$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/CE9692E0222311EAAED0162CC4F9AE02.roa File: CE9692E0222311EAAED0162CC4F9AE02.roa (raw, json) Hash identifier: 6S9iC+lPGI+USP0kW2oo4gsRf8UiFa21s5yfHc7liEo= Subject key identifier: F4:52:AE:22:86:36:A4:4F:8F:37:35:9D:3A:4E:EF:8C:C4:73:78:D8 Certificate issuer: /CN=A913AE7C/serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9 Certificate serial: 0BCD Authority key identifier: 86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/CE9692E0222311EAAED0162CC4F9AE02.roa Signing time: Thu 24 Jul 2025 19:29:39 +0000 ROA not before: Thu 24 Jul 2025 19:29:39 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 58655 IP address blocks: 103.12.172.0/22 maxlen: 22 103.12.172.0/24 maxlen: 24 103.12.173.0/24 maxlen: 24 103.12.174.0/24 maxlen: 24 103.12.175.0/24 maxlen: 24 2404:7500::/32 maxlen: 32 2404:7500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3021 (0xbcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE7C, serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9 Validity Not Before: Jul 24 19:29:39 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688289a3-2903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:48:86:67:54:b3:8c:24:c0:13:bc:94:43:57: 4b:72:d2:5b:65:a4:d4:b7:e9:56:4e:4a:92:15:36: 90:a2:ee:7d:57:9f:e6:6c:6d:a3:1b:06:83:ea:04: 34:a1:f7:cf:6d:94:0f:b5:12:d5:6a:53:80:b9:a0: 09:cd:da:1c:b6:03:42:39:45:3c:e7:0f:53:4e:dc: 82:6a:db:4d:ce:55:80:c9:75:d4:02:d1:2e:e3:4c: 95:42:c7:68:af:fb:04:08:18:a7:ac:f7:40:bb:43: 0c:73:e4:01:f9:fa:32:bb:69:fd:47:8f:b7:94:38: 5b:ae:c7:f2:b0:2f:26:66:2a:61:b2:b4:e5:51:09: ad:c7:0c:40:4e:08:3a:c2:71:39:b0:12:7a:e8:1b: c1:3d:2c:99:0b:01:e0:ea:9b:5f:78:34:47:48:af: ed:a9:67:99:86:cf:a2:ca:a3:d1:93:c0:98:68:e2: b8:84:65:bd:61:43:38:4c:e3:5c:30:64:5b:5f:fc: 90:3a:68:75:15:cc:20:c7:83:be:c1:3d:14:3f:2a: 09:04:c9:0f:35:9a:24:5b:b2:d6:a3:b9:c3:be:63: 0b:76:5e:bf:e8:63:5e:2d:a3:38:18:b2:d7:d4:f3: 9b:3d:e0:1d:1e:9a:67:5e:b3:fa:b6:09:7c:60:b8: eb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:52:AE:22:86:36:A4:4F:8F:37:35:9D:3A:4E:EF:8C:C4:73:78:D8 X509v3 Authority Key Identifier: keyid:86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/CE9692E0222311EAAED0162CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.12.172.0/22 IPv6: 2404:7500::/32 Signature Algorithm: sha256WithRSAEncryption 90:1e:e2:df:e4:c4:4b:a4:2b:df:8d:8a:fc:92:d0:f2:b6:a6: 3e:7f:55:03:d4:4e:ab:ef:aa:d1:db:4b:4a:05:91:86:ac:28: b0:25:19:3b:92:46:55:a2:99:60:f6:eb:e3:5c:cc:ad:9d:db: 22:c5:78:22:5e:72:ba:e1:e1:4c:22:3b:42:7d:3e:66:3f:d9: 3d:4b:fc:08:ff:c9:0a:64:a2:b9:b9:5f:41:cc:f9:da:a1:14: a9:47:72:b8:e4:e6:6a:ff:2b:1b:04:e6:ad:78:d1:99:a9:1d: 93:90:84:7b:19:2d:74:0e:53:bb:99:42:93:12:71:da:38:53: 7f:0f:57:72:ff:e5:54:3a:78:9a:eb:14:ed:10:f6:98:85:0d: 00:d9:63:fe:27:95:0c:71:db:f3:55:2d:20:87:54:a2:ff:c1: b0:ed:42:b4:57:03:99:ed:02:55:cb:33:0e:70:f6:3a:7b:85: 44:5b:6c:90:8d:84:64:09:e4:4e:a5:6e:ba:2e:5d:82:fa:0a: 5d:f9:4e:25:91:31:27:44:ae:c6:54:d9:d7:c9:43:cf:b0:06: fe:ec:cd:5d:1f:f8:c1:b6:97:4e:7a:75:27:33:9a:62:fa:3a: 9d:3d:32:34:00:b0:4c:8c:48:fb:34:48:96:36:6d:3d:aa:dd: 3e:61:21:cd -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFN0MxMTAvBgNVBAUTKDg2ODExQkIyNjdBRUY4NTQwMERCRTcyOTcwMjMyRDQx MUEyRDlBRTkwHhcNMjUwNzI0MTkyOTM5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgyODlhMy0yOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0iGZ1SzjCTAE7yUQ1dLctJbZaTUt+lWTkqSFTaQou59V5/mbG2jGwaD6gQ0 offPbZQPtRLValOAuaAJzdoctgNCOUU85w9TTtyCattNzlWAyXXUAtEu40yVQsdo r/sECBinrPdAu0MMc+QB+foyu2n9R4+3lDhbrsfysC8mZiphsrTlUQmtxwxATgg6 wnE5sBJ66BvBPSyZCwHg6ptfeDRHSK/tqWeZhs+iyqPRk8CYaOK4hGW9YUM4TONc MGRbX/yQOmh1Fcwgx4O+wT0UPyoJBMkPNZokW7LWo7nDvmMLdl6/6GNeLaM4GLLX 1PObPeAdHppnXrP6tgl8YLjrjwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPRSriKG NqRPjzc1nTpO74zEc3jYMB8GA1UdIwQYMBaAFIaBG7JnrvhUANvnKXAjLUEaLZrp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3Qy9GMzQwN0U1NDIy MjIxMUVBODc3REQ1MkFDNEY5QUUwMi9ob0Vic21ldS1GUUEyLWNwY0NNdFFSb3Rt dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvRWJzbWV1LUZRQTItY3BjQ010UVJvdG11ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0FFN0MvRjM0MDdFNTQyMjIyMTFFQTg3N0RENTJBQzRGOUFFMDIvQ0U5NjkyRTAy MjIzMTFFQUFFRDAxNjJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnDKwwDQQCAAIwBwMFACQEdQAwDQYJKoZIhvcNAQELBQAD ggEBAJAe4t/kxEukK9+NivyS0PK2pj5/VQPUTqvvqtHbS0oFkYasKLAlGTuSRlWi mWD26+NczK2d2yLFeCJecrrh4UwiO0J9PmY/2T1L/Aj/yQpkorm5X0HM+dqhFKlH crjk5mr/KxsE5q140ZmpHZOQhHsZLXQOU7uZQpMScdo4U38PV3L/5VQ6eJrrFO0Q 9piFDQDZY/4nlQxx2/NVLSCHVKL/wbDtQrRXA5ntAlXLMw5w9jp7hURbbJCNhGQJ 5E6lbrouXYL6Cl35TiWRMSdErsZU2dfJQ8+wBv7szV0f+MG2l056dSczmmL6Op09 MjQAsEyMSPs0SJY2bT2q3T5hIc0= -----END CERTIFICATE-----Generated at Sun Aug 10 20:03:40 2025 by rpki-client