$ rpki-client -vvf rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/55B355DCA60F11EF82E7691DC4F9AE02.roa File: 55B355DCA60F11EF82E7691DC4F9AE02.roa (raw, json) Hash identifier: uf3h7x4X3w9L0qxsA/csqdSdJ4iieOaLJOms8tSWtWI= Subject key identifier: 65:02:1C:9C:B2:A7:99:D7:14:71:1E:17:90:6A:B6:E8:D7:BE:1A:80 Certificate issuer: /CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B Certificate serial: 8D Authority key identifier: 79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/55B355DCA60F11EF82E7691DC4F9AE02.roa Signing time: Tue 05 Aug 2025 07:15:02 +0000 ROA not before: Tue 05 Aug 2025 07:15:02 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 136784 IP address blocks: 103.96.4.0/22 maxlen: 22 103.96.4.0/24 maxlen: 24 103.96.5.0/24 maxlen: 24 103.96.6.0/24 maxlen: 24 103.96.7.0/24 maxlen: 24 113.212.92.0/22 maxlen: 22 113.212.92.0/24 maxlen: 24 113.212.93.0/24 maxlen: 24 113.212.94.0/24 maxlen: 24 113.212.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A92C, serialNumber=792683806C8BE3AC13614D375E9019274099BC7B Validity Not Before: Aug 5 07:15:02 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6891af76-60d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0e:36:e2:7c:74:a3:c9:a7:23:6c:48:a2:10: c8:b6:a2:c7:20:00:15:f0:59:f0:c0:d0:bc:a0:ff: 8a:f7:82:39:25:2f:1b:5e:af:45:07:d9:55:1d:83: 2d:00:af:a2:6b:ec:c7:b7:53:f9:2d:1d:ba:21:63: 2f:9e:4e:0b:33:c8:4b:83:0a:a8:6b:3c:95:15:59: 36:76:27:55:0a:a3:85:60:4d:bb:bf:16:9f:fa:67: 7c:a1:1d:d0:85:86:38:fb:b4:22:04:47:51:d2:8c: 0a:89:68:0e:64:5d:c8:97:8d:f6:f0:b6:8e:52:37: 8f:9a:ad:df:43:32:bd:d5:a1:a7:b1:d2:0d:e6:71: bb:a6:17:96:ff:b7:4b:d2:f2:0d:5a:44:be:0f:0b: f5:d7:5a:57:c9:ff:d4:15:77:98:73:2b:65:09:95: c4:35:b3:0d:97:e6:34:38:13:a9:8d:1b:e3:f4:94: 56:24:3d:2f:22:55:72:ef:cc:64:6b:4a:eb:f2:ad: 54:51:44:e9:e1:c0:67:3a:41:4f:7b:c3:e5:e3:3a: d3:1a:5a:bb:55:d0:02:cd:bb:40:6b:71:09:db:94: b6:a5:25:fa:cb:c9:ee:0e:91:e9:89:0e:54:68:de: 7e:d1:d3:0e:5d:31:db:1e:76:59:bb:a5:e8:d0:e7: b0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:02:1C:9C:B2:A7:99:D7:14:71:1E:17:90:6A:B6:E8:D7:BE:1A:80 X509v3 Authority Key Identifier: keyid:79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/55B355DCA60F11EF82E7691DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.96.4.0/22 113.212.92.0/22 Signature Algorithm: sha256WithRSAEncryption 18:15:a9:70:92:b9:c1:9f:20:06:65:c8:42:74:4b:aa:4b:36: 