$ rpki-client -vvf rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/EF2EEFEEFE6711EBB771CF1BC4F9AE02.roa File: EF2EEFEEFE6711EBB771CF1BC4F9AE02.roa (raw, json) Hash identifier: h3TRrCigN3ijDCgnDw2m4xSxP+YwbT+U2kZcnUsoK8s= Subject key identifier: 87:F5:E4:5C:36:39:65:CC:03:CD:D4:94:8D:A6:1A:36:CB:85:01:6D Certificate issuer: /CN=A913F13A/serialNumber=93A4C96D6298169AE055D4EA26682B1072FB9502 Certificate serial: 0C44 Authority key identifier: 93:A4:C9:6D:62:98:16:9A:E0:55:D4:EA:26:68:2B:10:72:FB:95:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/EF2EEFEEFE6711EBB771CF1BC4F9AE02.roa Signing time: Fri 25 Jul 2025 06:16:36 +0000 ROA not before: Fri 25 Jul 2025 06:16:35 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 137059 IP address blocks: 103.103.88.0/23 maxlen: 24 103.132.185.0/24 maxlen: 24 2400:8fa0:10::/48 maxlen: 48 2400:8fa0:11::/48 maxlen: 48 2400:8fa0:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.crl rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 18:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3140 (0xc44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F13A, serialNumber=93A4C96D6298169AE055D4EA26682B1072FB9502 Validity Not Before: Jul 25 06:16:35 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68832143-f507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:55:08:ab:97:c6:01:8e:3c:8d:b1:6e:e8:c0: bd:7a:4c:b6:8d:45:e0:aa:43:87:8e:e6:4c:38:a8: e0:f7:9e:3e:20:d8:c2:b9:80:3a:3c:91:50:f0:23: 6f:57:b2:08:3a:e4:f9:d3:30:4b:8e:6a:ea:7a:e1: e4:33:4d:33:7a:4e:a2:62:24:d4:e5:54:98:3f:a0: 7c:7f:d3:b6:3e:56:65:ec:95:f6:dc:6d:23:2b:5b: e5:01:8e:85:c6:de:fd:4e:de:37:ca:d4:67:11:f2: 30:81:ea:16:b2:b0:e7:13:e6:cf:65:0c:f6:fb:ec: dd:43:35:94:5f:9c:14:18:e9:79:71:bf:6d:48:1a: 2e:13:7d:e0:9b:e8:fe:45:57:40:6a:dd:b9:75:f2: 10:80:cb:5e:77:90:a0:ed:50:18:23:bd:e5:d6:e6: b4:01:81:95:d4:2a:93:b5:fa:2a:bd:77:4d:f0:3d: 66:16:b1:84:5b:1c:78:55:c7:61:d4:9e:99:de:61: d3:bb:4f:d2:7b:b3:57:8e:ef:1b:2d:11:66:ca:7a: c0:e6:b3:d0:60:90:8c:83:fe:ad:b2:46:f3:1f:e0: a2:07:55:e7:ed:ed:31:97:fe:51:f0:d4:f1:ad:06: 48:5b:6e:33:84:b5:7a:2b:c6:62:0c:c8:8a:29:70: 31:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F5:E4:5C:36:39:65:CC:03:CD:D4:94:8D:A6:1A:36:CB:85:01:6D X509v3 Authority Key Identifier: keyid:93:A4:C9:6D:62:98:16:9A:E0:55:D4:EA:26:68:2B:10:72:FB:95:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/k6TJbWKYFprgVdTqJmgrEHL7lQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6TJbWKYFprgVdTqJmgrEHL7lQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F13A/F3E4D2CE0C1F11EAAFDAE02AC4F9AE02/EF2EEFEEFE6711EBB771CF1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.103.88.0/23 