$ rpki-client -vvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/4D6093C2EAD711ECBF99921CC4F9AE02.roa File: 4D6093C2EAD711ECBF99921CC4F9AE02.roa (raw, json) Hash identifier: LMp5kVNCStiwGpSsrDjiKfBvLER7LLTCwt6mJ3nCrNY= Subject key identifier: 99:36:B3:B0:B6:E8:01:1A:10:9C:FB:AF:46:F7:13:94:76:74:A5:78 Certificate issuer: /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Certificate serial: 0304 Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/4D6093C2EAD711ECBF99921CC4F9AE02.roa Signing time: Sat 31 May 2025 15:26:08 +0000 ROA not before: Sat 31 May 2025 15:26:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141767 IP address blocks: 103.186.196.0/23 maxlen: 24 2400:74e0::/32 maxlen: 32 2400:74e0::/47 maxlen: 48 2400:74e0:2::/48 maxlen: 48 2400:74e0:3::/48 maxlen: 48 2400:74e0:f::/48 maxlen: 48 2400:74e0:10::/47 maxlen: 47 2400:74e0:10::/48 maxlen: 48 2400:74e0:11::/48 maxlen: 48 2400:74e0:12::/47 maxlen: 48 2400:74e0:21::/48 maxlen: 48 2400:74e0:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 772 (0x304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E2CC, serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Validity Not Before: May 31 15:26:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=683b1f8f-4305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2c:2a:51:ce:27:70:d2:67:ce:ac:9c:81:08: fd:fc:97:e1:66:48:5c:d5:c1:4d:32:69:9b:99:bb: b9:e0:1f:ad:29:74:a8:ea:4b:eb:b1:ab:61:08:7a: 9b:c4:bf:59:df:53:e9:88:6d:f7:af:91:a4:97:2a: 51:d5:22:49:e0:82:e1:65:bd:f9:b1:7d:80:52:3e: ff:58:58:ce:1a:bb:16:03:f3:20:15:11:28:b0:b6: ac:c4:57:d2:d3:1e:28:f7:9c:80:9c:80:2b:2f:60: 80:f0:e8:a8:43:4c:52:ad:8d:da:a3:dc:82:6d:b7: 80:3e:51:83:f2:2e:15:65:8d:a2:e0:49:13:b1:59: 65:03:0f:3c:12:06:5d:6e:45:a0:4d:db:80:9f:ba: 22:52:2a:f2:bf:43:b4:27:86:9e:3a:a4:59:0b:9b: ee:88:84:a1:03:2e:94:09:0b:87:54:c8:ed:54:f5: 57:07:41:06:46:7f:c9:21:b4:6e:8c:e8:df:50:db: d0:74:04:39:7d:2c:3f:f2:b1:95:d2:8c:a1:3a:24: 56:67:33:fe:4d:db:66:92:4d:8d:35:42:81:ba:63: 97:9c:56:4f:d3:94:e3:45:86:e0:8d:ce:58:9e:da: 35:7f:f2:d3:47:d0:52:52:9f:7d:6e:a8:da:b4:f1: 2d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:36:B3:B0:B6:E8:01:1A:10:9C:FB:AF:46:F7:13:94:76:74:A5:78 X509v3 Authority Key Identifier: keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/4D6093C2EAD711ECBF99921CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.196.0/23 IPv6: 2400:74e0::/32 Signature Algorithm: