$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/A917D87217A711ED8D17FC7CC4F9AE02.roa File: A917D87217A711ED8D17FC7CC4F9AE02.roa (raw, json) Hash identifier: z4fSX+HgysFgztcLVSgzgNzcCLSP4fk+TSQS6+LuYQI= Subject key identifier: 7C:1C:AE:2A:C6:B3:98:B1:30:C7:0E:3B:E9:5B:22:38:9B:4C:98:5B Certificate issuer: /CN=A9132B1D/serialNumber=476945B21F2589F7E712751FE747FA2143A5235B Certificate serial: 0284 Authority key identifier: 47:69:45:B2:1F:25:89:F7:E7:12:75:1F:E7:47:FA:21:43:A5:23:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2lFsh8liffnEnUf50f6IUOlI1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/A917D87217A711ED8D17FC7CC4F9AE02.roa Signing time: Thu 31 Jul 2025 02:38:36 +0000 ROA not before: Thu 31 Jul 2025 02:38:36 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 150002 IP address blocks: 103.190.130.0/23 maxlen: 23 103.190.130.0/24 maxlen: 24 103.190.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/R2lFsh8liffnEnUf50f6IUOlI1s.crl rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/R2lFsh8liffnEnUf50f6IUOlI1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2lFsh8liffnEnUf50f6IUOlI1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B1D, serialNumber=476945B21F2589F7E712751FE747FA2143A5235B Validity Not Before: Jul 31 02:38:36 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688ad72c-e49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:4e:08:87:c5:39:5a:c0:fc:3e:91:94:96: e1:bc:33:43:f8:19:9c:70:8b:c0:9e:ae:cc:b1:73: 1a:72:73:25:20:fd:d9:e4:07:04:e8:a4:ba:05:94: a0:e2:c1:99:02:0c:57:15:63:5d:dd:ae:97:ed:de: ff:ef:e9:a4:fe:ad:70:55:e4:20:c1:5f:1d:87:fe: 6c:a1:de:1a:98:5c:ea:90:82:1c:63:4c:ca:db:2e: 88:c0:49:f3:a3:f1:dc:63:cc:0b:06:2e:93:be:d7: 64:33:12:86:71:16:01:93:89:b1:f6:a6:39:c6:e1: ed:cd:67:40:f7:a0:09:1e:df:73:fa:68:be:18:01: a8:f1:11:68:a5:0d:60:fc:53:c1:1c:34:15:a6:5d: d8:a4:d4:d9:ce:cc:22:72:27:7e:38:72:e3:7c:68: 43:2f:55:ce:d3:93:59:bb:16:13:58:ac:6f:9b:e0: 96:36:23:76:cb:57:43:fd:c3:bc:7d:c7:34:fc:20: b4:30:00:02:ca:57:26:05:a6:59:a6:37:15:1c:52: 94:1e:ae:17:ef:7b:91:78:ee:ba:a7:db:86:61:db: ca:71:ad:1f:e8:05:3f:8b:48:fb:c7:c7:f7:da:2c: 32:1a:c6:8a:90:54:38:35:f4:89:f2:d0:d6:d4:6c: e8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1C:AE:2A:C6:B3:98:B1:30:C7:0E:3B:E9:5B:22:38:9B:4C:98:5B X509v3 Authority Key Identifier: keyid:47:69:45:B2:1F:25:89:F7:E7:12:75:1F:E7:47:FA:21:43:A5:23:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/R2lFsh8liffnEnUf50f6IUOlI1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2lFsh8liffnEnUf50f6IUOlI1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1D/30203ED017A411EDB3601564C4F9AE02/A917D87217A711ED8D17FC7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.130.0/23 