$ rpki-client -vvf rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa File: 3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa (raw, json) Hash identifier: rhQRS5c9b4woxqf3Lh4ekB6IlqaEB8oCpxpphU5va4Y= Subject key identifier: 12:89:C4:29:63:F5:68:3C:BE:09:EC:81:7F:BF:78:CF:B5:51:AE:4B Certificate issuer: /CN=A913D03A/serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0 Certificate serial: 0769 Authority key identifier: DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa Signing time: Fri 30 May 2025 21:51:22 +0000 ROA not before: Fri 30 May 2025 21:51:22 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135376 IP address blocks: 103.84.97.0/24 maxlen: 24 103.139.179.0/24 maxlen: 24 103.215.210.0/24 maxlen: 24 103.215.211.0/24 maxlen: 24 103.216.160.0/24 maxlen: 24 185.193.212.0/24 maxlen: 24 185.193.213.0/24 maxlen: 24 185.193.214.0/24 maxlen: 24 185.193.215.0/24 maxlen: 24 202.3.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1897 (0x769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D03A, serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0 Validity Not Before: May 30 21:51:22 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683a285a-3194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:60:ef:86:2b:83:67:89:a3:b4:fc:64:15:de: 75:1f:ad:d7:f6:bf:b5:83:b0:39:74:83:09:87:93: 4b:39:91:9c:75:1c:6b:70:c3:c1:85:32:64:b8:07: 10:50:ac:87:1b:83:33:48:c2:f9:a7:5b:18:df:3b: 73:55:f8:ec:c8:c7:ea:cd:94:3f:48:7e:5c:fe:d3: 6a:34:5d:f0:54:85:0e:d0:17:19:2f:1b:4a:34:f1: d7:89:90:40:7c:2d:dd:4d:d4:be:c6:7c:5a:b8:e4: e1:8b:3e:d8:32:33:9e:49:8a:f0:02:a1:de:d5:21: 41:4a:f7:bb:6e:16:d9:5d:79:c7:c0:13:21:df:d7: 31:86:ea:a7:82:13:23:79:92:24:76:4b:48:07:9c: c5:ba:aa:f6:79:43:36:54:d7:7c:0b:e7:e5:1d:25: ff:fa:9a:e1:55:f4:2c:e4:9d:a6:a6:70:58:5f:ce: 33:5f:af:6a:64:12:03:aa:db:85:48:61:4d:5b:fa: c6:ce:d6:d2:e7:33:59:81:51:f0:37:bb:04:4e:e2: 30:7a:ff:57:d2:65:b1:a3:c1:2c:3a:7e:83:9d:81: ac:11:68:f2:1b:d0:7b:32:cc:81:fe:39:9e:dd:6d: 3e:bc:36:6f:59:e7:a9:83:6a:78:e6:74:32:00:92: 80:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:89:C4:29:63:F5:68:3C:BE:09:EC:81:7F:BF:78:CF:B5:51:AE:4B X509v3 Authority Key Identifier: keyid:DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.97.0/24 103.139.179.0/24 103.215.210.0/23 103.216.160.0/24 185.193.212.0/22 202.3.76.