$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/F83346DA410211F097F43F85C4F9AE02.roa File: F83346DA410211F097F43F85C4F9AE02.roa (raw, json) Hash identifier: EnqZyVfj3TKzoAvrOL6tNqUILt/NgCo/Yq0hgyekdPE= Subject key identifier: 4D:23:75:4A:9A:CA:9D:94:AC:E8:92:C6:57:7B:AE:DB:04:B7:A8:FE Certificate issuer: /CN=A914D0AF/serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6 Certificate serial: 0A Authority key identifier: 63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/F83346DA410211F097F43F85C4F9AE02.roa Signing time: Thu 12 Jun 2025 11:46:53 +0000 ROA not before: Thu 12 Jun 2025 11:46:53 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 149492 IP address blocks: 103.181.46.0/23 maxlen: 23 103.181.46.0/24 maxlen: 24 103.181.47.0/24 maxlen: 24 2001:df0:67c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0AF, serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6 Validity Not Before: Jun 12 11:46:53 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=684abe2d-215e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:66:91:00:70:07:fa:3a:93:f2:a6:4c:fe:75: b1:d7:a8:63:0e:ca:56:0b:fe:f8:84:10:71:b0:06: 7b:82:ee:28:6f:fd:6f:d7:ee:96:86:cc:a4:a0:42: 6f:64:8c:09:2a:e4:07:d7:01:54:a0:49:67:e5:e3: 21:72:9d:76:2f:5f:a7:86:95:6a:09:a5:3f:8f:93: 0e:e3:6d:48:9f:5c:25:94:93:ec:da:66:44:1a:c6: 4d:c6:5b:a1:0d:70:32:bb:9e:a7:5f:ce:06:86:a4: af:b4:70:93:ab:bf:a0:80:2c:7c:b7:ca:e6:a6:b9: 5a:e6:68:ec:ff:4f:e1:82:0b:6c:5a:50:d0:ad:bd: 91:6c:6a:8e:aa:dd:1f:5c:b3:12:e7:30:8e:fd:7f: 8d:46:98:15:da:e7:cf:9a:17:d5:90:b5:23:f7:d9: c5:54:db:2f:d0:55:5d:e0:3a:d4:0a:44:3f:17:9f: cb:94:fa:14:20:7f:9a:68:0d:aa:39:80:c1:f5:19: 60:8c:fd:a8:02:fa:27:d9:e9:3c:42:4f:e0:60:0d: d0:02:da:e2:29:a9:aa:ee:9c:f2:19:92:06:cf:93: 44:14:e4:d1:73:f4:c4:0b:a8:25:55:44:1f:42:a3: 35:c7:3d:0f:39:eb:fe:01:56:52:8a:96:5c:2d:f9: 22:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:23:75:4A:9A:CA:9D:94:AC:E8:92:C6:57:7B:AE:DB:04:B7:A8:FE X509v3 Authority Key Identifier: keyid:63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/F83346DA410211F097F43F85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.46.0/23 IPv6: 2001:df0:67c0::/48 Signature Algorithm: sha256WithRSAEncryption 09:40:13:cb:46:d0:40:db:15:0b:89:cb:c2:db:ff:df:e5:fb: 5b:11:88:5a:7a:11:19:a3:79:ea:fe:b9:df:0d:86:4e:75:a3: b8:ee:64:49:43:6e:82:05:04:aa:c0:52:47:af:02:f8:e3:8c: 52:3d:92:39:2a:af:2c:2e:4d:ad:54:c0:67:1a:92:cb:c8:ac: 8d:01:f4:ce:22:d0:ef:2e:79:3a:17:78:3f:cd:85:a6:73:93: be:b6:c4:b6:a6:d7:a2:6d:25:0e:32:a1:38:d7:30:28:d8:24: 69:b5:90:40:64:8c:9f:1b:f2:d3:e8:49:8f:02:7f:37:4a:04: e2:2f:d4:dd:41:41:87:29:de:a0:55:5e:e7:67:21:fc:aa:32: ef:a7:a5:c6:60:85:53:a9:36:5c:3e:f8:71:a8:97:a1:7e:f3: a1:f2:03:e3:11:d1:aa:48:e2:a7:cc:ba:06:bc:e6:87:bb:c0: 18:9b:27:9d:44:53:91:a4:6f:b2:e4:94:2a:f5:d4:e4:1b:5d: 32:a6:ea:5c:d3:95:f4:81:50:4b:a2:9b:0f:7e:4d:0c:11:5c: 3b:4f:35:e8:46:1b:82:b6:3c:c0:78:9b:b8:12:ea:3c:3a:2c: f8:91:96:13:7a:1d:ac:1f:b5:d7:27:62:eb:a0:9b:60:a1:42: e9:d3:d5:56 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RDBBRjExMC8GA1UEBRMoNjNCNzAxQjcyNzA2RjMxOTBCRUY4QkZCRkEzNEZGQTMz RjRGNkJENjAeFw0yNTA2MTIxMTQ2NTNaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NGFiZTJkLTIxNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIZpEAcAf6OpPypkz+dbHXqGMOylYL/viEEHGwBnuC7ihv/W/X7paGzKSgQm9k jAkq5AfXAVSgSWfl4yFynXYvX6eGlWoJpT+Pkw7jbUifXCWUk+zaZkQaxk3GW6EN cDK7nqdfzgaGpK+0cJOrv6CALHy3yuamuVrmaOz/T+GCC2xaUNCtvZFsao6q3R9c sxLnMI79f41GmBXa58+aF9WQtSP32cVU2y/QVV3gOtQKRD8Xn8uU+hQgf5poDao5 gMH1GWCM/agC+ifZ6TxCT+BgDdAC2uIpqarunPIZkgbPk0QU5NFz9MQLqCVVRB9C ozXHPQ856/4BVlKKllwt+SJPAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUTSN1SprK nZSs6JLGV3uu2wS3qP4wHwYDVR0jBBgwFoAUY7cBtycG8xkL74v7+jT/oz9Pa9Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREMEFGLzFFMzM5QjM2ODhE RTExRUM4QThCMTYyOEM0RjlBRTAyL1k3Y0J0eWNHOHhrTDc0djctalRfb3o5UGE5 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWTdjQnR5Y0c4eGtMNzR2Ny1qVF9vejlQYTlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDBBRi8xRTMzOUIzNjg4REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9GODMzNDZEQTQx MDIxMUYwOTdGNDNGODVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWe1LjAPBAIAAjAJAwcAIAEN8GfAMA0GCSqGSIb3DQEBCwUA A4IBAQAJQBPLRtBA2xULicvC2//f5ftbEYhaehEZo3nq/rnfDYZOdaO47mRJQ26C BQSqwFJHrwL444xSPZI5Kq8sLk2tVMBnGpLLyKyNAfTOItDvLnk6F3g/zYWmc5O+ tsS2pteibSUOMqE41zAo2CRptZBAZIyfG/LT6EmPAn83SgTiL9TdQUGHKd6gVV7n ZyH8qjLvp6XGYIVTqTZcPvhxqJehfvOh8gPjEdGqSOKnzLoGvOaHu8AYmyedRFOR pG+y5JQq9dTkG10ypupc05X0gVBLopsPfk0MEVw7TzXoRhuCtjzAeJu4Euo8Oiz4 kZYTeh2sH7XXJ2LroJtgoULp09VW -----END CERTIFICATE-----Generated at Wed Jul 2 01:24:33 2025 by rpki-client