$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/3ABFAC2231E211EFA341983CC4F9AE02.roa File: 3ABFAC2231E211EFA341983CC4F9AE02.roa (raw, json) Hash identifier: UaoBno6EmWaBFcw5TBVRPYFiWGMBoSDzhu3pQGtDygg= Subject key identifier: 66:6F:60:A8:7B:2F:9C:7A:3C:38:3D:DE:A4:FB:2D:3C:38:C2:AD:21 Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Certificate serial: 082A Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/3ABFAC2231E211EFA341983CC4F9AE02.roa Signing time: Tue 06 May 2025 21:01:34 +0000 ROA not before: Tue 06 May 2025 21:01:34 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 400619 IP address blocks: 103.151.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2090 (0x82a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Validity Not Before: May 6 21:01:34 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=681a78ae-3c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9f:6a:cd:6a:83:49:2e:71:87:17:38:5b:ba: 1d:99:d3:f8:7b:1c:64:12:4a:1a:8c:52:8d:f9:38: e5:48:d5:9f:5a:ab:e4:6c:34:92:5b:ac:0a:1e:4c: 4c:9c:f1:46:be:96:1b:34:f7:1d:c6:01:de:db:aa: c7:a2:01:67:6d:8e:cc:9c:7f:53:ca:23:a8:24:83: cf:eb:4e:7b:13:5d:d2:57:c7:7b:5b:46:9f:72:8b: 45:19:12:ca:ee:82:2c:c2:da:3e:0d:2a:97:4c:a1: ae:df:28:aa:76:52:1b:62:7f:d0:89:cb:a6:35:19: 63:eb:90:67:1f:fa:30:4a:22:1e:a5:1e:19:06:67: 55:ec:94:b7:5c:76:3f:29:63:82:b8:8f:65:43:e4: 5d:3f:42:bf:14:b9:42:bf:e5:26:c0:26:31:2a:6c: 7c:de:ab:37:93:a0:2c:1b:b0:d3:39:3c:f0:d8:a7: 08:55:e0:e6:04:2a:94:b2:34:df:0d:76:f2:97:02: 73:aa:84:6f:26:74:43:4c:24:9f:ee:db:1b:19:12: 41:0e:51:78:26:5f:49:5d:97:a7:4a:c9:91:bc:f3: 84:1f:0f:17:09:5d:63:6f:04:1b:c7:06:64:81:f9: e0:a8:d0:15:02:37:1f:21:35:7c:1a:0e:4d:de:be: 35:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6F:60:A8:7B:2F:9C:7A:3C:38:3D:DE:A4:FB:2D:3C:38:C2:AD:21 X509v3 Authority Key Identifier: keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/3ABFAC2231E211EFA341983CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.117.0/24 Signature Algorithm: sha256WithRSAEncryption 34:4c:85:12:bd:1c:f7:2b:36:4e:52:4b:55:3c:40:15:b2:84: 51:24:a2:7b:63:32:39:14:17:a9:9f:75:e2:11:74:4c:71:2b: 9e:3b:13:a9:f2:f1:92:b5:59:26:43:92:7d:4e:53:12:d0:96: d2:33:1b:6a:5d:fb:e5:26:3a:a8:e0:44:9a:51:29:6e:cc:73: a7:84:38:a8:a2:f6:5e:e3:97:d4:2e:94:7e:4a:92:75:80:16: 9d:3c:a0:34:0a:55:5a:16:41:5d:57:00:87:57:97:c9:87:0f: 8d:50:83:03:72:8e:7d:12:74:3d:b1:60:8e:b7:6e:c9:a0:19: 2c:bb:93:29:08:97:73:05:97:70:f7:7b:3f:cc:2b:b4:75:80: 1a:a5:7c:e3:96:85:d4:77:5b:61:02:a6:df:00:7d:3c:a1:c2: d5:d5:12:65:ae:3d:da:a2:e3:0f:f2:81:c5:d9:5d:cc:c5:76: 27:a8:a7:57:53:69:17:10:8c:e7:df:3e:2c:34:83:25:73:88: e5:a2:b3:be:c7:6d:0a:c2:6a:a1:50:7b:81:8e:db:dc:2e:6b: 78:26:0f:17:19:75:1b:fc:c3:ee:dd:8e:f5:76:b4:f9:6a:ce: 42:f8:2d:07:5a:d1:c0:e8:a1:a8:c2:de:2f:42:53:0b:67:53: 9e:fe:27:23 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEIxMTAvBgNVBAUTKDgyMzZCQkNENzAyRDQ4MjJGRERENUJCMDU2NjBDRjEw MzhFQzhDN0UwHhcNMjUwNTA2MjEwMTM0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhNzhhZS0zYzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZ9qzWqDSS5xhxc4W7odmdP4exxkEkoajFKN+TjlSNWfWqvkbDSSW6wKHkxM nPFGvpYbNPcdxgHe26rHogFnbY7MnH9TyiOoJIPP6057E13SV8d7W0afcotFGRLK 7oIswto+DSqXTKGu3yiqdlIbYn/QicumNRlj65BnH/owSiIepR4ZBmdV7JS3XHY/ KWOCuI9lQ+RdP0K/FLlCv+UmwCYxKmx83qs3k6AsG7DTOTzw2KcIVeDmBCqUsjTf DXbylwJzqoRvJnRDTCSf7tsbGRJBDlF4Jl9JXZenSsmRvPOEHw8XCV1jbwQbxwZk gfngqNAVAjcfITV8Gg5N3r41PwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGZvYKh7 L5x6PDg93qT7LTw4wq0hMB8GA1UdIwQYMBaAFII2u81wLUgi/d1bsFZgzxA47Ix+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0Qi8yNEE2OEU5Q0Qw RTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFNDTDkzVnV3Vm1EUEVEanNq SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqYTd6WEF0U0NMOTNWdXdWbURQRURqc2pINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFFNEIvMjRBNjhFOUNEMEUzMTFFQTlBNzNCOTRGQzRGOUFFMDIvM0FCRkFDMjIz MUUyMTFFRkEzNDE5ODNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnl3UwDQYJKoZIhvcNAQELBQADggEBADRMhRK9HPcrNk5S S1U8QBWyhFEkontjMjkUF6mfdeIRdExxK547E6ny8ZK1WSZDkn1OUxLQltIzG2pd ++UmOqjgRJpRKW7Mc6eEOKii9l7jl9QulH5KknWAFp08oDQKVVoWQV1XAIdXl8mH D41QgwNyjn0SdD2xYI63bsmgGSy7kykIl3MFl3D3ez/MK7R1gBqlfOOWhdR3W2EC pt8AfTyhwtXVEmWuPdqi4w/ygcXZXczFdieop1dTaRcQjOffPiw0gyVziOWis77H bQrCaqFQe4GO29wua3gmDxcZdRv8w+7djvV2tPlqzkL4LQda0cDooajC3i9CUwtn U57+JyM= -----END CERTIFICATE-----Generated at Wed Nov 5 13:06:38 2025 by rpki-client