$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/34FC96E8CFE711EB93714D2FC4F9AE02.roa File: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (raw, json) Hash identifier: TDCyPfvl14GmlvtvPX3j8FfT9kdUWeZZya5/K7phv9Q= Subject key identifier: 71:B4:FA:E5:98:7E:BC:88:F6:EB:E6:8C:0E:41:52:F5:A6:84:37:1B Certificate issuer: /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Certificate serial: 25BA Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/34FC96E8CFE711EB93714D2FC4F9AE02.roa Signing time: Sat 26 Jul 2025 15:53:15 +0000 ROA not before: Sat 26 Jul 2025 15:53:15 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 138965 IP address blocks: 103.36.16.0/22 maxlen: 24 103.252.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9658 (0x25ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D Validity Not Before: Jul 26 15:53:15 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6884f9eb-c488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:08:6a:ec:8f:f4:69:0b:9f:6b:74:fb:df: 85:39:3f:3e:46:84:1d:48:fe:4c:e3:3d:9a:67:82: 62:2f:7b:32:c4:af:c7:46:3a:77:c2:dc:ce:2d:f0: 1d:66:5e:51:cb:af:e8:95:dd:bc:82:e1:3e:d1:c4: 68:11:f9:3f:97:96:2c:9d:b1:46:5a:ab:42:35:19: a2:ef:da:84:aa:8b:5d:a7:01:dc:66:cc:f7:90:63: ee:cd:26:38:d4:5a:c0:49:93:f2:74:17:03:45:b4: 6d:3d:9e:98:a8:ea:1e:03:05:bc:ae:1a:78:52:33: e1:fd:52:d2:92:78:39:da:80:bf:1e:29:7e:63:2f: d6:d5:30:bf:b4:4c:83:83:61:7c:a1:a7:8c:fe:9f: a8:2e:0a:9f:75:b1:53:02:df:fd:50:5c:fc:ae:22: 2e:ba:8f:bf:b9:04:47:1e:a2:22:d3:4a:49:e8:16: 17:d0:26:b0:65:be:6f:8e:c5:44:5b:ac:21:85:c1: 24:89:12:11:76:b9:ed:e3:a3:e3:b0:49:f9:20:70: 76:1d:de:21:6b:b2:ac:8f:d2:8d:32:7c:a8:d1:77: 82:d0:92:f3:72:3b:df:59:d7:f9:72:ab:6e:f9:d6: 37:e8:97:08:80:52:ac:00:af:ae:77:18:4e:09:63: c2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B4:FA:E5:98:7E:BC:88:F6:EB:E6:8C:0E:41:52:F5:A6:84:37:1B X509v3 Authority Key Identifier: keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/34FC96E8CFE711EB93714D2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.36.16.0/22 103.252.32.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:74:58:04:73:4b:6a:6d:ec:ef:d8:5a:78:2d:1a:90:67:79: 05:74:84:8d:df:05:e4:c4:2d:17:3d:61:40:4f:dd:dc:b6:02: 52:b5:db:66:2d:9a:23:46:da:fb:d4:0e:d5:08:7a:fe:34:1a: 07:a0:e6:23:b3:7e:77:58:e0:7b:01:5e:bd:1f:d9:e8:57:14: 00:9c:e3:27:65:bb:77:a5:22:a5:cb:55:fe:22:df:e3:d3:57: 62:e8:c5:33:01:e6:e0:91:1a:af:cc:54:f0:a8:04:ba:8c:89: aa:06:c3:55:44:7f:e1:3a:a7:b4:b6:ed:93:7c:bd:60:19:09: 24:aa:72:4b:47:e3:0a:52:44:a7:32:e0:82:0b:47:6e:72:c0: c5:87:cc:77:2f:21:f1:f6:4c:46:94:ec:1e:1b:9f:cb:ee:49: 1c:ee:10:f7:2a:b2:f6:01:94:46:5a:47:ad:e5:b7:44:87:73: 8f:a9:db:ad:02:e5:00:fc:45:0b:c7:22:25:4a:d3:f2:40:b7: 1a:6c:cc:25:e5:bf:1b:86:19:b5:11:1c:14:89:21:98:d5:df: 7d:07:de:b3:55:36:5a:f9:54:18:be:b4:8c:dd:ea:93:ac:b2: 03:1d:77:6e:0c:27:f0:12:9d:f2:81:6b:e6:ea:b0:cc:0a:ef: 12:28:8c:9a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICJbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxOEUxMTAvBgNVBAUTKDMyMEIzN0Y2RTk3MDQ1RTM4OTg0NjEwRkZBNDdFOTY4 NEE4NDY3N0QwHhcNMjUwNzI2MTU1MzE1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg0ZjllYi1jNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+4IauyP9GkLn2t0+9+FOT8+RoQdSP5M4z2aZ4JiL3syxK/HRjp3wtzOLfAd Zl5Ry6/old28guE+0cRoEfk/l5YsnbFGWqtCNRmi79qEqotdpwHcZsz3kGPuzSY4 1FrASZPydBcDRbRtPZ6YqOoeAwW8rhp4UjPh/VLSkng52oC/Hil+Yy/W1TC/tEyD g2F8oaeM/p+oLgqfdbFTAt/9UFz8riIuuo+/uQRHHqIi00pJ6BYX0CawZb5vjsVE W6whhcEkiRIRdrnt46PjsEn5IHB2Hd4ha7Ksj9KNMnyo0XeC0JLzcjvfWdf5cqtu +dY36JcIgFKsAK+udxhOCWPCRQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHG0+uWY fryI9uvmjA5BUvWmhDcbMB8GA1UdIwQYMBaAFDILN/bpcEXjiYRhD/pH6WhKhGd9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTE4RS85NTUwNzM4NDEz MzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1JlT0poR0VQLWtmcGFFcUVa MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01nczM5dWx3UmVPSmhHRVAta2ZwYUVxRVozMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTkxOEUvOTU1MDczODQxMzMyMTFFNTlCQzBEMzc5QzRGOUFFMDIvMzRGQzk2RThD RkU3MTFFQjkzNzE0RDJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnJBADBAJn/CAwDQYJKoZIhvcNAQELBQADggEBAIt0WARz S2pt7O/YWngtGpBneQV0hI3fBeTELRc9YUBP3dy2AlK122YtmiNG2vvUDtUIev40 Ggeg5iOzfndY4HsBXr0f2ehXFACc4ydlu3elIqXLVf4i3+PTV2LoxTMB5uCRGq/M VPCoBLqMiaoGw1VEf+E6p7S27ZN8vWAZCSSqcktH4wpSRKcy4IILR25ywMWHzHcv IfH2TEaU7B4bn8vuSRzuEPcqsvYBlEZaR63lt0SHc4+p260C5QD8RQvHIiVK0/JA txpszCXlvxuGGbURHBSJIZjV330H3rNVNlr5VBi+tIzd6pOssgMdd24MJ/ASnfKB a+bqsMwK7xIojJo= -----END CERTIFICATE-----Generated at Sun Aug 10 13:51:58 2025 by rpki-client