$ rpki-client -vvf rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/CA57150418B311EDB72D3165C4F9AE02.roa File: CA57150418B311EDB72D3165C4F9AE02.roa (raw, json) Hash identifier: sMLXclSpaatsjiefCG2CYL97q01e5mLSlbQCKpyYzHg= Subject key identifier: 31:0D:9C:AE:24:7F:E1:0E:14:B5:90:60:73:19:AB:E3:C6:2C:DC:D2 Certificate issuer: /CN=A9135450/serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441 Certificate serial: 027B Authority key identifier: FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/CA57150418B311EDB72D3165C4F9AE02.roa Signing time: Wed 23 Jul 2025 02:39:21 +0000 ROA not before: Wed 23 Jul 2025 02:39:21 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 149874 IP address blocks: 103.189.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 635 (0x27b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135450, serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441 Validity Not Before: Jul 23 02:39:21 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68804b58-3b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:60:14:28:f2:e4:fc:15:62:ff:da:29:f6:ae: 62:94:23:c2:bf:55:8d:a1:61:5a:c9:56:95:56:00: 40:d0:df:65:b0:09:25:59:58:0f:5d:74:de:ff:03: 8c:84:32:52:78:a6:a2:7e:88:6a:be:05:b5:7c:a8: 36:82:2f:55:07:15:ad:e4:a2:ff:d3:50:16:11:19: 53:d2:46:f4:70:b4:ba:4d:f3:19:10:64:03:19:fd: 09:70:ad:c7:a1:9b:cd:a9:86:7a:0b:62:fd:94:f8: 42:7e:c0:b9:fc:df:e0:bb:48:6d:b1:9e:8f:d3:e1: 1a:5f:06:b5:e2:dc:83:80:af:83:c2:93:cc:81:35: 58:5d:e8:84:b9:33:d8:cc:00:98:2d:45:c3:47:e0: 6a:75:e5:df:30:b6:56:25:ba:75:e5:43:34:71:1e: 1d:52:cf:d3:c1:8a:69:fa:20:3a:41:f1:44:93:85: ee:62:41:7e:b8:ee:9a:a2:ce:bc:0e:fb:65:6c:0a: 89:c6:6b:78:87:4c:bb:7e:fe:9b:fc:e0:2d:6a:5b: 63:0f:e1:dd:0c:b1:c4:ae:b3:0e:79:67:85:03:e2: 08:26:08:51:1c:0a:c7:bc:5d:35:ec:65:f4:69:4e: ba:d8:33:8f:95:c2:d2:0e:c3:65:0a:61:ea:fd:06: c0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0D:9C:AE:24:7F:E1:0E:14:B5:90:60:73:19:AB:E3:C6:2C:DC:D2 X509v3 Authority Key Identifier: keyid:FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/CA57150418B311EDB72D3165C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.240.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:8b:10:51:bd:d2:21:2f:2b:7f:4c:b6:fc:b3:56:3c:68:18: 2e:2e:17:b6:79:85:3b:64:74:79:f9:42:c0:ae:0e:34:2c:f0: 7f:7c:f9:88:35:a8:91:66:e4:0c:b9:c8:3d:64:0a:bc:f8:1f: ed:a8:31:a7:e9:ef:c2:89:e1:7b:74:4f:93:b5:49:ae:ff:26: be:56:e6:10:3f:9d:eb:0e:35:a3:33:e7:65:56:9c:ae:36:05: fe:c6:28:10:ee:d9:ed:f2:3d:12:88:20:79:6e:d8:c4:cf:e0: 6a:d1:d3:bb:34:69:4f:60:ed:9b:e4:74:75:36:76:1e:6c:ab: 5f:ae:f3:5a:c3:d0:3f:9c:0c:d9:56:79:8f:cf:be:4e:a4:84: e4:ea:f2:be:1d:a1:fe:16:35:35:bb:c4:42:d5:ec:6e:5a:e7: e0:3c:a2:c9:d3:ee:fe:d3:c6:1a:bd:27:fc:04:c2:b9:a8:ae: 06:a8:87:39:3c:0f:ce:37:7c:43:a3:d1:fe:60:df:7f:a6:f9: 06:0d:92:06:12:c3:42:88:91:d1:a2:18:e6:c4:f3:be:ec:bb: 19:1a:55:34:b8:2c:6d:97:9d:8e:b9:2c:3e:2d:39:6b:f7:8b: 7a:9f:09:41:75:c2:57:66:38:e9:af:70:9b:89:e1:57:5f:f4: bb:47:f6:cd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0NTAxMTAvBgNVBAUTKEZBOERGNjExODQ1MUJENTMzODcyQUNBMzc2MjJCRjcz QkVEMTk0NDEwHhcNMjUwNzIzMDIzOTIxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgwNGI1OC0zYjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGAUKPLk/BVi/9op9q5ilCPCv1WNoWFayVaVVgBA0N9lsAklWVgPXXTe/wOM hDJSeKaifohqvgW1fKg2gi9VBxWt5KL/01AWERlT0kb0cLS6TfMZEGQDGf0JcK3H oZvNqYZ6C2L9lPhCfsC5/N/gu0htsZ6P0+EaXwa14tyDgK+DwpPMgTVYXeiEuTPY zACYLUXDR+BqdeXfMLZWJbp15UM0cR4dUs/TwYpp+iA6QfFEk4XuYkF+uO6aos68 DvtlbAqJxmt4h0y7fv6b/OAtaltjD+HdDLHErrMOeWeFA+IIJghRHArHvF017GX0 aU662DOPlcLSDsNlCmHq/QbATwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDENnK4k f+EOFLWQYHMZq+PGLNzSMB8GA1UdIwQYMBaAFPqN9hGEUb1TOHKso3Yiv3O+0ZRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTQ1MC84NDNEQzY5NjE4 QjExMUVEQkVDNUZFNjNDNEY5QUUwMi8tbzMyRVlSUnZWTTRjcXlqZGlLX2M3N1Js RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1vMzJFWVJSdlZNNGNxeWpkaUtfYzc3UmxFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzU0NTAvODQzREM2OTYxOEIxMTFFREJFQzVGRTYzQzRGOUFFMDIvQ0E1NzE1MDQx OEIzMTFFREI3MkQzMTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnvfAwDQYJKoZIhvcNAQELBQADggEBADuLEFG90iEvK39M tvyzVjxoGC4uF7Z5hTtkdHn5QsCuDjQs8H98+Yg1qJFm5Ay5yD1kCrz4H+2oMafp 78KJ4Xt0T5O1Sa7/Jr5W5hA/nesONaMz52VWnK42Bf7GKBDu2e3yPRKIIHlu2MTP 4GrR07s0aU9g7ZvkdHU2dh5sq1+u81rD0D+cDNlWeY/Pvk6khOTq8r4dof4WNTW7 xELV7G5a5+A8osnT7v7Txhq9J/wEwrmorgaohzk8D843fEOj0f5g33+m+QYNkgYS w0KIkdGiGObE877suxkaVTS4LG2XnY65LD4tOWv3i3qfCUF1wldmOOmvcJuJ4Vdf 9LtH9s0= -----END CERTIFICATE-----Generated at Sun Aug 10 20:02:49 2025 by rpki-client