$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/DDDE13B8FAE811E7A715F157C4F9AE02.roa File: DDDE13B8FAE811E7A715F157C4F9AE02.roa (raw, json) Hash identifier: 3NBDQoX7jImDov3ZX0pfPuQVgflIK4hAwefOS6yfBcQ= Subject key identifier: 51:E3:84:34:FA:46:F8:DF:65:A9:3C:1C:AA:64:CE:69:86:54:E5:9B Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Certificate serial: 16D2 Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/DDDE13B8FAE811E7A715F157C4F9AE02.roa Signing time: Tue 29 Jul 2025 19:12:50 +0000 ROA not before: Tue 29 Jul 2025 19:12:50 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 135330 IP address blocks: 103.107.104.0/22 maxlen: 24 103.119.44.0/22 maxlen: 22 103.119.44.0/24 maxlen: 24 103.119.45.0/24 maxlen: 24 103.119.46.0/24 maxlen: 24 103.119.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5842 (0x16d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CADE, serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Validity Not Before: Jul 29 19:12:50 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=68891d32-4c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:80:bc:e3:c5:fc:06:a0:5f:81:15:69:ab:46: ce:93:6a:d0:3a:5f:81:cb:7f:4f:11:1d:57:f2:39: 4c:2c:17:22:8b:6f:68:4d:6b:89:39:c2:9d:af:7c: 69:66:62:5a:65:19:84:13:88:09:6c:a7:39:59:e1: 26:96:f9:fa:ed:c4:63:f2:04:97:45:ee:b3:12:a3: 10:71:b7:c9:7c:c9:5e:05:3c:45:eb:6c:e6:67:69: 28:aa:96:37:c0:d6:d7:37:b8:6b:81:dc:75:ad:8c: 00:b4:f6:c5:4d:8e:33:40:6e:70:f0:9e:9e:89:de: 10:a6:c8:3c:36:0a:5d:7c:7e:28:e4:bd:5f:3a:df: 68:e1:85:60:92:7d:2c:6d:e8:0c:ef:bf:fb:1e:41: 2b:1c:b7:eb:f3:a5:3b:00:6b:69:14:a0:27:d2:c6: 21:3e:9c:27:f6:0c:71:45:18:15:55:5c:a4:3d:e1: 8c:e4:ba:ee:ef:75:85:ab:f7:04:b4:d5:a1:c0:1f: 7b:de:85:4f:0a:7a:8d:d9:d3:0f:12:c9:8a:40:06: 57:0d:a6:5b:8b:95:e4:74:3a:76:28:99:3c:ff:aa: fa:f3:0e:f6:e1:85:b0:0f:48:a0:90:b3:aa:af:74: c7:61:cf:5b:e4:b6:9e:4c:5b:9d:3a:7f:d2:42:61: 5c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E3:84:34:FA:46:F8:DF:65:A9:3C:1C:AA:64:CE:69:86:54:E5:9B X509v3 Authority Key Identifier: keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/DDDE13B8FAE811E7A715F157C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.107.104.0/22 103.119.44.0/22 Signature Algorithm: sha256WithRSAEncryption 55:18:5c:28:7e:9e:40:58:b3:db:8b:e6:21:5f:45:0b:99:68: 47:6e:bd:02:a5:d9:81:f8:cf:7d:49:19:6b:d4:d0:a1:e7:7f: 35:a0:ae:72:43:57:49:3a:02:0e:71:03:da:81:d1:af:51:5f: 78:18:16:f2:7f:47:c6:9c:e9:05:14:69:a9:38:b6:86:76:3d: 82:64:5e:89:9b:5b:b9:c4:62:b8:af:0e:f8:f9:51:9a:84:51: 9f:06:84:b3:14:85:6e:ca:52:0f:99:4c:62:fe:18:bb:ef:f4: ba:e1:9b:24:72:f7:cd:dd:b2:11:15:4e:e8:59:c7:6a:12:45: 76:e2:ce:21:e3:c9:56:f9:86:aa:ae:de:10:e7:48:61:d1:a4: 75:b2:b7:2e:7c:2f:4c:cb:14:70:ab:11:a1:fd:b8:b8:0c:e1: 00:f0:a8:65:c2:4a:aa:34:58:9a:f5:06:8a:d3:d9:38:33:22: 9a:31:5d:b7:58:04:2f:42:3c:0a:c9:03:a8:8c:e4:25:eb:e4: 56:27:d5:50:a0:0a:c9:73:83:77:cf:34:f2:68:b0:3e:c1:09: 78:00:3b:aa:3b:8d:9f:f1:2b:9c:41:bb:19:be:1d:86:da:39: dc:4e:77:57:8c:8b:3d:55:7b:b2:59:0e:29:d7:90:c2:cf:3d: 6e:8a:87:c9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICFtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBREUxMTAvBgNVBAUTKDM3MjVCMkU5N0RENDVEQzBCNzUyMUMwQTFCQjVFNDA2 MDlCMDVEOTYwHhcNMjUwNzI5MTkxMjUwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg5MWQzMi00YzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYC848X8BqBfgRVpq0bOk2rQOl+By39PER1X8jlMLBcii29oTWuJOcKdr3xp ZmJaZRmEE4gJbKc5WeEmlvn67cRj8gSXRe6zEqMQcbfJfMleBTxF62zmZ2koqpY3 wNbXN7hrgdx1rYwAtPbFTY4zQG5w8J6eid4Qpsg8NgpdfH4o5L1fOt9o4YVgkn0s begM77/7HkErHLfr86U7AGtpFKAn0sYhPpwn9gxxRRgVVVykPeGM5Lru73WFq/cE tNWhwB973oVPCnqN2dMPEsmKQAZXDaZbi5XkdDp2KJk8/6r68w724YWwD0igkLOq r3THYc9b5LaeTFudOn/SQmFczwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFHjhDT6 RvjfZak8HKpkzmmGVOWbMB8GA1UdIwQYMBaAFDclsul91F3At1IcChu15AYJsF2W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FERS9GMDJBQjE3Q0ZB RTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhjQzNVaHdLRzdYa0JnbXdY WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055V3k2WDNVWGNDM1Vod0tHN1hrQmdtd1haWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0NBREUvRjAyQUIxN0NGQUU2MTFFNzkyM0VBMTUwQzRGOUFFMDIvRERERTEzQjhG QUU4MTFFN0E3MTVGMTU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJna2gDBAJndywwDQYJKoZIhvcNAQELBQADggEBAFUYXCh+ nkBYs9uL5iFfRQuZaEduvQKl2YH4z31JGWvU0KHnfzWgrnJDV0k6Ag5xA9qB0a9R X3gYFvJ/R8ac6QUUaak4toZ2PYJkXombW7nEYrivDvj5UZqEUZ8GhLMUhW7KUg+Z TGL+GLvv9LrhmyRy983dshEVTuhZx2oSRXbiziHjyVb5hqqu3hDnSGHRpHWyty58 L0zLFHCrEaH9uLgM4QDwqGXCSqo0WJr1BorT2TgzIpoxXbdYBC9CPArJA6iM5CXr 5FYn1VCgCslzg3fPNPJosD7BCXgAO6o7jZ/xK5xBuxm+HYbaOdxOd1eMiz1Ve7JZ DinXkMLPPW6Kh8k= -----END CERTIFICATE-----Generated at Sat Aug 9 10:48:53 2025 by rpki-client