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:4e:fc:7a:b7:ab:ba:87:39:d5:de:d2:34:56:77:ea:fa:ac: 76:80:af:4e:2c:d3:e4:90:dc:24:5d:d1:4e:a4:b1:46:6e:e7: 65:64:d2:3c:8a:db:92:8a:3f:63:b4:de:2c:15:73:77:64:f6: ec:2f:07:e0:d7:97:4d:16:a7:8e:7c:5a:0d:c0:13:96:d3:38: c5:2e:d7:82:bb:7d:2d:29:2a:cb:f6:c9:28:7d:ee:b4:49:5e: 4d:7c:46:d9:1f:e6:e1:d7:73:3c:10:95:08:5a:fe:76:ee:db: d7:86:db:12:27:22:2f:ca:cc:60:4a:48:56:5b:d7:e6:ad:b8: d3:36:de:b5:24:7d:1a:d5:2c:83:21:00:2f:d1:21:89:31:ca: bb:f4:03:0f:84:a6:9b:e6:93:8d:9a:00:1c:0a:21:d4:6a:a3: 80:90:f2:b0:cf:e4:86:bd:0a:2a:1e:d0:8d:26:f7:f0:18:c4: 3b:e3:be:ec:a2:06:49:1e:f1:51:b6:68:de:3c:0b:e3:18:5f: 67:8d:a1:9a:2b:41:45:7c:dc:54:17:18:b5:eb:c3:52:ae:be: 60:ff:91:02:80:4e:d3:fb:33:5b:ff:67:59:82:62:3c:b1:3f: 47:a8:6e:1e:88:eb:44:1b:34:d9:7b:b8:a6:3d:c7:b9:a2:02: c8:93:6b:66 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwM0ExMTAvBgNVBAUTKERCQkU5QkZDN0Y4QTNEM0JFMDVCQjVCNjAyMUY3NTQ1 QkU5ODFCRjAwHhcNMjUwNTMwMjE1MTIyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNhMjg1YS0zMTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2DvhiuDZ4mjtPxkFd51H63X9r+1g7A5dIMJh5NLOZGcdRxrcMPBhTJkuAcQ UKyHG4MzSML5p1sY3ztzVfjsyMfqzZQ/SH5c/tNqNF3wVIUO0BcZLxtKNPHXiZBA fC3dTdS+xnxauOThiz7YMjOeSYrwAqHe1SFBSve7bhbZXXnHwBMh39cxhuqnghMj eZIkdktIB5zFuqr2eUM2VNd8C+flHSX/+prhVfQs5J2mpnBYX84zX69qZBIDqtuF SGFNW/rGztbS5zNZgVHwN7sETuIwev9X0mWxo8EsOn6DnYGsEWjyG9B7MsyB/jme 3W0+vDZvWeepg2p45nQyAJKA1wIDAQABo4ICszCCAq8wHQYDVR0OBBYEFBKJxClj 9Wg8vgnsgX+/eM+1Ua5LMB8GA1UdIwQYMBaAFNu+m/x/ij074Fu1tgIfdUW+mBvw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAzQS85MjZCNDNFODIx OTAxMUVCODJBNDFCNDhDNEY5QUUwMi8yNzZiX0gtS1BUdmdXN1cyQWg5MVJiNllH X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI3NmJfSC1LUFR2Z1c3VzJBaDkxUmI2WUdfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0QwM0EvOTI2QjQzRTgyMTkwMTFFQjgyQTQxQjQ4QzRGOUFFMDIvM0E5RjNBREMy MzRBMTFFQkEwQzQwQzJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBABnVGEDBABni7MDBAFn19IDBABn2KADBAK5wdQDBADKA0ww DQYJKoZIhvcNAQELBQADggEBAJpO/Hq3q7qHOdXe0jRWd+r6rHaAr04s0+SQ3CRd 0U6ksUZu52Vk0jyK25KKP2O03iwVc3dk9uwvB+DXl00Wp458Wg3AE5bTOMUu14K7 fS0pKsv2ySh97rRJXk18Rtkf5uHXczwQlQha/nbu29eG2xInIi/KzGBKSFZb1+at uNM23rUkfRrVLIMhAC/RIYkxyrv0Aw+Eppvmk42aABwKIdRqo4CQ8rDP5Ia9Cioe 0I0m9/AYxDvjvuyiBkke8VG2aN48C+MYX2eNoZorQUV83FQXGLXrw1KuvmD/kQKA TtP7M1v/Z1mCYjyxP0eobh6I60QbNNl7uKY9x7miAsiTa2Y= -----END CERTIFICATE-----Generated at Thu Jun 12 18:36:34 2025 by rpki-client