$ rpki-client -vvf rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa File: 0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa (raw, json) Hash identifier: c4/EYmjgVUl4pjL+vaUj1o6O7r/FlcrHh8JpcWomXpw= Subject key identifier: 0B:C9:CA:17:1F:51:C6:E3:69:E6:7D:24:73:19:6B:2D:ED:EE:B3:2A Certificate issuer: /CN=A913442A/serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9 Certificate serial: 02CA Authority key identifier: 44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa Signing time: Thu 31 Jul 2025 02:08:31 +0000 ROA not before: Thu 31 Jul 2025 02:08:31 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 150005 IP address blocks: 103.190.136.0/23 maxlen: 23 103.190.136.0/24 maxlen: 24 103.190.137.0/24 maxlen: 24 2001:df0:edc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 714 (0x2ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913442A, serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9 Validity Not Before: Jul 31 02:08:31 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688ad01f-b367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:bd:67:dd:93:b5:27:d2:63:0b:d0:ae:b0: 39:a0:86:89:2c:48:e6:56:1e:cc:35:5f:64:59:e3: 18:85:72:78:21:cd:7d:46:60:f6:c4:d8:b8:f0:ea: 10:e1:20:99:1b:4f:2f:28:62:40:20:54:e0:36:3a: b2:d6:9a:53:6d:65:a0:8e:ba:35:99:06:5b:94:70: cf:59:8b:be:29:20:70:3d:86:2e:67:6d:91:97:89: f8:f3:2e:54:af:df:84:e7:ab:5b:bc:2e:d9:9a:53: d2:20:27:9b:39:c9:8f:44:22:21:ff:4f:fe:29:20: 45:01:ec:f3:c9:12:05:29:2b:5b:42:4e:b5:53:fc: 5b:d9:3a:ce:9e:19:d8:d9:f4:43:b0:e6:e7:87:4c: a2:38:b0:72:68:b7:65:cc:6f:8c:8d:8c:e8:8f:6f: 11:1a:bb:a9:4b:dc:69:a0:4a:f0:a5:12:44:66:af: 88:f3:14:90:51:ac:e4:89:20:d4:c5:c2:64:56:98: 72:c7:3b:97:a2:c1:03:65:e8:e1:c2:f9:86:b6:8d: b0:3b:21:d4:90:be:76:ab:8a:8a:52:67:cf:56:03: 8b:a1:90:48:4f:44:b4:cf:fd:96:75:b9:bb:f0:3f: 7e:dc:c7:ae:7a:33:64:b2:fe:84:b2:71:d3:4b:a9: 7d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C9:CA:17:1F:51:C6:E3:69:E6:7D:24:73:19:6B:2D:ED:EE:B3:2A X509v3 Authority Key Identifier: keyid:44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.136.0/23 IPv6: 2001:df0:edc0::/48 Signature Algorithm: sha256WithRSAEncryption 8f:a7:b6:97:61:5a:72:9c:82:e3:bf:68:e2:b8:54:75:69:00: 75:3c:80:66:9d:d3:fe:c2:57:68:59:e3:0f:d2:a4:cc:f8:dc: 9e:4e:0c:cd:00:15:ae:0c:3b:c8:7a:cf:2a:cf:c1:60:56:ab: a4:07:34:fd:78:3f:dd:c9:5c:76:dc:2f:13:bc:67:ea:7a:37: 9a:36:d8:fb:8c:33:40:aa:76:97:8c:72:b8:c3:d2:be:b9:62: a7:d9:64:f4:6e:bd:d6:d8:10:b4:42:b6:7a:20:3a:48:b8:bf: e9:33:67:e4:39:ce:15:d5:37:28:9f:e7:04:ae:28:1f:5b:e9: 41:5d:1a:76:e6:90:7a:8e:6f:ca:88:f4:3b:d9:c6:55:a7:6e: 72:84:c8:3b:f4:8b:7a:c3:06:ee:89:d1:90:35:a7:10:42:23: 7a:0f:a2:b8:07:74:7a:c1:27:0f:06:b1:d9:1d:e9:69:e4:6e: 96:75:fc:07:9e:b4:cd:aa:a3:de:68:af:e2:c1:d2:8c:27:55: 16:1c:56:3f:b1:9b:6f:ed:67:9b:26:69:00:54:b3:bb:4a:17: e7:b9:89:cf:ae:e9:ce:03:e3:2c:5a:f0:6d:3b:c6:c0:74:af: e2:3b:62:72:5f:c8:f8:17:6e:b7:8e:0a:8b:98:d2:08:39:cc: 8b:a2:79:9c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ0MkExMTAvBgNVBAUTKDQ0MjFGM0E5RDdFNDFENkY0N0I3ODZGREQzRTdBODhE RTQyQjA3QjkwHhcNMjUwNzMxMDIwODMxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhZDAxZi1iMzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQe9Z92TtSfSYwvQrrA5oIaJLEjmVh7MNV9kWeMYhXJ4Ic19RmD2xNi48OoQ 4SCZG08vKGJAIFTgNjqy1ppTbWWgjro1mQZblHDPWYu+KSBwPYYuZ22Rl4n48y5U r9+E56tbvC7ZmlPSICebOcmPRCIh/0/+KSBFAezzyRIFKStbQk61U/xb2TrOnhnY 2fRDsObnh0yiOLByaLdlzG+MjYzoj28RGrupS9xpoErwpRJEZq+I8xSQUazkiSDU xcJkVphyxzuXosEDZejhwvmGto2wOyHUkL52q4qKUmfPVgOLoZBIT0S0z/2Wdbm7 8D9+3MeuejNksv6EsnHTS6l9EwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAvJyhcf UcbjaeZ9JHMZay3t7rMqMB8GA1UdIwQYMBaAFEQh86nX5B1vR7eG/dPnqI3kKwe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDQyQS9BQjRFNTI0NEZD MzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hXOUh0NGI5MC1lb2plUXJC N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JDSHpxZGZrSFc5SHQ0YjkwLWVvamVRckI3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQ0MkEvQUI0RTUyNDRGQzM5MTFFQzk1QzgxMzg3QzRGOUFFMDIvMEY5REI4RTBG QzNEMTFFQ0FENjE5QzM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnvogwDwQCAAIwCQMHACABDfDtwDANBgkqhkiG9w0BAQsF AAOCAQEAj6e2l2FacpyC479o4rhUdWkAdTyAZp3T/sJXaFnjD9KkzPjcnk4MzQAV rgw7yHrPKs/BYFarpAc0/Xg/3clcdtwvE7xn6no3mjbY+4wzQKp2l4xyuMPSvrli p9lk9G691tgQtEK2eiA6SLi/6TNn5DnOFdU3KJ/nBK4oH1vpQV0aduaQeo5vyoj0 O9nGVaducoTIO/SLesMG7onRkDWnEEIjeg+iuAd0esEnDwax2R3paeRulnX8B560 zaqj3miv4sHSjCdVFhxWP7Gbb+1nmyZpAFSzu0oX57mJz67pzgPjLFrwbTvGwHSv 4jticl/I+Bdut44Ki5jSCDnMi6J5nA== -----END CERTIFICATE-----Generated at Sun Aug 10 21:13:00 2025 by rpki-client