$ rpki-client -vvf rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/2CD223FCEA7811EF92D8DC39C4F9AE02.roa File: 2CD223FCEA7811EF92D8DC39C4F9AE02.roa (raw, json) Hash identifier: guOkrCtWFoq8Lg0AXDAskb6dB7b68BfvYrXJ0gD0vek= Subject key identifier: DB:52:E9:4B:AC:BE:A7:23:08:E8:E8:90:99:90:B1:AF:45:E2:D4:A2 Certificate issuer: /CN=A9138679/serialNumber=9280F070747753387B6BA65732D6DD7992B350C1 Certificate serial: 54 Authority key identifier: 92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/2CD223FCEA7811EF92D8DC39C4F9AE02.roa Signing time: Mon 21 Jul 2025 07:44:43 +0000 ROA not before: Mon 21 Jul 2025 07:44:43 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 4764 IP address blocks: 103.60.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138679, serialNumber=9280F070747753387B6BA65732D6DD7992B350C1 Validity Not Before: Jul 21 07:44:43 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=687defeb-bdf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:68:55:4f:89:a6:44:a9:59:94:71:41:42: 1a:72:42:4b:92:09:94:4f:a8:db:48:85:a8:b9:af: 8f:44:e5:5f:ad:78:13:be:f1:b3:be:e6:a7:97:b7: b1:d9:26:7a:3c:38:2e:0b:87:98:d5:8b:ae:d9:9e: b4:3e:74:57:54:9d:e9:4a:95:8a:8f:a6:fd:77:77: 31:6d:a0:d1:79:2d:44:af:78:4a:85:0d:d1:6a:61: 7b:04:d0:f8:07:8a:3f:e1:05:78:79:ed:5b:51:c2: ee:d4:fe:53:7d:dd:07:24:45:38:f8:5c:a6:c4:25: 54:73:4f:74:ac:cf:d4:34:ed:47:2c:df:fb:bc:ac: c2:f1:0c:83:3f:4f:ba:60:0c:15:3f:fe:10:db:d2: 4b:38:2c:08:f6:06:31:68:3a:23:3c:78:7d:e6:74: ac:1f:1a:2e:f5:cf:b6:d6:e5:28:1a:de:da:05:80: af:a0:7f:52:fa:43:e7:41:07:4e:29:3d:8f:81:65: e0:61:08:35:dc:fd:e1:3c:4f:9f:2d:f2:cb:4e:5c: cb:51:e2:39:21:35:96:21:5e:bc:f8:0b:df:42:42: 5a:af:fd:f3:62:c7:f4:87:98:6e:4f:4e:70:63:c1: 83:00:bb:c5:ad:43:6d:b9:21:86:dc:ac:19:53:30: 26:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:52:E9:4B:AC:BE:A7:23:08:E8:E8:90:99:90:B1:AF:45:E2:D4:A2 X509v3 Authority Key Identifier: keyid:92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/2CD223FCEA7811EF92D8DC39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.152.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:ae:83:ac:fb:7f:ef:e4:fd:2e:e3:1f:15:08:78:73:b4:3b: 33:a6:25:20:14:f3:0e:57:28:91:73:7c:dc:0e:8a:6c:73:69: 4c:8f:b8:2b:33:11:2e:9d:d7:32:59:0d:63:22:78:40:16:12: 00:0c:1d:8a:ea:10:ff:7e:07:56:c2:4a:b9:bc:9d:4d:62:42: 8a:87:19:dd:5c:84:54:0c:2b:7c:1d:aa:20:f9:b3:10:b6:5a: ce:26:6c:50:32:72:db:81:06:76:14:a7:3c:98:c3:8e:24:ad: b2:79:ba:f4:73:f8:39:ac:71:24:93:9d:35:58:17:26:bc:ca: 08:86:7d:93:a7:c9:46:bd:9c:73:b2:7d:46:04:e8:dd:d2:bb: ae:53:a1:d4:b5:c8:e0:79:f0:29:b5:a7:c7:71:2a:22:78:1b: b2:97:d4:ea:ea:a4:99:7e:81:6f:bd:86:a5:9c:1a:a0:8e:7c: bd:47:c4:66:df:35:ff:d3:cd:14:79:03:77:1e:a1:37:e5:36: cd:43:00:f1:36:a8:97:52:f6:f1:12:56:a9:d7:69:b5:29:ec: a5:a7:1e:de:13:15:68:63:66:fa:c7:58:61:00:56:c7:da:9c: 66:0c:f3:b5:c8:61:f2:32:a2:22:cf:39:5a:59:28:ff:3a:b2: 45:cc:e9:fa -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODY3OTExMC8GA1UEBRMoOTI4MEYwNzA3NDc3NTMzODdCNkJBNjU3MzJENkRENzk5 MkIzNTBDMTAeFw0yNTA3MjEwNzQ0NDNaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4N2RlZmViLWJkZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnl2hVT4mmRKlZlHFBQhpyQkuSCZRPqNtIhai5r49E5V+teBO+8bO+5qeXt7HZ Jno8OC4Lh5jVi67ZnrQ+dFdUnelKlYqPpv13dzFtoNF5LUSveEqFDdFqYXsE0PgH ij/hBXh57VtRwu7U/lN93QckRTj4XKbEJVRzT3Ssz9Q07Ucs3/u8rMLxDIM/T7pg DBU//hDb0ks4LAj2BjFoOiM8eH3mdKwfGi71z7bW5Sga3toFgK+gf1L6Q+dBB04p PY+BZeBhCDXc/eE8T58t8stOXMtR4jkhNZYhXrz4C99CQlqv/fNix/SHmG5PTnBj wYMAu8WtQ225IYbcrBlTMCY/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU21LpS6y+ pyMI6OiQmZCxr0Xi1KIwHwYDVR0jBBgwFoAUkoDwcHR3Uzh7a6ZXMtbdeZKzUMEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4Njc5L0NCMkNCM0NFRUE3 NzExRUZBNTYzNTY4MEM0RjlBRTAyL2tvRHdjSFIzVXpoN2E2WlhNdGJkZVpLelVN RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva29Ed2NIUjNVemg3YTZaWE10YmRlWkt6VU1FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODY3OS9DQjJDQjNDRUVBNzcxMUVGQTU2MzU2ODBDNEY5QUUwMi8yQ0QyMjNGQ0VB NzgxMUVGOTJEOERDMzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmc8mDANBgkqhkiG9w0BAQsFAAOCAQEADK6DrPt/7+T9LuMf FQh4c7Q7M6YlIBTzDlcokXN83A6KbHNpTI+4KzMRLp3XMlkNYyJ4QBYSAAwdiuoQ /34HVsJKubydTWJCiocZ3VyEVAwrfB2qIPmzELZaziZsUDJy24EGdhSnPJjDjiSt snm69HP4OaxxJJOdNVgXJrzKCIZ9k6fJRr2cc7J9RgTo3dK7rlOh1LXI4HnwKbWn x3EqIngbspfU6uqkmX6Bb72GpZwaoI58vUfEZt81/9PNFHkDdx6hN+U2zUMA8Tao l1L28RJWqddptSnspace3hMVaGNm+sdYYQBWx9qcZgzztchh8jKiIs85Wlko/zqy Rczp+g== -----END CERTIFICATE-----Generated at Sun Aug 10 20:04:28 2025 by rpki-client