$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/8C94EB806BA111F0955AEE3AC4F9AE02.roa File: 8C94EB806BA111F0955AEE3AC4F9AE02.roa (raw, json) Hash identifier: BkddAXG65iYyRBJRYWDWKtLzlLCUGe/u2i2SA4KGx98= Subject key identifier: 77:53:35:C2:4A:3C:BF:9E:48:45:3F:BC:95:C8:E2:19:C2:41:B5:E6 Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Certificate serial: 1027 Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/8C94EB806BA111F0955AEE3AC4F9AE02.roa Signing time: Mon 28 Jul 2025 13:46:30 +0000 ROA not before: Mon 28 Jul 2025 13:46:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138640 IP address blocks: 103.138.24.0/24 maxlen: 24 103.138.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4135 (0x1027) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Validity Not Before: Jul 28 13:46:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68877f36-0640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2b:1b:fe:ce:d3:81:9b:23:a0:50:e2:4d:86: 64:40:e0:00:b7:7d:2c:21:97:d5:fe:f1:9c:17:28: 66:95:de:27:36:51:7a:f3:dd:57:8a:65:ff:76:d1: db:10:b5:8f:cb:57:2c:90:ad:53:9a:77:d7:06:5a: 50:2f:14:db:ba:c0:44:e7:c0:4d:47:1a:b8:2c:5d: 78:f4:2a:1b:77:48:f8:74:0b:ed:cd:1a:b4:1a:e8: 6b:14:0f:ed:35:da:47:43:b8:31:4f:93:7b:e0:97: 44:20:dd:5a:73:88:89:b3:ad:8c:e5:7c:8e:34:be: 8c:da:18:94:aa:c5:7b:59:0c:0f:95:20:df:9b:f1: a1:fe:29:bd:2f:9b:e3:61:cb:d2:da:4f:73:0c:61: 50:27:63:09:2f:73:f1:bf:e9:bd:8a:ee:3a:ca:af: 6f:75:d2:d3:77:2b:b9:98:fb:19:86:14:d7:df:a2: a7:c3:2d:8d:94:6e:32:6b:25:b0:3f:73:73:de:6c: ca:3d:40:05:08:4a:3d:2e:40:29:00:05:a1:d7:75: e0:69:e3:42:23:7c:ce:24:8b:4f:25:5e:1b:71:2e: 63:5b:19:bb:be:f8:cd:8d:04:d5:1c:c5:d0:3a:ba: 4c:d6:48:18:40:02:54:bc:38:05:1a:fd:63:6f:d3: 03:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:53:35:C2:4A:3C:BF:9E:48:45:3F:BC:95:C8:E2:19:C2:41:B5:E6 X509v3 Authority Key Identifier: keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/8C94EB806BA111F0955AEE3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.24.0/23 Signature Algorithm: sha256WithRSAEncryption 90:6f:3d:54:b6:bb:60:40:68:24:41:6a:1e:67:4f:9e:07:5a: f1:a3:fd:40:05:b1:16:f7:72:89:ff:6a:a9:ad:84:d7:a3:1a: a1:21:80:65:33:2b:61:44:7a:3a:85:92:92:ac:39:c0:01:17: 7b:fe:b2:50:c8:38:bc:05:b4:ff:96:7f:48:90:0d:5e:65:3c: 73:37:3b:3c:52:d8:77:5b:b1:e1:fb:a5:2a:28:7e:ce:3f:53: d1:0e:1c:3a:f6:8c:24:c8:39:fe:d4:d0:e4:a0:7b:ec:2c:b6: d8:c8:d0:82:0c:2d:c1:24:da:65:79:46:03:ab:63:21:2f:1a: d1:1b:da:fe:56:c0:cc:c3:b1:9d:d3:d4:8e:3b:1f:d3:17:85: 2a:c7:55:22:7d:40:98:50:3b:a4:e1:b8:c6:09:b8:c0:8b:de: c2:ea:d3:b1:07:5e:e0:bb:0b:a3:4c:5f:29:0e:e7:81:d5:8f: 1a:63:74:1e:42:c0:0b:91:27:cb:ed:a8:45:d5:59:02:33:b7: f7:5f:52:bd:eb:aa:b4:aa:45:51:42:a2:23:94:ca:62:8e:1e: ff:37:ab:3b:4a:eb:36:92:66:58:3d:77:19:38:74:f9:2f:94: 18:ac:26:03:a1:0a:4c:b9:18:0e:3e:37:43:44:e6:5b:01:15: 98:30:70:11 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICECcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MzIxMTAvBgNVBAUTKDMyOURBMDNEQjk5NDQ3NTE0OThBNUZDQTUzQzg1REFB NjBDQjlBMzIwHhcNMjUwNzI4MTM0NjMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg3N2YzNi0wNjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzysb/s7TgZsjoFDiTYZkQOAAt30sIZfV/vGcFyhmld4nNlF6891XimX/dtHb ELWPy1cskK1TmnfXBlpQLxTbusBE58BNRxq4LF149Cobd0j4dAvtzRq0GuhrFA/t NdpHQ7gxT5N74JdEIN1ac4iJs62M5XyONL6M2hiUqsV7WQwPlSDfm/Gh/im9L5vj YcvS2k9zDGFQJ2MJL3Pxv+m9iu46yq9vddLTdyu5mPsZhhTX36Knwy2NlG4yayWw P3Nz3mzKPUAFCEo9LkApAAWh13XgaeNCI3zOJItPJV4bcS5jWxm7vvjNjQTVHMXQ OrpM1kgYQAJUvDgFGv1jb9MDewIDAQABo4IClTCCApEwHQYDVR0OBBYEFHdTNcJK PL+eSEU/vJXI4hnCQbXmMB8GA1UdIwQYMBaAFDKdoD25lEdRSYpfylPIXapgy5oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzMi8yRENBQkE2ODVD RjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIxRkppbF9LVThoZHFtRExt akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wMmdQYm1VUjFGSmlsX0tVOGhkcW1ETG1qSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0M0MzIvMkRDQUJBNjg1Q0YyMTFFOTg0OTM5MjI0QzRGOUFFMDIvOEM5NEVCODA2 QkExMTFGMDk1NUFFRTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnihgwDQYJKoZIhvcNAQELBQADggEBAJBvPVS2u2BAaCRB ah5nT54HWvGj/UAFsRb3con/aqmthNejGqEhgGUzK2FEejqFkpKsOcABF3v+slDI OLwFtP+Wf0iQDV5lPHM3OzxS2HdbseH7pSoofs4/U9EOHDr2jCTIOf7U0OSge+ws ttjI0IIMLcEk2mV5RgOrYyEvGtEb2v5WwMzDsZ3T1I47H9MXhSrHVSJ9QJhQO6Th uMYJuMCL3sLq07EHXuC7C6NMXykO54HVjxpjdB5CwAuRJ8vtqEXVWQIzt/dfUr3r qrSqRVFCoiOUymKOHv83qztK6zaSZlg9dxk4dPkvlBisJgOhCky5GA4+N0NE5lsB FZgwcBE= -----END CERTIFICATE-----Generated at Mon Aug 11 08:45:12 2025 by rpki-client