$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/61EE7C6C281211EA881CC32DC4F9AE02.roa File: 61EE7C6C281211EA881CC32DC4F9AE02.roa (raw, json) Hash identifier: cpZDWElJkWHfyDoaFzzaYvQgJmBavPZ5GGxiNrY4lcE= Subject key identifier: 42:0F:77:AC:7D:2A:FB:27:1A:19:1D:F5:54:44:9A:1D:F6:52:D3:0C Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Certificate serial: 0BE2 Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/61EE7C6C281211EA881CC32DC4F9AE02.roa Signing time: Tue 20 May 2025 19:14:28 +0000 ROA not before: Tue 20 May 2025 19:14:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.229.8.0/24 maxlen: 24 103.229.9.0/24 maxlen: 24 103.229.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3042 (0xbe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Validity Not Before: May 20 19:14:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=682cd494-abd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:27:ef:c0:a2:0d:e5:7e:9b:ab:12:e7:70:06: a8:90:ba:ce:67:ea:3f:bc:00:4a:60:f9:c9:a0:35: f8:7a:9b:4e:9f:ea:22:ef:9b:1b:2a:34:8c:a8:b0: 02:a2:2a:71:8d:8a:3d:5a:b0:8f:78:11:11:fe:9a: 3a:02:94:3d:37:21:a8:9a:86:f4:18:94:f1:e5:da: e8:9d:8f:8e:b2:79:63:a0:4e:27:49:52:27:10:0a: 4f:85:91:b9:f4:a0:13:29:14:d9:91:c6:43:5a:90: 04:ec:f1:fc:56:d5:4d:ae:3a:be:ff:8d:2e:46:12: f2:a9:0f:e4:26:fd:93:15:8c:0f:04:4d:c3:c7:86: d1:9c:92:b2:d2:5c:0a:8c:dc:f9:ee:ee:47:a4:9d: db:31:b8:5b:0c:b4:4f:74:55:a0:6a:85:d3:2e:bd: 13:ab:60:40:b3:d2:50:f6:f5:a7:7c:11:d8:97:35: 93:28:e5:67:84:91:d6:fa:33:b4:19:32:f9:6a:59: d6:39:88:f5:84:48:5a:29:26:55:c8:c7:4a:35:0f: 5d:b6:45:c3:46:80:e6:27:52:63:4c:18:62:d2:03: dd:f5:e0:8a:7b:5f:de:63:96:35:98:c8:36:d9:6a: 37:0c:54:76:04:47:1b:4f:b1:47:a3:76:53:b6:26: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0F:77:AC:7D:2A:FB:27:1A:19:1D:F5:54:44:9A:1D:F6:52:D3:0C X509v3 Authority Key Identifier: keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/61EE7C6C281211EA881CC32DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.8.0-103.229.10.255 Signature Algorithm: sha256WithRSAEncryption 7f:c3:e9:69:8a:0d:23:1a:d7:3a:5e:fb:5a:04:3f:76:58:05: ca:0a:9a:44:cb:c8:43:6e:7a:53:53:e5:b3:13:5e:8a:ec:e6: cd:33:eb:53:5a:c3:ba:e2:98:fb:22:08:38:94:c5:25:6a:f9: 48:f8:3d:61:d5:08:c6:57:f5:81:51:be:c2:22:85:78:bf:d4: 5b:d6:f2:66:03:61:90:f2:f4:c2:45:f7:8e:89:f5:87:39:44: 79:67:5f:a8:24:7d:69:1f:d9:62:5b:8e:5c:b6:b7:d0:13:6a: a3:dd:4e:9a:b1:bb:3b:85:f4:63:5a:ed:cb:71:ae:15:ad:f8: 33:94:0a:3f:1b:ac:e6:de:a8:c7:8b:1b:d0:a1:ff:2a:d3:ac: 73:f8:ac:40:31:9f:b4:db:ca:56:2e:35:99:c5:50:f5:5a:66: 73:2e:86:63:22:3b:04:72:67:0a:98:7c:21:db:40:0c:b8:3f: 88:e4:b8:ce:ec:5b:01:9d:45:e6:35:56:80:8b:1d:a5:3d:76: 7e:32:2c:bf:6b:fb:a5:e3:ca:d6:f5:1e:c1:da:b1:48:7f:27: 42:70:e5:e4:09:3b:6f:e2:0b:eb:6a:b1:c6:70:cd:c6:b5:0e: 57:0c:d6:c8:8a:59:0a:e2:32:33:ee:6a:bc:30:14:e4:e0:1f: 98:50:80:c9 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ3MEExMTAvBgNVBAUTKEVEMzMwODIwRkZBQkQwQUIyODQxQkE5M0U5MDJFQTY4 Mjk5MkRBQTkwHhcNMjUwNTIwMTkxNDI4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJjZDQ5NC1hYmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7SfvwKIN5X6bqxLncAaokLrOZ+o/vABKYPnJoDX4eptOn+oi75sbKjSMqLAC oipxjYo9WrCPeBER/po6ApQ9NyGomob0GJTx5dronY+OsnljoE4nSVInEApPhZG5 9KATKRTZkcZDWpAE7PH8VtVNrjq+/40uRhLyqQ/kJv2TFYwPBE3Dx4bRnJKy0lwK jNz57u5HpJ3bMbhbDLRPdFWgaoXTLr0Tq2BAs9JQ9vWnfBHYlzWTKOVnhJHW+jO0 GTL5alnWOYj1hEhaKSZVyMdKNQ9dtkXDRoDmJ1JjTBhi0gPd9eCKe1/eY5Y1mMg2 2Wo3DFR2BEcbT7FHo3ZTtia3TwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFEIPd6x9 KvsnGhkd9VREmh32UtMMMB8GA1UdIwQYMBaAFO0zCCD/q9CrKEG6k+kC6mgpktqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcwQS80MUFCRDI5RTFC ODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBLc29RYnFUNlFMcWFDbVMy cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUTUlJUC1yMEtzb1FicVQ2UUxxYUNtUzJxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQ3MEEvNDFBQkQyOUUxQjg2MTFFQTlDOUFGMjQzQzRGOUFFMDIvNjFFRTdDNkMy ODEyMTFFQTg4MUNDMzJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEA2flCAMEAGflCjANBgkqhkiG9w0BAQsFAAOCAQEAf8Pp aYoNIxrXOl77WgQ/dlgFygqaRMvIQ256U1PlsxNeiuzmzTPrU1rDuuKY+yIIOJTF JWr5SPg9YdUIxlf1gVG+wiKFeL/UW9byZgNhkPL0wkX3jon1hzlEeWdfqCR9aR/Z YluOXLa30BNqo91OmrG7O4X0Y1rty3GuFa34M5QKPxus5t6ox4sb0KH/KtOsc/is QDGftNvKVi41mcVQ9Vpmcy6GYyI7BHJnCph8IdtADLg/iOS4zuxbAZ1F5jVWgIsd pT12fjIsv2v7pePK1vUewdqxSH8nQnDl5Ak7b+IL62qxxnDNxrUOVwzWyIpZCuIy M+5qvDAU5OAfmFCAyQ== -----END CERTIFICATE-----Generated at Mon Jun 2 07:16:23 2025 by rpki-client