103.132.185.0/24 IPv6: 2400:8fa0:10::-2400:8fa0:12:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8f:3c:9b:52:79:d4:26:d5:33:b0:4f:64:8d:29:cc:0f:bb:13: 55:57:16:e0:3c:c1:0b:f6:35:8a:16:97:be:28:8d:4f:67:29: 40:9a:7c:4d:43:f9:b2:14:56:2b:a3:69:4b:d1:cc:ae:1d:19: 9b:06:10:ed:bd:95:67:21:4e:7d:d0:3f:e0:1e:d6:3c:66:63: b4:21:07:2c:b3:5e:33:1d:d4:37:8d:63:1d:f5:bf:8e:8b:7d: f1:46:bd:73:b2:70:62:95:cc:b7:80:e3:f5:5b:5d:7e:87:d8: 95:37:ba:fc:53:2d:20:4e:ba:80:67:ff:5f:09:fd:84:82:55: 0b:b4:85:cb:41:c8:b1:38:ad:29:7b:f7:af:f8:a7:d3:09:7a: f9:f7:c0:07:67:ee:b0:2a:80:93:42:52:e3:80:42:42:64:5e: 76:14:aa:69:e3:ce:61:e0:35:5c:76:a8:e2:56:43:5e:8a:b9: b0:9f:fa:c6:74:4c:d0:e0:f4:ad:05:cc:cc:7f:56:83:61:12: 55:fb:86:4f:f2:73:05:07:73:ab:3f:60:94:44:89:04:da:90: 6f:26:6a:bd:c3:84:9e:9e:34:66:d8:97:ce:98:c1:f9:3d:56: cd:01:19:51:4b:bc:37:63:6a:0b:00:48:b5:4e:36:c8:3c:7f: 60:9e:8d:6a -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICDEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YxM0ExMTAvBgNVBAUTKDkzQTRDOTZENjI5ODE2OUFFMDU1RDRFQTI2NjgyQjEw NzJGQjk1MDIwHhcNMjUwNzI1MDYxNjM1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgzMjE0My1mNTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFUIq5fGAY48jbFu6MC9eky2jUXgqkOHjuZMOKjg954+INjCuYA6PJFQ8CNv V7IIOuT50zBLjmrqeuHkM00zek6iYiTU5VSYP6B8f9O2PlZl7JX23G0jK1vlAY6F xt79Tt43ytRnEfIwgeoWsrDnE+bPZQz2++zdQzWUX5wUGOl5cb9tSBouE33gm+j+ RVdAat25dfIQgMted5Cg7VAYI73l1ua0AYGV1CqTtfoqvXdN8D1mFrGEWxx4Vcdh 1J6Z3mHTu0/Se7NXju8bLRFmynrA5rPQYJCMg/6tskbzH+CiB1Xn7e0xl/5R8NTx rQZIW24zhLV6K8ZiDMiKKXAx2QIDAQABo4ICtzCCArMwHQYDVR0OBBYEFIf15Fw2 OWXMA83UlI2mGjbLhQFtMB8GA1UdIwQYMBaAFJOkyW1imBaa4FXU6iZoKxBy+5UC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEzQS9GM0U0RDJDRTBD MUYxMUVBQUZEQUUwMkFDNEY5QUUwMi9rNlRKYldLWUZwcmdWZFRxSm1nckVITDds UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s2VEpiV0tZRnByZ1ZkVHFKbWdyRUhMN2xRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0YxM0EvRjNFNEQyQ0UwQzFGMTFFQUFGREFFMDJBQzRGOUFFMDIvRUYyRUVGRUVG RTY3MTFFQkI3NzFDRjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMBIEAgABMAwDBAFnZ1gDBABnhLkwGgQCAAIwFDASAwcEJACPoAAQAwcAJACP oAASMA0GCSqGSIb3DQEBCwUAA4IBAQCPPJtSedQm1TOwT2SNKcwPuxNVVxbgPMEL 9jWKFpe+KI1PZylAmnxNQ/myFFYro2lL0cyuHRmbBhDtvZVnIU590D/gHtY8ZmO0 IQcss14zHdQ3jWMd9b+Oi33xRr1zsnBilcy3gOP1W11+h9iVN7r8Uy0gTrqAZ/9f Cf2EglULtIXLQcixOK0pe/ev+KfTCXr598AHZ+6wKoCTQlLjgEJCZF52FKpp485h 4DVcdqjiVkNeirmwn/rGdEzQ4PStBczMf1aDYRJV+4ZP8nMFB3OrP2CURIkE2pBv Jmq9w4SenjRm2JfOmMH5PVbNARlRS7w3Y2oLAEi1TjbIPH9gno1q -----END CERTIFICATE-----Generated at Fri Aug 8 00:50:24 2025 by rpki-client