Signature Algorithm: sha256WithRSAEncryption 07:cf:37:af:cc:c6:91:37:29:be:a0:9c:f1:6a:b9:9b:ba:65: d3:e8:cb:c4:4f:de:47:d3:1d:19:e6:c2:d1:16:c5:8d:df:89: ff:e5:16:5d:0e:db:2b:2c:2a:ad:a4:67:53:38:b5:43:c8:9c: a7:cc:3c:36:56:15:2c:6e:47:97:65:41:39:80:94:95:53:95: 0d:57:55:d8:bb:d2:72:de:6b:ca:29:c4:e9:7f:7d:46:5e:20: e8:9b:1a:7a:72:53:b8:c7:97:0f:85:ca:f2:be:b3:00:2b:24: f4:71:42:b0:91:39:c5:f3:09:2a:5f:a5:3c:05:19:c8:25:be: ad:6c:a3:c0:60:b3:85:b3:21:24:91:e4:8d:72:9d:dd:57:ab: 18:03:df:d1:9e:38:2e:52:1c:42:a6:75:99:78:4e:93:4a:2b: 8e:b8:a2:41:37:53:4d:2e:49:df:ed:25:f0:53:b0:3d:fb:dd: 7b:e4:57:ca:e5:b5:52:d1:9e:8a:14:32:1f:f3:77:5f:77:5e: 58:dc:19:b3:33:5f:f5:01:28:87:66:4c:45:f5:ea:76:7c:40: 40:3e:44:c2:42:85:bc:80:18:5d:d6:8c:6a:83:a3:e3:ac:a8: 3f:b6:a2:d0:58:c8:54:96:11:bb:7a:c5:86:42:47:36:63:6b: 26:19:b6:d8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCMUQxMTAvBgNVBAUTKDQ3Njk0NUIyMUYyNTg5RjdFNzEyNzUxRkU3NDdGQTIx NDNBNTIzNUIwHhcNMjUwNzMxMDIzODM2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhZDcyYy1lNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtX9OCIfFOVrA/D6RlJbhvDND+BmccIvAnq7MsXMacnMlIP3Z5AcE6KS6BZSg 4sGZAgxXFWNd3a6X7d7/7+mk/q1wVeQgwV8dh/5sod4amFzqkIIcY0zK2y6IwEnz o/HcY8wLBi6TvtdkMxKGcRYBk4mx9qY5xuHtzWdA96AJHt9z+mi+GAGo8RFopQ1g /FPBHDQVpl3YpNTZzswicid+OHLjfGhDL1XO05NZuxYTWKxvm+CWNiN2y1dD/cO8 fcc0/CC0MAACylcmBaZZpjcVHFKUHq4X73uReO66p9uGYdvKca0f6AU/i0j7x8f3 2iwyGsaKkFQ4NfSJ8tDW1Gzo4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHwcrirG s5ixMMcOO+lbIjibTJhbMB8GA1UdIwQYMBaAFEdpRbIfJYn35xJ1H+dH+iFDpSNb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkIxRC8zMDIwM0VEMDE3 QTQxMUVEQjM2MDE1NjRDNEY5QUUwMi9SMmxGc2g4bGlmZm5FblVmNTBmNklVT2xJ MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IybEZzaDhsaWZmbkVuVWY1MGY2SVVPbEkxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzJCMUQvMzAyMDNFRDAxN0E0MTFFREIzNjAxNTY0QzRGOUFFMDIvQTkxN0Q4NzIx N0E3MTFFRDhEMTdGQzdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnvoIwDQYJKoZIhvcNAQELBQADggEBAAfPN6/MxpE3Kb6g nPFquZu6ZdPoy8RP3kfTHRnmwtEWxY3fif/lFl0O2yssKq2kZ1M4tUPInKfMPDZW FSxuR5dlQTmAlJVTlQ1XVdi70nLea8opxOl/fUZeIOibGnpyU7jHlw+FyvK+swAr JPRxQrCROcXzCSpfpTwFGcglvq1so8Bgs4WzISSR5I1ynd1XqxgD39GeOC5SHEKm dZl4TpNKK464okE3U00uSd/tJfBTsD373XvkV8rltVLRnooUMh/zd193XljcGbMz X/UBKIdmTEX16nZ8QEA+RMJChbyAGF3WjGqDo+OsqD+2otBYyFSWEbt6xYZCRzZj ayYZttg= -----END CERTIFICATE-----Generated at Mon Aug 11 04:32:43 2025 by rpki-client