$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/3619A9DA67B411F097A2770AC4F9AE02.roa File: 3619A9DA67B411F097A2770AC4F9AE02.roa (raw, json) Hash identifier: NovEF3NdDvqF9F8b0/ZT82vbbHXVaw622xvGyH6ZWPU= Subject key identifier: 1F:50:12:A9:3E:3E:62:1F:04:CB:29:AA:97:D6:CA:53:50:BD:EE:B9 Certificate issuer: /CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608 Certificate serial: 086E Authority key identifier: 87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/3619A9DA67B411F097A2770AC4F9AE02.roa Signing time: Tue 29 Jul 2025 23:21:23 +0000 ROA not before: Tue 29 Jul 2025 23:21:23 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135578 IP address blocks: 103.66.176.0/23 maxlen: 23 103.66.176.0/24 maxlen: 24 103.66.177.0/24 maxlen: 24 2406:59c0::/32 maxlen: 32 2406:59c0::/48 maxlen: 48 2406:59c0:1::/48 maxlen: 48 2406:59c0:2::/48 maxlen: 48 2406:59c0:3::/48 maxlen: 48 2406:59c0:4::/48 maxlen: 48 2406:59c0:5::/48 maxlen: 48 2406:59c0:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2158 (0x86e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B0, serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608 Validity Not Before: Jul 29 23:21:23 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68895773-d89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dc:59:1a:83:9d:bb:f2:26:de:14:ae:50:fc: a2:69:2d:f4:32:1b:51:f3:b7:3e:0c:1e:d1:d7:bc: e5:a6:8a:78:b0:5c:a1:dd:db:8a:7f:46:cf:f6:33: 48:ea:89:bb:00:37:28:a4:25:74:14:65:30:41:6f: 27:c3:62:a4:e5:17:5e:d6:38:77:14:8e:b2:7e:04: c7:c1:14:21:03:36:09:f3:f8:1f:7e:16:f0:3c:50: 34:b9:84:a6:b6:84:c2:3a:db:cc:55:d1:17:6c:3d: 7a:a0:8d:bb:20:00:ef:e0:b7:08:c7:53:35:b9:ab: c1:83:84:e8:34:f0:7d:bb:77:7c:6c:f4:b2:46:26: 80:8d:83:65:36:14:d2:5e:98:19:de:a3:6d:b8:42: da:74:b1:95:37:71:5c:e7:13:73:55:c4:d6:b9:86: 50:ea:a4:c4:1b:2c:d1:01:7b:4c:4f:eb:7a:18:44: 5c:55:b0:1d:50:00:8a:99:09:33:ff:da:5c:69:f3: b9:39:6a:23:14:c4:2e:aa:97:c8:f1:df:33:f4:7d: 05:67:b4:b7:61:a0:12:35:2b:05:b8:03:36:4a:b8: 93:0f:44:61:94:a3:23:95:21:45:f0:a8:5a:15:6b: 68:8b:a1:84:a5:2d:e2:45:d3:a4:b9:2b:3b:f5:39: 62:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:50:12:A9:3E:3E:62:1F:04:CB:29:AA:97:D6:CA:53:50:BD:EE:B9 X509v3 Authority Key Identifier: keyid:87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/3619A9DA67B411F097A2770AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.176.0/23 IPv6: 2406:59c0::/32 Signature Algorithm: