$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/F6D63384C53511ECA64F3010C4F9AE02.roa File: F6D63384C53511ECA64F3010C4F9AE02.roa (raw, json) Hash identifier: OVxLUiCstDCJM1i8OMKxBPVWt9kugvVdd+GEnlwY4Bo= Subject key identifier: EE:61:2F:34:5B:22:97:FE:A2:71:9F:C7:8A:53:6F:C3:FF:B0:B5:E5 Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 0342 Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/F6D63384C53511ECA64F3010C4F9AE02.roa Signing time: Sun 11 May 2025 01:07:34 +0000 ROA not before: Sun 11 May 2025 01:07:34 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 26658 IP address blocks: 103.24.153.0/24 maxlen: 24 103.24.154.0/24 maxlen: 24 103.24.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 02:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 834 (0x342) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Validity Not Before: May 11 01:07:34 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681ff856-73fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:cf:d3:c6:98:75:bf:74:50:32:5b:be:f6: 97:1f:16:68:a9:13:8d:c7:b1:91:97:93:4b:50:14: ab:8d:f3:c9:c4:16:70:cf:86:f5:2c:3d:a1:a4:4d: 8c:6f:e3:57:b4:3d:52:4c:a0:04:fe:52:3f:7d:9c: 49:03:27:76:75:11:af:d1:ee:5e:9a:ca:38:fb:14: 56:47:ce:fa:08:74:c0:47:54:a5:bb:d3:46:1f:fa: c3:31:b1:bc:2e:5f:4b:8a:a7:f2:55:a9:14:7e:c8: 52:06:87:da:13:82:c8:1c:b0:d2:55:bd:92:c1:c6: c1:48:c6:56:ff:d0:ae:c9:c7:fa:4b:45:e7:10:bb: 70:a9:61:55:d5:89:0d:7a:51:be:5e:e4:43:0d:e4: fe:d5:2e:fb:bb:a4:63:97:b0:a8:4f:e7:89:88:de: ee:3b:6f:8d:9d:9e:09:c0:ff:8c:08:4e:35:35:68: 76:43:b0:8a:35:a6:45:f8:88:97:06:6c:8c:e1:65: 5a:a8:91:67:5a:ab:7b:ad:e8:3e:24:4c:b4:d6:3e: 47:93:ca:76:7b:fc:07:e9:e9:f9:f3:89:37:8c:73: bb:ca:d3:65:3b:32:09:bc:96:63:68:72:0f:c2:98: b6:8c:93:d0:52:9f:d5:33:de:cb:1f:7f:c2:48:94: 32:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:61:2F:34:5B:22:97:FE:A2:71:9F:C7:8A:53:6F:C3:FF:B0:B5:E5 X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/F6D63384C53511ECA64F3010C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.24.153.0-103.24.155.255 Signature Algorithm: sha256WithRSAEncryption 17:a8:ce:bb:10:60:41:60:82:f0:8f:27:e2:cc:f8:e5:d8:51: 19:d7:54:67:7b:7b:4f:f4:14:b9:ae:1b:1e:a0:74:b0:7e:1a: d8:15:32:b1:04:66:79:02:99:71:3e:c9:13:8d:de:ff:1a:08: 98:57:2e:cc:3e:63:ab:de:7f:86:ad:61:e6:74:00:0f:e9:46: de:16:eb:9d:80:c1:1b:df:aa:77:1a:97:c6:9a:85:4b:a4:20: cf:df:08:a5:3c:8e:62:61:ea:44:42:cf:af:fd:d5:2a:39:8f: 69:bd:ed:cc:9b:dc:38:c2:ce:43:9d:0b:17:ae:5a:f2:19:ab: 5a:21:88:a3:1e:ab:a6:2a:d4:a9:c9:1e:78:de:b3:15:f6:4e: c2:83:e3:5e:be:d5:0d:cb:a0:51:75:b5:11:79:3d:30:9b:f2: 41:fd:4a:86:1e:26:0c:03:d1:11:8c:42:1a:0e:9b:bd:89:53: 49:6e:08:b6:94:85:f3:ec:f6:55:97:94:28:76:42:f3:85:32: ce:9e:ca:31:dc:85:0b:ef:dd:3b:dd:ca:6b:42:be:5a:52:1a: 5a:77:d1:95:d6:df:e6:0c:d3:d7:31:93:17:1c:f9:60:5f:43: 54:47:75:92:6d:b5:17:f7:70:ba:2e:a1:91:2e:d0:ee:fc:4f: 49:80:fc:69 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICA0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjUwNTExMDEwNzM0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFmZjg1Ni03M2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6HP08aYdb90UDJbvvaXHxZoqRONx7GRl5NLUBSrjfPJxBZwz4b1LD2hpE2M b+NXtD1STKAE/lI/fZxJAyd2dRGv0e5emso4+xRWR876CHTAR1Slu9NGH/rDMbG8 Ll9LiqfyVakUfshSBofaE4LIHLDSVb2SwcbBSMZW/9Cuycf6S0XnELtwqWFV1YkN elG+XuRDDeT+1S77u6Rjl7CoT+eJiN7uO2+NnZ4JwP+MCE41NWh2Q7CKNaZF+IiX BmyM4WVaqJFnWqt7reg+JEy01j5Hk8p2e/wH6en584k3jHO7ytNlOzIJvJZjaHIP wpi2jJPQUp/VM97LH3/CSJQykQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFO5hLzRb Ipf+onGfx4pTb8P/sLXlMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEZDMkMvQjA0RTkxOUNDNTMzMTFFQzk2REYzMTBGQzRGOUFFMDIvRjZENjMzODRD NTM1MTFFQ0E2NEYzMDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAGcYmQMEAmcYmDANBgkqhkiG9w0BAQsFAAOCAQEAF6jO uxBgQWCC8I8n4sz45dhRGddUZ3t7T/QUua4bHqB0sH4a2BUysQRmeQKZcT7JE43e /xoImFcuzD5jq95/hq1h5nQAD+lG3hbrnYDBG9+qdxqXxpqFS6Qgz98IpTyOYmHq RELPr/3VKjmPab3tzJvcOMLOQ50LF65a8hmrWiGIox6rpirUqckeeN6zFfZOwoPj Xr7VDcugUXW1EXk9MJvyQf1Khh4mDAPREYxCGg6bvYlTSW4ItpSF8+z2VZeUKHZC 84Uyzp7KMdyFC+/dO93Ka0K+WlIaWnfRldbf5gzT1zGTFxz5YF9DVEd1km21F/dw ui6hkS7Q7vxPSYD8aQ== -----END CERTIFICATE-----Generated at Mon Oct 27 20:10:06 2025 by rpki-client