$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/AFF53F96556211EE9C34E435C4F9AE02.roa File: AFF53F96556211EE9C34E435C4F9AE02.roa (raw, json) Hash identifier: ijNrrBGI0GOmOlPTEUC+Lp/ifnao/tWMMVdpLAGba4c= Subject key identifier: D3:46:2F:95:48:C1:87:13:91:34:DE:76:4A:CC:C0:80:7F:ED:1D:CC Certificate issuer: /CN=A912CB7D/serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Certificate serial: 0191 Authority key identifier: 94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/AFF53F96556211EE9C34E435C4F9AE02.roa Signing time: Thu 07 Aug 2025 04:11:33 +0000 ROA not before: Thu 07 Aug 2025 04:11:33 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 150683 IP address blocks: 103.229.252.0/24 maxlen: 24 103.229.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB7D, serialNumber=9404CEDF74B9497451EF32BB7A12BED71D2C23E5 Validity Not Before: Aug 7 04:11:33 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68942775-ac81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:ec:ee:48:47:d3:07:3a:77:90:68:f2:36: 4a:d2:90:eb:f1:35:ee:f3:b6:34:b4:1b:ad:9a:b9: f2:77:41:db:34:bc:de:31:d4:ae:86:f3:69:5a:93: f8:62:10:42:74:8e:1f:a6:84:8a:06:65:73:c4:b7: c6:d8:ca:87:bd:74:44:80:d0:8f:42:b9:80:8a:cc: 01:ce:74:4a:2f:c0:ba:a2:a9:10:81:9f:b8:f2:7d: b1:d9:6a:60:f3:45:fa:11:ff:ea:69:fc:2e:c6:95: 42:31:77:e0:29:e7:ab:65:99:aa:1d:4e:19:08:7b: 97:81:c0:34:0d:58:32:01:9a:65:ca:a7:04:37:1d: ab:dc:13:7f:76:70:77:3b:c3:c5:57:c1:94:83:5e: 93:1c:11:e0:26:13:13:e9:67:2d:2c:94:3d:6c:d1: 8a:4e:5a:dd:7b:ad:09:fe:53:97:14:8d:22:27:f4: f5:ea:1e:7d:98:a0:e3:9a:35:f1:f1:16:a4:9c:f1: 6d:aa:22:a4:dd:21:6e:d9:a5:bd:1e:78:02:9f:f4: a1:95:75:dd:51:8d:c5:c3:63:14:de:55:ca:05:83: e3:73:6a:c7:f3:02:5f:d9:a6:13:1c:4c:51:b7:8c: 33:19:94:96:75:ee:d6:bf:99:cc:64:6d:21:b6:ef: c3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:46:2F:95:48:C1:87:13:91:34:DE:76:4A:CC:C0:80:7F:ED:1D:CC X509v3 Authority Key Identifier: keyid:94:04:CE:DF:74:B9:49:74:51:EF:32:BB:7A:12:BE:D7:1D:2C:23:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/lATO33S5SXRR7zK7ehK-1x0sI-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lATO33S5SXRR7zK7ehK-1x0sI-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB7D/B2B3D77C1B4411EEA3578E29C4F9AE02/AFF53F96556211EE9C34E435C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.252.0/23 Signature Algorithm: sha256WithRSAEncryption 