sha256WithRSAEncryption cc:1c:f3:55:e2:33:1e:19:c4:41:d1:5b:5f:b1:68:d2:8a:7e: f9:ba:b6:2d:b9:f9:39:2d:0e:8f:05:76:29:81:97:a3:13:f1: 19:b6:a2:e2:5a:7c:fd:e4:2f:9f:d7:05:c9:77:83:52:92:8e: 7c:c6:f1:e8:5a:32:25:e4:a7:b8:46:c3:25:c0:ff:91:3e:cf: e8:50:46:be:f9:39:7c:12:95:65:08:83:4b:f1:4e:0c:68:d7: 40:48:42:45:d0:c5:a7:1c:62:4d:f7:84:9b:d3:05:18:55:b9: d4:cc:8a:66:b7:1b:46:b1:a1:e5:9b:26:b4:7e:81:c3:37:9b: f4:ca:bf:e3:60:c3:21:ba:dc:21:4c:4f:71:dd:98:3f:c6:f9: c2:85:1b:6c:87:ba:92:05:16:3e:44:b2:7d:7c:f4:71:f1:35: 75:81:45:a0:b7:28:07:6b:e2:4f:6a:7e:65:36:83:e3:fb:74: 06:2a:f5:d9:1e:0d:71:0f:dc:5d:d8:af:42:20:d2:18:23:23: 64:e0:77:56:4a:1e:2a:c9:97:b7:0c:a9:76:95:ba:a2:08:12: 2d:09:03:f1:8a:cc:bd:4f:3e:a7:40:73:6c:d4:c0:58:17:e4: 84:31:29:a2:3f:e7:12:f8:3c:ee:1e:fa:7d:56:a9:08:7b:a0: ab:1f:98:af -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjAxMTAvBgNVBAUTKDg3QjJDMEU4Mjk1NDFEMkVGNTI2NjM4NUVCMzk0NkI4 RDUyOTA2MDgwHhcNMjUwNzI5MjMyMTIzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg5NTc3My1kODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9xZGoOdu/Im3hSuUPyiaS30MhtR87c+DB7R17zlpop4sFyh3duKf0bP9jNI 6om7ADcopCV0FGUwQW8nw2Kk5Rde1jh3FI6yfgTHwRQhAzYJ8/gffhbwPFA0uYSm toTCOtvMVdEXbD16oI27IADv4LcIx1M1uavBg4ToNPB9u3d8bPSyRiaAjYNlNhTS XpgZ3qNtuELadLGVN3Fc5xNzVcTWuYZQ6qTEGyzRAXtMT+t6GERcVbAdUACKmQkz /9pcafO5OWojFMQuqpfI8d8z9H0FZ7S3YaASNSsFuAM2SriTD0RhlKMjlSFF8Kha FWtoi6GEpS3iRdOkuSs79TliQQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFB9QEqk+ PmIfBMspqpfWylNQve65MB8GA1UdIwQYMBaAFIeywOgpVB0u9SZjhes5RrjVKQYI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCMC9BMkRGNENFQ0RE NEQxMUVBQkI3Njk2N0JDNEY5QUUwMi9oN0xBNkNsVUhTNzFKbU9GNnpsR3VOVXBC Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3TEE2Q2xVSFM3MUptT0Y2emxHdU5VcEJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI1QjAvQTJERjRDRUNERDREMTFFQUJCNzY5NjdCQzRGOUFFMDIvMzYxOUE5REE2 N0I0MTFGMDk3QTI3NzBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnQrAwDQQCAAIwBwMFACQGWcAwDQYJKoZIhvcNAQELBQAD ggEBAMwc81XiMx4ZxEHRW1+xaNKKfvm6ti25+TktDo8FdimBl6MT8Rm2ouJafP3k L5/XBcl3g1KSjnzG8ehaMiXkp7hGwyXA/5E+z+hQRr75OXwSlWUIg0vxTgxo10BI QkXQxaccYk33hJvTBRhVudTMima3G0axoeWbJrR+gcM3m/TKv+NgwyG63CFMT3Hd mD/G+cKFG2yHupIFFj5Esn189HHxNXWBRaC3KAdr4k9qfmU2g+P7dAYq9dkeDXEP 3F3Yr0Ig0hgjI2Tgd1ZKHirJl7cMqXaVuqIIEi0JA/GKzL1PPqdAc2zUwFgX5IQx KaI/5xL4PO4e+n1WqQh7oKsfmK8= -----END CERTIFICATE-----Generated at Mon Aug 11 07:23:43 2025 by rpki-client