$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/BFFF6C4A07D911EDA41A0B25C4F9AE02.roa File: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (raw, json) Hash identifier: R1MK4JszBxBbOzBzvtKc2PZsYBtSXJEyXkwh6miBgAs= Subject key identifier: 46:64:9C:23:24:3E:0B:05:0F:87:8C:26:E0:2A:E1:12:E3:3E:31:A9 Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 0535 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/BFFF6C4A07D911EDA41A0B25C4F9AE02.roa Signing time: Wed 04 Jun 2025 21:50:54 +0000 ROA not before: Wed 04 Jun 2025 21:50:54 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 135074 IP address blocks: 103.204.13.0/24 maxlen: 24 203.168.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1333 (0x535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Jun 4 21:50:54 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6840bfbe-9467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:04:e7:20:c6:54:18:42:c5:3c:24:62:f4:94: f8:09:05:c4:37:f6:96:fd:ad:90:82:9d:7e:c0:6a: 7d:69:a8:db:8b:d3:5d:55:b6:fa:c5:1e:43:6a:91: e7:12:dc:98:d9:59:d5:3a:29:97:9c:b3:8d:58:eb: 8f:c8:da:ac:80:37:33:5f:27:63:5c:b6:c3:81:a7: 6f:dd:18:b5:65:0c:e6:4a:48:e3:64:66:99:c3:04: b4:d5:de:74:93:96:5b:d4:35:ce:cd:64:25:32:5c: 6a:59:10:49:63:79:fd:6d:87:2d:fe:41:ec:a9:34: 58:fe:03:99:3d:6f:a6:1a:7c:38:28:22:e7:d5:04: 80:d7:8f:dd:56:5d:50:4b:d7:dc:42:b0:43:5b:9c: 51:6f:a6:f6:5d:92:bf:60:6d:08:1c:3b:df:09:8d: 06:77:91:88:f3:76:34:f8:20:f1:c8:f6:62:31:bd: cf:8f:94:e3:1e:54:ee:39:22:ae:22:14:0a:6b:37: 22:24:c4:e5:6b:37:ee:03:a3:5d:54:52:e0:f6:f4: 31:92:43:7b:39:02:d5:51:56:7a:85:38:79:95:10: 87:26:3f:24:02:14:73:b0:12:cc:dd:d1:14:b3:f7: a9:2a:47:78:ac:2e:9e:9a:89:4f:f7:88:f1:64:4e: c3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:64:9C:23:24:3E:0B:05:0F:87:8C:26:E0:2A:E1:12:E3:3E:31:A9 X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/BFFF6C4A07D911EDA41A0B25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.13.0/24 203.168.128.0/22 Signature Algorithm: sha256WithRSAEncryption 27:9b:0b:0f:73:80:29:1a:16:9c:b1:2a:6d:6a:4e:8d:21:05: ff:c6:c5:f6:9d:dc:ea:98:93:a7:7a:98:c6:6a:32:ac:5d:89: 51:f8:a4:82:64:03:f6:e9:83:a6:f4:59:c7:9e:95:12:b4:c3: df:b8:c2:c6:fb:f0:0a:62:e8:4a:8d:17:9c:67:16:5b:d7:a1: 6e:b5:dc:fc:bc:a5:26:db:d6:8b:3d:f5:2e:2e:18:a0:c3:e0: 38:62:1e:96:c6:e1:a8:92:87:8a:51:e4:68:1d:07:c7:71:0e: c5:47:23:03:7d:c9:52:19:95:00:e8:7c:43:03:55:8f:94:49: 09:5d:8e:ba:28:03:2a:bf:53:e9:ac:d3:a2:7d:2f:c2:ce:0a: 3f:87:e3:88:3b:c6:3b:44:8b:f2:7d:fe:06:bf:1c:ef:b5:fd: 7e:f6:90:c3:a6:c0:ef:1c:ab:d5:dd:63:93:95:de:f4:ca:97: 7f:4b:2f:4d:3e:1e:ee:c9:8b:35:8b:38:e5:15:fa:97:b7:a9: 40:f3:20:17:03:07:d9:a8:17:ed:f6:98:d4:d9:a5:9d:e1:96: 65:86:2c:7b:8a:43:e6:fe:a9:47:cb:d9:40:00:2f:86:6a:76: b3:ae:c5:e6:c8:47:b3:6f:a7:06:e4:fe:5b:23:53:5f:e6:17: 7c:2f:ba:9f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjUwNjA0MjE1MDU0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQwYmZiZS05NDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ATnIMZUGELFPCRi9JT4CQXEN/aW/a2Qgp1+wGp9aajbi9NdVbb6xR5DapHn EtyY2VnVOimXnLONWOuPyNqsgDczXydjXLbDgadv3Ri1ZQzmSkjjZGaZwwS01d50 k5Zb1DXOzWQlMlxqWRBJY3n9bYct/kHsqTRY/gOZPW+mGnw4KCLn1QSA14/dVl1Q S9fcQrBDW5xRb6b2XZK/YG0IHDvfCY0Gd5GI83Y0+CDxyPZiMb3Pj5TjHlTuOSKu IhQKazciJMTlazfuA6NdVFLg9vQxkkN7OQLVUVZ6hTh5lRCHJj8kAhRzsBLM3dEU s/epKkd4rC6emolP94jxZE7DfwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEZknCMk PgsFD4eMJuAq4RLjPjGpMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVEMjUvNjdGMkIwRDgwQkQyMTFFQ0JBQTQ4MDZBQzRGOUFFMDIvQkZGRjZDNEEw N0Q5MTFFREE0MUEwQjI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnzA0DBALLqIAwDQYJKoZIhvcNAQELBQADggEBACebCw9z gCkaFpyxKm1qTo0hBf/Gxfad3OqYk6d6mMZqMqxdiVH4pIJkA/bpg6b0WceelRK0 w9+4wsb78Api6EqNF5xnFlvXoW613Py8pSbb1os99S4uGKDD4DhiHpbG4aiSh4pR 5GgdB8dxDsVHIwN9yVIZlQDofEMDVY+USQldjrooAyq/U+ms06J9L8LOCj+H44g7 xjtEi/J9/ga/HO+1/X72kMOmwO8cq9XdY5OV3vTKl39LL00+Hu7JizWLOOUV+pe3 qUDzIBcDB9moF+32mNTZpZ3hlmWGLHuKQ+b+qUfL2UAAL4ZqdrOuxebIR7Nvpwbk /lsjU1/mF3wvup8= -----END CERTIFICATE-----Generated at Thu Jun 19 03:46:34 2025 by rpki-client