$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/D84A5FAC8F5911F081D9D142C4F9AE02.roa File: D84A5FAC8F5911F081D9D142C4F9AE02.roa (raw, json) Hash identifier: C895awW0iPQoVfIXjTm3Yt6AECnG0w/x1R5StsObe2s= Subject key identifier: E0:42:77:73:94:74:94:B2:BF:42:18:BC:82:42:78:9F:7C:83:4E:F3 Certificate issuer: /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1 Certificate serial: 0A Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/D84A5FAC8F5911F081D9D142C4F9AE02.roa Signing time: Thu 11 Sep 2025 21:54:09 +0000 ROA not before: Thu 11 Sep 2025 21:54:09 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.237.104.0/24 maxlen: 24 103.237.105.0/24 maxlen: 24 103.237.106.0/24 maxlen: 24 103.237.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 08:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1 Validity Not Before: Sep 11 21:54:09 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68c34501-9621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:59:4a:2f:0f:f6:8a:fd:26:9f:cb:3a:32:d8: a3:8e:27:aa:aa:b4:fc:4c:30:1d:7b:94:c5:49:fd: 55:d3:c3:99:84:3c:21:d1:70:1b:ad:25:f9:af:77: 1f:70:0b:72:16:7e:d5:b8:dc:7c:aa:4c:83:3e:0b: ba:11:90:83:8f:1b:38:60:1a:a7:ce:02:94:82:cb: 50:ea:ce:f0:f8:af:de:a4:aa:57:34:73:91:28:3b: c8:bf:99:99:23:29:ee:01:7c:8c:ef:78:ce:ba:85: 51:25:3e:9f:c0:76:da:a0:59:58:0f:06:d4:5e:77: fa:a3:64:f9:6a:2b:4b:3a:a2:2b:54:b4:4b:cf:c8: b2:9a:3c:9a:7c:77:7d:cd:23:53:0b:09:27:83:90: ed:60:6d:0c:b3:71:43:6a:eb:4f:8c:da:2d:cf:e9: 2a:74:03:c9:26:ee:6a:24:fa:12:eb:9a:35:9d:a8: 66:72:f6:d6:dc:08:63:3a:93:60:63:eb:80:4c:b0: bf:9a:a4:5e:2d:6f:13:1c:6a:ab:95:9e:06:95:76: 35:1b:f5:14:d9:ee:ba:1e:1c:c1:d6:8a:dd:42:2a: 37:76:1f:e4:7f:dc:4b:d3:f2:1f:b4:c6:a4:d4:0c: cb:19:8f:d9:5e:5e:48:73:76:42:fc:f0:e8:9d:cc: 28:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:42:77:73:94:74:94:B2:BF:42:18:BC:82:42:78:9F:7C:83:4E:F3 X509v3 Authority Key Identifier: keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/D84A5FAC8F5911F081D9D142C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.237.104.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:77:12:be:48:d1:63:db:aa:b4:0a:d1:17:72:56:b0:64:0a: f4:1d:93:4f:13:59:23:10:f8:74:30:3b:f7:da:00:40:91:e6: 87:58:6d:74:28:3c:15:02:bf:d8:11:fc:ec:de:1b:86:85:fd: b9:12:84:b0:9f:47:fd:6f:44:a0:de:7a:0d:7b:11:99:dd:60: d2:5f:c1:73:1e:d0:10:98:8e:43:d8:9e:99:3e:6e:dc:bd:08: 5b:38:20:e8:17:83:13:a1:32:34:b7:54:f8:50:db:5b:e5:9f: 1f:d6:bc:fe:44:1d:7d:8d:6e:9a:89:64:61:3e:67:32:b9:28: af:57:40:66:9f:36:a3:77:46:81:79:67:8a:70:9a:6b:3e:65: 7e:89:e5:2c:f8:5e:c3:fd:66:55:bf:17:ad:4c:4f:1f:90:31: 73:94:5e:24:6f:00:d8:c2:bf:49:c2:09:20:be:a8:6c:17:72: 49:da:e5:15:4f:82:58:46:d7:ca:f1:9a:7b:a3:76:d7:f6:18: 1b:92:34:3d:23:80:09:64:e2:4a:a2:91:b8:91:ce:9a:87:5c: 52:15:34:80:32:0c:b7:28:15:c5:16:37:2b:fd:25:3b:68:e7: 8d:50:a3:a4:9b:61:33:a9:5c:87:a5:a9:9d:97:54:88:28:1b: 6f:dd:74:c0 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzBDQzExMC8GA1UEBRMoMERDQUZBQzE0NUIyMkYxNTYwNzgwMTY2Q0QxRjE1MTUw NEVFRjhBMTAeFw0yNTA5MTEyMTU0MDlaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YzM0NTAxLTk2MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnWUovD/aK/Safyzoy2KOOJ6qqtPxMMB17lMVJ/VXTw5mEPCHRcButJfmvdx9w C3IWftW43HyqTIM+C7oRkIOPGzhgGqfOApSCy1DqzvD4r96kqlc0c5EoO8i/mZkj Ke4BfIzveM66hVElPp/AdtqgWVgPBtRed/qjZPlqK0s6oitUtEvPyLKaPJp8d33N I1MLCSeDkO1gbQyzcUNq60+M2i3P6Sp0A8km7mok+hLrmjWdqGZy9tbcCGM6k2Bj 64BMsL+apF4tbxMcaquVngaVdjUb9RTZ7roeHMHWit1CKjd2H+R/3EvT8h+0xqTU DMsZj9leXkhzdkL88OidzCi3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU4EJ3c5R0 lLK/Qhi8gkJ4n3yDTvMwHwYDVR0jBBgwFoAUDcr6wUWyLxVgeAFmzR8VFQTu+KEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMENDLzhGQ0NDN0Y4OEY1 NzExRjA5QzUxRUMzQkM0RjlBRTAyL0RjcjZ3VVd5THhWZ2VBRm16UjhWRlFUdS1L RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRGNyNndVV3lMeFZnZUFGbXpSOFZGUVR1LUtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBDQy84RkNDQzdGODhGNTcxMUYwOUM1MUVDM0JDNEY5QUUwMi9EODRBNUZBQzhG NTkxMUYwODFEOUQxNDJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmftaDANBgkqhkiG9w0BAQsFAAOCAQEAencSvkjRY9uqtArR F3JWsGQK9B2TTxNZIxD4dDA799oAQJHmh1htdCg8FQK/2BH87N4bhoX9uRKEsJ9H /W9EoN56DXsRmd1g0l/Bcx7QEJiOQ9iemT5u3L0IWzgg6BeDE6EyNLdU+FDbW+Wf H9a8/kQdfY1umolkYT5nMrkor1dAZp82o3dGgXlninCaaz5lfonlLPhew/1mVb8X rUxPH5Axc5ReJG8A2MK/ScIJIL6obBdySdrlFU+CWEbXyvGae6N21/YYG5I0PSOA CWTiSqKRuJHOmodcUhU0gDIMtygVxRY3K/0lO2jnjVCjpJthM6lch6WpnZdUiCgb b910wA== -----END CERTIFICATE-----Generated at Sat Sep 20 03:03:14 2025 by rpki-client