$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D663158A6E2C11EEBFE28628C4F9AE02.roa File: D663158A6E2C11EEBFE28628C4F9AE02.roa (raw, json) Hash identifier: FqhwzXNHRNY+XCePlaMxiVUp2AFCJ34p2xGpiCoaVzQ= Subject key identifier: 8E:13:95:07:D9:C1:81:90:19:4E:45:64:7C:4C:EA:28:11:42:08:77 Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Certificate serial: 0151 Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D663158A6E2C11EEBFE28628C4F9AE02.roa Signing time: Tue 29 Jul 2025 04:41:57 +0000 ROA not before: Tue 29 Jul 2025 04:41:57 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 4764 IP address blocks: 103.61.97.0/24 maxlen: 24 103.61.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Validity Not Before: Jul 29 04:41:57 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68885114-60ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:a5:08:10:06:e9:1e:a7:9b:1c:91:d1:f6: 3c:3c:28:32:d0:4d:dd:03:9e:11:b7:a4:e4:5b:3f: 9d:83:ac:7b:43:69:5a:ec:29:87:46:84:31:74:d8: 74:52:ac:91:99:f3:28:e4:16:1f:c7:44:43:cb:0f: ac:71:f9:6e:6f:b5:44:b7:9a:53:43:f7:82:fd:17: 9c:41:64:f9:57:59:e1:a5:64:6a:e4:2e:68:7d:a4: 26:af:f4:e4:b3:95:77:19:cf:33:76:3b:8f:76:2f: d6:0a:53:b4:04:8a:ee:39:cf:e8:14:3a:0a:f2:8b: 26:bf:03:b4:8e:cf:56:4e:69:cc:31:21:3b:01:b4: 59:bd:4f:8f:96:fb:28:4f:7a:19:1d:e0:c9:d0:f0: ef:f9:67:d5:75:62:66:a2:0a:31:ad:b2:6d:aa:16: 32:24:18:61:9b:18:3e:40:ec:e5:38:f9:ce:4d:65: 70:98:e4:ed:bf:5f:f1:12:a5:0d:39:f5:b5:38:5a: 71:26:a0:e7:b6:6c:b9:ad:50:f7:2b:94:fc:42:04: 82:f2:f7:88:1d:9b:72:3f:7d:1e:87:03:7f:a0:4a: c3:72:c7:47:17:db:74:d6:6c:65:89:20:7b:b7:8c: 7f:08:36:49:9e:3b:8b:94:c9:ab:28:d6:62:c9:6e: 8b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:13:95:07:D9:C1:81:90:19:4E:45:64:7C:4C:EA:28:11:42:08:77 X509v3 Authority Key Identifier: keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/D663158A6E2C11EEBFE28628C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.61.97.0/24 103.61.99.0/24 Signature Algorithm: sha256WithRSAEncryption c7:c7:87:ea:14:78:57:48:ee:0e:0c:98:95:a5:81:e0:0e:d7: 33:5d:90:38:e0:af:2a:f6:d6:91:21:9d:3c:23:54:95:d8:91: 0b:13:66:01:ce:49:f5:55:4e:ee:43:4d:83:6a:5d:e4:8a:95: 09:c7:9d:10:21:11:40:da:1f:9e:10:f9:25:c6:18:d6:ea:e6: e9:24:ce:9f:a2:67:f5:1d:04:57:3f:7a:1a:ba:d8:ad:9f:a9: dd:55:39:81:2f:18:34:d9:d6:b2:a9:8d:36:b1:f2:76:85:d8: 37:c2:10:35:de:ac:bb:91:ce:c0:36:26:3d:a8:46:7c:0b:3e: 0e:3d:2e:dd:01:96:f4:4c:96:45:ee:fc:5f:6c:cc:77:3f:81: f2:27:4e:ef:ec:a8:de:1e:c9:cf:c5:39:9c:e7:38:e9:51:36: 64:a3:93:d2:8c:2d:8c:c7:8b:58:0a:7f:93:c7:1c:d9:af:b1: 5e:61:22:23:c4:1c:dd:4e:84:d3:54:b3:93:fd:6a:1c:53:48: 48:c7:a1:d5:c7:ba:e2:f2:93:64:9f:c1:a8:4b:ee:b6:bb:a0: 01:67:e2:5d:75:a6:dd:4c:f1:c0:09:e1:c6:1b:36:35:e0:ef: 18:99:2a:03:e5:50:19:75:7c:c4:5f:f2:f8:0d:52:c1:cc:f9: 74:de:be:20 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI4MTMxMTAvBgNVBAUTKDEwNzYxOEUzNkM5MURCRUQwQzg3NDUyOTVEMDE0OTg0 Mjc4N0FGODMwHhcNMjUwNzI5MDQ0MTU3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg4NTExNC02MGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHKlCBAG6R6nmxyR0fY8PCgy0E3dA54Rt6TkWz+dg6x7Q2la7CmHRoQxdNh0 UqyRmfMo5BYfx0RDyw+scflub7VEt5pTQ/eC/RecQWT5V1nhpWRq5C5ofaQmr/Tk s5V3Gc8zdjuPdi/WClO0BIruOc/oFDoK8osmvwO0js9WTmnMMSE7AbRZvU+Plvso T3oZHeDJ0PDv+WfVdWJmogoxrbJtqhYyJBhhmxg+QOzlOPnOTWVwmOTtv1/xEqUN OfW1OFpxJqDntmy5rVD3K5T8QgSC8veIHZtyP30ehwN/oErDcsdHF9t01mxliSB7 t4x/CDZJnjuLlMmrKNZiyW6LdQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFI4TlQfZ wYGQGU5FZHxM6igRQgh3MB8GA1UdIwQYMBaAFBB2GONskdvtDIdFKV0BSYQnh6+D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjgxMy9BODUyNDM2QTZF MkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjItME1oMFVwWFFGSmhDZUhy NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VIWVk0MnlSMi0wTWgwVXBYUUZKaENlSHI0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEI4MTMvQTg1MjQzNkE2RTJCMTFFRThERDY2NzM1QzRGOUFFMDIvRDY2MzE1OEE2 RTJDMTFFRUJGRTI4NjI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnPWEDBABnPWMwDQYJKoZIhvcNAQELBQADggEBAMfHh+oU eFdI7g4MmJWlgeAO1zNdkDjgryr21pEhnTwjVJXYkQsTZgHOSfVVTu5DTYNqXeSK lQnHnRAhEUDaH54Q+SXGGNbq5ukkzp+iZ/UdBFc/ehq62K2fqd1VOYEvGDTZ1rKp jTax8naF2DfCEDXerLuRzsA2Jj2oRnwLPg49Lt0BlvRMlkXu/F9szHc/gfInTu/s qN4eyc/FOZznOOlRNmSjk9KMLYzHi1gKf5PHHNmvsV5hIiPEHN1OhNNUs5P9ahxT SEjHodXHuuLyk2SfwahL7ra7oAFn4l11pt1M8cAJ4cYbNjXg7xiZKgPlUBl1fMRf 8vgNUsHM+XTeviA= -----END CERTIFICATE-----Generated at Sat Aug 9 23:18:07 2025 by rpki-client