$ rpki-client -vvf rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/B775BD7A9EA911EC95EBD87CC4F9AE02.roa File: B775BD7A9EA911EC95EBD87CC4F9AE02.roa (raw, json) Hash identifier: l5UPW8luctznfhC7jBJpvRQP7pkTfMgJK+ognjXHfwk= Subject key identifier: 93:7C:53:D0:4C:FC:6A:86:69:50:B2:43:68:D1:BA:FC:8B:48:A1:EF Certificate issuer: /CN=A914E01E/serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Certificate serial: 03BA Authority key identifier: 9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/B775BD7A9EA911EC95EBD87CC4F9AE02.roa Signing time: Thu 07 Aug 2025 01:36:19 +0000 ROA not before: Thu 07 Aug 2025 01:36:19 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 136803 IP address blocks: 103.95.148.0/22 maxlen: 22 103.95.148.0/24 maxlen: 24 103.95.149.0/24 maxlen: 24 103.95.150.0/24 maxlen: 24 103.95.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 954 (0x3ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E01E, serialNumber=9E5717F5F14BB29F67B57AD7D9D5F07915AE9C43 Validity Not Before: Aug 7 01:36:19 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68940313-64ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:49:61:c3:29:94:cb:15:aa:b4:d9:e1:42:0d: 59:63:75:2f:9c:5a:01:1f:24:17:9a:f3:22:16:d5: be:c9:03:dd:b6:65:c4:4b:2d:ca:92:bb:44:8d:7d: 4a:7d:c7:d9:15:48:c1:1e:40:86:42:f5:45:42:22: 16:10:55:e0:ef:67:47:7e:1d:8f:be:1a:b7:0f:da: 33:ab:ca:91:b4:3a:f3:5a:a4:cd:d5:5f:3b:c7:db: 52:68:08:24:a7:72:0a:6f:87:c5:8e:f6:dd:1b:e9: b4:6a:fc:5a:02:57:f8:0b:f8:d4:db:fd:fd:08:95: 1c:c3:d1:2f:c5:99:d2:c2:14:61:ed:1e:ec:cd:42: 21:14:bc:2e:b4:22:9f:ce:7a:2f:5f:d2:c3:4a:41: a9:7a:0c:ce:a6:b5:04:80:cd:bf:2d:54:b7:96:8c: 13:8d:82:39:2e:c6:49:85:0a:d7:b2:f5:61:c8:d5: a4:e4:fc:66:2a:d4:07:3a:42:28:0c:58:c0:00:59: 50:b9:58:76:d4:6b:c3:07:58:e6:7e:bc:16:a7:e5: 00:08:27:52:89:c5:56:80:dc:98:7b:76:0c:70:d1: 3a:69:1c:4e:aa:99:e9:ab:3d:b0:62:ca:fa:71:63: 2c:80:fe:7d:9d:79:25:c1:12:00:51:50:f8:81:e5: de:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7C:53:D0:4C:FC:6A:86:69:50:B2:43:68:D1:BA:FC:8B:48:A1:EF X509v3 Authority Key Identifier: keyid:9E:57:17:F5:F1:4B:B2:9F:67:B5:7A:D7:D9:D5:F0:79:15:AE:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/nlcX9fFLsp9ntXrX2dXweRWunEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nlcX9fFLsp9ntXrX2dXweRWunEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E01E/C5C6F05E9EA611EC8FB03654C4F9AE02/B775BD7A9EA911EC95EBD87CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.95.148.