$ rpki-client -vvf rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/F38DEBFC83E911EA993D9515C4F9AE02.roa File: F38DEBFC83E911EA993D9515C4F9AE02.roa (raw, json) Hash identifier: qAQSazWUf2FePmcHd1Qj+eRlLm7Ky5QuPvw10+7M0lo= Subject key identifier: 85:8F:FD:CC:73:92:D5:B0:9A:2C:E1:26:B6:D5:2B:5A:9C:31:8D:02 Certificate issuer: /CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Certificate serial: 09BF Authority key identifier: DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/F38DEBFC83E911EA993D9515C4F9AE02.roa Signing time: Fri 30 May 2025 20:56:41 +0000 ROA not before: Fri 30 May 2025 20:56:41 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139605 IP address blocks: 103.150.156.0/23 maxlen: 23 103.150.156.0/24 maxlen: 24 103.150.157.0/24 maxlen: 24 2001:df3:7b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2495 (0x9bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144717, serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Validity Not Before: May 30 20:56:41 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683a1b89-6441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:79:e4:f9:a5:3d:54:85:44:b0:67:35:70:47: 2f:90:e2:4c:f0:d5:f4:bb:76:36:eb:6e:66:3a:ee: 22:17:61:84:c6:21:de:b1:dd:a1:26:20:73:bd:cd: 70:77:df:41:cf:4e:99:6d:c4:4e:c3:e9:ce:53:13: 28:f2:90:ab:ed:fc:db:60:89:66:48:f7:e9:2d:3d: b8:2e:14:e3:44:06:69:3b:35:9e:08:de:48:66:8c: e1:4d:4f:7a:d9:79:f8:8d:60:66:e4:41:c2:76:71: 60:e8:3c:ed:fd:94:21:93:93:8c:05:e2:19:5a:61: b0:79:e2:d4:d4:c9:b1:e1:e9:59:b3:dc:7b:15:46: 13:36:87:83:58:79:5d:89:59:21:e4:75:6b:69:96: 8e:4b:fb:7e:24:e2:fc:a0:a7:c8:62:04:91:da:20: 53:80:1a:93:c4:d7:f0:4e:54:05:6e:b3:9e:2c:18: 05:6d:d5:46:13:93:38:43:b7:76:c2:77:01:9f:fd: 21:78:01:2e:bc:a8:c2:89:2e:a2:7d:2c:e4:fb:04: 1b:dc:83:1e:18:07:16:b5:dc:4a:ff:67:cb:0e:87: be:b0:30:8f:c5:21:05:af:69:31:88:9d:25:f5:08: 0b:0b:82:55:e9:6d:ee:e3:7a:3c:b9:3a:e8:be:a2: cc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8F:FD:CC:73:92:D5:B0:9A:2C:E1:26:B6:D5:2B:5A:9C:31:8D:02 X509v3 Authority Key Identifier: keyid:DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/F38DEBFC83E911EA993D9515C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.156.0/23 IPv6: 2001:df3:7b80::/48 Signature Algorithm: sha256WithRSAEncryption 8a:4c:54:33:b3:4f:f7:5b:17:97:53:13:ed:65:90:9b:7e:0f: 44:15:64:7b:3c:8b:12:be:d1:6c:d3:27:52:cb:ce:ee:a4:68: af:9c:57:f7:13:1e:e7:b7:61:71:f4:e1:fc:04:3b:9f:43:c5: f4:18:4e:74:7c:cd:0b:75:3e:7d:81:db:2b:82:a7:17:5e:46: 31:4d:48:17:62:10:2d:0d:db:da:94:b5:cc:5a:28:ea:9b:04: e8:a8:ee:f6:11:c7:42:79:b4:56:52:08:b1:a0:be:1a:7e:35: 0d:91:c4:8d:72:c3:30:5c:82:c2:0d:0f:97:46:40:51:ad:38: c9:ff:9a:17:fb:06:41:e3:6d:75:b2:59:37:fc:f4:36:48:cc: d4:0f:54:ba:92:33:49:79:7c:05:88:9d:99:cc:e9:d9:50:1d: 6c:87:01:5c:62:5c:cb:22:9d:bb:fc:44:52:6e:37:4f:bd:33: 72:06:ef:dc:5d:6e:1e:54:4e:31:a9:5d:87:df:a8:93:ed:96: 00:84:ef:45:7c:f1:0c:da:b9:b8:3f:3c:4f:93:c7:bd:cd:4f: 6b:8c:71:42:6c:9d:f0:f1:fd:3e:ad:78:6b:84:1e:57:78:c6: ce:62:7d:f9:ac:38:56:65:f6:00:7e:3f:47:07:1e:49:fc:5d: 1b:c7:08:74 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3MTcxMTAvBgNVBAUTKERBNTAzRjk3MkNCQzkzQThDODFERjk1RjU0QTJDQjJB MzhGMTNDNzcwHhcNMjUwNTMwMjA1NjQxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNhMWI4OS02NDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3nk+aU9VIVEsGc1cEcvkOJM8NX0u3Y2625mOu4iF2GExiHesd2hJiBzvc1w d99Bz06ZbcROw+nOUxMo8pCr7fzbYIlmSPfpLT24LhTjRAZpOzWeCN5IZozhTU96 2Xn4jWBm5EHCdnFg6Dzt/ZQhk5OMBeIZWmGweeLU1Mmx4elZs9x7FUYTNoeDWHld iVkh5HVraZaOS/t+JOL8oKfIYgSR2iBTgBqTxNfwTlQFbrOeLBgFbdVGE5M4Q7d2 wncBn/0heAEuvKjCiS6ifSzk+wQb3IMeGAcWtdxK/2fLDoe+sDCPxSEFr2kxiJ0l 9QgLC4JV6W3u43o8uTrovqLMoQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFIWP/cxz ktWwmizhJrbVK1qcMY0CMB8GA1UdIwQYMBaAFNpQP5csvJOoyB35X1Siyyo48Tx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDcxNy8zOTg4OTAwMDgz RTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2aklIZmxmVktMTEtqanhQ SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsQV9seXk4azZqSUhmbGZWS0xMS2pqeFBIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDQ3MTcvMzk4ODkwMDA4M0U4MTFFQUI3NzAwNTEzQzRGOUFFMDIvRjM4REVCRkM4 M0U5MTFFQTk5M0Q5NTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlpwwDwQCAAIwCQMHACABDfN7gDANBgkqhkiG9w0BAQsF AAOCAQEAikxUM7NP91sXl1MT7WWQm34PRBVkezyLEr7RbNMnUsvO7qRor5xX9xMe 57dhcfTh/AQ7n0PF9BhOdHzNC3U+fYHbK4KnF15GMU1IF2IQLQ3b2pS1zFoo6psE 6Kju9hHHQnm0VlIIsaC+Gn41DZHEjXLDMFyCwg0Pl0ZAUa04yf+aF/sGQeNtdbJZ N/z0NkjM1A9UupIzSXl8BYidmczp2VAdbIcBXGJcyyKdu/xEUm43T70zcgbv3F1u HlROMaldh9+ok+2WAITvRXzxDNq5uD88T5PHvc1Pa4xxQmyd8PH9Pq14a4QeV3jG zmJ9+aw4VmX2AH4/RwceSfxdG8cIdA== -----END CERTIFICATE-----Generated at Wed Nov 5 15:48:38 2025 by rpki-client