$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/B4018F066D3C11F08004E139C4F9AE02.roa File: B4018F066D3C11F08004E139C4F9AE02.roa (raw, json) Hash identifier: mkXVXjWOhZ0DUz/i0E5riYkh07lG0BNhsP2Vdoc5P0U= Subject key identifier: 88:9A:ED:5C:07:E8:43:8A:5A:68:DC:5C:CC:3A:00:9C:0E:00:F6:84 Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Certificate serial: 0570 Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/B4018F066D3C11F08004E139C4F9AE02.roa Signing time: Wed 30 Jul 2025 11:59:53 +0000 ROA not before: Wed 30 Jul 2025 11:59:53 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 43260 IP address blocks: 103.46.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1392 (0x570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91 Validity Not Before: Jul 30 11:59:53 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=688a0939-98ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:72:e2:27:a7:0d:65:c6:d0:93:c8:b8:28: 68:3a:ff:51:1a:a3:4c:56:0d:d8:e4:61:4b:97:fb: f1:d9:1c:02:7d:c4:0e:94:28:5e:35:52:b1:00:2b: 88:74:3a:e6:86:4e:8c:e8:40:a2:6d:e8:79:c2:d8: fb:9e:24:c0:2d:d7:7d:9c:08:e0:c1:be:ff:06:66: ca:58:f8:75:41:59:04:b3:e3:7e:69:bc:d7:55:99: 4b:f8:8c:ed:50:50:8f:9a:21:09:fd:99:59:7f:95: 46:ba:4e:32:50:0a:94:73:1e:63:4c:f0:71:b0:f5: cc:e4:f1:89:b9:38:16:e0:9a:5c:33:d5:34:85:1a: ad:3c:28:fe:16:0a:15:39:88:56:89:fd:ea:f4:68: 67:c0:cd:f1:e0:4b:bc:43:9a:95:7b:a8:5a:17:b3: 74:1a:18:3d:82:3e:eb:b9:8f:e6:9c:e2:10:20:2c: 5a:08:3c:f4:b9:e6:80:4d:98:e7:c6:4f:53:f7:93: 94:6b:8e:aa:90:e4:7a:52:d0:7b:34:87:69:4f:ed: 53:e9:ed:8d:f3:87:3d:63:29:b2:2e:38:a8:cb:fa: 54:53:ca:17:4f:b9:6e:e4:7d:65:e1:68:34:65:22: 94:73:6f:2f:52:a3:3f:b8:44:a4:dd:1c:3f:06:77: a4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9A:ED:5C:07:E8:43:8A:5A:68:DC:5C:CC:3A:00:9C:0E:00:F6:84 X509v3 Authority Key Identifier: keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/B4018F066D3C11F08004E139C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.46.142.0/24 Signature Algorithm: sha256WithRSAEncryption 28:46:1f:e7:20:04:f6:3d:7e:e1:b3:43:c7:16:29:83:61:8b: e4:73:42:21:bf:bd:4a:02:f4:e3:56:4b:14:a1:50:0b:85:24: 57:3e:ee:b6:11:87:be:fe:ac:3a:fd:33:4c:ff:a7:85:bd:20: a2:61:e9:2b:18:38:5c:60:b7:bc:72:32:24:ee:52:4d:a0:68: 15:47:dc:a6:c2:87:25:ba:ee:d0:f0:f8:12:ec:f6:3d:3a:f1: 43:d3:10:95:ef:44:6f:c4:e9:f2:d3:e0:8b:3c:d7:54:b9:ad: cd:ed:be:71:42:e6:39:fc:f0:da:35:f3:65:30:2f:fe:3b:f3: 86:95:9a:bb:e8:bf:81:df:65:e1:67:e7:50:f6:0f:d2:e6:0c: ee:01:9f:ed:ff:c8:50:30:f8:47:28:a9:13:6a:92:2b:a5:8c: a4:e5:2f:2b:55:34:2a:1f:2a:c1:27:2b:a8:96:7f:fd:e4:b6: 14:4a:79:9f:a5:f8:41:0b:b9:65:5e:fa:ab:e2:b1:87:d7:d9: 39:89:5e:81:1e:38:38:4a:5a:ee:22:ba:f9:df:68:4f:fb:a4: 7c:f0:67:8f:f7:c2:26:e0:3b:9b:ee:ee:f3:96:89:f1:c1:ce: c4:1d:f2:b6:92:2a:83:27:9e:50:32:d3:24:f1:39:8c:cd:ba: 15:d5:95:5c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0 NERCMjZFOTEwHhcNMjUwNzMwMTE1OTUzWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhMDkzOS05OGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLty4ienDWXG0JPIuChoOv9RGqNMVg3Y5GFLl/vx2RwCfcQOlCheNVKxACuI dDrmhk6M6ECibeh5wtj7niTALdd9nAjgwb7/BmbKWPh1QVkEs+N+abzXVZlL+Izt UFCPmiEJ/ZlZf5VGuk4yUAqUcx5jTPBxsPXM5PGJuTgW4JpcM9U0hRqtPCj+FgoV OYhWif3q9GhnwM3x4Eu8Q5qVe6haF7N0Ghg9gj7ruY/mnOIQICxaCDz0ueaATZjn xk9T95OUa46qkOR6UtB7NIdpT+1T6e2N84c9YymyLjioy/pUU8oXT7lu5H1l4Wg0 ZSKUc28vUqM/uESk3Rw/Bnek5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIia7VwH 6EOKWmjcXMw6AJwOAPaEMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhCRkEvMDRBMjRDMzQxMTQzMTFFQzk3MzY5RjczQzRGOUFFMDIvQjQwMThGMDY2 RDNDMTFGMDgwMDRFMTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnLo4wDQYJKoZIhvcNAQELBQADggEBAChGH+cgBPY9fuGz Q8cWKYNhi+RzQiG/vUoC9ONWSxShUAuFJFc+7rYRh77+rDr9M0z/p4W9IKJh6SsY OFxgt7xyMiTuUk2gaBVH3KbChyW67tDw+BLs9j068UPTEJXvRG/E6fLT4Is811S5 rc3tvnFC5jn88No182UwL/4784aVmrvov4HfZeFn51D2D9LmDO4Bn+3/yFAw+Eco qRNqkiuljKTlLytVNCofKsEnK6iWf/3kthRKeZ+l+EELuWVe+qvisYfX2TmJXoEe ODhKWu4iuvnfaE/7pHzwZ4/3wibgO5vu7vOWifHBzsQd8raSKoMnnlAy0yTxOYzN uhXVlVw= -----END CERTIFICATE-----Generated at Wed Aug 6 14:21:31 2025 by rpki-client