$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/2E8C1E00DD9C11ECA143AA87C4F9AE02.roa File: 2E8C1E00DD9C11ECA143AA87C4F9AE02.roa (raw, json) Hash identifier: PSuOk5hKLAcVmpB6whliDPWrfFKAhRcAnnfVLoCffRg= Subject key identifier: C8:6D:99:C4:8E:D3:82:3B:CB:7F:54:09:15:49:3D:D1:AD:EF:49:94 Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Certificate serial: 0370 Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/2E8C1E00DD9C11ECA143AA87C4F9AE02.roa Signing time: Fri 07 Mar 2025 00:47:08 +0000 ROA not before: Fri 07 Mar 2025 00:47:08 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 396073 IP address blocks: 103.182.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 880 (0x370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF8A, serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Validity Not Before: Mar 7 00:47:08 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ca420c-e374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3f:6f:89:85:19:e0:1f:ac:c3:9b:ef:e6:24: 51:9a:17:2e:bc:fa:60:b6:e4:6a:99:42:7c:fa:df: 5c:68:00:8b:04:7c:cc:2b:8e:4e:b0:7e:89:3b:ba: ea:31:93:d7:57:a4:ad:4d:8f:7d:71:0f:09:fb:e5: 81:09:6f:8e:62:ed:d5:36:e8:2d:d1:9f:47:9a:0f: e3:44:25:3b:d8:82:f1:04:f8:cd:68:cf:f0:61:7a: 7a:ee:e5:3a:17:f2:66:d4:48:f3:99:45:67:4c:e4: ce:54:da:78:4a:e1:0b:30:a0:dc:0f:c8:74:2a:a5: 21:bf:ad:5a:27:ab:55:0c:5e:2a:e0:07:28:b3:a6: eb:d6:11:fb:d0:bb:6b:dd:5c:b7:dc:28:46:1d:06: ea:5d:e1:dd:e7:c4:b4:77:2c:56:a7:07:f5:17:23: 4b:7d:f9:69:45:95:f1:7f:78:0a:fb:3a:ad:92:d3: 4c:67:02:d2:2e:bc:ad:8b:2d:39:54:46:20:66:44: a3:ee:e1:57:ed:3f:b2:c5:22:0e:28:ea:63:56:32: 96:2a:11:72:15:02:d4:42:d0:3e:97:ca:0e:1e:57: 18:f9:0b:5e:60:ee:b0:4e:6d:d2:0b:75:60:60:c5: 82:03:ff:97:39:18:98:7b:56:76:30:58:e4:3b:0a: 4e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6D:99:C4:8E:D3:82:3B:CB:7F:54:09:15:49:3D:D1:AD:EF:49:94 X509v3 Authority Key Identifier: keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/2E8C1E00DD9C11ECA143AA87C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.97.0/24 Signature Algorithm: sha256WithRSAEncryption 70:e5:f2:42:3b:53:bd:05:77:83:3b:73:ec:1b:77:38:4e:6e: 54:e9:ff:aa:9f:85:3a:3a:c4:2c:ab:7d:68:9a:02:b1:b2:5d: a0:91:c4:59:04:c7:0b:d2:fa:de:90:3a:b0:57:09:84:67:71: 17:5d:b4:0f:a5:09:9c:52:72:1d:8a:57:a6:a4:52:c5:40:e4: a9:14:c3:ce:22:13:70:60:b5:83:78:1c:7b:54:46:46:41:57: 0f:61:fe:9a:64:b3:55:d2:9e:f2:28:24:26:cf:02:0a:20:6c: 7d:cb:8d:78:d9:65:6f:c5:c7:af:58:ea:5e:a6:90:bd:dd:09: 57:f9:e9:0e:34:31:a1:38:fa:bd:48:f9:90:a6:fb:58:2f:e7: cc:7f:7a:17:3f:6c:1a:37:9f:5d:74:8d:02:ed:47:61:11:82: dd:25:7d:27:26:2a:4f:2e:38:3d:89:ed:d7:3f:5c:87:30:c2: af:d9:0a:ff:7a:42:03:52:f2:6f:78:97:32:75:68:d3:03:89: 2a:23:16:df:fc:35:5a:64:82:a4:50:8a:f3:fc:76:e8:21:4d: 7e:2c:33:30:ca:bf:f8:52:29:8b:1f:dc:8b:1f:16:ce:cc:c4: e4:0d:40:08:63:29:b9:a2:7a:cb:46:35:6f:61:2f:4b:b7:78: f1:62:79:22 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGOEExMTAvBgNVBAUTKDgyNjAwN0E0RTNEMTRCQjBCNTA5QkI5Njk4NDVEMDFF QjgwOUREN0EwHhcNMjUwMzA3MDA0NzA4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2NhNDIwYy1lMzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoD9viYUZ4B+sw5vv5iRRmhcuvPpgtuRqmUJ8+t9caACLBHzMK45OsH6JO7rq MZPXV6StTY99cQ8J++WBCW+OYu3VNugt0Z9Hmg/jRCU72ILxBPjNaM/wYXp67uU6 F/Jm1EjzmUVnTOTOVNp4SuELMKDcD8h0KqUhv61aJ6tVDF4q4Acos6br1hH70Ltr 3Vy33ChGHQbqXeHd58S0dyxWpwf1FyNLfflpRZXxf3gK+zqtktNMZwLSLrytiy05 VEYgZkSj7uFX7T+yxSIOKOpjVjKWKhFyFQLUQtA+l8oOHlcY+QteYO6wTm3SC3Vg YMWCA/+XORiYe1Z2MFjkOwpOQwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMhtmcSO 04I7y39UCRVJPdGt70mUMB8GA1UdIwQYMBaAFIJgB6Tj0UuwtQm7lphF0B64Cd16 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY4QS8zNTUzQ0ZBQUEz N0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3QzFDYnVXbUVYUUhyZ0oz WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtQUhwT1BSUzdDMUNidVdtRVhRSHJnSjNYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURGOEEvMzU1M0NGQUFBMzdGMTFFQzkyRDZGQTVFQzRGOUFFMDIvMkU4QzFFMDBE RDlDMTFFQ0ExNDNBQTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABntmEwDQYJKoZIhvcNAQELBQADggEBAHDl8kI7U70Fd4M7 c+wbdzhOblTp/6qfhTo6xCyrfWiaArGyXaCRxFkExwvS+t6QOrBXCYRncRddtA+l CZxSch2KV6akUsVA5KkUw84iE3BgtYN4HHtURkZBVw9h/ppks1XSnvIoJCbPAgog bH3LjXjZZW/Fx69Y6l6mkL3dCVf56Q40MaE4+r1I+ZCm+1gv58x/ehc/bBo3n110 jQLtR2ERgt0lfScmKk8uOD2J7dc/XIcwwq/ZCv96QgNS8m94lzJ1aNMDiSojFt/8 NVpkgqRQivP8dughTX4sMzDKv/hSKYsf3IsfFs7MxOQNQAhjKbmiestGNW9hL0u3 ePFieSI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:58 2025 by rpki-client