$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/03D6E39A824C11F0B2CA540FC4F9AE02.roa File: 03D6E39A824C11F0B2CA540FC4F9AE02.roa (raw, json) Hash identifier: sh0P7r2XibS/gx2Xt0Uiy2ulD+jkzyj/uW0sx5+8aeU= Subject key identifier: 54:0E:79:1D:29:D5:57:E9:9E:6C:80:B7:54:61:DB:6A:31:21:89:F5 Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Certificate serial: 02F9 Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/03D6E39A824C11F0B2CA540FC4F9AE02.roa Signing time: Wed 27 Aug 2025 10:30:06 +0000 ROA not before: Wed 27 Aug 2025 10:30:06 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 140269 IP address blocks: 103.191.162.0/24 maxlen: 24 2400:96e0::/32 maxlen: 32 2400:96e0:1000::/36 maxlen: 36 2400:96e0:1000::/40 maxlen: 40 2400:96e0:1001::/48 maxlen: 48 2400:96e0:1002::/48 maxlen: 48 2400:96e0:1003::/48 maxlen: 48 2400:96e0:1004::/48 maxlen: 48 2400:96e0:1005::/48 maxlen: 48 2400:96e0:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 761 (0x2f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Validity Not Before: Aug 27 10:30:06 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68aede2e-62ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f3:84:84:5c:4c:70:9e:38:4a:64:4d:7c:9d: 96:21:bf:63:b0:83:ea:72:ef:48:db:58:0d:2d:0c: 2b:81:d2:33:3b:42:4c:05:6e:bf:e1:a2:a4:35:e3: 1c:54:69:49:7c:cf:46:6d:6b:f2:5d:47:4e:0d:e4: 57:a0:b8:b4:2a:ea:16:f4:a0:d5:a2:73:05:11:03: 75:76:62:55:b8:76:99:5e:04:1a:6e:95:cf:98:72: 2d:85:6e:95:f9:26:11:78:bf:99:d7:df:23:33:03: b9:ac:d9:d4:09:0f:f6:44:1c:ac:16:94:34:c3:1c: 19:30:0f:88:16:9a:22:8b:48:4c:e4:9f:bb:be:86: fe:43:fd:e9:b4:75:f0:69:da:31:3c:4d:03:dd:7b: 04:34:d7:c2:bd:fc:15:30:72:32:47:d0:19:b5:28: 80:2a:35:fa:da:73:bb:07:b9:11:bc:39:bb:1c:25: 78:03:15:0f:4c:97:ba:b2:79:10:63:1a:3d:d1:e2: 48:fe:8e:47:d4:ff:2f:8d:c5:1c:a9:4c:ae:0b:be: be:96:75:cf:b7:cc:b6:c7:2b:e8:e7:de:54:41:cc: ca:7c:c8:70:9d:89:ef:77:15:05:0e:af:7b:07:35: 54:c3:2a:51:58:6b:b8:c2:0d:f9:39:e9:6e:f5:67: 16:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0E:79:1D:29:D5:57:E9:9E:6C:80:B7:54:61:DB:6A:31:21:89:F5 X509v3 Authority Key Identifier: keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/03D6E39A824C11F0B2CA540FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.162.0/24 IPv6: 2400:96e0::/32 Signature Algorithm: sha256WithRSAEncryption b0:75:2f:75:42:58:97:a9:bd:e4:eb:ba:d1:d8:7d:b7:f0:9a: 16:21:10:b5:87:a5:e8:5c:2a:a8:92:40:0d:f6:05:c3:5a:a5: 41:0c:ff:76:52:ea:2b:27:1b:95:6a:8d:b1:10:6c:02:e5:3f: cf:1c:eb:e8:6a:ea:f2:ee:40:4a:92:63:39:08:aa:cc:c1:57: 85:1a:10:29:2b:33:c7:d3:18:4a:b4:25:30:d9:70:0d:b2:62: 11:19:20:51:df:2e:13:ec:9e:c1:b4:4e:96:73:f8:50:ea:db: 10:67:23:5f:e4:5e:01:61:29:5b:ea:4f:52:29:3e:cf:9b:da: 81:1c:26:6b:a4:8b:58:4c:37:57:51:cb:04:97:62:b2:f2:a1: 14:14:4a:9b:81:44:1d:a7:96:5e:35:40:9f:8e:14:ce:71:2b: 5b:b6:62:39:8d:5d:1c:e8:b8:fb:0c:fc:bc:74:4d:49:05:2d: 3a:fe:21:75:94:cc:56:54:b1:9c:49:16:d7:2c:98:22:03:61: 3b:3d:43:83:af:f5:a4:06:79:93:f3:81:24:dc:e4:f0:77:56: cb:c6:d8:b9:5d:c6:57:cf:7f:ab:c4:57:7f:63:e2:01:26:31: 01:c3:9c:cf:d6:3a:54:7a:a0:60:cf:c3:ab:2e:f4:1b:42:32: 5d:2f:9a:51 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3MEYxMTAvBgNVBAUTKDdFNDREQ0U5NzJGMTNDODBFNTM0QjJFNjg1RkUxRDJB MEQ3NjE1MTIwHhcNMjUwODI3MTAzMDA2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFlZGUyZS02MmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPOEhFxMcJ44SmRNfJ2WIb9jsIPqcu9I21gNLQwrgdIzO0JMBW6/4aKkNeMc VGlJfM9GbWvyXUdODeRXoLi0KuoW9KDVonMFEQN1dmJVuHaZXgQabpXPmHIthW6V +SYReL+Z198jMwO5rNnUCQ/2RBysFpQ0wxwZMA+IFpoii0hM5J+7vob+Q/3ptHXw adoxPE0D3XsENNfCvfwVMHIyR9AZtSiAKjX62nO7B7kRvDm7HCV4AxUPTJe6snkQ Yxo90eJI/o5H1P8vjcUcqUyuC76+lnXPt8y2xyvo595UQczKfMhwnYnvdxUFDq97 BzVUwypRWGu4wg35Oelu9WcWYwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFQOeR0p 1VfpnmyAt1Rh22oxIYn1MB8GA1UdIwQYMBaAFH5E3Oly8TyA5TSy5oX+HSoNdhUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjcwRi9EQzVFNzRDQTA4 RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJRGxOTExtaGY0ZEtnMTJG UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZrVGM2WEx4UElEbE5MTG1oZjRkS2cxMkZSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI3MEYvREM1RTc0Q0EwOEU4MTFFREI5RTFCNjMzQzRGOUFFMDIvMDNENkUzOUE4 MjRDMTFGMEIyQ0E1NDBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBABnv6IwDQQCAAIwBwMFACQAluAwDQYJKoZIhvcNAQELBQAD ggEBALB1L3VCWJepveTrutHYfbfwmhYhELWHpehcKqiSQA32BcNapUEM/3ZS6isn G5VqjbEQbALlP88c6+hq6vLuQEqSYzkIqszBV4UaECkrM8fTGEq0JTDZcA2yYhEZ IFHfLhPsnsG0TpZz+FDq2xBnI1/kXgFhKVvqT1IpPs+b2oEcJmuki1hMN1dRywSX YrLyoRQUSpuBRB2nll41QJ+OFM5xK1u2YjmNXRzouPsM/Lx0TUkFLTr+IXWUzFZU sZxJFtcsmCIDYTs9Q4Ov9aQGeZPzgSTc5PB3VsvG2LldxlfPf6vEV39j4gEmMQHD nM/WOlR6oGDPw6su9BtCMl0vmlE= -----END CERTIFICATE-----Generated at Wed Sep 10 12:23:16 2025 by rpki-client