$ rpki-client -vvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/B2E74042602811EF90548827C4F9AE02.roa File: B2E74042602811EF90548827C4F9AE02.roa (raw, json) Hash identifier: BvCqMScG09pGK+LZUbihhOFZxqUcMb0S5ZcrEfWSJgU= Subject key identifier: A5:D9:6F:46:B9:7B:01:D8:5B:3B:41:2E:AF:95:49:D5:DA:A3:4D:59 Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Certificate serial: 085B Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/B2E74042602811EF90548827C4F9AE02.roa Signing time: Tue 02 Sep 2025 21:12:32 +0000 ROA not before: Tue 02 Sep 2025 21:12:32 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141002 IP address blocks: 103.154.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2139 (0x85b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79 Validity Not Before: Sep 2 21:12:32 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b75dc0-c083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:90:a3:ca:6a:f8:d6:d8:e2:fc:32:ff:bb:fd: 30:d2:99:f2:5b:f5:be:b4:43:af:4c:44:02:df:c8: 9b:07:d5:9a:a2:34:f8:1d:b1:1d:f6:70:28:b9:18: 3c:84:5a:1a:ef:82:63:7e:d8:8a:01:23:cc:4d:69: 67:7e:d0:8b:1c:fa:7c:38:ee:49:0b:76:e5:b5:f4: 3f:64:3d:9e:11:b3:0a:b8:5c:6e:c7:6f:9f:2c:7a: 28:1b:a6:22:82:30:e2:1f:b6:76:48:77:59:20:91: ad:ce:8b:72:f1:62:f2:c9:22:1c:1e:20:1e:e5:3c: a6:26:06:8a:28:8c:10:8b:c7:71:af:31:42:91:96: c2:1c:cd:99:b6:71:b0:4d:2a:a2:0b:34:d9:7a:cc: bf:d7:3e:20:4c:5b:95:48:a4:dd:66:b3:86:c4:f8: 4f:1d:cd:0b:3f:8c:6f:2d:de:96:6f:1b:f0:a6:d4: ea:74:dd:b0:62:3e:51:b2:de:4f:a4:fb:e1:81:67: cc:92:c6:e7:83:70:d0:83:f7:15:e7:bc:6b:ae:c0: 2f:29:5a:c6:9f:4c:0a:d2:e5:fb:13:cf:dd:52:83: cf:a8:db:0c:58:82:b9:05:0f:9b:9b:00:dc:66:59: 75:10:eb:be:16:e9:9b:49:21:e2:00:e2:4a:08:85: b0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D9:6F:46:B9:7B:01:D8:5B:3B:41:2E:AF:95:49:D5:DA:A3:4D:59 X509v3 Authority Key Identifier: keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/B2E74042602811EF90548827C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.29.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:0b:ef:4b:9a:e0:ab:38:1e:b4:a3:f2:39:09:4c:aa:b6:8d: b1:e4:c3:57:df:b7:72:6a:1b:16:49:b1:20:5c:74:c3:91:64: d7:e8:ad:fe:22:f3:e9:e6:e5:4e:d3:48:7f:fd:e2:f1:b3:b0: 1f:64:97:22:62:b6:02:e8:83:62:96:a9:fb:ca:1b:30:15:fa: 86:c5:cc:be:6e:45:70:02:39:7e:9e:35:b4:05:40:06:82:c5: 86:13:09:5f:c8:3d:93:4b:c8:46:95:e8:97:01:73:b9:16:9d: cc:32:76:e0:c4:85:08:35:79:85:46:01:b5:9b:b0:58:0c:37: 25:07:7f:25:b0:9c:23:b5:66:42:39:05:18:bd:76:1a:ee:d1: 85:02:f6:fe:c9:aa:8b:75:02:4b:06:4a:d0:2a:41:86:f3:26: 97:b0:67:0f:ee:6d:58:28:7c:52:38:74:67:4d:0a:05:5d:43: b6:f3:d2:5f:b9:9b:88:98:9b:d9:da:0f:af:10:48:ad:0f:02: ea:93:b8:24:24:35:03:d8:4c:5d:c3:c1:24:06:da:67:8b:3d: 96:7e:c1:2a:e6:65:5c:14:d3:1e:db:f5:52:f8:aa:15:71:40: 7b:a8:53:d0:a3:20:13:5a:95:39:07:77:d5:30:8e:9a:8e:a3: ad:40:87:ea -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MzMxMTAvBgNVBAUTKDFBMUEyREI2MjI3MDQ5ODYwRDFDQjZGQjM4MUQwMzVG N0NEREZFNzkwHhcNMjUwOTAyMjExMjMyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3NWRjMC1jMDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpCjymr41tji/DL/u/0w0pnyW/W+tEOvTEQC38ibB9WaojT4HbEd9nAouRg8 hFoa74JjftiKASPMTWlnftCLHPp8OO5JC3bltfQ/ZD2eEbMKuFxux2+fLHooG6Yi gjDiH7Z2SHdZIJGtzoty8WLyySIcHiAe5TymJgaKKIwQi8dxrzFCkZbCHM2ZtnGw TSqiCzTZesy/1z4gTFuVSKTdZrOGxPhPHc0LP4xvLd6WbxvwptTqdN2wYj5Rst5P pPvhgWfMksbng3DQg/cV57xrrsAvKVrGn0wK0uX7E8/dUoPPqNsMWIK5BQ+bmwDc Zll1EOu+FumbSSHiAOJKCIWw2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFKXZb0a5 ewHYWztBLq+VSdXao01ZMB8GA1UdIwQYMBaAFBoaLbYicEmGDRy2+zgdA1983f55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkzMy9GRDk1MjFCMkRD NTcxMUVBODNFOEVDNjdDNEY5QUUwMi9HaG90dGlKd1NZWU5ITGI3T0IwRFgzemRf bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dob3R0aUp3U1lZTkhMYjdPQjBEWDN6ZF9uay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M5MzMvRkQ5NTIxQjJEQzU3MTFFQTgzRThFQzY3QzRGOUFFMDIvQjJFNzQwNDI2 MDI4MTFFRjkwNTQ4ODI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnmh0wDQYJKoZIhvcNAQELBQADggEBAJ0L70ua4Ks4HrSj 8jkJTKq2jbHkw1fft3JqGxZJsSBcdMORZNforf4i8+nm5U7TSH/94vGzsB9klyJi tgLog2KWqfvKGzAV+obFzL5uRXACOX6eNbQFQAaCxYYTCV/IPZNLyEaV6JcBc7kW ncwyduDEhQg1eYVGAbWbsFgMNyUHfyWwnCO1ZkI5BRi9dhru0YUC9v7Jqot1AksG StAqQYbzJpewZw/ubVgofFI4dGdNCgVdQ7bz0l+5m4iYm9naD68QSK0PAuqTuCQk NQPYTF3DwSQG2meLPZZ+wSrmZVwU0x7b9VL4qhVxQHuoU9CjIBNalTkHd9UwjpqO o61Ah+o= -----END CERTIFICATE-----Generated at Sat Sep 6 14:28:00 2025 by rpki-client