sha256WithRSAEncryption ac:5c:54:59:14:04:c2:4d:6c:2b:a6:43:98:b3:c6:8e:2d:02: 9c:40:0c:00:e0:48:cd:6f:78:4d:b2:cb:82:0b:c3:75:65:c5: 47:5b:33:38:89:78:99:73:30:db:02:2d:4d:59:00:f2:e7:2e: 54:fd:16:97:8e:b0:1c:aa:3d:be:e3:8b:fe:72:80:49:e0:91: 05:c8:c0:9f:c8:a6:83:68:5a:39:8a:92:04:3c:c3:77:5e:2a: 3a:e9:2f:6a:ce:e4:83:d3:1c:00:4e:be:b8:6a:77:31:1b:58: 6e:ea:bb:13:af:7d:d6:a7:fc:f5:64:a0:d5:1c:ae:10:01:69: 1b:65:2a:1c:ab:58:e3:b4:a5:be:ed:48:2f:51:2d:d4:46:8d: 5a:6e:e2:54:8a:e9:68:25:14:3b:85:91:0d:ea:6f:63:29:27: 00:47:70:e6:44:c9:21:57:08:f2:cb:ef:b2:44:03:54:3b:fc: cf:26:5e:13:2d:24:66:6d:59:64:05:77:46:d2:d9:8a:a1:ee: 70:2d:38:46:26:0c:3b:b7:17:92:28:ad:5d:a0:f0:0f:6b:68: f6:96:b2:25:63:e8:dd:8b:5b:b0:8c:ec:67:33:4e:ca:1b:0c: 2d:62:23:21:c2:5b:c8:cd:86:b8:76:b2:a9:74:91:46:88:02: 2a:f4:1a:fb -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUyQ0MxMTAvBgNVBAUTKEVDNDYxOUEzNDc4QUQzQkQxNkFCNTY2OERERDMzMTFF NEQyREIyMkYwHhcNMjUwNTMxMTUyNjA4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNiMWY4Zi00MzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiwqUc4ncNJnzqycgQj9/JfhZkhc1cFNMmmbmbu54B+tKXSo6kvrsathCHqb xL9Z31PpiG33r5GklypR1SJJ4ILhZb35sX2AUj7/WFjOGrsWA/MgFREosLasxFfS 0x4o95yAnIArL2CA8OioQ0xSrY3ao9yCbbeAPlGD8i4VZY2i4EkTsVllAw88EgZd bkWgTduAn7oiUiryv0O0J4aeOqRZC5vuiIShAy6UCQuHVMjtVPVXB0EGRn/JIbRu jOjfUNvQdAQ5fSw/8rGV0oyhOiRWZzP+Tdtmkk2NNUKBumOXnFZP05TjRYbgjc5Y nto1f/LTR9BSUp99bqjatPEtVQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJk2s7C2 6AEaEJz7r0b3E5R2dKV4MB8GA1UdIwQYMBaAFOxGGaNHitO9FqtWaN3TMR5NLbIv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTJDQy9BRjY3NjVGQ0U1 ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3MFdxMVpvM2RNeEhrMHRz aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFWVpvMGVLMDcwV3ExWm8zZE14SGswdHNpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUUyQ0MvQUY2NzY1RkNFNTgwMTFFQzlCOUQyQjYyQzRGOUFFMDIvNEQ2MDkzQzJF QUQ3MTFFQ0JGOTk5MjFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnusQwDQQCAAIwBwMFACQAdOAwDQYJKoZIhvcNAQELBQAD ggEBAKxcVFkUBMJNbCumQ5izxo4tApxADADgSM1veE2yy4ILw3VlxUdbMziJeJlz MNsCLU1ZAPLnLlT9FpeOsByqPb7ji/5ygEngkQXIwJ/IpoNoWjmKkgQ8w3deKjrp L2rO5IPTHABOvrhqdzEbWG7quxOvfdan/PVkoNUcrhABaRtlKhyrWOO0pb7tSC9R LdRGjVpu4lSK6WglFDuFkQ3qb2MpJwBHcOZEySFXCPLL77JEA1Q7/M8mXhMtJGZt WWQFd0bS2Yqh7nAtOEYmDDu3F5IorV2g8A9raPaWsiVj6N2LW7CM7GczTsobDC1i IyHCW8jNhrh2sql0kUaIAir0Gvs= -----END CERTIFICATE-----Generated at Wed Nov 5 17:55:35 2025 by rpki-client