29:2b:04:1b:9f:cb:f5:b9:38:02:1f:26:51:f7:b1:83:d3:e1: bd:a1:87:95:99:b2:05:0a:9b:69:03:1d:52:23:b9:39:6b:49: d9:ee:c3:63:35:5b:db:24:7a:41:70:ca:e2:be:16:3c:c6:b2: c6:e2:18:75:5d:14:ad:83:da:4e:a4:d8:ba:21:c5:16:af:c2: a6:83:97:c1:08:c4:13:21:0e:34:21:6a:47:37:1e:d9:70:90: 2f:b8:02:36:bc:51:f5:68:48:ee:c7:e2:dd:fe:8f:32:7d:1c: 2e:d3:a5:10:4b:da:a3:a6:50:c1:39:2b:eb:b3:ca:28:03:f4: 84:c0:a1:07:b5:7f:f1:83:a7:59:ae:68:ac:78:8b:83:51:58: f5:e8:d0:b3:7e:9a:63:8e:34:01:c3:40:c5:3b:8a:00:64:72: df:c3:88:28:ad:5b:45:4f:95:9e:f2:8d:3f:97:60:f4:52:6e: ec:7f:89:b7:ba:3b:6b:2b:9a:01:1b:60:c4:f6:e5:eb:1a:24: 58:03:6f:18:01:11:7f:91:f9:f0:d0:1b:4a:2a:2e:8a:91:d4: 14:cc:db:e2:5c:3c:07:25:57:75:f3:35:ae:e7:a2:d0:e6:8e: 3e:c9:d5:22 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE5MkMxMTAvBgNVBAUTKDc5MjY4MzgwNkM4QkUzQUMxMzYxNEQzNzVFOTAxOTI3 NDA5OUJDN0IwHhcNMjUwODA1MDcxNTAyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkxYWY3Ni02MGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Q424nx0o8mnI2xIohDItqLHIAAV8FnwwNC8oP+K94I5JS8bXq9FB9lVHYMt AK+ia+zHt1P5LR26IWMvnk4LM8hLgwqoazyVFVk2didVCqOFYE27vxaf+md8oR3Q hYY4+7QiBEdR0owKiWgOZF3Il4328LaOUjePmq3fQzK91aGnsdIN5nG7pheW/7dL 0vINWkS+Dwv111pXyf/UFXeYcytlCZXENbMNl+Y0OBOpjRvj9JRWJD0vIlVy78xk a0rr8q1UUUTp4cBnOkFPe8Pl4zrTGlq7VdACzbtAa3EJ25S2pSX6y8nuDpHpiQ5U aN5+0dMOXTHbHnZZu6Xo0OewwwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGUCHJyy p5nXFHEeF5BqtujXvhqAMB8GA1UdIwQYMBaAFHkmg4Bsi+OsE2FNN16QGSdAmbx7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTkyQy9BNTI4MTREMkE2 MEUxMUVGQTY4QTZDMUJDNEY5QUUwMi9lU2FEZ0d5TDQ2d1RZVTAzWHBBWkowQ1p2 SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VTYURnR3lMNDZ3VFlVMDNYcEFaSjBDWnZIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEE5MkMvQTUyODE0RDJBNjBFMTFFRkE2OEE2QzFCQzRGOUFFMDIvNTVCMzU1RENB NjBGMTFFRjgyRTc2OTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnYAQDBAJx1FwwDQYJKoZIhvcNAQELBQADggEBABgVqXCS ucGfIAZlyEJ0S6pLNikrBBufy/W5OAIfJlH3sYPT4b2hh5WZsgUKm2kDHVIjuTlr Sdnuw2M1W9skekFwyuK+FjzGssbiGHVdFK2D2k6k2LohxRavwqaDl8EIxBMhDjQh akc3HtlwkC+4Aja8UfVoSO7H4t3+jzJ9HC7TpRBL2qOmUME5K+uzyigD9ITAoQe1 f/GDp1muaKx4i4NRWPXo0LN+mmOONAHDQMU7igBkct/DiCitW0VPlZ7yjT+XYPRS bux/ibe6O2srmgEbYMT25esaJFgDbxgBEX+R+fDQG0oqLoqR1BTM2+JcPAclV3Xz Na7notDmjj7J1SI= -----END CERTIFICATE-----Generated at Sun Aug 10 20:00:34 2025 by rpki-client