$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/6677438E6B7B11EA908F7C82C4F9AE02.roa File: 6677438E6B7B11EA908F7C82C4F9AE02.roa (raw, json) Hash identifier: NUGRzsEaZYXcjIXcIhWTrYjjrRluMFcxpsApcnV+LZE= Subject key identifier: 56:43:5B:73:D2:B9:49:D6:31:92:24:68:61:9E:51:FD:82:9F:34:CC Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Certificate serial: 0A2A Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/6677438E6B7B11EA908F7C82C4F9AE02.roa Signing time: Tue 22 Apr 2025 19:49:57 +0000 ROA not before: Tue 22 Apr 2025 19:49:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134837 IP address blocks: 103.149.186.0/23 maxlen: 23 103.149.186.0/24 maxlen: 24 103.149.187.0/24 maxlen: 24 2001:df3:3780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2602 (0xa2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F40E, serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Validity Not Before: Apr 22 19:49:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6807f2e4-377b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:35:25:c9:d7:0e:76:d9:ba:57:98:56:19:3b: 65:86:85:57:7c:05:e3:1b:b7:3e:cb:8e:3e:ca:ab: 3a:a5:78:22:54:80:15:6f:0f:ba:a3:b4:96:98:7e: b9:93:12:de:de:20:16:b4:4f:b2:ba:3a:c2:f9:14: 28:21:89:ee:2f:35:67:52:c4:de:ab:b8:3d:2f:f4: bc:f2:ba:13:83:2f:18:58:ee:70:d9:ee:2e:1f:3c: 79:ea:4c:cd:41:50:36:d9:e1:6a:68:db:87:84:17: 61:18:d4:ec:64:39:45:45:a5:3b:a2:6d:d3:fe:b6: 74:63:31:99:71:94:92:b7:46:21:38:e8:9c:24:91: 1b:d3:d1:03:a4:41:3e:ee:21:2a:1a:a6:ea:83:8d: b1:a9:44:aa:37:52:da:c3:76:5e:85:b8:73:26:9e: f7:b0:f8:e0:c2:af:70:88:7d:1d:d1:f6:2b:b0:56: 3d:8b:cf:7e:2e:26:18:0c:19:8f:6f:2e:2c:73:9e: 4d:e1:ae:f4:32:62:fc:c9:a6:e3:ab:3a:e4:24:8e: 36:fc:09:fc:23:6d:42:09:76:05:75:cf:39:85:69: 0d:e1:25:d1:c5:be:8e:ac:e1:36:3d:87:01:30:a4: 9f:72:55:a6:22:eb:61:1a:b6:4d:f0:c9:93:34:33: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:43:5B:73:D2:B9:49:D6:31:92:24:68:61:9E:51:FD:82:9F:34:CC X509v3 Authority Key Identifier: keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/6677438E6B7B11EA908F7C82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.186.0/23 IPv6: 2001:df3:3780::/48 Signature Algorithm: sha256WithRSAEncryption 2c:87:d2:28:2b:29:9b:2d:65:22:c7:b1:05:d4:88:f5:b7:ec: dc:22:84:71:b7:64:0d:fc:87:f1:b5:84:20:70:a2:f4:29:4e: bb:8c:0a:6d:60:0f:b8:26:d8:de:69:84:1e:59:66:b3:04:f7: 2b:ea:4a:36:54:70:8f:b1:66:ed:4a:3a:4b:a8:5b:18:9c:58: c9:1f:0f:f7:72:01:1f:88:16:ac:c9:07:9a:66:bd:ed:f9:1a: 00:b2:d6:26:9c:49:a1:a8:d9:8c:7f:66:fa:cb:6d:09:28:57: 89:6a:a3:5a:4c:fa:0b:b7:db:e2:cb:76:1a:b0:4c:9b:ba:aa: f8:37:e3:d7:ff:a0:d4:30:ed:ee:46:7e:4c:a8:be:83:24:af: 27:95:44:06:0e:88:fb:2a:bc:89:88:3b:16:ea:2d:ea:4d:b4: 2d:8d:2c:75:eb:34:e7:61:93:83:93:66:6e:26:5d:e8:cc:08: 70:23:53:95:ba:2e:fc:ad:80:98:82:8a:78:ca:cd:bf:83:b5: d0:38:f2:d3:41:f7:d3:78:eb:51:88:57:95:42:03:9d:da:16: b4:76:b3:71:cd:4e:bf:59:02:af:9f:eb:aa:6b:e6:7c:4f:5d: 58:41:b5:de:49:fa:06:17:f8:cb:66:66:e5:3b:26:95:3a:04: 13:fb:c5:a2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF MkFCQjEyRDIwHhcNMjUwNDIyMTk0OTU3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA3ZjJlNC0zNzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzUlydcOdtm6V5hWGTtlhoVXfAXjG7c+y44+yqs6pXgiVIAVbw+6o7SWmH65 kxLe3iAWtE+yujrC+RQoIYnuLzVnUsTeq7g9L/S88roTgy8YWO5w2e4uHzx56kzN QVA22eFqaNuHhBdhGNTsZDlFRaU7om3T/rZ0YzGZcZSSt0YhOOicJJEb09EDpEE+ 7iEqGqbqg42xqUSqN1Law3ZehbhzJp73sPjgwq9wiH0d0fYrsFY9i89+LiYYDBmP by4sc55N4a70MmL8yabjqzrkJI42/An8I21CCXYFdc85hWkN4SXRxb6OrOE2PYcB MKSfclWmIuthGrZN8MmTNDPitQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFZDW3PS uUnWMZIkaGGeUf2CnzTMMB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkY0MEUvMzAzQjNENzg2Qjc4MTFFQUE3MTNENzc4QzRGOUFFMDIvNjY3NzQzOEU2 QjdCMTFFQTkwOEY3QzgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnlbowDwQCAAIwCQMHACABDfM3gDANBgkqhkiG9w0BAQsF AAOCAQEALIfSKCspmy1lIsexBdSI9bfs3CKEcbdkDfyH8bWEIHCi9ClOu4wKbWAP uCbY3mmEHllmswT3K+pKNlRwj7Fm7Uo6S6hbGJxYyR8P93IBH4gWrMkHmma97fka ALLWJpxJoajZjH9m+sttCShXiWqjWkz6C7fb4st2GrBMm7qq+Dfj1/+g1DDt7kZ+ TKi+gySvJ5VEBg6I+yq8iYg7Fuot6k20LY0sdes052GTg5NmbiZd6MwIcCNTlbou /K2AmIKKeMrNv4O10Djy00H303jrUYhXlUIDndoWtHazcc1Ov1kCr5/rqmvmfE9d WEG13kn6Bhf4y2Zm5TsmlToEE/vFog== -----END CERTIFICATE-----Generated at Wed Nov 5 19:30:25 2025 by rpki-client