$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/F72BF19CB4C711EE84AE602CC4F9AE02.roa File: F72BF19CB4C711EE84AE602CC4F9AE02.roa (raw, json) Hash identifier: HmCUmLVw28r2IcR7zzOMBoMlcQpH+3WxtRZQvA+31cE= Subject key identifier: 3E:29:2A:12:1F:B8:69:3C:32:9A:A8:CB:01:61:DB:0C:EF:6F:99:CD Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Certificate serial: 080A Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/F72BF19CB4C711EE84AE602CC4F9AE02.roa Signing time: Tue 02 Sep 2025 21:41:12 +0000 ROA not before: Tue 02 Sep 2025 21:41:12 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135157 IP address blocks: 103.193.136.0/22 maxlen: 22 103.193.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2058 (0x80a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Validity Not Before: Sep 2 21:41:12 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b76478-0258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c1:48:2a:25:2a:5c:75:1d:3e:a1:6f:62:a3: c1:63:9c:78:4f:41:01:f1:53:69:ac:96:fb:75:33: 93:64:46:ca:85:ce:5c:37:ad:eb:26:79:5c:1d:a6: c8:6d:ae:87:e2:f6:b5:fd:a9:57:79:c3:75:e6:53: cd:63:a5:1f:37:a1:08:68:98:47:5e:07:d9:b9:9a: 34:49:1c:41:d1:8d:8f:a2:8f:8e:68:47:4f:47:11: 5a:83:5e:82:53:2f:7a:c2:3c:c2:a2:d9:23:52:55: e5:9d:71:50:ce:6b:36:f9:41:cb:b1:16:af:40:47: d1:bf:f9:cd:69:d7:7c:cc:da:c9:5a:54:7a:07:aa: 08:0c:38:29:b0:73:88:96:ae:c2:79:f4:17:bc:1f: 98:73:1e:3b:61:6a:5d:67:f4:04:84:19:55:b3:15: 19:2f:d3:a6:c1:6c:e0:ab:2c:98:0c:66:96:e9:21: 3e:ef:b1:c1:a3:26:b9:df:f9:1c:85:6d:c3:01:9a: 9e:3c:e4:6f:09:f0:20:4c:92:5e:92:7b:a1:55:a2: bd:d3:18:d0:9a:0f:bb:c3:f4:da:86:bc:6f:3f:68: 6b:61:1b:4b:69:9a:0f:38:fd:f9:5d:3a:86:db:73: 68:8c:b8:3e:89:3d:6e:95:47:0b:86:c2:30:ba:99: c7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:29:2A:12:1F:B8:69:3C:32:9A:A8:CB:01:61:DB:0C:EF:6F:99:CD X509v3 Authority Key Identifier: keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/F72BF19CB4C711EE84AE602CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.193.136.0/22 Signature Algorithm: sha256WithRSAEncryption b7:fd:12:71:91:02:0b:3e:fe:43:c4:98:85:f2:39:f2:f9:75: 8f:d8:f5:ca:c9:55:39:95:a8:c3:da:26:64:81:6f:49:54:59: 2c:f6:9b:4d:e2:e2:0f:7b:64:e9:bd:11:8c:68:ac:87:3f:1a: 45:6e:9c:4a:4e:88:5e:ec:20:c9:0e:6a:3f:18:42:00:df:75: f1:78:a3:89:b6:61:28:06:56:22:59:81:46:ac:3a:c0:90:10: e4:8c:2d:15:ac:75:dc:4c:8d:13:7a:68:e2:e4:1f:ea:94:79: f5:e1:4a:4d:f5:6f:10:03:5c:65:da:d7:f4:4c:0c:1a:7d:64: 4a:25:5d:4c:d7:64:44:50:d8:4f:d1:63:99:73:23:30:72:37: 0d:29:0b:31:2a:b5:0b:22:db:bf:e4:85:35:c6:1e:be:52:90: 5f:af:88:e3:1a:85:63:d4:af:03:ed:82:87:11:0b:03:0b:14: 1d:32:79:65:65:ba:5f:06:82:8b:f7:84:db:de:a1:3d:64:2a: a2:b4:d0:04:4b:62:ce:44:b1:94:9f:50:bb:f8:5e:9a:d8:2e: 33:c6:68:4f:d0:b1:1d:4a:64:82:c0:b3:01:46:d1:26:5c:a8: a1:76:69:13:c8:47:f1:3b:60:3c:bc:5b:13:2d:27:2d:99:5f: 88:ed:1a:57 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYzMTYxMTAvBgNVBAUTKDA0MjkwQ0IyNEVFRUYwQTNBNzg3MTg3Q0I0RkZDNzQ3 REU4NjE3MzEwHhcNMjUwOTAyMjE0MTEyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3NjQ3OC0wMjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cFIKiUqXHUdPqFvYqPBY5x4T0EB8VNprJb7dTOTZEbKhc5cN63rJnlcHabI ba6H4va1/alXecN15lPNY6UfN6EIaJhHXgfZuZo0SRxB0Y2Poo+OaEdPRxFag16C Uy96wjzCotkjUlXlnXFQzms2+UHLsRavQEfRv/nNadd8zNrJWlR6B6oIDDgpsHOI lq7CefQXvB+Ycx47YWpdZ/QEhBlVsxUZL9OmwWzgqyyYDGaW6SE+77HBoya53/kc hW3DAZqePORvCfAgTJJeknuhVaK90xjQmg+7w/TahrxvP2hrYRtLaZoPOP35XTqG 23NojLg+iT1ulUcLhsIwupnHSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFD4pKhIf uGk8MpqoywFh2wzvb5nNMB8GA1UdIwQYMBaAFAQpDLJO7vCjp4cYfLT/x0fehhcx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjMxNi8yODFCOUQ2MEY2 RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThLT25oeGg4dFBfSFI5NkdG ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JDa01zazd1OEtPbmh4aDh0UF9IUjk2R0Z6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUYzMTYvMjgxQjlENjBGNkQxMTFFQUE2OURFNDI5QzRGOUFFMDIvRjcyQkYxOUNC NEM3MTFFRTg0QUU2MDJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnwYgwDQYJKoZIhvcNAQELBQADggEBALf9EnGRAgs+/kPE mIXyOfL5dY/Y9crJVTmVqMPaJmSBb0lUWSz2m03i4g97ZOm9EYxorIc/GkVunEpO iF7sIMkOaj8YQgDfdfF4o4m2YSgGViJZgUasOsCQEOSMLRWsddxMjRN6aOLkH+qU efXhSk31bxADXGXa1/RMDBp9ZEolXUzXZERQ2E/RY5lzIzByNw0pCzEqtQsi27/k hTXGHr5SkF+viOMahWPUrwPtgocRCwMLFB0yeWVlul8Ggov3hNveoT1kKqK00ARL Ys5EsZSfULv4XprYLjPGaE/QsR1KZILAswFG0SZcqKF2aRPIR/E7YDy8WxMtJy2Z X4jtGlc= -----END CERTIFICATE-----Generated at Wed Sep 10 04:17:42 2025 by rpki-client