$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/F2B3F2BA7DFF11F09B687570C4F9AE02.roa File: F2B3F2BA7DFF11F09B687570C4F9AE02.roa (raw, json) Hash identifier: pQhLpM5Rl+aW3gSv3+uxd5+iWqRbm+2iGTggucxA9FM= Subject key identifier: 67:2D:2B:24:6A:06:86:F2:CA:66:DF:93:6C:7B:E2:EB:36:53:79:79 Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Certificate serial: 0757 Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/F2B3F2BA7DFF11F09B687570C4F9AE02.roa Signing time: Tue 02 Sep 2025 23:44:26 +0000 ROA not before: Tue 02 Sep 2025 23:44:26 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 834 IP address blocks: 103.24.216.0/23 maxlen: 24 103.231.58.0/23 maxlen: 24 103.240.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1879 (0x757) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013 Validity Not Before: Sep 2 23:44:26 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b7815a-6fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:bb:2a:66:6d:02:91:d1:44:ac:5e:2f:9e: 61:7c:7c:fc:a8:33:15:00:db:9b:b2:0d:a6:1b:c5: bf:92:27:04:15:53:52:ee:ef:05:f4:3d:59:f7:00: 15:b4:ea:86:3a:82:fc:dc:0f:e7:72:87:4a:07:8d: 9b:8b:80:4b:df:ae:cd:fb:71:89:6b:90:5a:25:ac: 6f:3c:89:50:9c:5d:21:c5:c1:e2:6a:10:ae:04:f2: c4:89:04:73:f2:a2:0c:7e:bb:e0:b1:1a:6c:d9:c4: 2b:72:39:33:da:ff:20:df:c6:ce:d0:fe:5b:eb:a2: fb:ae:e7:54:4a:2e:f5:95:ea:db:50:30:e5:b4:1a: 09:4f:ba:05:13:0e:89:48:91:0e:06:4b:2b:2f:bf: ea:a7:c4:67:c1:2b:ff:3e:ff:3d:1e:17:99:7d:bd: a9:5a:27:7d:ec:fe:e7:1e:ef:7c:71:fd:d2:70:8f: 3c:e6:74:fa:6e:ed:8c:b7:ad:20:13:71:8b:c9:c2: c5:56:ed:85:b0:97:68:14:5c:04:d6:f7:2e:93:b2: 83:f0:78:f9:77:fb:cc:14:70:64:02:2b:e5:cc:57: 29:ff:3d:79:08:ce:c1:1e:cf:c0:b2:a3:a1:e6:1a: 2c:14:16:b0:fa:d4:ce:27:fd:88:ed:fb:01:69:47: 0e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2D:2B:24:6A:06:86:F2:CA:66:DF:93:6C:7B:E2:EB:36:53:79:79 X509v3 Authority Key Identifier: keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/F2B3F2BA7DFF11F09B687570C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.216.0/23 103.231.58.0/23 103.240.196.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:96:2c:ab:ca:ac:4a:e0:16:dd:24:cd:4b:46:4d:91:a2:02: 91:41:d5:36:48:1a:16:d3:61:aa:dd:4b:cb:42:fb:07:20:1f: ba:92:f3:9b:d2:f7:39:48:e2:b2:f4:56:4d:3d:e0:03:37:1e: 7f:25:09:83:6d:c0:11:76:a6:29:aa:b3:2a:3e:b0:45:57:68: c6:79:2a:7b:ea:77:96:66:35:b2:5f:8f:27:7c:22:57:05:3e: 34:00:34:e1:86:1b:0b:0a:93:3a:48:19:5f:af:02:1d:1b:03: 80:59:bf:2d:47:a0:94:b1:ca:7e:1f:0e:ce:86:9a:76:64:f6: 40:46:fd:e3:4e:ca:15:d2:0c:99:0b:74:f0:b7:cc:9c:4e:05: a2:ce:3d:b8:ff:2a:5e:c4:d8:fc:ee:2d:ae:1d:2a:e1:21:e6: d9:e2:61:9a:19:bc:72:97:01:8e:9f:ec:b6:e2:f8:cc:1a:97: ec:2c:e4:a0:e0:2c:ed:e5:d5:ec:26:71:3e:8d:74:d2:ca:43: 36:0d:11:00:b8:1b:f4:ad:bc:9b:a1:4c:da:ee:bc:23:34:26: 70:7f:eb:4d:ce:5c:de:00:ac:56:8e:8e:94:d6:e6:c0:79:72: d8:ab:b2:e9:c9:2d:64:3a:b1:4e:f8:3d:cf:a4:9a:46:26:75: 27:c7:10:31 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICB1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF QTNDNzEwMTMwHhcNMjUwOTAyMjM0NDI2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3ODE1YS02ZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmG7KmZtApHRRKxeL55hfHz8qDMVANubsg2mG8W/kicEFVNS7u8F9D1Z9wAV tOqGOoL83A/ncodKB42bi4BL367N+3GJa5BaJaxvPIlQnF0hxcHiahCuBPLEiQRz 8qIMfrvgsRps2cQrcjkz2v8g38bO0P5b66L7rudUSi71lerbUDDltBoJT7oFEw6J SJEOBksrL7/qp8RnwSv/Pv89HheZfb2pWid97P7nHu98cf3ScI885nT6bu2Mt60g E3GLycLFVu2FsJdoFFwE1vcuk7KD8Hj5d/vMFHBkAivlzFcp/z15CM7BHs/AsqOh 5hosFBaw+tTOJ/2I7fsBaUcODwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFGctKyRq Bobyymbfk2x74us2U3l5MB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2 NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvRjJCM0YyQkE3 REZGMTFGMDlCNjg3NTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAFnGNgDBAFn5zoDBABn8MQwDQYJKoZIhvcNAQELBQADggEB AB6WLKvKrErgFt0kzUtGTZGiApFB1TZIGhbTYardS8tC+wcgH7qS85vS9zlI4rL0 Vk094AM3Hn8lCYNtwBF2pimqsyo+sEVXaMZ5Knvqd5ZmNbJfjyd8IlcFPjQANOGG GwsKkzpIGV+vAh0bA4BZvy1HoJSxyn4fDs6GmnZk9kBG/eNOyhXSDJkLdPC3zJxO BaLOPbj/Kl7E2PzuLa4dKuEh5tniYZoZvHKXAY6f7Lbi+Mwal+ws5KDgLO3l1ewm cT6NdNLKQzYNEQC4G/StvJuhTNruvCM0JnB/603OXN4ArFaOjpTW5sB5ctirsunJ LWQ6sU74Pc+kmkYmdSfHEDE= -----END CERTIFICATE-----Generated at Sun Sep 7 10:53:33 2025 by rpki-client