$ rpki-client -vvf rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa File: 4317395081E611EE9EFE132BC4F9AE02.roa (raw, json) Hash identifier: tQp/nzqfCovKInVuREO99dY4qu3efR3x/X9HpDvqlY0= Subject key identifier: A2:AB:C3:4D:A7:11:64:78:0C:4B:BB:B9:42:63:DC:65:B3:17:14:10 Certificate issuer: /CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Certificate serial: 0132 Authority key identifier: DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa Signing time: Tue 03 Jun 2025 04:42:51 +0000 ROA not before: Tue 03 Jun 2025 04:42:51 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 103.186.158.0/24 maxlen: 24 103.186.159.0/24 maxlen: 24 2400:72e0:9f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 05:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A7CA, serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Validity Not Before: Jun 3 04:42:51 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683e7d4b-aaf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3e:58:6d:ba:d2:56:24:db:b3:fc:3f:7a:eb: 4a:a4:17:fd:60:9b:a2:43:1c:47:2d:92:db:af:11: 6e:e6:06:3b:9e:c1:7b:22:77:c7:f9:54:33:a6:22: 6d:48:72:6b:59:74:e3:92:0c:62:65:14:f2:ae:1b: 33:0e:b9:b2:3f:87:9a:b0:4b:1d:49:8f:c6:d8:04: 8d:f8:1b:66:a5:f9:2d:e5:82:d8:a7:a5:d2:e0:57: fd:dd:7d:9c:08:bc:31:db:c6:de:c2:78:63:28:91: 35:54:c1:0c:87:aa:a3:26:83:30:c7:ad:5d:c2:62: 76:d4:d7:60:6a:47:ca:40:11:29:62:1a:48:e9:4a: 4e:bd:71:0c:cc:10:b4:0e:6e:56:67:1f:3b:84:36: e6:c0:7b:b0:55:e6:b9:cf:2b:08:23:eb:f3:d0:83: 24:67:13:df:0e:14:be:38:eb:8f:99:22:77:10:b1: fe:c7:d5:f6:9e:2d:27:b1:b9:68:84:9d:ff:6e:b5: 6b:de:a0:65:2d:b2:df:24:44:e7:70:87:a9:8c:c2: c1:be:eb:5e:0c:1e:7e:8e:96:df:b0:a0:a0:e8:4e: 42:3c:22:25:5b:e1:17:cd:e8:d3:42:e7:2b:df:56: 34:6d:e1:82:f6:ec:84:88:b4:00:97:ea:a3:52:78: 2c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AB:C3:4D:A7:11:64:78:0C:4B:BB:B9:42:63:DC:65:B3:17:14:10 X509v3 Authority Key Identifier: keyid:DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.158.0/23 IPv6: 2400:72e0:9f00::/40 Signature Algorithm: sha256WithRSAEncryption 5a:6f:80:ad:c3:6b:88:5d:1a:e1:0e:f7:b7:56:be:50:4c:b4: cc:a2:8c:2b:4b:07:50:b0:f3:4b:5e:48:fd:0b:49:f1:a0:10: 8d:6d:23:82:04:b4:c5:6e:1f:3a:97:2a:f0:ae:bf:6c:7c:a4: 0b:c9:82:d5:81:00:6d:29:c7:3e:15:05:ac:07:4a:72:39:46: cc:98:ba:4c:61:95:d6:c2:dd:85:a9:cd:8d:e2:d4:e0:fe:32: c2:88:b6:fa:61:50:6d:1f:19:51:1a:4f:5b:2e:c2:59:8e:3e: 8d:f3:c1:45:53:9b:7d:ce:f1:87:77:83:cb:b7:80:42:29:e4: 04:4c:0f:e2:c9:1a:0a:71:4d:39:b1:c1:e7:74:0b:4a:98:00: f1:d0:af:41:46:c1:52:e0:25:be:83:b1:56:f9:e2:48:81:f4: 17:71:01:f0:2d:c7:63:44:67:f7:68:3a:39:3c:c3:f3:78:23: 55:45:a0:7f:50:b7:18:0e:87:86:81:f0:af:27:b1:9d:66:70: 3f:56:e5:86:f4:be:13:85:35:d7:34:86:72:64:de:f8:d0:f6: b6:44:58:e7:ba:1a:ce:0c:94:5a:d7:9a:fb:9a:13:5a:52:18: 9a:38:18:fa:bc:b7:76:47:8d:d2:99:d4:bd:6a:40:f2:53:72: 13:69:00:cd -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3Q0ExMTAvBgNVBAUTKERBMURCMkNEMzFGNDU0RjY5NTYxRDg2NjVEQzkzRUY4 MTJGMzk3QjAwHhcNMjUwNjAzMDQ0MjUxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlN2Q0Yi1hYWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6z5YbbrSViTbs/w/eutKpBf9YJuiQxxHLZLbrxFu5gY7nsF7InfH+VQzpiJt SHJrWXTjkgxiZRTyrhszDrmyP4easEsdSY/G2ASN+Btmpfkt5YLYp6XS4Ff93X2c CLwx28bewnhjKJE1VMEMh6qjJoMwx61dwmJ21NdgakfKQBEpYhpI6UpOvXEMzBC0 Dm5WZx87hDbmwHuwVea5zysII+vz0IMkZxPfDhS+OOuPmSJ3ELH+x9X2ni0nsblo hJ3/brVr3qBlLbLfJETncIepjMLBvuteDB5+jpbfsKCg6E5CPCIlW+EXzejTQucr 31Y0beGC9uyEiLQAl+qjUngs2QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKKrw02n EWR4DEu7uUJj3GWzFxQQMB8GA1UdIwQYMBaAFNodss0x9FT2lWHYZl3JPvgS85ew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTdDQS80Q0Y3RjE1ODdF QjcxMUVFOTYyM0U5MUFDNEY5QUUwMi8yaDJ5elRIMFZQYVZZZGhtWGNrLS1CTHps N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJoMnl6VEgwVlBhVllkaG1YY2stLUJMemw3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE3Q0EvNENGN0YxNTg3RUI3MTFFRTk2MjNFOTFBQzRGOUFFMDIvNDMxNzM5NTA4 MUU2MTFFRTlFRkUxMzJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBAFnup4wDgQCAAIwCAMGACQAcuCfMA0GCSqGSIb3DQEBCwUA A4IBAQBab4Ctw2uIXRrhDve3Vr5QTLTMoowrSwdQsPNLXkj9C0nxoBCNbSOCBLTF bh86lyrwrr9sfKQLyYLVgQBtKcc+FQWsB0pyOUbMmLpMYZXWwt2Fqc2N4tTg/jLC iLb6YVBtHxlRGk9bLsJZjj6N88FFU5t9zvGHd4PLt4BCKeQETA/iyRoKcU05scHn dAtKmADx0K9BRsFS4CW+g7FW+eJIgfQXcQHwLcdjRGf3aDo5PMPzeCNVRaB/ULcY DoeGgfCvJ7GdZnA/VuWG9L4ThTXXNIZyZN740Pa2RFjnuhrODJRa15r7mhNaUhia OBj6vLd2R43SmdS9akDyU3ITaQDN -----END CERTIFICATE-----Generated at Mon Oct 27 12:00:00 2025 by rpki-client