$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/AA4C4484A9EC11EE800F7626C4F9AE02.roa File: AA4C4484A9EC11EE800F7626C4F9AE02.roa (raw, json) Hash identifier: 3XvxyjmJ18+MDyHbsINeBS/PyLVoir6bW8ksJcj0fKs= Subject key identifier: EE:C5:F9:66:E4:58:43:4E:58:C8:6B:F6:6D:11:40:4C:76:94:96:7D Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Certificate serial: 011A Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/AA4C4484A9EC11EE800F7626C4F9AE02.roa Signing time: Mon 02 Jun 2025 21:49:20 +0000 ROA not before: Mon 02 Jun 2025 21:49:20 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136257 IP address blocks: 103.85.112.0/23 maxlen: 23 103.85.112.0/24 maxlen: 24 103.85.113.0/24 maxlen: 24 103.85.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Validity Not Before: Jun 2 21:49:20 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=683e1c60-f3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:a3:03:2e:b5:ff:98:e1:65:2d:11:33:3c: 53:d4:36:8f:c0:53:38:d4:73:01:b7:e3:aa:0f:a0: f9:b2:3e:18:9d:c7:c9:a4:ae:f8:75:7d:d1:ea:92: 81:61:48:7a:37:e4:c1:9c:53:b6:07:4a:8e:28:ad: c5:c5:1a:ca:23:c9:ec:4a:d4:9e:3a:51:c2:9f:0e: b8:ab:8a:85:5c:dd:7c:43:9f:72:2e:4b:e8:b9:8d: 89:15:8d:53:26:da:a4:79:65:c9:07:d5:84:36:91: 16:5f:f9:de:0a:e9:57:e4:9f:d0:4d:87:f8:40:26: 93:60:d1:09:b7:00:a3:4d:61:9e:9d:10:bf:bb:e5: 94:7f:88:0a:5b:e8:4a:14:65:93:09:1e:3c:fd:04: 93:0b:10:a6:6b:e1:6a:00:83:03:5b:4c:17:e5:ba: 66:f3:95:00:59:0f:fa:30:4f:c7:22:3f:9e:77:c8: bf:24:6a:93:12:14:8e:69:6b:d6:88:56:02:52:bd: f9:2a:a9:7f:55:e8:2d:2f:9e:ad:31:c7:18:e1:61: 62:06:99:fb:0e:c7:31:e2:69:dd:6e:90:8c:05:54: a6:b2:eb:04:e9:34:66:ac:3b:65:e0:e1:8f:dc:a2: 49:5d:d6:6b:05:d0:bf:c5:d9:2f:82:c8:47:32:82: a4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C5:F9:66:E4:58:43:4E:58:C8:6B:F6:6D:11:40:4C:76:94:96:7D X509v3 Authority Key Identifier: keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/AA4C4484A9EC11EE800F7626C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.112.0/23 103.85.115.0/24 Signature Algorithm: sha256WithRSAEncryption 67:a5:3d:e8:d6:81:54:3b:d5:7f:12:4f:9f:52:8e:d4:f5:fd: 3b:c8:da:92:64:a1:14:63:38:b3:c1:2c:0c:99:82:23:90:ba: 90:98:d3:d0:50:72:84:e8:69:86:ce:c1:33:48:b1:15:93:e4: 9a:a5:51:4b:3c:6b:ed:3e:20:1f:1e:9f:1d:bf:db:7b:54:57: aa:5b:cf:b7:7b:06:26:4d:a0:15:aa:a8:6d:83:e9:e2:7b:1b: c6:08:4d:da:21:96:04:be:94:c8:04:64:ce:8a:4a:db:d3:70: 5d:3a:36:44:db:52:1d:08:eb:67:44:20:ba:16:6d:60:4b:bc: 0e:cd:56:9b:62:79:ed:f0:74:8c:6f:21:9c:2f:de:6b:48:1f: 24:a7:57:10:ea:49:55:56:47:52:5d:42:a4:19:77:35:2d:d8: e2:1a:89:53:f9:6c:99:ca:4b:29:1f:60:54:3e:d5:f0:3e:1b: 10:3e:c4:a9:04:9c:95:12:ef:53:d6:7c:8f:f0:d2:80:65:98: 23:0c:c6:31:d6:6d:63:6a:18:70:f1:18:b8:36:8f:71:ef:65: dc:7d:24:44:14:1d:a7:25:e9:92:ee:61:06:9f:35:12:c6:6d: ad:6d:c1:20:c3:f2:6b:73:44:d9:8a:e9:b0:f7:b4:8f:97:77: 98:6d:0e:73 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RTIxMTAvBgNVBAUTKDdEMDYyQzcyREM1RUYxMkYwNUM0MTY3OUZDNkZFMjU1 MkI0RUEwMjAwHhcNMjUwNjAyMjE0OTIwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlMWM2MC1mM2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8ijAy61/5jhZS0RMzxT1DaPwFM41HMBt+OqD6D5sj4YncfJpK74dX3R6pKB YUh6N+TBnFO2B0qOKK3FxRrKI8nsStSeOlHCnw64q4qFXN18Q59yLkvouY2JFY1T JtqkeWXJB9WENpEWX/neCulX5J/QTYf4QCaTYNEJtwCjTWGenRC/u+WUf4gKW+hK FGWTCR48/QSTCxCma+FqAIMDW0wX5bpm85UAWQ/6ME/HIj+ed8i/JGqTEhSOaWvW iFYCUr35Kql/VegtL56tMccY4WFiBpn7Dscx4mndbpCMBVSmsusE6TRmrDtl4OGP 3KJJXdZrBdC/xdkvgshHMoKkDwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFO7F+Wbk WENOWMhr9m0RQEx2lJZ9MB8GA1UdIwQYMBaAFH0GLHLcXvEvBcQWefxv4lUrTqAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThTOEZ4Qlo1X0dfaVZTdE9v Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZRWXNjdHhlOFM4RnhCWjVfR19pVlN0T29DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ4RTIvQzA5MkIxMDYxREVGMTFFQjgzNUUxNTdBQzRGOUFFMDIvQUE0QzQ0ODRB OUVDMTFFRTgwMEY3NjI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnVXADBABnVXMwDQYJKoZIhvcNAQELBQADggEBAGelPejW gVQ71X8ST59SjtT1/TvI2pJkoRRjOLPBLAyZgiOQupCY09BQcoToaYbOwTNIsRWT 5JqlUUs8a+0+IB8enx2/23tUV6pbz7d7BiZNoBWqqG2D6eJ7G8YITdohlgS+lMgE ZM6KStvTcF06NkTbUh0I62dEILoWbWBLvA7NVptiee3wdIxvIZwv3mtIHySnVxDq SVVWR1JdQqQZdzUt2OIaiVP5bJnKSykfYFQ+1fA+GxA+xKkEnJUS71PWfI/w0oBl mCMMxjHWbWNqGHDxGLg2j3HvZdx9JEQUHacl6ZLuYQafNRLGba1twSDD8mtzRNmK 6bD3tI+Xd5htDnM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:57:52 2025 by rpki-client