$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/FF4F13D4448711ECA80CFC34C4F9AE02.roa File: FF4F13D4448711ECA80CFC34C4F9AE02.roa (raw, json) Hash identifier: pvvlftNep3JGBrkiJAisunxpzryLA3gGytWzHa5BKMk= Subject key identifier: B3:7C:CB:BC:03:A5:E3:47:E6:09:11:84:F2:65:82:00:6B:AC:D9:2E Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Certificate serial: 0C5D Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/FF4F13D4448711ECA80CFC34C4F9AE02.roa Signing time: Wed 18 Jun 2025 19:03:19 +0000 ROA not before: Wed 18 Jun 2025 19:03:19 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137810 IP address blocks: 103.114.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 18:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3165 (0xc5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Validity Not Before: Jun 18 19:03:19 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68530d77-7d48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:08:d6:b0:6c:00:7b:e7:31:b9:49:cc:7e:4f: eb:77:19:aa:40:71:3b:19:0b:a5:09:20:f5:41:e6: 40:62:42:a5:95:08:84:64:f3:dc:b4:bf:80:19:07: 10:44:c1:21:f3:aa:8a:60:e3:a8:5e:5e:a1:ce:17: dc:08:45:93:2f:f9:05:fc:d7:aa:22:67:7a:47:d5: 28:74:de:96:a4:6c:ae:62:f1:46:b1:ed:88:79:2f: 7a:97:77:aa:db:a2:ab:23:ae:a0:52:eb:01:a9:63: 47:a1:f2:ee:64:bf:05:f8:03:38:21:f4:ff:eb:d0: ff:e3:40:b9:93:41:30:cb:cd:81:6e:49:36:a1:b5: 33:85:9d:b2:8b:64:0f:f2:82:ad:23:c8:f5:fd:b3: 56:1d:bc:8b:60:1c:84:66:17:cd:63:f1:b3:ef:32: 64:0e:7b:c3:34:60:e7:06:5e:ff:9f:60:2e:f2:06: 08:49:df:79:fc:4e:17:29:3a:9d:25:26:fd:6d:4e: 31:08:24:d8:67:50:17:f9:ea:33:6e:a0:86:18:62: 22:49:4c:48:f7:fd:6b:79:c9:29:01:41:ff:7c:00: e6:85:40:21:97:eb:bc:40:73:fb:d4:a9:6f:ff:1f: e9:ff:fa:b9:6f:d3:45:36:f5:a8:a9:66:89:24:61: 02:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7C:CB:BC:03:A5:E3:47:E6:09:11:84:F2:65:82:00:6B:AC:D9:2E X509v3 Authority Key Identifier: keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/FF4F13D4448711ECA80CFC34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.114.99.0/24 Signature Algorithm: sha256WithRSAEncryption 21:13:2a:04:23:88:a2:0a:6c:95:f2:d8:c4:e4:f0:26:5b:5d: 25:92:c1:4c:8c:b0:a0:2d:6a:65:d5:3b:85:7b:45:e7:80:f2: 97:f0:8a:5e:33:9c:f0:aa:53:f3:12:4f:cd:a0:4b:7a:ac:32: bf:09:44:32:b0:18:ee:94:51:48:8c:c8:80:64:b9:ac:20:f4: 90:39:9f:b3:1d:21:5a:6b:67:14:d4:d8:f9:b7:7d:98:af:9d: 5f:d2:c6:17:b9:6c:c8:b3:9d:c3:27:29:8f:ea:38:56:7f:a5: 3d:05:4c:af:67:07:f1:bd:c2:46:67:e8:e2:45:24:8a:df:af: 9e:1d:af:4d:67:21:b2:29:a6:0c:bf:27:e4:cf:95:07:a1:15: 7e:46:54:7f:4a:3a:de:94:95:d1:db:31:f4:60:b9:ab:4a:34: 06:98:c3:bb:c3:6f:5b:ce:96:6f:0a:90:3e:14:5e:b8:01:32: 90:b8:73:37:75:03:a7:b1:ef:8e:a7:c8:2c:e5:80:15:1b:31: 65:d1:7d:be:d3:4f:7b:5f:f1:7c:55:c6:e4:2f:ee:85:57:c9: 20:33:15:fd:e6:20:df:1d:c7:55:e3:94:9d:0e:49:32:ec:bf: 6f:5e:a6:25:89:eb:f1:41:b2:e1:b7:58:98:c2:74:7d:2a:81: 76:40:52:5c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCRjExMTAvBgNVBAUTKDY1NDA5MTg2MDI4RUM1NENENDVCNTgzNEZGQkVDQUY0 Qjc4RjE5QzIwHhcNMjUwNjE4MTkwMzE5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUzMGQ3Ny03ZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wjWsGwAe+cxuUnMfk/rdxmqQHE7GQulCSD1QeZAYkKllQiEZPPctL+AGQcQ RMEh86qKYOOoXl6hzhfcCEWTL/kF/NeqImd6R9UodN6WpGyuYvFGse2IeS96l3eq 26KrI66gUusBqWNHofLuZL8F+AM4IfT/69D/40C5k0Ewy82Bbkk2obUzhZ2yi2QP 8oKtI8j1/bNWHbyLYByEZhfNY/Gz7zJkDnvDNGDnBl7/n2Au8gYISd95/E4XKTqd JSb9bU4xCCTYZ1AX+eozbqCGGGIiSUxI9/1reckpAUH/fADmhUAhl+u8QHP71Klv /x/p//q5b9NFNvWoqWaJJGECDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLN8y7wD peNH5gkRhPJlggBrrNkuMB8GA1UdIwQYMBaAFGVAkYYCjsVM1FtYNP++yvS3jxnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkJGMS8yNDVEQzVDQTBB RjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hVelVXMWcwXzc3SzlMZVBH Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVQ1JoZ0tPeFV6VVcxZzBfNzdLOUxlUEdjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JCRjEvMjQ1REM1Q0EwQUY3MTFFQUE4NUE1RDFBQzRGOUFFMDIvRkY0RjEzRDQ0 NDg3MTFFQ0E4MENGQzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABncmMwDQYJKoZIhvcNAQELBQADggEBACETKgQjiKIKbJXy 2MTk8CZbXSWSwUyMsKAtamXVO4V7ReeA8pfwil4znPCqU/MST82gS3qsMr8JRDKw GO6UUUiMyIBkuawg9JA5n7MdIVprZxTU2Pm3fZivnV/Sxhe5bMizncMnKY/qOFZ/ pT0FTK9nB/G9wkZn6OJFJIrfr54dr01nIbIppgy/J+TPlQehFX5GVH9KOt6UldHb MfRguatKNAaYw7vDb1vOlm8KkD4UXrgBMpC4czd1A6ex746nyCzlgBUbMWXRfb7T T3tf8XxVxuQv7oVXySAzFf3mIN8dx1XjlJ0OSTLsv29epiWJ6/FBsuG3WJjCdH0q gXZAUlw= -----END CERTIFICATE-----Generated at Mon Oct 27 20:34:27 2025 by rpki-client