$ rpki-client -vvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0DDC2C14776F11ED8E7B8775C4F9AE02.roa File: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (raw, json) Hash identifier: TMdvekGhsYRkD7vQxOC9M1BNi4ODftadLHkHNnnsSEE= Subject key identifier: 01:D0:F5:9B:93:FC:F7:8F:29:EA:0B:FD:AA:A6:FF:23:CA:BA:EC:42 Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Certificate serial: 0715 Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0DDC2C14776F11ED8E7B8775C4F9AE02.roa Signing time: Tue 02 Sep 2025 22:42:41 +0000 ROA not before: Tue 02 Sep 2025 22:42:41 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 10143 IP address blocks: 103.99.101.0/24 maxlen: 24 103.242.49.0/24 maxlen: 24 2001:df3:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 22:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1813 (0x715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24 Validity Not Before: Sep 2 22:42:41 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b772e1-c361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:a8:d1:4c:3e:15:2c:0d:83:be:4e:79:f1: 7f:0f:cc:35:e8:65:82:78:0a:3b:bc:f3:3a:52:f8: 65:6b:10:3b:00:ae:b6:e6:b2:71:eb:da:1f:05:45: 7c:b1:ad:32:86:7b:55:fa:a4:34:47:68:37:28:ee: 77:35:84:7a:d3:cf:7d:7f:55:d7:13:d9:25:7e:f5: 19:3b:b2:4b:0b:52:dc:7b:d8:d6:57:14:03:e1:7b: af:db:66:c4:36:80:87:30:69:71:fe:69:d9:b4:8d: 1c:db:98:29:2e:3a:ed:aa:d6:a3:f5:f2:49:43:cb: 50:81:03:ea:03:27:7e:8b:f4:34:62:ef:23:74:dd: 8f:8b:b5:98:34:6f:9f:9c:61:44:16:25:86:1f:6b: b4:41:4b:43:55:41:6c:42:fd:f0:db:71:12:e6:08: 61:ef:af:16:9e:60:04:ef:5e:e3:9a:4f:d5:92:b5: 7f:77:17:46:a3:eb:40:74:9b:01:cb:83:16:5b:b2: aa:20:99:25:83:37:de:80:c4:bb:95:ce:a9:94:ce: 1a:3a:8d:43:f1:18:8f:3c:25:bd:9c:fd:98:7c:ec: 19:c7:69:82:b1:0d:9e:1b:ea:e0:b5:27:11:18:33: a1:d5:fe:92:e7:ed:29:85:43:df:98:52:1d:44:7e: 10:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D0:F5:9B:93:FC:F7:8F:29:EA:0B:FD:AA:A6:FF:23:CA:BA:EC:42 X509v3 Authority Key Identifier: keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/0DDC2C14776F11ED8E7B8775C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.101.0/24 103.242.49.0/24 IPv6: 2001:df3:d000::/48 Signature Algorithm: sha256WithRSAEncryption 71:ff:7d:09:d0:85:05:61:ea:cc:00:40:20:c6:38:63:2f:99: 18:33:86:fe:b0:43:ef:87:81:8f:5e:90:d1:cc:29:57:06:dd: 3f:02:ef:d5:c6:cc:99:df:cd:25:e7:d7:bd:8c:d5:a3:11:fd: d9:0e:08:49:74:22:d9:16:37:bd:87:00:c1:d0:a9:2c:0c:1e: a1:06:ed:47:91:d2:22:be:06:e3:99:e7:ea:d2:8b:04:ec:62: 30:2b:28:41:95:18:2e:0c:be:31:d9:c2:ca:19:64:85:36:83: 8a:29:3a:ed:ed:68:74:bd:31:c2:72:db:c9:6f:b4:80:c4:17: a8:84:94:06:eb:36:2a:06:e5:de:27:75:f1:d1:a9:75:c6:a8: ba:2e:e1:35:58:98:6c:ae:23:eb:77:27:19:27:e7:c2:5a:5d: 80:5a:4b:96:50:5f:7a:86:e2:a2:a1:33:83:bf:c2:b2:cc:73: 35:27:0a:e4:66:c1:cb:ce:0d:73:c1:fe:f4:10:6c:82:64:cf: ee:6e:41:d5:f3:f9:55:ff:29:d3:27:87:f2:5c:b0:95:bf:f0: 1c:79:89:cc:77:d5:e3:c2:71:8e:74:18:f4:d5:4b:65:ab:ea: 8a:bf:09:a9:ec:ab:fe:8c:0b:2a:a9:ae:3f:bd:c4:cd:2e:20: ae:bf:b7:ba -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx QzhFNDNGMjQwHhcNMjUwOTAyMjI0MjQxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3NzJlMS1jMzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/Co0Uw+FSwNg75OefF/D8w16GWCeAo7vPM6UvhlaxA7AK625rJx69ofBUV8 sa0yhntV+qQ0R2g3KO53NYR60899f1XXE9klfvUZO7JLC1Lce9jWVxQD4Xuv22bE NoCHMGlx/mnZtI0c25gpLjrtqtaj9fJJQ8tQgQPqAyd+i/Q0Yu8jdN2Pi7WYNG+f nGFEFiWGH2u0QUtDVUFsQv3w23ES5ghh768WnmAE717jmk/VkrV/dxdGo+tAdJsB y4MWW7KqIJklgzfegMS7lc6plM4aOo1D8RiPPCW9nP2YfOwZx2mCsQ2eG+rgtScR GDOh1f6S5+0phUPfmFIdRH4QLwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFAHQ9ZuT /PePKeoL/aqm/yPKuuxCMB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5 NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkEzMTQvNzBEM0IzNkE1OTUyMTFFQkE2RDc4MDQ4QzRGOUFFMDIvMEREQzJDMTQ3 NzZGMTFFRDhFN0I4Nzc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnY2UDBABn8jEwDwQCAAIwCQMHACABDfPQADANBgkqhkiG 9w0BAQsFAAOCAQEAcf99CdCFBWHqzABAIMY4Yy+ZGDOG/rBD74eBj16Q0cwpVwbd PwLv1cbMmd/NJefXvYzVoxH92Q4ISXQi2RY3vYcAwdCpLAweoQbtR5HSIr4G45nn 6tKLBOxiMCsoQZUYLgy+MdnCyhlkhTaDiik67e1odL0xwnLbyW+0gMQXqISUBus2 Kgbl3id18dGpdcaoui7hNViYbK4j63cnGSfnwlpdgFpLllBfeobioqEzg7/Cssxz NScK5GbBy84Nc8H+9BBsgmTP7m5B1fP5Vf8p0yeH8lywlb/wHHmJzHfV48JxjnQY 9NVLZavqir8Jqeyr/owLKqmuP73EzS4grr+3ug== -----END CERTIFICATE-----Generated at Sat Sep 6 14:17:02 2025 by rpki-client