$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/B688C61E2A7411F09C50DF45C4F9AE02.roa File: B688C61E2A7411F09C50DF45C4F9AE02.roa (raw, json) Hash identifier: PvI9nhg15RMbIrPmzo33E5WP1sio6iu2Cas5ym98pTY= Subject key identifier: AF:C9:E4:2B:BE:B7:B7:7F:D8:07:88:FD:2F:5A:FF:C7:32:92:3C:43 Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Certificate serial: 0C29 Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/B688C61E2A7411F09C50DF45C4F9AE02.roa Signing time: Tue 06 May 2025 12:22:02 +0000 ROA not before: Tue 06 May 2025 12:22:02 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 137453 IP address blocks: 103.126.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 18:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3113 (0xc29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CBF3, serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Validity Not Before: May 6 12:22:02 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6819fee9-8fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c0:9a:d0:01:3d:f1:0e:1d:42:cf:cd:14:23: 3e:aa:1f:7a:7c:16:6c:33:13:12:83:45:d6:f8:34: 1e:da:2e:87:e3:2f:3b:1d:0b:0a:da:48:92:b0:cc: 94:d6:45:86:5a:fa:f4:df:7e:6a:d2:83:63:d1:db: 38:88:ce:6e:a2:9f:04:f9:7c:f2:4e:92:d8:ec:c0: bd:ca:95:80:57:b6:0e:96:51:96:b2:1b:27:33:05: 3a:23:4a:d9:3a:54:19:29:8f:90:e6:4c:48:97:a0: 72:17:81:4d:e3:17:83:66:c3:8d:e0:22:68:e4:07: da:54:e2:de:5e:50:76:dd:92:c2:3a:c3:b3:b7:17: cd:f7:bf:5f:7f:c6:a9:2b:b1:bd:67:be:0e:5d:e1: 13:a9:59:84:cd:c7:a0:70:44:48:68:17:17:90:aa: 8e:c9:9f:e6:24:5c:37:c0:a8:4d:a7:c6:1c:62:cb: 48:71:07:6e:1f:ab:b6:df:9a:5c:01:03:e2:bd:a1: 91:15:19:0c:a6:ce:64:6d:60:cd:90:d0:f1:35:86: 52:3f:5d:b2:4c:68:42:04:56:64:18:29:04:4e:39: d3:7d:c0:00:96:64:30:f3:95:da:c4:05:45:05:7a: 9a:e4:35:65:66:44:82:f5:8a:4b:a3:48:2a:e7:82: 56:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C9:E4:2B:BE:B7:B7:7F:D8:07:88:FD:2F:5A:FF:C7:32:92:3C:43 X509v3 Authority Key Identifier: keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/B688C61E2A7411F09C50DF45C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.126.20.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:97:aa:4e:78:2c:99:15:cc:bb:de:ca:6a:a9:44:16:a0:f6: 76:13:b3:ed:37:55:17:6a:89:ce:01:ac:f3:26:13:92:8e:0d: 8a:50:18:3d:b9:c3:89:c9:32:c8:f4:0c:b1:6c:39:86:e1:f1: 28:c3:a7:5f:86:42:3b:5c:3e:b4:25:99:52:53:ae:98:53:64: 44:71:ab:4e:cb:a4:17:39:64:39:36:41:96:95:8d:ef:bc:a4: b3:b7:1c:69:c4:96:bd:d0:00:f2:16:29:d8:75:a3:bc:b6:f3: 28:73:9f:0f:37:8f:3e:34:2b:3c:bf:ab:ab:71:9a:01:d3:e7: 5c:e5:a6:c6:83:4b:be:3f:5a:47:88:b4:43:ea:f9:10:78:c3: f3:40:21:d9:51:67:5d:05:2e:5b:5d:e2:6a:68:a9:4e:10:80: 8d:9e:66:54:90:15:7d:ae:57:e9:29:b9:68:35:08:f7:ed:4b: e3:d8:4b:96:62:68:fe:43:7d:4a:81:47:68:42:61:88:43:f2: 38:05:e2:b2:ef:65:5d:0f:c2:fe:53:1b:95:9f:0f:ae:d9:1c: 00:76:ce:20:76:68:f5:0d:a8:87:01:d4:55:f7:f4:c0:c4:96: 5b:38:57:41:b0:8e:2e:03:54:ec:ff:f1:19:07:46:05:c5:fd: b6:9c:87:df -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQyQzdDQ0M2REQx OTM1MTA3MDcwHhcNMjUwNTA2MTIyMjAyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE5ZmVlOS04ZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMCa0AE98Q4dQs/NFCM+qh96fBZsMxMSg0XW+DQe2i6H4y87HQsK2kiSsMyU 1kWGWvr0335q0oNj0ds4iM5uop8E+XzyTpLY7MC9ypWAV7YOllGWshsnMwU6I0rZ OlQZKY+Q5kxIl6ByF4FN4xeDZsON4CJo5AfaVOLeXlB23ZLCOsOztxfN979ff8ap K7G9Z74OXeETqVmEzcegcERIaBcXkKqOyZ/mJFw3wKhNp8YcYstIcQduH6u235pc AQPivaGRFRkMps5kbWDNkNDxNYZSP12yTGhCBFZkGCkETjnTfcAAlmQw85XaxAVF BXqa5DVlZkSC9YpLo0gq54JWKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK/J5Cu+ t7d/2AeI/S9a/8cykjxDMB8GA1UdIwQYMBaAFOJEnjEiIBMeLnbELHzMbdGTUQcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0JGMy8xQkM2RUIyMDEx RTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4NHVkc1FzZk14dDBaTlJC d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrU2VNU0lnRXg0dWRzUXNmTXh0MFpOUkJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENCRjMvMUJDNkVCMjAxMUU3MTFFQUI5MDNBQTc5QzRGOUFFMDIvQjY4OEM2MUUy QTc0MTFGMDlDNTBERjQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnfhQwDQYJKoZIhvcNAQELBQADggEBAGuXqk54LJkVzLve ymqpRBag9nYTs+03VRdqic4BrPMmE5KODYpQGD25w4nJMsj0DLFsOYbh8SjDp1+G QjtcPrQlmVJTrphTZERxq07LpBc5ZDk2QZaVje+8pLO3HGnElr3QAPIWKdh1o7y2 8yhznw83jz40Kzy/q6txmgHT51zlpsaDS74/WkeItEPq+RB4w/NAIdlRZ10FLltd 4mpoqU4QgI2eZlSQFX2uV+kpuWg1CPftS+PYS5ZiaP5DfUqBR2hCYYhD8jgF4rLv ZV0Pwv5TG5WfD67ZHAB2ziB2aPUNqIcB1FX39MDElls4V0Gwji4DVOz/8RkHRgXF /bach98= -----END CERTIFICATE-----Generated at Sun Jun 8 21:35:35 2025 by rpki-client