$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9B64D5BC5BD311ECAB122945C4F9AE02.roa File: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (raw, json) Hash identifier: dzJ3ZC5Hl5bYvc0rYBuqTlx1lY8wAUYvF1umXCXe+O4= Subject key identifier: 0F:30:B0:FC:F6:36:06:42:96:5F:CF:B2:F2:BE:AC:D8:86:3B:6F:9D Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 0FBB Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9B64D5BC5BD311ECAB122945C4F9AE02.roa Signing time: Thu 20 Feb 2025 18:25:59 +0000 ROA not before: Thu 20 Feb 2025 18:25:59 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 58521 IP address blocks: 103.247.204.0/22 maxlen: 22 103.247.205.0/24 maxlen: 24 103.247.206.0/23 maxlen: 23 103.247.206.0/24 maxlen: 24 103.247.207.0/24 maxlen: 24 202.81.96.0/19 maxlen: 24 202.181.64.0/20 maxlen: 24 2403:b00::/32 maxlen: 32 2403:b00::/48 maxlen: 48 2403:b00:1::/48 maxlen: 48 2403:b00:2::/48 maxlen: 48 2403:b00:3::/48 maxlen: 48 2403:b00:4::/48 maxlen: 48 2403:b00:5::/48 maxlen: 48 2403:b00:6::/48 maxlen: 48 2403:b00:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4027 (0xfbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: Feb 20 18:25:59 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67b773b6-4c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:2b:c5:b9:99:53:51:b7:df:4b:93:0b:a2: fb:2a:92:bd:f0:06:97:d6:7f:49:f2:78:83:7e:fc: 52:74:e5:08:37:91:65:50:15:2b:85:2f:d7:f4:42: 6a:9e:95:33:ab:ba:47:40:d7:f5:35:35:e3:29:a1: 96:9e:80:5f:b7:8e:6d:74:30:25:73:7d:64:d1:40: 45:7a:db:e9:8a:49:17:82:1d:1b:db:9b:1d:cb:25: bd:ab:4d:da:99:7b:b3:b7:48:07:3e:6d:a9:21:fe: 96:0a:5f:79:aa:51:6c:19:dd:f9:fa:13:b7:8f:c2: cb:61:d6:7a:53:e3:77:a3:53:75:85:80:f3:66:b4: 14:8e:69:d2:bf:95:b3:81:a2:30:ab:03:f6:f9:32: 8f:8f:20:16:c7:11:c6:c6:f7:5e:61:15:0f:b7:a3: 80:cb:81:3f:fa:4f:ec:d7:4f:a7:8c:9b:25:3f:4b: 58:b3:6e:6d:ba:92:01:9b:38:5e:93:49:f7:8b:73: dc:d2:4c:50:13:2a:83:36:82:75:44:16:f0:9e:de: ba:53:76:19:ca:f9:6c:8b:cc:81:68:6f:fe:05:99: cb:f0:1d:9b:f7:13:01:7b:f3:5a:d0:63:2a:e2:a9: b0:2a:67:d2:9b:f9:36:cc:dc:17:82:53:9a:c4:49: 36:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:30:B0:FC:F6:36:06:42:96:5F:CF:B2:F2:BE:AC:D8:86:3B:6F:9D X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9B64D5BC5BD311ECAB122945C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.247.204.0/22 202.81.96.0/19 202.181.64.0/20 IPv6: 2403:b00::/32 Signature Algorithm: sha256WithRSAEncryption 90:c8:2b:76:26:6a:ec:a5:02:c0:26:f2:d4:7b:80:60:05:71: 1b:66:ed:60:5d:07:e4:e6:78:55:f8:ee:18:24:06:e7:42:18: 6d:bb:71:be:25:15:bb:98:84:ef:8a:b6:ee:ce:bd:53:a1:53: 29:8d:9a:0f:fb:26:eb:82:5f:c7:a4:db:a0:0a:dd:4a:a8:87: 44:fe:b4:bb:e8:6c:b7:7a:2d:0c:46:84:f6:e5:0f:01:4c:14: 4c:58:ab:95:0d:6d:2b:a6:76:34:b5:2a:2b:68:9e:a9:3f:e7: a3:c0:20:30:bc:2c:04:c1:1e:47:ee:4c:3f:ea:70:8e:3b:b9: 0d:8e:aa:af:d4:8e:8c:3b:40:f4:ec:df:a6:e3:0b:6a:aa:b9: fb:80:f0:be:40:63:ac:b2:9d:fe:a3:ba:50:78:4d:d3:ae:74: 8c:eb:b8:1e:5c:c9:1f:50:e6:90:72:02:fb:85:2b:ad:11:e8: 33:e7:0b:39:5d:e0:7b:62:6f:db:ba:8a:fb:d0:74:94:ef:a2: 98:6b:f6:e1:2c:90:1e:8b:67:6f:69:fb:a8:de:f0:09:6a:0c: 69:6a:04:40:a4:06:fd:da:6a:4b:6a:24:80:23:61:46:90:da: 9d:f2:a5:f6:6a:d6:af:9f:63:35:16:c2:29:6d:73:53:4a:8a: f3:db:fc:06 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICD7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjUwMjIwMTgyNTU5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I3NzNiNi00YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPYrxbmZU1G330uTC6L7KpK98AaX1n9J8niDfvxSdOUIN5FlUBUrhS/X9EJq npUzq7pHQNf1NTXjKaGWnoBft45tdDAlc31k0UBFetvpikkXgh0b25sdyyW9q03a mXuzt0gHPm2pIf6WCl95qlFsGd35+hO3j8LLYdZ6U+N3o1N1hYDzZrQUjmnSv5Wz gaIwqwP2+TKPjyAWxxHGxvdeYRUPt6OAy4E/+k/s10+njJslP0tYs25tupIBmzhe k0n3i3Pc0kxQEyqDNoJ1RBbwnt66U3YZyvlsi8yBaG/+BZnL8B2b9xMBe/Na0GMq 4qmwKmfSm/k2zNwXglOaxEk2pwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFA8wsPz2 NgZCll/PsvK+rNiGO2+dMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0U4RjMvMTJGNERGMTg1NDk0MTFFOUI1OTdFNTcxQzRGOUFFMDIvOUI2NEQ1QkM1 QkQzMTFFQ0FCMTIyOTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJn98wDBAXKUWADBATKtUAwDQQCAAIwBwMFACQDCwAwDQYJ KoZIhvcNAQELBQADggEBAJDIK3YmauylAsAm8tR7gGAFcRtm7WBdB+TmeFX47hgk BudCGG27cb4lFbuYhO+Ktu7OvVOhUymNmg/7JuuCX8ek26AK3Uqoh0T+tLvobLd6 LQxGhPblDwFMFExYq5UNbSumdjS1Kitonqk/56PAIDC8LATBHkfuTD/qcI47uQ2O qq/Ujow7QPTs36bjC2qqufuA8L5AY6yynf6julB4TdOudIzruB5cyR9Q5pByAvuF K60R6DPnCzld4Htib9u6ivvQdJTvophr9uEskB6LZ29p+6je8AlqDGlqBECkBv3a aktqJIAjYUaQ2p3ypfZq1q+fYzUWwiltc1NKivPb/AY= -----END CERTIFICATE-----Generated at Wed Nov 5 19:34:44 2025 by rpki-client