkqhkiG9w0BAQsFAAOCAQEASa+T /7RDdJmSK70IIloNxloughJnQyjAnvNT1CNHiIQjWC5kXDKoO+cG840k6+ziDkYd WeZO99d8oyW7AZazup3/dJ78slSdd/N1H0jAi6YOFYEaS/JH9bEXde7U+XNO55uQ JFAzVvD0OnEp0eq33/4oU8XJxxa+F6+p0E40rsW2GlwSri3NuBGed1bABQSUDRw8 C6YF0p99Ctt5I1FzYJLyUIqczd/SZYzW9fP/McLqh/ctzvs8I4btvEmf5M+L67dq adGITOvPNYoI66lKcFhYn7p328d4EBJ94a3vX1YtwNE57k8I6U4nodGqXZdbI7RK vAd5n1R+8SltCDgZUg== -----END CERTIFICATE-----Generated at Mon Jun 2 07:19:46 2025 by rpki-client