$ rpki-client -vvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8A65797E7BF511F0BEBF8326C4F9AE02.roa File: 8A65797E7BF511F0BEBF8326C4F9AE02.roa (raw, json) Hash identifier: 8VEPDf924YuQ0JrYCDPzrjF2qm9rSo7AZ2xnXGQmqpY= Subject key identifier: 1F:69:90:E0:46:9E:8D:99:5A:97:B9:4A:25:C8:BB:A9:3F:76:F9:AA Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Certificate serial: 04 Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8A65797E7BF511F0BEBF8326C4F9AE02.roa Signing time: Mon 18 Aug 2025 05:38:17 +0000 ROA not before: Mon 18 Aug 2025 05:38:17 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45158 IP address blocks: 103.251.172.0/22 maxlen: 23 120.29.240.0/21 maxlen: 21 120.29.245.0/24 maxlen: 24 120.29.246.0/24 maxlen: 24 2407:1e00::/32 maxlen: 32 2407:1e00::/33 maxlen: 40 2407:1e00:1003::/48 maxlen: 48 2407:1e00:8000::/33 maxlen: 37 2407:1e00:8000::/34 maxlen: 40 2407:1e00:c000::/35 maxlen: 40 2407:1e00:e000::/36 maxlen: 40 2407:1e00:f000::/37 maxlen: 40 2407:1e00:f800::/38 maxlen: 38 2407:1e00:f800::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 02:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98 Validity Not Before: Aug 18 05:38:17 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a2bc49-a3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:db:dc:8e:b1:90:e1:d1:37:d1:97:a5:f2: e0:4b:25:f8:18:bf:97:09:12:b8:e9:4d:0a:d9:e8: df:43:c1:a1:67:83:8a:36:94:d8:82:8f:aa:41:49: 7e:97:d4:1f:4f:b0:37:55:7e:a4:eb:0b:5b:4f:5e: 5f:f8:8b:04:c7:1b:b8:f0:84:74:31:08:b7:14:9d: 50:32:1b:78:d2:2f:b0:57:b5:20:02:c5:45:e4:1b: 41:82:bd:f9:60:f3:45:2a:c9:c3:35:49:7b:d3:d0: 3c:cc:84:19:98:3f:34:ea:2b:fd:a7:cd:1f:ac:43: 0c:8f:c4:e5:3e:c1:5b:88:ab:21:31:4f:41:74:fe: fa:e7:12:9e:55:12:71:a2:e1:fd:b2:64:89:6c:f0: ec:d1:6b:e0:8a:8e:4f:35:a7:93:dc:c8:cf:ca:b2: 38:bb:bb:f8:fa:27:ef:bc:38:2b:3b:0d:13:b3:e3: 3d:3f:94:3c:ef:5c:ac:5a:ab:a5:8f:45:20:73:91: 68:08:24:35:d3:8e:db:fb:93:36:58:5a:54:4f:c2: da:08:42:a8:48:1f:f9:4d:d6:0e:2e:f5:97:b2:7c: 02:9d:df:59:17:76:a4:42:94:05:57:a9:99:4f:23: 14:26:d5:22:55:f7:40:84:ce:62:0f:8d:8a:9d:a8: 52:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:69:90:E0:46:9E:8D:99:5A:97:B9:4A:25:C8:BB:A9:3F:76:F9:AA X509v3 Authority Key Identifier: keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8A65797E7BF511F0BEBF8326C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.251.172.0/22 120.29.240.0/21 IPv6: 2407:1e00::/32 Signature Algorithm: sha256WithRSAEncryption