$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/410BAD2095F011EFA9137C67C4F9AE02.roa File: 410BAD2095F011EFA9137C67C4F9AE02.roa (raw, json) Hash identifier: 3u5hviV9wYqSDD6MZKgqds2XhBaPvlTgTPQdfbhFev0= Subject key identifier: 79:15:15:26:B0:93:3F:41:68:2C:5D:E4:AB:A0:E7:B6:87:A1:B9:DD Certificate issuer: /CN=A911B5BA/serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959 Certificate serial: 0B41 Authority key identifier: CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/410BAD2095F011EFA9137C67C4F9AE02.roa Signing time: Thu 31 Jul 2025 19:59:59 +0000 ROA not before: Thu 31 Jul 2025 19:59:59 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 135564 IP address blocks: 103.66.24.0/23 maxlen: 24 103.125.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2881 (0xb41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5BA, serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959 Validity Not Before: Jul 31 19:59:59 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688bcb3f-06b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:7a:d3:c3:36:02:04:fc:ac:20:b5:ff:ef: 38:51:b6:e6:82:fb:61:e3:f2:12:41:80:21:0b:00: 95:a0:60:53:4d:e9:bc:82:04:6b:0a:a8:6e:8b:10: 0a:1d:55:8b:7f:07:4f:3b:e4:a1:e6:aa:24:5e:a8: 74:5c:8d:1b:d4:94:dc:7c:ce:17:50:06:75:95:c1: db:1f:ac:c8:99:15:d0:fa:f9:6b:e5:94:ba:2a:83: 19:f9:f9:20:31:34:b5:27:e6:e7:cb:e7:71:6e:6d: f2:87:ce:68:c7:0e:76:35:ca:b7:8f:b7:54:38:35: 46:da:db:a5:8b:9b:0c:62:4e:16:cd:4d:fc:88:46: df:1e:a8:30:15:de:24:b0:a9:d9:e2:ed:3c:5d:88: c0:bf:5b:de:eb:2c:d6:57:97:c3:92:1b:89:87:84: 90:4a:4e:f7:7b:6b:94:7d:3e:eb:bd:36:f9:b9:5e: d0:1d:40:13:9e:1e:c0:41:8f:c9:2f:4b:0a:86:89: de:ec:43:b0:ce:d6:5c:b6:1c:e1:2b:38:e2:21:10: 7b:05:68:29:33:b3:ba:70:bd:69:12:db:96:d2:e4: db:05:e2:28:da:b3:1e:3f:b1:6d:ba:b7:4a:a2:bf: 3f:8d:92:db:2c:3a:00:42:e6:83:48:32:a5:73:ef: ad:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:15:15:26:B0:93:3F:41:68:2C:5D:E4:AB:A0:E7:B6:87:A1:B9:DD X509v3 Authority Key Identifier: keyid:CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/410BAD2095F011EFA9137C67C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.24.0/23 103.125.24.0/24 Signature Algorithm: sha256WithRSAEncryption 84:5d:10:46:20:41:4f:e8:6c:95:72:e4:62:c9:4f:28:60:62: e4:e6:ca:57:63:60:72:51:e2:2b:05:91:41:c5:33:22:ec:b1: e6:91:28:2e:83:30:d3:f3:d5:9b:bf:34:08:a0:e2:6c:d1:f3: bf:60:38:93:e9:5e:61:53:6c:31:0e:20:7e:6b:aa:3f:cb:97: 8a:62:3b:58:f0:cc:d2:f4:ed:7b:7b:ae:30:67:df:30:08:c9: 66:1c:c6:ac:7b:54:14:7d:98:0e:54:52:68:54:c1:f2:2e:da: 24:e5:12:47:6c:49:77:83:01:b6:90:cb:28:7c:45:95:45:af: da:9c:13:6f:8f:75:b9:82:73:0d:5f:38:78:74:2a:38:ee:a0: 26:5a:62:d6:ba:7b:8e:18:e0:72:f2:61:11:86:1f:6a:ba:95: 38:44:32:7a:d3:44:c0:d0:59:ec:db:12:96:b1:79:f9:b4:36: a2:95:71:96:f8:fd:32:ab:ef:7c:6a:1b:55:04:24:2f:84:4a: 45:80:74:02:80:57:16:04:6f:16:16:ba:5d:1b:38:5c:86:5b: 56:6e:0a:6d:44:54:d7:43:c3:26:4c:28:0f:6c:38:03:6a:18: dd:48:10:92:a9:c9:f9:09:58:e8:4e:13:39:35:e4:5a:8e:16: 7c:87:75:f6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICC0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QkExMTAvBgNVBAUTKENBOENFRjVFMUQ4QzNEQTVBQzlCQUVFNUIxOTZFRjA2 NjA5QTM5NTkwHhcNMjUwNzMxMTk1OTU5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhiY2IzZi0wNmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLh608M2AgT8rCC1/+84Ubbmgvth4/ISQYAhCwCVoGBTTem8ggRrCqhuixAK HVWLfwdPO+Sh5qokXqh0XI0b1JTcfM4XUAZ1lcHbH6zImRXQ+vlr5ZS6KoMZ+fkg MTS1J+bny+dxbm3yh85oxw52Ncq3j7dUODVG2tuli5sMYk4WzU38iEbfHqgwFd4k sKnZ4u08XYjAv1ve6yzWV5fDkhuJh4SQSk73e2uUfT7rvTb5uV7QHUATnh7AQY/J L0sKhone7EOwztZcthzhKzjiIRB7BWgpM7O6cL1pEtuW0uTbBeIo2rMeP7FturdK or8/jZLbLDoAQuaDSDKlc++t+wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHkVFSaw kz9BaCxd5Kug57aHobndMB8GA1UdIwQYMBaAFMqM714djD2lrJuu5bGW7wZgmjlZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCQS85M0UyRkIwQzNE QTMxMUVBQTREQzNBNTlDNEY5QUUwMi95b3p2WGgyTVBhV3NtNjdsc1pidkJtQ2FP VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvenZYaDJNUGFXc202N2xzWmJ2Qm1DYU9Way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI1QkEvOTNFMkZCMEMzREEzMTFFQUE0REMzQTU5QzRGOUFFMDIvNDEwQkFEMjA5 NUYwMTFFRkE5MTM3QzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnQhgDBABnfRgwDQYJKoZIhvcNAQELBQADggEBAIRdEEYg QU/obJVy5GLJTyhgYuTmyldjYHJR4isFkUHFMyLsseaRKC6DMNPz1Zu/NAig4mzR 879gOJPpXmFTbDEOIH5rqj/Ll4piO1jwzNL07Xt7rjBn3zAIyWYcxqx7VBR9mA5U UmhUwfIu2iTlEkdsSXeDAbaQyyh8RZVFr9qcE2+PdbmCcw1fOHh0KjjuoCZaYta6 e44Y4HLyYRGGH2q6lThEMnrTRMDQWezbEpaxefm0NqKVcZb4/TKr73xqG1UEJC+E SkWAdAKAVxYEbxYWul0bOFyGW1ZuCm1EVNdDwyZMKA9sOANqGN1IEJKpyfkJWOhO Ezk15FqOFnyHdfY= -----END CERTIFICATE-----Generated at Sat Aug 9 23:16:08 2025 by rpki-client