$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/AA13A4AC58BA11F08C19015DC4F9AE02.roa File: AA13A4AC58BA11F08C19015DC4F9AE02.roa (raw, json) Hash identifier: i2dZXW4ctNp3phocZHsJWaRw5A5TAnPYhmdH2iztb0M= Subject key identifier: 26:0B:46:D6:D2:92:A9:43:65:78:A7:E3:30:E2:3C:C6:83:CE:A9:D1 Certificate issuer: /CN=A919D2AF/serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003 Certificate serial: 02 Authority key identifier: E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/AA13A4AC58BA11F08C19015DC4F9AE02.roa Signing time: Fri 04 Jul 2025 09:38:39 +0000 ROA not before: Fri 04 Jul 2025 09:38:39 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 135632 IP address blocks: 103.77.9.0/24 maxlen: 24 103.77.10.0/24 maxlen: 24 103.77.11.0/24 maxlen: 24 116.206.164.0/24 maxlen: 24 116.206.165.0/24 maxlen: 24 116.206.166.0/24 maxlen: 24 116.206.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Jul 2025 03:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D2AF, serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003 Validity Not Before: Jul 4 09:38:39 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6867a11f-b3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:05:05:de:09:e3:2b:e7:a1:2e:b3:89:12: bc:f2:bc:cb:75:6b:11:ea:c3:0b:39:71:77:88:af: 5c:a2:7b:97:0a:4c:61:99:ba:85:43:c4:62:2d:a7: 9b:12:e0:e6:25:5f:10:23:ad:5e:02:a4:28:05:81: 9d:8f:10:ea:16:1c:ad:85:6e:7f:be:b2:7e:8d:97: 3d:84:04:d6:3b:44:1e:da:58:91:40:68:1b:97:52: 39:f6:bc:ae:8d:24:d6:cd:ab:78:a8:5b:0b:f3:83: c7:94:43:66:91:eb:cb:af:d8:ed:ee:df:83:23:9c: cd:4d:0f:c7:35:56:41:88:f6:8b:d8:ae:cf:3b:48: 0e:00:8d:3a:cf:27:ae:aa:db:a9:0f:f1:7e:34:19: 21:c4:1a:69:70:3d:72:b4:b0:b2:f1:32:94:84:1b: 5e:89:2b:4d:8e:cc:9a:0a:dc:b3:8c:ed:10:06:59: a3:95:90:3e:62:fb:04:73:32:ce:40:1f:78:16:97: 58:5b:a5:56:a6:5e:5e:7a:8c:7a:78:62:63:e3:ad: fe:8c:b4:9b:85:a9:3e:89:84:2f:3d:97:ae:ee:ed: 01:27:08:3a:5e:a7:dc:c9:de:1d:d9:32:86:87:bd: da:2e:93:24:ba:83:ce:b6:01:2a:9a:cb:2c:5e:b1: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0B:46:D6:D2:92:A9:43:65:78:A7:E3:30:E2:3C:C6:83:CE:A9:D1 X509v3 Authority Key Identifier: keyid:E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/AA13A4AC58BA11F08C19015DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.77.9.0-103.77.11.255 116.206.164.0/22 Signature Algorithm: sha256WithRSAEncryption 64:69:8f:77:51:d9:79:4c:f6:c5:30:a9:62:e8:cc:82:de:0c: c8:fe:88:73:3e:ca:22:a9:88:76:bc:ff:ad:50:26:78:86:4d: cd:08:75:a5:ab:90:0f:7b:dd:f9:8f:25:fc:e0:da:d1:44:c7: 1b:84:d0:05:6b:99:b7:aa:08:ff:ea:aa:23:ab:a1:5f:78:4d: ce:ea:4b:1d:f6:6a:4a:ae:7f:25:20:ca:65:8d:49:9a:c3:6b: 93:1b:78:41:d3:cf:0a:4c:e9:b5:9d:d4:9e:2d:7a:17:d4:64: 7c:2d:a2:e5:81:72:21:1a:61:70:e5:f7:bc:0a:01:b4:00:4b: d3:95:59:54:b0:6f:05:17:53:4f:35:6f:c1:e7:ae:8c:cb:8f: 24:11:18:fa:b8:7f:7e:dc:2c:b8:e2:f4:3b:9e:6a:92:d6:45: a5:95:fe:4c:79:a4:ec:37:04:dd:b6:60:cd:d2:79:23:a4:04: ed:1e:a1:8d:78:6a:47:fb:fb:54:49:2b:38:9b:e5:82:ea:97: f1:6d:e1:e7:d0:2e:bf:3a:9c:9b:7d:0d:a2:72:be:9b:d0:db: b2:82:28:1e:a7:eb:7c:13:db:0a:66:b8:a0:4d:76:94:d8:e5: 56:20:18:5b:39:71:b4:5d:04:cc:fb:54:b6:1d:db:88:2b:f0: b4:1a:00:fc -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDJBRjExMC8GA1UEBRMoRTg0ODYzNzQ0NDlBREU1NTgxRUI3OEMzOTgyRjFERTEy QTRBNjAwMzAeFw0yNTA3MDQwOTM4MzlaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NjdhMTFmLWIzZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+XAUF3gnjK+ehLrOJErzyvMt1axHqwws5cXeIr1yie5cKTGGZuoVDxGItp5sS 4OYlXxAjrV4CpCgFgZ2PEOoWHK2Fbn++sn6Nlz2EBNY7RB7aWJFAaBuXUjn2vK6N JNbNq3ioWwvzg8eUQ2aR68uv2O3u34MjnM1ND8c1VkGI9ovYrs87SA4AjTrPJ66q 26kP8X40GSHEGmlwPXK0sLLxMpSEG16JK02OzJoK3LOM7RAGWaOVkD5i+wRzMs5A H3gWl1hbpVamXl56jHp4YmPjrf6MtJuFqT6JhC89l67u7QEnCDpep9zJ3h3ZMoaH vdoukyS6g862ASqayyxesXBvAgMBAAGjggKjMIICnzAdBgNVHQ4EFgQUJgtG1tKS qUNleKfjMOI8xoPOqdEwHwYDVR0jBBgwFoAU6EhjdESa3lWB63jDmC8d4SpKYAMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMkFGL0YzRUZCODk4QkNC QTExRUQ5QzlBRkEyNUM0RjlBRTAyLzZFaGpkRVNhM2xXQjYzakRtQzhkNFNwS1lB TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkVoamRFU2EzbFdCNjNqRG1DOGQ0U3BLWUFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDJBRi9GM0VGQjg5OEJDQkExMUVEOUM5QUZBMjVDNEY5QUUwMi9BQTEzQTRBQzU4 QkExMUYwOEMxOTAxNURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAtBggrBgEFBQcBBwEB/wQe MBwwGgQCAAEwFDAMAwQAZ00JAwQCZ00IAwQCdM6kMA0GCSqGSIb3DQEBCwUAA4IB AQBkaY93Udl5TPbFMKli6MyC3gzI/ohzPsoiqYh2vP+tUCZ4hk3NCHWlq5APe935 jyX84NrRRMcbhNAFa5m3qgj/6qojq6FfeE3O6ksd9mpKrn8lIMpljUmaw2uTG3hB 088KTOm1ndSeLXoX1GR8LaLlgXIhGmFw5fe8CgG0AEvTlVlUsG8FF1NPNW/B566M y48kERj6uH9+3Cy44vQ7nmqS1kWllf5MeaTsNwTdtmDN0nkjpATtHqGNeGpH+/tU SSs4m+WC6pfxbeHn0C6/OpybfQ2icr6b0Nuygigep+t8E9sKZrigTXaU2OVWIBhb OXG0XQTM+1S2HduIK/C0GgD8 -----END CERTIFICATE-----Generated at Mon Jul 7 11:55:58 2025 by rpki-client