$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/8698FF1E541811F0A468570BC4F9AE02.roa File: 8698FF1E541811F0A468570BC4F9AE02.roa (raw, json) Hash identifier: lt0lWEwyc0zSVnjcDugVvrMstEgK43kjh39ECWh3xXM= Subject key identifier: 89:B5:1B:A8:50:21:E6:87:AC:B8:2A:2B:53:AF:E7:42:51:D3:2E:CF Certificate issuer: /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Certificate serial: 02CC Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/8698FF1E541811F0A468570BC4F9AE02.roa Signing time: Sat 28 Jun 2025 12:08:10 +0000 ROA not before: Sat 28 Jun 2025 12:08:10 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 150004 IP address blocks: 103.190.128.0/23 maxlen: 24 2400:9060::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 716 (0x2cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB83, serialNumber=5499CE363DF05C949322348829799B10EFF1D392 Validity Not Before: Jun 28 12:08:10 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=685fdb2a-a1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:bf:dc:69:33:b3:27:ca:59:a6:46:8c:68: 44:34:5e:fa:60:37:43:f7:89:1f:ca:14:36:73:6a: b6:0c:38:08:10:5e:51:8c:06:89:af:42:b4:1f:85: 9e:05:67:38:69:91:c9:ed:99:3d:06:75:2e:26:d7: 21:d9:74:5e:07:5d:85:d0:c0:d2:94:ce:f8:12:3c: 1b:c7:b2:61:2f:ac:d9:01:68:8c:8d:c2:d0:cd:4d: f2:ec:75:34:f5:10:41:d8:65:6a:4f:d6:93:72:e7: 2b:d9:d8:11:0a:b1:f6:ec:e1:60:bc:3b:a7:c8:dc: a1:47:37:20:1a:db:02:e5:59:c0:1a:df:ea:ec:c6: 05:0e:e6:3b:41:44:56:62:0f:4a:bd:78:8a:6f:50: ab:5f:be:bf:90:8c:1a:70:43:04:f9:fe:8d:42:4c: 3c:e3:64:11:75:f6:b3:05:fb:f4:28:11:df:06:dc: e0:99:94:28:8a:d1:58:62:7f:52:32:90:4a:2e:e5: 9f:27:09:77:9d:46:71:71:4b:98:92:c4:46:08:5f: f8:37:ff:6e:e4:79:9a:54:38:01:fa:a5:57:5a:39: cd:78:28:38:8d:9d:8c:4c:2b:27:5e:27:b3:56:1e: 56:e0:39:bd:85:3e:f9:45:c5:a5:23:79:f4:7c:ae: 63:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B5:1B:A8:50:21:E6:87:AC:B8:2A:2B:53:AF:E7:42:51:D3:2E:CF X509v3 Authority Key Identifier: keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/8698FF1E541811F0A468570BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.128.0/23 IPv6: 2400:9060::/32 Signature Algorithm: sha256WithRSAEncryption ab:3f:6c:8c:47:03:c8:dd:fa:1f:cf:9a:28:35:20:47:c7:13: a8:86:ec:5d:71:30:6e:87:9e:de:a3:bc:2e:ed:92:ac:b0:72: d1:72:32:49:dd:38:46:5b:a7:4a:33:3a:01:3f:b1:6d:76:9c: 1b:a7:62:2f:4b:67:24:41:bf:07:4d:f9:99:45:35:41:6a:f8: 23:89:12:7f:36:4e:60:c4:83:3f:4b:18:ce:88:85:f5:c7:09: 5c:3d:ef:f3:12:68:60:ee:f6:f5:11:49:5f:15:ff:0f:83:8b: ba:fa:fb:3a:fc:78:51:8f:fb:d0:6c:63:6b:37:b2:b0:e9:df: bf:7a:77:eb:aa:a6:ae:8b:3c:8d:3e:c9:56:28:33:7e:f7:23: 85:5e:3b:c3:fe:e3:83:95:9d:60:dd:77:e5:68:cf:c5:99:4c: 7f:fa:a4:c1:ad:93:6a:93:1a:2b:e2:4c:7f:29:47:97:2b:89: a9:8a:01:aa:de:6c:6a:f1:c6:6a:b1:a7:6c:ab:d7:ea:26:4b: 91:0b:6b:87:4f:ca:e6:a3:3d:eb:66:c7:83:7c:37:56:d8:5a: ec:67:f2:8e:06:7e:2c:35:53:33:13:bb:d4:e8:70:6c:d7:da: bc:c9:b6:ff:3a:cf:d9:af:3a:c6:5d:c0:c6:cb:9c:df:e4:2c: 6f:9f:60:7e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCODMxMTAvBgNVBAUTKDU0OTlDRTM2M0RGMDVDOTQ5MzIyMzQ4ODI5Nzk5QjEw RUZGMUQzOTIwHhcNMjUwNjI4MTIwODEwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVmZGIyYS1hMWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsY2/3GkzsyfKWaZGjGhENF76YDdD94kfyhQ2c2q2DDgIEF5RjAaJr0K0H4We BWc4aZHJ7Zk9BnUuJtch2XReB12F0MDSlM74Ejwbx7JhL6zZAWiMjcLQzU3y7HU0 9RBB2GVqT9aTcucr2dgRCrH27OFgvDunyNyhRzcgGtsC5VnAGt/q7MYFDuY7QURW Yg9KvXiKb1CrX76/kIwacEME+f6NQkw842QRdfazBfv0KBHfBtzgmZQoitFYYn9S MpBKLuWfJwl3nUZxcUuYksRGCF/4N/9u5HmaVDgB+qVXWjnNeCg4jZ2MTCsnXiez Vh5W4Dm9hT75RcWlI3n0fK5jvQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIm1G6hQ IeaHrLgqK1Ov50JR0y7PMB8GA1UdIwQYMBaAFFSZzjY98FyUkyI0iCl5mxDv8dOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI4My8xRUZFMjkyQ0ZC NUQxMUVDQkI2MTBDODVDNEY5QUUwMi9WSm5PTmozd1hKU1RJalNJS1htYkVPX3gw NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZKbk9OajN3WEpTVElqU0lLWG1iRU9feDA1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRCODMvMUVGRTI5MkNGQjVEMTFFQ0JCNjEwQzg1QzRGOUFFMDIvODY5OEZGMUU1 NDE4MTFGMEE0Njg1NzBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnvoAwDQQCAAIwBwMFACQAkGAwDQYJKoZIhvcNAQELBQAD ggEBAKs/bIxHA8jd+h/Pmig1IEfHE6iG7F1xMG6Hnt6jvC7tkqywctFyMkndOEZb p0ozOgE/sW12nBunYi9LZyRBvwdN+ZlFNUFq+COJEn82TmDEgz9LGM6IhfXHCVw9 7/MSaGDu9vURSV8V/w+Di7r6+zr8eFGP+9BsY2s3srDp3796d+uqpq6LPI0+yVYo M373I4VeO8P+44OVnWDdd+Voz8WZTH/6pMGtk2qTGiviTH8pR5criamKAarebGrx xmqxp2yr1+omS5ELa4dPyuajPetmx4N8N1bYWuxn8o4Gfiw1UzMTu9TocGzX2rzJ tv86z9mvOsZdwMbLnN/kLG+fYH4= -----END CERTIFICATE-----Generated at Sun Aug 10 21:16:38 2025 by rpki-client