ca:42:ca:3e:72:79:5c:90:3c:17:44:5e:ae:90:ea:07:e0:0e: f7:d0:15:ee:32:da:55:7c:90:14:25:96:02:ec:84:38:70:74: 58:1e:6a:6c:75:f5:9f:bf:28:70:e8:6f:34:cf:bd:18:08:2e: 08:0b:b8:68:d0:ce:a4:ac:d7:3e:92:64:08:51:55:00:d1:8b: 5e:e4:b1:c0:40:0f:27:6c:19:f3:3e:44:65:4c:c5:8c:7e:8b: 6b:6a:03:46:5e:dc:f2:68:04:32:70:60:8e:10:00:23:b7:63: b3:62:83:c7:fe:35:08:0c:85:66:5b:09:e4:25:05:f6:28:58: bc:41:07:b8:43:59:a1:81:16:bf:cf:b6:5a:ea:7b:34:5c:bd: 72:db:5d:93:b8:45:02:a9:3d:a7:ef:b2:1c:74:64:e4:35:ce: 0e:5e:61:3b:78:b0:c5:09:39:16:cc:8a:43:c5:ef:6d:65:a5: ee:97:a2:df:99:61:a0:8a:02:c4:bc:b3:c7:3a:46:af:72:1b: f0:25:88:3e:69:c8:52:78:bd:9a:8a:f1:34:31:ee:34:06:49: 90:f7:3e:33:01:79:82:92:71:27:a0:d6:97:1b:4b:af:06:66: 1c:4f:ec:8a:db:d2:45:97:0c:13:59:45:51:fe:5d:97:a9:23: 5d:71:18:53 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDU4ODExMC8GA1UEBRMoODgyODU5RDUyMzAxRjAxNTcxRDlENENGOTUzRjQ1RTA3 NUUwOUE5ODAeFw0yNTA4MTgwNTM4MTdaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YTJiYzQ5LWEzYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwHdvcjrGQ4dE30Zel8uBLJfgYv5cJErjpTQrZ6N9DwaFng4o2lNiCj6pBSX6X 1B9PsDdVfqTrC1tPXl/4iwTHG7jwhHQxCLcUnVAyG3jSL7BXtSACxUXkG0GCvflg 80UqycM1SXvT0DzMhBmYPzTqK/2nzR+sQwyPxOU+wVuIqyExT0F0/vrnEp5VEnGi 4f2yZIls8OzRa+CKjk81p5PcyM/Ksji7u/j6J++8OCs7DROz4z0/lDzvXKxaq6WP RSBzkWgIJDXTjtv7kzZYWlRPwtoIQqhIH/lN1g4u9ZeyfAKd31kXdqRClAVXqZlP IxQm1SJV90CEzmIPjYqdqFIzAgMBAAGjggKqMIICpjAdBgNVHQ4EFgQUH2mQ4Eae jZlal7lKJci7qT92+aowHwYDVR0jBBgwFoAUiChZ1SMB8BVx2dTPlT9F4HXgmpgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlENTg4L0JGN0Q1RTc2N0JG MzExRjBBMDVGQUQ4MkM0RjlBRTAyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21w Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUNoWjFTTUI4QlZ4MmRUUGxUOUY0SFhnbXBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDU4OC9CRjdENUU3NjdCRjMxMUYwQTA1RkFEODJDNEY5QUUwMi84QTY1Nzk3RTdC RjUxMUYwQkVCRjgzMjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA0BggrBgEFBQcBBwEB/wQl MCMwEgQCAAEwDAMEAmf7rAMEA3gd8DANBAIAAjAHAwUAJAceADANBgkqhkiG9w0B AQsFAAOCAQEAykLKPnJ5XJA8F0RerpDqB+AO99AV7jLaVXyQFCWWAuyEOHB0WB5q bHX1n78ocOhvNM+9GAguCAu4aNDOpKzXPpJkCFFVANGLXuSxwEAPJ2wZ8z5EZUzF jH6La2oDRl7c8mgEMnBgjhAAI7djs2KDx/41CAyFZlsJ5CUF9ihYvEEHuENZoYEW v8+2Wup7NFy9cttdk7hFAqk9p++yHHRk5DXODl5hO3iwxQk5FsyKQ8XvbWWl7pei 35lhoIoCxLyzxzpGr3Ib8CWIPmnIUni9morxNDHuNAZJkPc+MwF5gpJxJ6DWlxtL rwZmHE/sitvSRZcME1lFUf5dl6kjXXEYUw== -----END CERTIFICATE-----Generated at Fri Aug 22 18:46:51 2025 by rpki-client