$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/64BBCC50909D11ED9EA9867FC4F9AE02.roa File: 64BBCC50909D11ED9EA9867FC4F9AE02.roa (raw, json) Hash identifier: JcjF+/6kCZJ48Z0DWV35F84UCZas+SRfWJwuoffcQww= Subject key identifier: 69:11:D4:12:7B:61:2A:12:06:49:7F:0A:99:8F:29:A9:C4:2E:5A:54 Certificate issuer: /CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50 Certificate serial: 1066 Authority key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/64BBCC50909D11ED9EA9867FC4F9AE02.roa Signing time: Tue 19 Aug 2025 00:46:24 +0000 ROA not before: Tue 19 Aug 2025 00:46:24 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139005 IP address blocks: 103.138.130.0/24 maxlen: 24 2405:e40::/45 maxlen: 45 2405:e40:100::/45 maxlen: 45 2405:e40:108::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4198 (0x1066) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F4B, serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50 Validity Not Before: Aug 19 00:46:24 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68a3c960-a96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:45:cd:2d:6b:96:34:b5:55:eb:cd:04:c9:d1: 79:7b:a7:03:1d:7b:55:26:37:3f:bb:7a:7c:8e:b0: 13:f2:5b:b7:03:1f:b7:15:fc:4e:f2:0e:50:03:32: 44:9c:c8:45:97:ad:24:4e:33:29:4f:80:25:d5:bd: 94:a1:b5:89:15:5b:2b:2c:02:31:e5:91:76:72:fa: f8:d1:27:54:0e:b2:bf:41:9b:86:05:c2:43:b0:44: 19:a2:57:39:56:9b:ca:2e:1c:1f:6a:a2:e6:61:0b: 45:07:00:7c:28:45:1c:d5:a2:29:7a:9d:7c:e1:f8: ac:2c:28:95:d9:3d:ee:fe:51:31:36:4b:5b:f0:9a: 1d:1c:2d:59:b5:9b:f0:44:5f:6b:8b:50:5a:6c:c1: 81:30:27:da:8c:2d:fa:b8:69:26:0e:45:89:e7:5c: 81:a0:a1:26:68:b7:06:72:94:18:84:fc:79:e9:61: 94:89:d0:91:b2:0a:e4:5e:0d:e0:47:a1:95:95:40: 8e:41:61:e2:5e:fa:c7:2e:64:7a:73:79:bd:32:68: 99:03:d2:05:3b:4c:3f:93:09:fd:5f:38:a9:ad:d7: af:df:31:88:bc:6c:55:68:c4:cf:76:df:37:dc:c3: 9f:4f:a4:4e:11:fd:fb:bd:8d:3e:1f:a9:76:6b:ae: 53:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:11:D4:12:7B:61:2A:12:06:49:7F:0A:99:8F:29:A9:C4:2E:5A:54 X509v3 Authority Key Identifier: keyid:99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/64BBCC50909D11ED9EA9867FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.130.0/24 IPv6: 2405:e40::/45 2405:e40:100::-2405:e40:108:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7a:a4:09:4f:89:3e:94:f3:59:e6:af:88:78:43:47:c4:5b:98: 28:01:89:a8:bf:c8:11:46:ee:f6:fe:49:8c:d5:fe:30:e4:17: 70:7e:16:d9:47:c2:fe:53:22:94:25:94:76:2c:9c:b7:ee:61: 55:99:1d:e6:c3:d8:5c:d1:6e:90:c7:6f:b7:41:67:77:da:7e: 8f:73:17:9c:9c:01:64:25:b4:e6:1e:10:bc:e1:07:ef:89:47: 76:ca:d7:ee:8a:04:93:e9:b3:70:43:32:81:86:85:2f:07:f5: ed:0a:25:a2:b0:26:b5:2b:ac:8b:84:80:b1:87:90:e5:7e:02: f0:b9:04:ca:72:41:f3:0f:10:65:08:09:51:fe:06:d4:f7:4a: 5f:2f:25:a2:d5:3e:a7:eb:13:fa:bf:bf:c7:30:8b:d2:fe:a2: ab:ab:86:70:f3:27:15:cf:a8:5b:20:93:08:b1:fc:66:54:af: 6a:c1:86:24:38:c6:ea:a9:28:9a:14:b6:98:dc:7d:c9:fd:d2: 6a:6c:7a:00:50:21:d2:96:18:3c:8f:e1:41:0b:cb:48:2f:70: 4f:a9:e8:5b:6d:0a:45:6a:ce:f2:e5:6e:70:94:7b:40:91:63: af:78:da:a0:c4:3c:6f:f8:c5:8a:f0:61:ef:09:50:65:51:5b: 98:1a:4a:70 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICEGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGNEIxMTAvBgNVBAUTKDk5MzBEMEZGRUI4NzA3MDFCNEU4RUI0REIzQzA4NjYy MzNGQzVCNTAwHhcNMjUwODE5MDA0NjI0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzYzk2MC1hOTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkXNLWuWNLVV680EydF5e6cDHXtVJjc/u3p8jrAT8lu3Ax+3FfxO8g5QAzJE nMhFl60kTjMpT4Al1b2UobWJFVsrLAIx5ZF2cvr40SdUDrK/QZuGBcJDsEQZolc5 VpvKLhwfaqLmYQtFBwB8KEUc1aIpep184fisLCiV2T3u/lExNktb8JodHC1ZtZvw RF9ri1BabMGBMCfajC36uGkmDkWJ51yBoKEmaLcGcpQYhPx56WGUidCRsgrkXg3g R6GVlUCOQWHiXvrHLmR6c3m9MmiZA9IFO0w/kwn9Xziprdev3zGIvGxVaMTPdt83 3MOfT6ROEf37vY0+H6l2a65TqwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFGkR1BJ7 YSoSBkl/CpmPKanELlpUMB8GA1UdIwQYMBaAFJkw0P/rhwcBtOjrTbPAhmIz/FtQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY0Qi81NzcyQUEzMDU0 RTQxMUU5ODUzNkY2NTlDNEY5QUUwMi9tVERRXy11SEJ3RzA2T3ROczhDR1lqUDhX MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21URFFfLXVIQndHMDZPdE5zOENHWWpQOFcxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzBGNEIvNTc3MkFBMzA1NEU0MTFFOTg1MzZGNjU5QzRGOUFFMDIvNjRCQkNDNTA5 MDlEMTFFRDlFQTk4NjdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMAwEAgABMAYDBABnioIwIgQCAAIwHAMHAyQFDkAAADARAwYAJAUOQAEDBwAk BQ5AAQgwDQYJKoZIhvcNAQELBQADggEBAHqkCU+JPpTzWeaviHhDR8RbmCgBiai/ yBFG7vb+SYzV/jDkF3B+FtlHwv5TIpQllHYsnLfuYVWZHebD2FzRbpDHb7dBZ3fa fo9zF5ycAWQltOYeELzhB++JR3bK1+6KBJPps3BDMoGGhS8H9e0KJaKwJrUrrIuE gLGHkOV+AvC5BMpyQfMPEGUICVH+BtT3Sl8vJaLVPqfrE/q/v8cwi9L+oqurhnDz JxXPqFsgkwix/GZUr2rBhiQ4xuqpKJoUtpjcfcn90mpsegBQIdKWGDyP4UELy0gv cE+p6FttCkVqzvLlbnCUe0CRY6942qDEPG/4xYrwYe8JUGVRW5gaSnA= -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:39 2025 by rpki-client