$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/47862E7E129C11EEA43CFD46C4F9AE02.roa File: 47862E7E129C11EEA43CFD46C4F9AE02.roa (raw, json) Hash identifier: aY3skSp/jdiXbJIQ5t5v3SVRkkPdKbP7qDrCfdERMMo= Subject key identifier: FE:3A:A3:EB:BA:D9:DA:D7:31:88:76:4C:0E:9C:B1:B1:46:EC:E4:7E Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Certificate serial: 0195 Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/47862E7E129C11EEA43CFD46C4F9AE02.roa Signing time: Sat 19 Jul 2025 04:09:46 +0000 ROA not before: Sat 19 Jul 2025 04:09:46 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151354 IP address blocks: 103.208.67.0/24 maxlen: 24 103.254.214.0/24 maxlen: 24 2001:df2:7ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Validity Not Before: Jul 19 04:09:46 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=687b1a8a-d141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0d:41:8f:1a:73:ea:32:8f:4e:47:50:72:f3: 52:f1:8d:92:6b:67:2f:b7:5f:a8:0a:06:8e:1c:1d: 15:bb:bb:37:99:2f:cb:d3:e6:40:6f:1d:ab:2c:5e: bd:19:cb:19:ab:28:53:d1:29:e1:f5:72:e4:0c:4c: 0d:df:c2:77:e8:61:f2:41:4c:4f:43:e1:de:f8:35: eb:18:1d:ce:b9:a4:b7:10:34:20:17:c6:f9:cb:c4: 45:b6:a9:fc:e6:ef:03:4b:b1:f7:ae:5a:65:b8:94: de:0e:f6:20:58:d3:aa:3f:f5:7a:d2:a9:96:36:e9: 44:dd:a3:9b:bd:95:9b:7a:82:c8:d3:76:7f:f2:d9: e6:f1:f0:1c:b4:05:62:ee:4c:40:e6:0d:b7:6d:e0: ab:b3:24:ae:dc:7b:7f:fa:4a:d5:45:f0:41:b3:e5: 03:3a:9b:db:4d:fd:b7:9d:ba:c6:cd:53:0f:c2:e3: ab:bc:2a:18:6f:e6:0e:9d:53:eb:b2:26:f8:fe:b3: c0:57:7f:b0:25:cc:8c:cc:f0:e8:90:f3:2c:3f:78: 15:27:98:14:e1:73:2f:ec:b6:b8:7d:7b:2e:72:2b: c0:21:f3:43:ca:02:50:9d:e5:09:85:4f:78:ed:3a: 87:9d:3c:38:51:3a:cb:73:fd:e4:fb:89:f0:68:20: 16:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3A:A3:EB:BA:D9:DA:D7:31:88:76:4C:0E:9C:B1:B1:46:EC:E4:7E X509v3 Authority Key Identifier: keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/47862E7E129C11EEA43CFD46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.208.67.0/24 103.254.214.0/24 IPv6: 2001:df2:7ec0::/48 Signature Algorithm: sha256WithRSAEncryption 45:0d:62:74:40:af:4d:17:dd:ff:c5:6b:08:13:48:46:07:29: 86:03:22:b6:b1:9b:70:40:48:07:65:de:cf:69:76:89:22:4f: 22:97:6f:fb:f8:7b:c6:c0:aa:0a:40:bc:53:f4:ca:a2:31:99: df:d8:08:66:0b:f5:29:78:bb:12:22:26:09:8c:fb:4d:46:32: f0:bf:4d:65:f0:c1:1c:96:8c:01:71:8d:bf:fc:88:ea:78:73: 13:ec:85:e3:fc:07:b6:91:81:d2:0a:0d:1a:ab:8b:62:81:5b: 79:dc:b8:56:1f:24:60:d4:d1:cf:64:a1:54:1b:a3:28:53:20: 6f:8d:4b:ca:48:23:c1:32:f5:ea:b1:e3:c4:1e:8e:a1:a1:4c: d4:57:50:2a:d8:7a:61:c0:b3:cc:8c:6b:9a:fb:55:1a:29:f0: a9:da:12:18:5c:e5:b6:af:d5:4d:25:58:d7:dc:9e:1f:6c:70: 33:35:cd:d3:83:89:37:e3:b8:16:4e:e8:d2:49:f5:57:be:ee: dd:e8:e0:bb:ad:29:8a:48:d9:7d:58:5b:32:39:5b:16:21:ca: f8:d8:fc:2f:ba:56:6b:65:71:6f:fe:32:b1:0a:73:7d:00:b8: 48:e1:d1:99:35:72:64:33:90:b0:3f:0f:3d:82:78:8d:e3:4f: 3d:21:60:3d -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3RjgxMTAvBgNVBAUTKEU1MDk2M0Q3MDQ2ODcyNzM1NkI3OEI3RkM0MzgwOTc0 NDI5QjY0RTEwHhcNMjUwNzE5MDQwOTQ2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdiMWE4YS1kMTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxA1Bjxpz6jKPTkdQcvNS8Y2Sa2cvt1+oCgaOHB0Vu7s3mS/L0+ZAbx2rLF69 GcsZqyhT0Snh9XLkDEwN38J36GHyQUxPQ+He+DXrGB3OuaS3EDQgF8b5y8RFtqn8 5u8DS7H3rlpluJTeDvYgWNOqP/V60qmWNulE3aObvZWbeoLI03Z/8tnm8fActAVi 7kxA5g23beCrsySu3Ht/+krVRfBBs+UDOpvbTf23nbrGzVMPwuOrvCoYb+YOnVPr sib4/rPAV3+wJcyMzPDokPMsP3gVJ5gU4XMv7La4fXsucivAIfNDygJQneUJhU94 7TqHnTw4UTrLc/3k+4nwaCAW2QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFP46o+u6 2drXMYh2TA6csbFG7OR+MB8GA1UdIwQYMBaAFOUJY9cEaHJzVreLf8Q4CXRCm2Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzdGOC9FMjUxMEUxQzEy OTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2NuTld0NHRfeERnSmRFS2Ja T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRbGoxd1JvY25OV3Q0dF94RGdKZEVLYlpPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEM3RjgvRTI1MTBFMUMxMjk1MTFFRTg0QkFENzQ2QzRGOUFFMDIvNDc4NjJFN0Ux MjlDMTFFRUE0M0NGRDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABn0EMDBABn/tYwDwQCAAIwCQMHACABDfJ+wDANBgkqhkiG 9w0BAQsFAAOCAQEARQ1idECvTRfd/8VrCBNIRgcphgMitrGbcEBIB2Xez2l2iSJP Ipdv+/h7xsCqCkC8U/TKojGZ39gIZgv1KXi7EiImCYz7TUYy8L9NZfDBHJaMAXGN v/yI6nhzE+yF4/wHtpGB0goNGquLYoFbedy4Vh8kYNTRz2ShVBujKFMgb41Lykgj wTL16rHjxB6OoaFM1FdQKth6YcCzzIxrmvtVGinwqdoSGFzltq/VTSVY19yeH2xw MzXN04OJN+O4Fk7o0kn1V77u3ejgu60pikjZfVhbMjlbFiHK+Nj8L7pWa2Vxb/4y sQpzfQC4SOHRmTVyZDOQsD8PPYJ4jeNPPSFgPQ== -----END CERTIFICATE-----Generated at Mon Aug 11 12:52:23 2025 by rpki-client