$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/E56024B49A7D11EF99ECF636C4F9AE02.roa File: E56024B49A7D11EF99ECF636C4F9AE02.roa (raw, json) Hash identifier: Z+Qa/TRo5h7nk3cyXsljnoh1CPkaDTGA57/oGQq8Hz4= Subject key identifier: 30:60:D2:81:FB:5F:22:79:3A:37:87:FB:D5:BE:F6:04:A2:A1:D9:E4 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 13A9 Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/E56024B49A7D11EF99ECF636C4F9AE02.roa Signing time: Wed 18 Jun 2025 17:38:20 +0000 ROA not before: Wed 18 Jun 2025 17:38:20 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135542 IP address blocks: 103.116.44.0/24 maxlen: 24 103.116.46.0/24 maxlen: 24 103.116.47.0/24 maxlen: 24 103.129.196.0/24 maxlen: 24 103.129.197.0/24 maxlen: 24 103.129.198.0/24 maxlen: 24 103.129.199.0/24 maxlen: 24 2402:f5c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5033 (0x13a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Jun 18 17:38:20 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6852f98c-46ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a2:ee:ef:38:b0:e2:06:f6:3f:56:58:b7:bf: fc:90:60:98:df:4f:cf:57:c6:d6:8c:53:b8:91:01: 75:f6:77:9b:f7:33:17:6b:6f:7b:b0:78:09:e6:f5: 0a:76:e8:7b:f4:d7:b1:4c:71:4e:9a:dc:8f:49:7a: d2:95:44:06:41:d7:1e:74:fd:12:60:b4:93:a6:1f: f8:52:6b:35:b0:07:a8:09:bd:55:24:18:e9:35:a0: d3:92:36:e4:9e:fc:7a:a0:b8:92:e2:c2:56:38:9d: 8e:d5:3f:13:ed:5f:e9:c9:a0:39:24:e7:2e:b7:b1: 3f:b0:aa:04:25:d8:b7:8a:83:f3:0c:b0:45:2d:18: 79:79:02:4e:de:68:07:f7:22:ae:ce:4a:e3:a3:10: 99:ac:be:cf:c0:d1:bc:1d:d2:10:bf:25:10:e3:4b: fd:39:4e:75:4f:5c:11:3d:2d:8f:e9:7f:ce:18:52: 77:84:32:14:7d:af:25:2c:62:2b:47:09:96:a5:ef: 1d:b2:c0:2f:b3:18:ea:66:a5:c7:f8:c3:70:14:2c: a7:a3:69:6e:82:45:52:b4:00:46:99:f6:a7:08:54: 4b:81:bc:e7:97:09:45:3b:ea:6d:80:7e:a0:a0:73: 5e:a7:6a:48:da:b4:93:4a:70:11:59:75:8b:6e:a7: 48:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:60:D2:81:FB:5F:22:79:3A:37:87:FB:D5:BE:F6:04:A2:A1:D9:E4 X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/E56024B49A7D11EF99ECF636C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.44.0/24 103.116.46.0/23 103.129.196.0/22 IPv6: 2402:f5c0::/32 Signature Algorithm: sha256WithRSAEncryption 88:59:67:02:cc:cc:c3:5b:f7:9b:18:f1:16:6f:3a:36:a8:4b: 76:d7:fd:88:da:10:34:c9:4f:fc:05:07:17:00:22:60:f0:9a: 5e:40:f7:0a:6c:d6:2a:bd:16:02:3c:a8:2d:ad:88:8b:72:82: 4c:a0:4d:85:5e:af:86:ab:2e:da:5f:0a:ae:71:c4:c4:4c:63: c0:2e:e4:ad:d5:9f:fd:b7:7c:70:be:8c:a1:55:f1:b9:e4:e4: f5:a4:64:9c:c2:23:13:7e:c3:e2:2a:9a:20:f1:44:b5:cb:93: 0f:a9:77:92:c9:6f:8e:ec:18:2f:de:5e:a0:e3:61:7f:50:fa: 7f:d7:1d:18:91:fc:5e:12:6d:6d:b1:fd:45:b6:43:e9:55:8e: d3:fa:a8:17:f9:7d:56:36:3c:97:3f:61:2a:3f:f0:d4:92:0d: d9:fa:2a:4c:2b:a6:f5:43:09:c1:47:26:7d:e4:a9:5b:20:e9: 4c:96:40:21:ac:59:6f:ef:e1:29:53:29:6f:f9:5b:19:dd:44: de:cd:d7:3c:43:87:04:8a:a0:3a:c8:71:0e:33:14:39:e3:b3: ad:c0:d6:ec:8a:52:00:5d:a7:e0:c0:18:e1:91:46:32:33:9c: dd:28:65:b5:ca:d6:bb:47:c3:5c:b1:ea:c6:4d:17:de:75:01: 9e:11:58:87 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICE6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjUwNjE4MTczODIwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUyZjk4Yy00NmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26Lu7ziw4gb2P1ZYt7/8kGCY30/PV8bWjFO4kQF19neb9zMXa297sHgJ5vUK duh79NexTHFOmtyPSXrSlUQGQdcedP0SYLSTph/4Ums1sAeoCb1VJBjpNaDTkjbk nvx6oLiS4sJWOJ2O1T8T7V/pyaA5JOcut7E/sKoEJdi3ioPzDLBFLRh5eQJO3mgH 9yKuzkrjoxCZrL7PwNG8HdIQvyUQ40v9OU51T1wRPS2P6X/OGFJ3hDIUfa8lLGIr RwmWpe8dssAvsxjqZqXH+MNwFCyno2lugkVStABGmfanCFRLgbznlwlFO+ptgH6g oHNep2pI2rSTSnARWXWLbqdISwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFDBg0oH7 XyJ5OjeH+9W+9gSiodnkMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjBGMEQvMDhFQzJCMENBMzZFMTFFOEI4OTY2NjJCQzRGOUFFMDIvRTU2MDI0QjQ5 QTdEMTFFRjk5RUNGNjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBABndCwDBAFndC4DBAJngcQwDQQCAAIwBwMFACQC9cAwDQYJ KoZIhvcNAQELBQADggEBAIhZZwLMzMNb95sY8RZvOjaoS3bX/YjaEDTJT/wFBxcA ImDwml5A9wps1iq9FgI8qC2tiItygkygTYVer4arLtpfCq5xxMRMY8Au5K3Vn/23 fHC+jKFV8bnk5PWkZJzCIxN+w+IqmiDxRLXLkw+pd5LJb47sGC/eXqDjYX9Q+n/X HRiR/F4SbW2x/UW2Q+lVjtP6qBf5fVY2PJc/YSo/8NSSDdn6KkwrpvVDCcFHJn3k qVsg6UyWQCGsWW/v4SlTKW/5WxndRN7N1zxDhwSKoDrIcQ4zFDnjs63A1uyKUgBd p+DAGOGRRjIznN0oZbXK1rtHw1yx6sZNF951AZ4RWIc= -----END CERTIFICATE-----Generated at Fri Jun 20 18:23:02 2025 by rpki-client