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:c8:ed:06:8b:6a:c4:33:d4:00:59:2b:48:80:53:ee:e1:ed: 69:57:4b:66:8c:ae:81:e4:75:85:bd:9c:81:d0:7b:e9:d6:f3: 56:34:9c:5c:94:82:2c:cf:e9:3c:9a:38:fa:e8:7b:04:4e:f5: 42:84:45:af:8b:a8:14:a5:1d:3a:35:ea:11:3f:82:9b:2d:f1: 68:e4:63:44:c7:13:28:8a:9c:e8:98:75:86:8e:f2:c4:de:d4: f1:e8:f7:f9:7c:1a:18:2a:87:8a:c1:9b:f4:02:bc:90:f5:6c: 56:c0:99:6e:88:85:f3:e3:57:aa:bd:dd:18:05:87:34:e7:1f: f9:ca:e7:22:0c:3a:cb:47:cb:82:de:b7:2e:83:b5:2b:50:a8: c2:8d:af:f9:15:7b:a0:0d:6c:af:57:8a:12:f9:d2:a4:90:35: 3f:c8:4f:29:aa:e5:c6:61:4b:7c:56:e7:ad:7e:ad:45:eb:98: 10:39:2b:06:ad:5d:ae:97:08:a8:16:20:35:71:fa:b7:e3:f3: 40:f7:00:5d:2e:98:46:c7:64:49:c1:d1:38:dc:b6:98:77:1b: 46:90:9c:72:70:24:bd:1a:b2:20:24:f4:53:f3:20:bb:b1:3b: ec:22:69:78:bd:68:e3:19:06:77:e1:d8:77:72:56:78:85:bc: d2:1f:a2:8e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMUUxMTAvBgNVBAUTKDlFNTcxN0Y1RjE0QkIyOUY2N0I1N0FEN0Q5RDVGMDc5 MTVBRTlDNDMwHhcNMjUwODA3MDEzNjE5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk0MDMxMy02NGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyElhwymUyxWqtNnhQg1ZY3UvnFoBHyQXmvMiFtW+yQPdtmXESy3KkrtEjX1K fcfZFUjBHkCGQvVFQiIWEFXg72dHfh2Pvhq3D9ozq8qRtDrzWqTN1V87x9tSaAgk p3IKb4fFjvbdG+m0avxaAlf4C/jU2/39CJUcw9EvxZnSwhRh7R7szUIhFLwutCKf znovX9LDSkGpegzOprUEgM2/LVS3lowTjYI5LsZJhQrXsvVhyNWk5PxmKtQHOkIo DFjAAFlQuVh21GvDB1jmfrwWp+UACCdSicVWgNyYe3YMcNE6aRxOqpnpqz2wYsr6 cWMsgP59nXklwRIAUVD4geXeuQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJN8U9BM /GqGaVCyQ2jRuvyLSKHvMB8GA1UdIwQYMBaAFJ5XF/XxS7KfZ7V619nV8HkVrpxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAxRS9DNUM2RjA1RTlF QTYxMUVDOEZCMDM2NTRDNEY5QUUwMi9ubGNYOWZGTHNwOW50WHJYMmRYd2VSV3Vu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25sY1g5ZkZMc3A5bnRYclgyZFh3ZVJXdW5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEUwMUUvQzVDNkYwNUU5RUE2MTFFQzhGQjAzNjU0QzRGOUFFMDIvQjc3NUJEN0E5 RUE5MTFFQzk1RUJEODdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnX5QwDQYJKoZIhvcNAQELBQADggEBAB7I7QaLasQz1ABZ K0iAU+7h7WlXS2aMroHkdYW9nIHQe+nW81Y0nFyUgizP6TyaOProewRO9UKERa+L qBSlHTo16hE/gpst8WjkY0THEyiKnOiYdYaO8sTe1PHo9/l8Ghgqh4rBm/QCvJD1 bFbAmW6IhfPjV6q93RgFhzTnH/nK5yIMOstHy4Lety6DtStQqMKNr/kVe6ANbK9X ihL50qSQNT/ITymq5cZhS3xW561+rUXrmBA5KwatXa6XCKgWIDVx+rfj80D3AF0u mEbHZEnB0Tjctph3G0aQnHJwJL0asiAk9FPzILuxO+wiaXi9aOMZBnfh2HdyVniF vNIfoo4= -----END CERTIFICATE-----Generated at Mon Aug 11 04:27:19 2025 by rpki-client