$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/69D349EE818A11F0A0164244C4F9AE02.roa File: 69D349EE818A11F0A0164244C4F9AE02.roa (raw, json) Hash identifier: +td9lsBZ2Knq+IxkLgETGke2wNNZbvozVPczHguQznQ= Subject key identifier: 6C:A9:EA:F9:40:C8:65:A9:78:69:27:9A:5B:08:80:98:BB:B8:A9:83 Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Certificate serial: 103E Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/69D349EE818A11F0A0164244C4F9AE02.roa Signing time: Mon 25 Aug 2025 08:06:33 +0000 ROA not before: Mon 25 Aug 2025 08:06:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138981 IP address blocks: 103.138.24.0/24 maxlen: 24 2404:bec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 08:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4158 (0x103e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Validity Not Before: Aug 25 08:06:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68ac1989-8490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1b:8a:aa:bb:60:b3:1c:97:08:78:8f:81:50: 90:bb:7b:40:1c:5a:31:ca:7e:10:16:cd:d7:38:0f: b8:cc:56:09:01:99:b1:e5:54:e2:84:e9:79:1e:78: b9:8a:5c:a8:4b:43:7a:7d:db:c4:ed:e7:4c:11:58: 6f:bb:a7:61:4a:6a:a7:73:2c:04:cd:62:47:23:72: 55:08:ad:e1:54:56:86:08:51:3b:1b:dd:89:c3:e4: f4:7c:c7:d3:77:95:b4:f3:f8:d0:50:0c:46:1f:58: c9:28:a2:58:d1:1f:5a:aa:12:54:fc:9a:fe:bf:33: 41:e0:9c:9a:6a:1c:86:b6:b5:d5:75:2a:ee:21:3c: 00:a9:6f:6a:61:d8:63:94:8f:aa:e3:f2:64:c0:d0: 48:81:f9:79:d8:15:49:31:d3:63:c2:4c:5e:76:50: a5:b2:e1:7f:84:4f:8f:7e:04:d8:a2:d5:1f:db:92: 6a:e2:48:d9:a4:c7:49:04:2f:e8:27:29:e7:b3:15: 85:c1:12:0b:76:25:d4:07:1b:af:e8:cb:77:23:de: 8a:a4:b0:18:37:be:d2:f6:0f:b7:23:24:da:a2:ed: 5e:ff:af:a1:1c:53:a9:e2:c0:38:14:c7:dd:ba:17: a7:0f:11:d9:90:6e:37:71:f6:29:9a:8c:74:ab:ef: d5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A9:EA:F9:40:C8:65:A9:78:69:27:9A:5B:08:80:98:BB:B8:A9:83 X509v3 Authority Key Identifier: keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/69D349EE818A11F0A0164244C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.24.0/24 IPv6: 2404:bec0::/32 Signature Algorithm: sha256WithRSAEncryption bd:91:de:8e:87:db:84:dc:fb:2e:32:b7:11:60:02:42:92:b0: 7c:bf:d1:93:bf:b5:99:c6:2e:d3:71:0f:41:5a:48:84:3d:2e: 40:77:cf:92:15:f4:f3:41:6d:aa:ae:fc:e2:da:81:a2:72:26: 68:f7:af:02:49:ab:3a:d5:e9:9f:9c:25:de:6e:af:d8:3c:1a: e7:59:5c:94:71:f6:6f:e9:8a:29:dc:70:bb:d8:80:27:3f:1d: e7:65:a3:1d:28:49:46:a6:de:c5:b9:49:62:5d:a2:66:b2:9e: 9d:01:8d:d6:98:1f:e9:41:c2:81:2b:9e:81:b0:88:3f:90:03: 4c:22:af:9c:22:c0:31:06:a8:5b:21:45:a7:92:35:37:f4:a1: 53:7c:32:b7:4e:99:c7:14:dd:ca:0f:c2:d2:45:dc:82:9a:f4: 80:73:78:87:78:2a:18:da:c4:04:f3:f5:1d:a3:9d:04:57:99: 60:a3:15:83:f8:70:96:fc:c3:07:43:3f:ab:5a:c2:57:c7:1a: 25:e1:dc:ea:67:88:28:f1:1a:91:26:2f:e0:06:ef:b9:a4:fb: c9:0f:35:ca:d6:c1:14:a5:84:9c:be:30:ef:4e:17:0c:f2:f6: ee:ec:a4:ca:b2:26:d0:c2:52:38:71:8e:0a:38:e8:df:13:8f: e8:34:64:b1 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICED4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MzIxMTAvBgNVBAUTKDMyOURBMDNEQjk5NDQ3NTE0OThBNUZDQTUzQzg1REFB NjBDQjlBMzIwHhcNMjUwODI1MDgwNjMzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFjMTk4OS04NDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmxuKqrtgsxyXCHiPgVCQu3tAHFoxyn4QFs3XOA+4zFYJAZmx5VTihOl5Hni5 ilyoS0N6fdvE7edMEVhvu6dhSmqncywEzWJHI3JVCK3hVFaGCFE7G92Jw+T0fMfT d5W08/jQUAxGH1jJKKJY0R9aqhJU/Jr+vzNB4JyaahyGtrXVdSruITwAqW9qYdhj lI+q4/JkwNBIgfl52BVJMdNjwkxedlClsuF/hE+PfgTYotUf25Jq4kjZpMdJBC/o JynnsxWFwRILdiXUBxuv6Mt3I96KpLAYN77S9g+3IyTaou1e/6+hHFOp4sA4FMfd uhenDxHZkG43cfYpmox0q+/VsQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGyp6vlA yGWpeGknmlsIgJi7uKmDMB8GA1UdIwQYMBaAFDKdoD25lEdRSYpfylPIXapgy5oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzMi8yRENBQkE2ODVD RjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIxRkppbF9LVThoZHFtRExt akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wMmdQYm1VUjFGSmlsX0tVOGhkcW1ETG1qSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0M0MzIvMkRDQUJBNjg1Q0YyMTFFOTg0OTM5MjI0QzRGOUFFMDIvNjlEMzQ5RUU4 MThBMTFGMEEwMTY0MjQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABnihgwDQQCAAIwBwMFACQEvsAwDQYJKoZIhvcNAQELBQAD ggEBAL2R3o6H24Tc+y4ytxFgAkKSsHy/0ZO/tZnGLtNxD0FaSIQ9LkB3z5IV9PNB baqu/OLagaJyJmj3rwJJqzrV6Z+cJd5ur9g8GudZXJRx9m/piinccLvYgCc/Hedl ox0oSUam3sW5SWJdomaynp0BjdaYH+lBwoErnoGwiD+QA0wir5wiwDEGqFshRaeS NTf0oVN8MrdOmccU3coPwtJF3IKa9IBzeId4KhjaxATz9R2jnQRXmWCjFYP4cJb8 wwdDP6tawlfHGiXh3OpniCjxGpEmL+AG77mk+8kPNcrWwRSlhJy+MO9OFwzy9u7s pMqyJtDCUjhxjgo46N8Tj+g0ZLE= -----END CERTIFICATE-----Generated at Mon Aug 25 20:35:58 2025 by rpki-client