89:7b:e3:a6:96:2f:d1:7b:3c:4a:00:77:4c:ee:3e:2a:c2:f6: cd:6b:56:4c:4f:d6:8b:f7:fd:e9:6f:c4:43:d8:1c:d2:86:56: 0c:3e:02:79:14:bb:35:b7:0c:40:0d:ec:41:24:28:b9:0e:7f: 0d:3a:9c:66:b4:44:c2:18:97:dd:11:d6:a8:ec:31:41:a8:68: 85:f2:50:c8:af:22:5e:cb:02:e9:07:cd:22:45:e3:36:2d:85: bf:e8:ee:f2:78:f9:94:0b:2b:2e:a0:70:17:0a:ae:ff:46:2f: 92:37:82:fc:e7:37:89:1b:47:43:88:ab:59:7a:13:87:a7:83: 71:e3:8e:8c:80:ab:38:5d:6c:1a:67:93:84:b0:d4:84:d4:cb: c3:49:19:37:ba:a6:2f:04:9f:63:69:5b:27:50:67:4d:52:f4: b5:bd:87:c5:1c:b7:a3:76:b9:27:88:19:d2:08:3f:89:fa:ec: a9:57:2f:8e:3c:30:64:26:bb:b2:4c:1a:58:5b:45:2b:e9:89: 75:95:6e:3e:10:44:aa:3f:fb:98:1e:83:82:c3:0f:ab:83:4b: 2d:88:10:d5:bc:14:80:9f:58:a1:f3:c6:0d:2d:e4:9c:f9:3c: e3:d8:3f:00:19:ad:a7:db:54:6f:92:7b:6a:aa:f4:7f:2a:20: d0:3a:b8:ef -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCN0QxMTAvBgNVBAUTKDk0MDRDRURGNzRCOTQ5NzQ1MUVGMzJCQjdBMTJCRUQ3 MUQyQzIzRTUwHhcNMjUwODA3MDQxMTMzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk0Mjc3NS1hYzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDbs7khH0wc6d5Bo8jZK0pDr8TXu87Y0tButmrnyd0HbNLzeMdSuhvNpWpP4 YhBCdI4fpoSKBmVzxLfG2MqHvXREgNCPQrmAiswBznRKL8C6oqkQgZ+48n2x2Wpg 80X6Ef/qafwuxpVCMXfgKeerZZmqHU4ZCHuXgcA0DVgyAZplyqcENx2r3BN/dnB3 O8PFV8GUg16THBHgJhMT6WctLJQ9bNGKTlrde60J/lOXFI0iJ/T16h59mKDjmjXx 8RaknPFtqiKk3SFu2aW9HngCn/ShlXXdUY3Fw2MU3lXKBYPjc2rH8wJf2aYTHExR t4wzGZSWde7Wv5nMZG0htu/DewIDAQABo4IClTCCApEwHQYDVR0OBBYEFNNGL5VI wYcTkTTedkrMwIB/7R3MMB8GA1UdIwQYMBaAFJQEzt90uUl0Ue8yu3oSvtcdLCPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0I3RC9CMkIzRDc3QzFC NDQxMUVFQTM1NzhFMjlDNEY5QUUwMi9sQVRPMzNTNVNYUlI3eks3ZWhLLTF4MHNJ LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBVE8zM1M1U1hSUjd6SzdlaEstMXgwc0ktVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNCN0QvQjJCM0Q3N0MxQjQ0MTFFRUEzNTc4RTI5QzRGOUFFMDIvQUZGNTNGOTY1 NTYyMTFFRTlDMzRFNDM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn5fwwDQYJKoZIhvcNAQELBQADggEBAIl746aWL9F7PEoA d0zuPirC9s1rVkxP1ov3/elvxEPYHNKGVgw+AnkUuzW3DEAN7EEkKLkOfw06nGa0 RMIYl90R1qjsMUGoaIXyUMivIl7LAukHzSJF4zYthb/o7vJ4+ZQLKy6gcBcKrv9G L5I3gvznN4kbR0OIq1l6E4eng3HjjoyAqzhdbBpnk4Sw1ITUy8NJGTe6pi8En2Np WydQZ01S9LW9h8Uct6N2uSeIGdIIP4n67KlXL448MGQmu7JMGlhbRSvpiXWVbj4Q RKo/+5geg4LDD6uDSy2IENW8FICfWKHzxg0t5Jz5POPYPwAZrafbVG+Se2qq9H8q INA6uO8= -----END CERTIFICATE-----Generated at Mon Aug 11 01:52:16 2025 by rpki-client