$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/6602AEE2CD7411EFB3DC8110C4F9AE02.roa File: 6602AEE2CD7411EFB3DC8110C4F9AE02.roa (raw, json) Hash identifier: nXVtsybD/p0SClRwWP9c2+ZIMGXniljjDK2EFaKpa7A= Subject key identifier: E1:F4:62:59:68:E6:58:2F:FF:7F:8D:0F:09:8A:6A:7F:88:B0:53:8D Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25 Certificate serial: 0950 Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/6602AEE2CD7411EFB3DC8110C4F9AE02.roa Signing time: Sun 06 Jul 2025 22:46:10 +0000 ROA not before: Sun 06 Jul 2025 22:46:10 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137199 IP address blocks: 103.101.234.0/23 maxlen: 23 103.115.12.0/23 maxlen: 23 103.115.13.0/24 maxlen: 24 203.13.35.0/24 maxlen: 24 203.20.104.0/24 maxlen: 24 2401:d6c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2384 (0x950) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25 Validity Not Before: Jul 6 22:46:10 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=686afcb1-79fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ec:e4:a0:01:4a:42:e7:92:a3:f2:b4:d8:62: ea:8f:a6:0a:01:4f:e1:6e:87:8b:9f:32:13:31:5e: bc:20:fb:fd:3e:4b:62:0a:6e:9d:41:72:06:d1:c2: 59:19:ab:9c:62:4f:56:4d:22:58:31:7d:9f:22:d0: c5:66:f2:41:ba:d7:ca:d8:80:fb:6d:b8:b0:a8:89: c2:6e:5d:64:af:ad:22:72:cd:49:d5:e9:8b:af:5f: da:a5:f3:74:2a:1a:69:d6:ac:52:66:f8:4c:ef:de: 55:c6:1a:40:ca:9d:45:43:cf:48:b8:07:4a:b3:a8: 3b:21:f3:0b:d3:ae:10:a7:4b:fe:b2:d5:ea:5d:0e: bc:18:5b:cc:d1:04:fc:f5:b6:6d:de:19:7b:f4:4a: 09:a3:92:07:6c:32:e4:2b:e6:a8:f9:ef:ff:95:e3: e8:ab:44:e6:c9:ec:f1:5f:be:f2:29:28:79:fb:32: d9:b7:a1:26:88:b5:cb:12:26:c7:fe:eb:4c:92:5c: 80:25:6f:5a:70:c0:14:9c:ca:0f:97:45:b4:44:09: 9c:bc:b5:43:ae:a7:50:60:06:dd:f0:55:6f:ff:d6: 67:22:f5:0a:54:a5:20:73:a2:cf:ee:f5:29:f1:38: 0c:b5:2e:55:60:f0:ad:f9:ba:2e:9f:83:96:34:87: af:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F4:62:59:68:E6:58:2F:FF:7F:8D:0F:09:8A:6A:7F:88:B0:53:8D X509v3 Authority Key Identifier: keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/6602AEE2CD7411EFB3DC8110C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.234.0/23 103.115.12.0/23 203.13.35.0/24 203.20.104.0/24 IPv6: 2401:d6c0::/32 Signature Algorithm: sha256WithRSAEncryption a9:fe:9b:6a:54:11:79:0e:ab:66:9a:48:8b:61:8b:8e:c8:47: 00:68:01:e3:72:2f:1e:b6:6f:7e:5f:a3:0f:b7:6f:a5:a8:43: 70:1b:1c:b5:1d:3d:7a:f5:48:24:ca:d0:1c:df:09:d9:a3:b4: e8:f2:f8:a3:a4:97:ae:12:b0:05:f4:e0:e5:fb:9a:1b:03:e1: 17:5b:88:c9:4c:ab:f0:bf:8f:97:97:4d:cc:42:62:28:04:30: 99:08:09:76:5a:21:03:cf:77:12:ea:ed:37:45:3a:27:92:0a: 70:5f:36:b5:fb:2c:4e:9f:32:1a:52:49:4d:00:d6:ac:da:d0: 77:e1:da:f9:c4:24:22:ff:68:b3:38:7b:05:e5:16:f1:da:2d: 84:64:5c:0c:2e:22:9d:5c:d1:ec:f0:32:1c:0e:31:a9:e5:56: f9:cb:d4:90:c8:ea:48:0c:79:e9:0e:06:31:63:7c:0d:5e:a4: 47:8e:bb:8a:e1:3f:21:57:3b:4c:c4:78:8b:bc:81:59:be:e5: 6e:ef:03:d1:d0:8a:c7:e5:33:92:b5:4b:56:96:92:00:42:e6: 02:e9:c5:cc:36:06:82:ee:68:7a:d9:8d:f8:80:24:b6:41:d5: f3:53:f3:56:04:63:dd:b9:8b:e9:45:b6:2a:ad:6a:52:24:57: 73:10:a5:bc -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICCVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGQTQxMTAvBgNVBAUTKDUxOTQyRDI1RURCQ0E1MURGQTU2Q0UwOUVEMzYxRUI3 QTI2REJEMjUwHhcNMjUwNzA2MjI0NjEwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZhZmNiMS03OWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOzkoAFKQueSo/K02GLqj6YKAU/hboeLnzITMV68IPv9PktiCm6dQXIG0cJZ GaucYk9WTSJYMX2fItDFZvJButfK2ID7bbiwqInCbl1kr60ics1J1emLr1/apfN0 Khpp1qxSZvhM795VxhpAyp1FQ89IuAdKs6g7IfML064Qp0v+stXqXQ68GFvM0QT8 9bZt3hl79EoJo5IHbDLkK+ao+e//lePoq0TmyezxX77yKSh5+zLZt6EmiLXLEibH /utMklyAJW9acMAUnMoPl0W0RAmcvLVDrqdQYAbd8FVv/9ZnIvUKVKUgc6LP7vUp 8TgMtS5VYPCt+boun4OWNIevpwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFOH0Yllo 5lgv/3+NDwmKan+IsFONMB8GA1UdIwQYMBaAFFGULSXtvKUd+lbOCe02Hreibb0l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUZBNC9CNjc4NjJGQUFC OTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBSMzZWczRKN1RZZXQ2SnR2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VaUXRKZTI4cFIzNlZzNEo3VFlldDZKdHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFGQTQvQjY3ODYyRkFBQjk1MTFFQUIyNTU5QzVCQzRGOUFFMDIvNjYwMkFFRTJD RDc0MTFFRkIzREM4MTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAFnZeoDBAFncwwDBADLDSMDBADLFGgwDQQCAAIwBwMFACQB 1sAwDQYJKoZIhvcNAQELBQADggEBAKn+m2pUEXkOq2aaSIthi47IRwBoAeNyLx62 b35fow+3b6WoQ3AbHLUdPXr1SCTK0BzfCdmjtOjy+KOkl64SsAX04OX7mhsD4Rdb iMlMq/C/j5eXTcxCYigEMJkICXZaIQPPdxLq7TdFOieSCnBfNrX7LE6fMhpSSU0A 1qza0Hfh2vnEJCL/aLM4ewXlFvHaLYRkXAwuIp1c0ezwMhwOManlVvnL1JDI6kgM eekOBjFjfA1epEeOu4rhPyFXO0zEeIu8gVm+5W7vA9HQisflM5K1S1aWkgBC5gLp xcw2BoLuaHrZjfiAJLZB1fNT81YEY925i+lFtiqtalIkV3MQpbw= -----END CERTIFICATE-----Generated at Mon Aug 11 11:33:57 2025 by rpki-client