$ rpki-client -vvf rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/D4B97082EF2211EDB7EFE882C4F9AE02.roa File: D4B97082EF2211EDB7EFE882C4F9AE02.roa (raw, json) Hash identifier: HWnaY2EEm6u/FMZ1I67pi/PyglY7//JccNuuPPpBYpw= Subject key identifier: B4:E0:9F:80:CF:51:50:00:9A:B2:B6:40:B1:39:2A:21:1D:8B:0D:97 Certificate issuer: /CN=A9115122/serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8 Certificate serial: 0195 Authority key identifier: E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/D4B97082EF2211EDB7EFE882C4F9AE02.roa Signing time: Fri 27 Jun 2025 03:01:16 +0000 ROA not before: Fri 27 Jun 2025 03:01:16 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149871 IP address blocks: 103.189.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115122, serialNumber=E50693CA185BB65D92CAFB30E376F51B959AD2D8 Validity Not Before: Jun 27 03:01:16 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685e097c-d8f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f2:d7:61:f3:f8:02:19:b7:d0:1c:12:0b:7a: 7b:31:90:f5:8a:38:30:0a:3f:d0:3a:b7:d7:64:9e: b9:b8:f8:d9:20:d6:0a:2a:33:ad:0c:dc:3f:c9:d3: 9c:3c:76:7f:59:8e:a3:50:7e:5e:c9:eb:53:ef:3d: 67:20:7b:ff:89:9e:9d:ed:25:91:0c:50:d1:61:15: c8:e4:67:8f:e5:bb:dd:ca:9b:c1:f5:ea:ab:49:bd: 1d:ed:de:4a:73:71:a9:7c:fa:a5:42:27:7c:4d:f8: d2:6c:00:06:f5:69:3d:86:77:ed:72:91:51:5f:81: d8:07:27:0a:c8:3f:24:b1:b9:dd:3e:0b:71:21:67: 43:05:0f:5c:fd:e2:c1:56:92:23:9b:34:fe:04:a4: b1:79:db:25:f0:e2:aa:bb:fe:2b:ae:6c:27:f4:c0: 5c:f4:c8:3e:23:c0:b3:14:8d:08:b4:4d:a8:d0:50: 47:a7:54:5a:92:2c:88:d6:e8:08:49:59:d6:87:bc: 72:1b:b7:48:f2:ff:9e:c7:70:f4:a7:06:1a:b9:5c: da:d7:e1:15:66:71:35:a9:85:aa:ab:05:ba:41:6a: 10:af:29:ac:29:b4:65:54:98:2f:39:8e:14:97:ea: 9b:66:3e:69:42:81:98:af:86:0c:7b:69:f0:d6:ca: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E0:9F:80:CF:51:50:00:9A:B2:B6:40:B1:39:2A:21:1D:8B:0D:97 X509v3 Authority Key Identifier: keyid:E5:06:93:CA:18:5B:B6:5D:92:CA:FB:30:E3:76:F5:1B:95:9A:D2:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/5QaTyhhbtl2Syvsw43b1G5Wa0tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QaTyhhbtl2Syvsw43b1G5Wa0tg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115122/30C7A38EEF1F11EDBF71CC80C4F9AE02/D4B97082EF2211EDB7EFE882C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.224.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:3a:b5:40:2c:5b:56:fb:67:75:8c:f4:8f:85:33:8b:37:59: 5b:96:1d:71:e1:ba:fb:9c:8c:37:8e:18:80:b7:5b:03:9e:b9: 3d:1b:bf:01:35:19:cd:d7:78:35:2a:9b:e0:32:a2:7d:e7:6e: 7b:df:56:49:af:91:dc:e6:ae:55:b0:0b:66:af:8b:31:0a:47: c4:58:82:f5:77:28:0d:a2:fb:c8:5e:ba:e1:fa:43:36:2c:2e: a4:1b:38:be:19:ea:75:3d:4c:f0:dc:af:21:ea:90:c1:3f:18: 6a:28:75:0e:8b:51:df:74:32:fd:31:39:76:b1:25:c1:59:71: 1f:f9:3b:45:fc:82:1f:82:bb:9e:2e:d8:e7:45:87:94:47:f6: de:a6:84:9c:62:8b:f2:d7:ca:88:b4:26:a2:6c:01:3e:c1:86: 20:33:0c:fd:b9:11:0d:e9:dc:eb:7b:de:1d:87:fb:6a:87:8d: a2:59:ca:fc:c8:17:46:19:ac:56:db:f1:97:1b:de:6d:9e:26: a7:a5:4c:ca:d5:15:6e:4f:71:da:90:02:df:a0:21:52:22:b4: 86:48:9a:5b:71:34:66:9d:3e:f8:07:ec:16:81:e6:40:7f:a2: 2f:12:42:9b:20:a3:e8:28:61:18:0f:3c:f6:2e:8e:ca:ba:2c: 59:45:78:e5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUxMjIxMTAvBgNVBAUTKEU1MDY5M0NBMTg1QkI2NUQ5MkNBRkIzMEUzNzZGNTFC OTU5QUQyRDgwHhcNMjUwNjI3MDMwMTE2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVlMDk3Yy1kOGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fLXYfP4Ahm30BwSC3p7MZD1ijgwCj/QOrfXZJ65uPjZINYKKjOtDNw/ydOc PHZ/WY6jUH5eyetT7z1nIHv/iZ6d7SWRDFDRYRXI5GeP5bvdypvB9eqrSb0d7d5K c3GpfPqlQid8TfjSbAAG9Wk9hnftcpFRX4HYBycKyD8ksbndPgtxIWdDBQ9c/eLB VpIjmzT+BKSxedsl8OKqu/4rrmwn9MBc9Mg+I8CzFI0ItE2o0FBHp1RakiyI1ugI SVnWh7xyG7dI8v+ex3D0pwYauVza1+EVZnE1qYWqqwW6QWoQrymsKbRlVJgvOY4U l+qbZj5pQoGYr4YMe2nw1sokxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLTgn4DP UVAAmrK2QLE5KiEdiw2XMB8GA1UdIwQYMBaAFOUGk8oYW7Zdksr7MON29RuVmtLY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTEyMi8zMEM3QTM4RUVG MUYxMUVEQkY3MUNDODBDNEY5QUUwMi81UWFUeWhoYnRsMlN5dnN3NDNiMUc1V2Ew dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRYVR5aGhidGwyU3l2c3c0M2IxRzVXYTB0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTUxMjIvMzBDN0EzOEVFRjFGMTFFREJGNzFDQzgwQzRGOUFFMDIvRDRCOTcwODJF RjIyMTFFREI3RUZFODgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnveAwDQYJKoZIhvcNAQELBQADggEBAF06tUAsW1b7Z3WM 9I+FM4s3WVuWHXHhuvucjDeOGIC3WwOeuT0bvwE1Gc3XeDUqm+Ayon3nbnvfVkmv kdzmrlWwC2avizEKR8RYgvV3KA2i+8heuuH6QzYsLqQbOL4Z6nU9TPDcryHqkME/ GGoodQ6LUd90Mv0xOXaxJcFZcR/5O0X8gh+Cu54u2OdFh5RH9t6mhJxii/LXyoi0 JqJsAT7BhiAzDP25EQ3p3Ot73h2H+2qHjaJZyvzIF0YZrFbb8Zcb3m2eJqelTMrV FW5PcdqQAt+gIVIitIZImltxNGadPvgH7BaB5kB/oi8SQpsgo+goYRgPPPYujsq6 LFlFeOU= -----END CERTIFICATE-----Generated at Tue Aug 12 18:26:44 2025 by rpki-client