$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/C766E398C0EE11EA94A1F146C4F9AE02.roa File: C766E398C0EE11EA94A1F146C4F9AE02.roa (raw, json) Hash identifier: 4Kv7xQwln4PVRYcYiLH9p6kQ8sftutG3ICgl5f6YZnI= Subject key identifier: B4:E7:F1:DD:A1:15:BC:04:88:E3:20:8A:27:3A:F2:82:E6:56:FC:CE Certificate issuer: /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D Certificate serial: 0898 Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/C766E398C0EE11EA94A1F146C4F9AE02.roa Signing time: Tue 10 Jun 2025 18:42:47 +0000 ROA not before: Tue 10 Jun 2025 18:42:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138944 IP address blocks: 103.137.142.0/23 maxlen: 23 103.137.142.0/24 maxlen: 24 103.137.143.0/24 maxlen: 24 2405:6340::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2200 (0x898) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D Validity Not Before: Jun 10 18:42:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68487ca7-4713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:fe:60:f3:a6:2f:1b:01:81:e8:c0:05:0e: 26:2e:d8:e0:1c:fc:6f:00:26:c5:75:59:94:d8:9f: 45:de:17:c2:dc:8a:2a:ae:36:8b:d5:ec:3d:0c:b7: ea:a8:81:39:a6:7d:b0:a6:f8:94:30:f2:4e:75:2c: db:48:e3:30:94:17:4b:44:66:d7:3d:95:4d:36:0d: ec:52:1b:93:a3:77:93:8f:4d:59:aa:fd:9e:79:e6: 59:e7:c5:a0:17:15:03:64:68:50:c4:8b:b8:6b:de: 59:db:82:d3:d2:8d:49:50:56:13:2e:a9:4e:55:35: 0c:25:b1:da:0a:df:73:2f:3d:b7:24:2a:8f:e0:06: 1a:a5:ee:25:be:08:35:a8:4a:67:4b:29:12:86:ca: 25:dc:50:ed:72:0d:8e:3d:6c:b4:c6:69:82:75:56: 89:a2:c2:7e:49:c3:2d:bd:1d:aa:e5:7a:b2:b5:e1: 5f:6a:6b:df:f9:fa:77:88:54:21:45:ee:97:6f:15: 99:a0:43:87:9e:4d:2b:73:bb:e8:d9:6e:7e:74:22: a7:f8:58:c9:ef:fe:d4:83:da:2a:67:2b:9b:4b:a0: 2c:08:f0:7c:90:7d:93:67:48:4e:72:01:89:14:d8: a2:c6:0c:8c:ca:bc:8c:68:ee:58:97:e8:d6:b4:79: d6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E7:F1:DD:A1:15:BC:04:88:E3:20:8A:27:3A:F2:82:E6:56:FC:CE X509v3 Authority Key Identifier: keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/C766E398C0EE11EA94A1F146C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.142.0/23 IPv6: 2405:6340::/32 Signature Algorithm: sha256WithRSAEncryption 44:44:d3:a6:3e:f8:00:28:b1:85:50:a6:23:87:9b:7d:30:1b: 1d:4b:31:c8:0c:30:6c:cd:e5:d7:e6:9d:71:94:8a:cc:a5:c8: de:13:40:30:6f:5f:15:de:e5:ef:9d:08:ce:30:ed:41:12:c8: a2:7e:9c:46:30:88:be:1a:82:dc:c1:67:4d:90:81:1e:03:5a: 6c:eb:45:5c:08:44:c5:11:9a:e4:9b:c1:0d:32:98:6f:86:28: be:1c:df:cd:69:d9:9d:73:bd:36:fa:c1:9b:db:ae:51:1c:6e: e0:50:a5:40:11:60:b6:f4:af:7d:24:9e:ce:68:0b:f4:a9:18: 06:2b:79:25:44:b4:ce:4d:ad:69:cf:15:1d:4e:f8:5a:ef:67: ad:75:fa:24:2a:3f:10:48:23:0b:36:a2:e1:6c:ca:1d:12:7b: fa:96:ba:a1:aa:43:4a:ab:9b:54:fd:de:e7:39:8c:af:1a:a1: f3:08:f2:3c:d2:0d:05:3e:3d:3e:3f:17:9e:36:4c:14:cf:bb: b2:b0:bd:16:f5:45:19:e8:fa:36:7d:55:f8:43:b6:c9:75:16: d3:c0:fd:d9:1c:9b:80:fc:35:4e:ff:74:e5:a2:f5:e8:06:7d: d3:82:91:57:f4:ed:84:f2:71:70:06:67:a5:32:ab:73:b2:0e: 90:70:f0:1c -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU0MTExMTAvBgNVBAUTKDM4ODgwREI5MzZBQ0NDOUJENzREM0RCOERGODg4N0Iz MjhFNTc4OEQwHhcNMjUwNjEwMTg0MjQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ4N2NhNy00NzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2D+YPOmLxsBgejABQ4mLtjgHPxvACbFdVmU2J9F3hfC3IoqrjaL1ew9DLfq qIE5pn2wpviUMPJOdSzbSOMwlBdLRGbXPZVNNg3sUhuTo3eTj01Zqv2eeeZZ58Wg FxUDZGhQxIu4a95Z24LT0o1JUFYTLqlOVTUMJbHaCt9zLz23JCqP4AYape4lvgg1 qEpnSykShsol3FDtcg2OPWy0xmmCdVaJosJ+ScMtvR2q5XqyteFfamvf+fp3iFQh Re6XbxWZoEOHnk0rc7vo2W5+dCKn+FjJ7/7Ug9oqZyubS6AsCPB8kH2TZ0hOcgGJ FNiixgyMyryMaO5Yl+jWtHnWywIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLTn8d2h FbwEiOMgiic68oLmVvzOMB8GA1UdIwQYMBaAFDiIDbk2rMyb1009uN+Ih7Mo5XiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTQxMS9GMEIwMEVCNDE5 MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9PSWdOdVRhc3pKdlhUVDI0MzRpSHN5amxl STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09JZ051VGFzekp2WFRUMjQzNGlIc3lqbGVJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU0MTEvRjBCMDBFQjQxOTE0MTFFQTg2RjI0ODFFQzRGOUFFMDIvQzc2NkUzOThD MEVFMTFFQTk0QTFGMTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFniY4wDQQCAAIwBwMFACQFY0AwDQYJKoZIhvcNAQELBQAD ggEBAERE06Y++AAosYVQpiOHm30wGx1LMcgMMGzN5dfmnXGUisylyN4TQDBvXxXe 5e+dCM4w7UESyKJ+nEYwiL4agtzBZ02QgR4DWmzrRVwIRMURmuSbwQ0ymG+GKL4c 381p2Z1zvTb6wZvbrlEcbuBQpUARYLb0r30kns5oC/SpGAYreSVEtM5NrWnPFR1O +FrvZ611+iQqPxBIIws2ouFsyh0Se/qWuqGqQ0qrm1T93uc5jK8aofMI8jzSDQU+ PT4/F542TBTPu7KwvRb1RRno+jZ9VfhDtsl1FtPA/dkcm4D8NU7/dOWi9egGfdOC kVf07YTycXAGZ6Uyq3OyDpBw8Bw= -----END CERTIFICATE-----Generated at Fri Jun 13 08:09:10 2025 by rpki-client