$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/2E7C802A261711EEB93AAC74C4F9AE02.roa File: 2E7C802A261711EEB93AAC74C4F9AE02.roa (raw, json) Hash identifier: GNgH54VuveRBqhIirbO5+23rkV4blzguEnK1jVi0hnU= Subject key identifier: 13:DE:64:99:BC:1E:D6:70:83:EC:BB:AB:DC:B0:40:14:E4:B4:D2:1C Certificate issuer: /CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41 Certificate serial: 0163 Authority key identifier: 42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/2E7C802A261711EEB93AAC74C4F9AE02.roa Signing time: Sat 31 May 2025 03:52:39 +0000 ROA not before: Sat 31 May 2025 03:52:39 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 138960 IP address blocks: 103.137.196.0/23 maxlen: 23 103.137.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 03:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EA3B, serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41 Validity Not Before: May 31 03:52:39 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683a7d07-a214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:03:bc:a4:09:95:b1:21:4b:59:8d:36:b1: 64:b1:bd:39:42:e0:dc:21:2b:9a:71:87:65:9f:27: 58:7c:57:78:59:fd:69:ae:0d:6c:f6:eb:83:b1:53: 0d:81:7f:f3:f6:04:65:a8:4e:71:96:05:43:ac:a2: 64:c5:fe:ca:c6:96:38:65:cc:6c:ec:4a:4f:40:a2: ec:9d:77:98:90:6e:a6:c6:fa:0b:c1:9e:63:e2:32: 73:47:1a:3a:ee:67:74:3a:81:d8:2c:0e:c7:06:11: d5:ef:07:f6:59:77:48:38:6e:10:a2:cc:a5:1e:25: a8:fa:b8:f8:bc:7b:36:18:fd:9d:58:23:c7:bf:41: f2:7d:00:f6:44:ab:f2:22:2d:84:25:c2:2e:33:a8: 4a:d9:f3:11:c7:08:b5:8b:44:b9:0a:86:41:b1:ed: 50:5d:10:bf:f4:ad:5d:76:62:a7:d1:ce:05:af:f9: f5:4c:19:07:60:f2:b2:c8:8f:62:57:00:f7:97:13: 78:48:64:de:79:9b:cb:70:e1:56:be:67:c1:e1:1d: 44:ae:30:e6:64:9e:1f:b7:1d:58:78:41:2d:a4:4f: 13:38:dc:46:eb:f0:88:26:56:45:18:27:15:8a:06: 19:1e:2f:e8:87:d8:c1:eb:13:c3:b6:0e:39:69:5c: 58:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DE:64:99:BC:1E:D6:70:83:EC:BB:AB:DC:B0:40:14:E4:B4:D2:1C X509v3 Authority Key Identifier: keyid:42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/2E7C802A261711EEB93AAC74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.196.0/23 Signature Algorithm: sha256WithRSAEncryption 83:d0:2a:5e:75:5e:d4:46:9e:1f:4c:c5:d1:ca:52:aa:7a:70: 88:7c:61:2a:f2:3c:03:c4:f3:3c:87:8e:58:4d:9c:63:fb:2a: 96:46:a7:d2:10:6f:68:ec:7c:b2:0f:e0:ff:e0:b9:9d:19:40: ec:98:80:b0:2a:79:45:4d:69:34:14:01:5f:42:87:8c:3e:d0: 85:73:61:c9:4a:ee:9e:95:02:35:52:fb:6b:d2:99:fa:9a:7a: 00:d1:ab:37:fa:62:2a:07:7b:a6:2d:c0:53:80:42:cd:54:28: 82:d2:14:ad:13:54:31:23:22:e2:4e:98:5b:da:b6:4f:94:e6: 1c:21:85:e2:ab:cb:8f:f1:93:41:ed:58:85:54:b6:ad:97:40: ea:7b:d7:f5:bd:00:67:5b:c9:a5:1a:3f:38:93:d4:a8:78:d6: 1c:57:8f:56:36:56:72:1c:e2:22:bf:5f:71:03:f4:88:8a:75: ba:48:04:cd:56:b1:31:cb:63:1a:bb:fb:f1:53:90:00:3c:db: fe:ba:37:85:64:6b:2e:76:16:76:31:fa:5a:7e:57:17:b4:99: 03:9e:11:f4:ff:fa:07:4f:c2:94:a6:f3:e7:e3:06:17:41:d3: 7a:42:fd:65:3f:e6:a8:a4:f3:6f:0a:de:c5:82:20:c4:8b:0d: f8:7b:1f:f8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBM0IxMTAvBgNVBAUTKDQyQUMxODg3REYyQzlGRjQ2OEMwMEVCQzA2NTU5QUUx NzkwQjdENDEwHhcNMjUwNTMxMDM1MjM5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNhN2QwNy1hMjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRoDvKQJlbEhS1mNNrFksb05QuDcISuacYdlnydYfFd4Wf1prg1s9uuDsVMN gX/z9gRlqE5xlgVDrKJkxf7KxpY4Zcxs7EpPQKLsnXeYkG6mxvoLwZ5j4jJzRxo6 7md0OoHYLA7HBhHV7wf2WXdIOG4QosylHiWo+rj4vHs2GP2dWCPHv0HyfQD2RKvy Ii2EJcIuM6hK2fMRxwi1i0S5CoZBse1QXRC/9K1ddmKn0c4Fr/n1TBkHYPKyyI9i VwD3lxN4SGTeeZvLcOFWvmfB4R1ErjDmZJ4ftx1YeEEtpE8TONxG6/CIJlZFGCcV igYZHi/oh9jB6xPDtg45aVxYZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBPeZJm8 HtZwg+y7q9ywQBTktNIcMB8GA1UdIwQYMBaAFEKsGIffLJ/0aMAOvAZVmuF5C31B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUEzQi84OUQwMDYwQTI2 MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi9RcXdZaDk4c25fUm93QTY4QmxXYTRYa0xm VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Fxd1loOThzbl9Sb3dBNjhCbFdhNFhrTGZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVBM0IvODlEMDA2MEEyNjE2MTFFRUJFNzYxMDVDQzRGOUFFMDIvMkU3QzgwMkEy NjE3MTFFRUI5M0FBQzc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnicQwDQYJKoZIhvcNAQELBQADggEBAIPQKl51XtRGnh9M xdHKUqp6cIh8YSryPAPE8zyHjlhNnGP7KpZGp9IQb2jsfLIP4P/guZ0ZQOyYgLAq eUVNaTQUAV9Ch4w+0IVzYclK7p6VAjVS+2vSmfqaegDRqzf6YioHe6YtwFOAQs1U KILSFK0TVDEjIuJOmFvatk+U5hwhheKry4/xk0HtWIVUtq2XQOp71/W9AGdbyaUa PziT1Kh41hxXj1Y2VnIc4iK/X3ED9IiKdbpIBM1WsTHLYxq7+/FTkAA82/66N4Vk ay52FnYx+lp+Vxe0mQOeEfT/+gdPwpSm8+fjBhdB03pC/WU/5qik828K3sWCIMSL Dfh7H/g= -----END CERTIFICATE-----Generated at Mon Jun 2 07:05:15 2025 by rpki-client