$ rpki-client -vvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8938B9DA7BF511F0BEBF8326C4F9AE02.roa File: 8938B9DA7BF511F0BEBF8326C4F9AE02.roa (raw, json) Hash identifier: vQ9ge67AKzH4HNbVsuxX3Mwi95vAo6POwUTMCo0fB8I= Subject key identifier: C4:0E:24:54:AD:08:2F:0E:68:EB:2A:DB:75:57:7A:EA:E3:8A:37:47 Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Certificate serial: 02 Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8938B9DA7BF511F0BEBF8326C4F9AE02.roa Signing time: Mon 18 Aug 2025 05:38:15 +0000 ROA not before: Mon 18 Aug 2025 05:38:15 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 132836 IP address blocks: 103.98.86.0/23 maxlen: 23 103.98.86.0/24 maxlen: 24 103.98.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 02:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Validity Not Before: Aug 18 05:38:15 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a2bc47-77c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d1:c2:3c:73:90:ea:b6:85:b0:4d:e3:16:4f: 15:ea:c9:bf:28:3d:8a:4d:52:42:65:b9:dd:72:e2: c7:e4:69:bd:b9:ec:22:0d:c0:db:78:e4:b9:c5:2c: 2b:c5:c4:dd:bc:87:13:8d:46:8d:cf:58:ab:3a:fe: 7e:91:85:49:75:7d:ef:51:8a:5e:a9:a7:ac:ea:ba: 21:47:6d:7a:63:e9:a9:6c:a3:98:f3:62:1c:38:5e: 1b:e1:9d:92:0b:c2:16:f4:26:91:84:a1:24:b3:16: 68:83:34:80:ca:29:1f:cb:d4:29:bb:86:f0:83:2a: 08:5c:97:d0:68:03:20:86:c2:d3:4e:12:7b:33:c6: 92:18:1b:e9:f0:05:12:66:4e:d4:8a:8f:40:03:1f: bc:96:a9:2d:43:36:53:fc:11:0c:0d:55:3b:62:86: 46:08:77:c4:1d:1d:47:80:31:3d:e9:6e:b0:9e:d6: 9a:e2:12:17:1f:8b:57:8a:74:0b:e5:88:47:00:2e: 5b:3c:e7:0b:5f:f4:ae:a0:1b:35:5b:66:1c:76:fa: 2f:84:91:90:40:b2:d8:62:9c:c7:40:0b:c8:76:9e: a7:1f:d1:f3:51:a8:fb:27:4b:26:d0:12:6a:29:b1: 65:4a:74:69:e7:86:2b:b8:fb:c2:7a:a5:3b:bd:db: 11:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0E:24:54:AD:08:2F:0E:68:EB:2A:DB:75:57:7A:EA:E3:8A:37:47 X509v3 Authority Key Identifier: keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8938B9DA7BF511F0BEBF8326C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.98.86.0/23 Signature Algorithm: sha256WithRSAEncryption 85:49:f1:f2:3f:1d:34:38:3c:10:08:9f:dc:54:06:7c:ef:79: f6:9a:7c:72:42:8f:e2:1b:81:c1:61:1b:95:fc:c8:72:19:78: cb:30:83:65:d9:81:5e:fd:1c:3e:1d:ec:e8:cc:1e:65:22:15: 97:a0:57:f1:f7:6a:60:9d:b0:fa:9f:5d:14:60:8f:86:d4:8e: 25:8b:9e:93:b7:e2:0a:c8:54:46:2c:fe:c4:c3:0b:81:d9:97: 8e:fe:c9:8d:97:c0:fc:47:53:64:6a:50:d7:84:2e:54:8a:79: f0:6d:81:64:1c:3b:35:07:b6:f4:fe:47:2b:f9:85:7a:d4:bd: 2c:c2:da:f0:dc:60:78:d0:25:28:15:c0:db:1c:e1:22:92:50: 5c:2f:fc:4e:97:39:82:04:36:73:3c:9f:3c:3f:c3:79:89:06: bb:63:8b:78:1c:ef:5a:8d:43:76:fb:ce:23:7e:e7:46:fe:e8: d8:b5:40:cf:61:99:4a:72:94:cd:de:36:a4:e3:05:e8:f3:f3: b8:79:f5:b5:97:84:c7:85:97:a8:47:a2:7c:f3:19:3f:85:08: ce:5c:57:0e:d0:a0:8d:f3:20:85:94:c3:63:f3:c4:fe:6f:15: 5d:f5:f2:2b:97:7c:a6:b7:6e:25:62:02:0c:a0:d1:0a:1e:6a: ae:92:f6:55 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDU4ODExMC8GA1UEBRMoODgyODU5RDUyMzAxRjAxNTcxRDlENENGOTUzRjQ1RTA3 NUUwOUE5ODAeFw0yNTA4MTgwNTM4MTVaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YTJiYzQ3LTc3YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB0cI8c5DqtoWwTeMWTxXqyb8oPYpNUkJlud1y4sfkab257CINwNt45LnFLCvF xN28hxONRo3PWKs6/n6RhUl1fe9Ril6pp6zquiFHbXpj6also5jzYhw4XhvhnZIL whb0JpGEoSSzFmiDNIDKKR/L1Cm7hvCDKghcl9BoAyCGwtNOEnszxpIYG+nwBRJm TtSKj0ADH7yWqS1DNlP8EQwNVTtihkYId8QdHUeAMT3pbrCe1priEhcfi1eKdAvl iEcALls85wtf9K6gGzVbZhx2+i+EkZBAsthinMdAC8h2nqcf0fNRqPsnSybQEmop sWVKdGnnhiu4+8J6pTu92xFLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUxA4kVK0I Lw5o6yrbdVd66uOKN0cwHwYDVR0jBBgwFoAUiChZ1SMB8BVx2dTPlT9F4HXgmpgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlENTg4L0JGN0Q1RTc2N0JG MzExRjBBMDVGQUQ4MkM0RjlBRTAyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21w Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUNoWjFTTUI4QlZ4MmRUUGxUOUY0SFhnbXBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDU4OC9CRjdENUU3NjdCRjMxMUYwQTA1RkFEODJDNEY5QUUwMi84OTM4QjlEQTdC RjUxMUYwQkVCRjgzMjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWdiVjANBgkqhkiG9w0BAQsFAAOCAQEAhUnx8j8dNDg8EAif 3FQGfO959pp8ckKP4huBwWEblfzIchl4yzCDZdmBXv0cPh3s6MweZSIVl6BX8fdq YJ2w+p9dFGCPhtSOJYuek7fiCshURiz+xMMLgdmXjv7JjZfA/EdTZGpQ14QuVIp5 8G2BZBw7NQe29P5HK/mFetS9LMLa8NxgeNAlKBXA2xzhIpJQXC/8Tpc5ggQ2czyf PD/DeYkGu2OLeBzvWo1DdvvOI37nRv7o2LVAz2GZSnKUzd42pOMF6PPzuHn1tZeE x4WXqEeifPMZP4UIzlxXDtCgjfMghZTDY/PE/m8VXfXyK5d8prduJWICDKDRCh5q rpL2VQ== -----END CERTIFICATE-----Generated at Fri Aug 22 18:43:56 2025 by rpki-client