$ rpki-client -vvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/B37A1AB4E1A811EFBC05A21AC4F9AE02.roa File: B37A1AB4E1A811EFBC05A21AC4F9AE02.roa (raw, json) Hash identifier: 7GUW7TYiJ43LqgVUnKqTpmI4a0Ih/VJ75WOYgV4BI0M= Subject key identifier: 0C:ED:10:D6:1B:DA:7B:1C:72:23:FE:BC:27:08:CF:7A:BD:1E:5A:8E Certificate issuer: /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Certificate serial: 0862 Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/B37A1AB4E1A811EFBC05A21AC4F9AE02.roa Signing time: Tue 06 May 2025 21:01:25 +0000 ROA not before: Tue 06 May 2025 21:01:25 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 140900 IP address blocks: 103.153.38.0/24 maxlen: 24 103.153.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:51:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2146 (0x862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141A6A, serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD Validity Not Before: May 6 21:01:25 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=681a78a5-b7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:2e:7b:e9:a1:59:f7:f6:f6:60:72:e7:6d: b6:0e:ba:bc:aa:1c:09:b9:e1:a9:7b:44:33:1e:42: 49:58:a7:91:ab:7c:16:90:ae:c0:86:0e:4d:39:01: 1d:f2:17:a8:88:1b:b1:db:e6:78:49:ee:e7:de:37: bf:6b:0e:b7:e9:7b:99:b4:51:81:f6:f1:61:b0:0a: 14:f2:7c:ce:9b:14:ba:9e:91:85:79:b7:bc:0a:c0: 63:94:16:bb:da:d1:72:68:41:d8:0c:30:f0:d6:b4: 45:bd:9d:3d:55:c6:47:79:79:10:58:48:bc:6c:d7: 50:41:e0:b6:11:4b:cc:0c:63:43:05:79:36:5d:49: b0:99:6f:f6:5b:eb:e3:8b:83:e5:9f:f2:59:e1:ba: 42:ff:8a:aa:7f:20:93:dd:c5:d3:89:03:ec:30:f9: 39:f0:cc:ab:d3:1e:57:fd:b3:31:b2:9d:03:f0:04: a9:de:80:02:7c:83:3c:71:3a:d7:3a:d5:13:04:6b: 5f:d0:e2:4a:24:a0:99:80:b9:00:7f:6d:dc:9a:04: 5e:86:3c:9a:87:38:cb:5f:48:8e:f7:aa:bd:07:30: 84:e4:16:e3:4b:a1:13:13:a0:6c:d0:c9:34:8a:33: e7:38:2c:6f:3c:29:da:d3:4e:04:ab:25:cd:bf:69: 74:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:ED:10:D6:1B:DA:7B:1C:72:23:FE:BC:27:08:CF:7A:BD:1E:5A:8E X509v3 Authority Key Identifier: keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/B37A1AB4E1A811EFBC05A21AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.38.0/23 Signature Algorithm: sha256WithRSAEncryption 90:58:08:56:46:70:20:31:f6:6b:12:22:73:ba:6f:de:b8:8a: 45:64:de:19:a6:1d:96:cc:4d:78:bc:4b:b3:0c:3a:72:07:f3: ef:e8:d2:bf:7b:5f:5e:e7:55:3e:c6:aa:8b:46:b0:25:99:03: 1c:15:de:63:57:19:d3:43:2f:8b:03:c5:09:17:57:6f:ac:96: 63:48:0f:00:4a:9d:22:8f:a3:af:9f:83:e9:a5:95:57:08:e4: 09:17:11:03:f2:bb:38:d5:62:fb:9b:30:bd:46:7d:ba:7f:f1: d5:c0:6c:03:1a:b8:a4:79:57:54:c3:75:14:94:8d:9b:1b:41: 5d:33:34:88:a9:9e:7c:86:aa:46:9d:e3:cf:18:20:45:fb:10: aa:7a:a8:26:31:de:74:e0:cd:a5:36:cc:a3:7e:96:7d:6a:2c: 80:ff:0e:47:67:1d:49:12:73:b0:34:a7:61:7a:a2:52:c5:74: f3:8d:81:15:df:3f:f3:0c:fb:3b:d0:17:00:41:db:52:d2:82: c4:c6:c7:99:07:13:a3:93:b0:e7:d8:27:68:8e:a5:a1:f7:54: aa:a8:ba:dc:3b:3a:27:f1:d7:b8:97:f8:15:24:af:96:bb:41: e2:72:95:e2:57:77:7b:7f:b7:9b:bd:60:45:e7:c0:2d:45:6b: 6f:7a:24:b9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFBNkExMTAvBgNVBAUTKDZBNEEwNzRFRTVCRTdGM0JBODUwQjNCQTIxNDI5NkI2 NUIxQTJEQUQwHhcNMjUwNTA2MjEwMTI1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhNzhhNS1iN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwUue+mhWff29mBy5222Drq8qhwJueGpe0QzHkJJWKeRq3wWkK7Ahg5NOQEd 8heoiBux2+Z4Se7n3je/aw636XuZtFGB9vFhsAoU8nzOmxS6npGFebe8CsBjlBa7 2tFyaEHYDDDw1rRFvZ09VcZHeXkQWEi8bNdQQeC2EUvMDGNDBXk2XUmwmW/2W+vj i4Pln/JZ4bpC/4qqfyCT3cXTiQPsMPk58Myr0x5X/bMxsp0D8ASp3oACfIM8cTrX OtUTBGtf0OJKJKCZgLkAf23cmgRehjyahzjLX0iO96q9BzCE5BbjS6ETE6Bs0Mk0 ijPnOCxvPCna004EqyXNv2l0TQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAztENYb 2nscciP+vCcIz3q9HlqOMB8GA1UdIwQYMBaAFGpKB07lvn87qFCzuiFClrZbGi2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUE2QS82MkJFMEFDNkNF OUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6dW9VTE82SVVLV3Rsc2FM YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Frb0hUdVctZnp1b1VMTzZJVUtXdGxzYUxhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDFBNkEvNjJCRTBBQzZDRTlFMTFFQTg4NTRBMTUwQzRGOUFFMDIvQjM3QTFBQjRF MUE4MTFFRkJDMDVBMjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmSYwDQYJKoZIhvcNAQELBQADggEBAJBYCFZGcCAx9msS InO6b964ikVk3hmmHZbMTXi8S7MMOnIH8+/o0r97X17nVT7GqotGsCWZAxwV3mNX GdNDL4sDxQkXV2+slmNIDwBKnSKPo6+fg+mllVcI5AkXEQPyuzjVYvubML1Gfbp/ 8dXAbAMauKR5V1TDdRSUjZsbQV0zNIipnnyGqkad488YIEX7EKp6qCYx3nTgzaU2 zKN+ln1qLID/DkdnHUkSc7A0p2F6olLFdPONgRXfP/MM+zvQFwBB21LSgsTGx5kH E6OTsOfYJ2iOpaH3VKqoutw7Oifx17iX+BUkr5a7QeJyleJXd3t/t5u9YEXnwC1F a296JLk= -----END CERTIFICATE-----Generated at Mon Jun 2 07:14:27 2025 by rpki-client