$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/C847114C07D411ECBF875117C4F9AE02.roa File: C847114C07D411ECBF875117C4F9AE02.roa (raw, json) Hash identifier: MMhekj2SFZKQhejre+/ZuSr0R5tKH64F+RFediiHsYQ= Subject key identifier: E1:0D:98:18:D0:BD:F0:46:56:76:DD:32:44:DF:17:D9:92:EC:E2:F6 Certificate issuer: /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B Certificate serial: 04FF Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/C847114C07D411ECBF875117C4F9AE02.roa Signing time: Tue 08 Apr 2025 23:34:30 +0000 ROA not before: Tue 08 Apr 2025 23:34:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133415 IP address blocks: 103.116.170.0/23 maxlen: 23 103.116.170.0/24 maxlen: 24 103.116.171.0/24 maxlen: 24 103.227.234.0/24 maxlen: 24 103.227.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1279 (0x4ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B Validity Not Before: Apr 8 23:34:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f5b286-40f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:40:ac:40:5c:89:08:bb:a5:af:d4:ed:1f: 59:55:17:5e:f8:4c:ea:68:f2:3a:13:1d:aa:f7:9c: 62:47:a4:0d:58:3c:ea:c7:0b:b1:16:85:81:41:ba: 34:fd:3b:8b:af:3b:bb:92:31:54:29:7b:13:0f:18: 81:6a:87:62:87:ba:c9:6b:51:64:7a:45:98:c6:0e: 0f:d1:41:44:c7:eb:fb:8c:b2:92:f8:c5:fa:50:bb: 3a:f4:bb:d8:8b:25:16:1f:7a:6c:4e:f9:1b:0b:62: 59:9a:d0:96:27:4c:8b:d4:39:9e:dc:a7:63:92:f3: 81:ce:7d:de:2b:72:cf:95:f9:94:fe:7d:72:12:dd: 6b:46:1a:f6:1a:e4:7d:fb:57:e0:9f:79:17:e4:41: 72:53:10:3e:47:f1:40:5e:ca:4c:05:6c:a3:8c:a5: cc:a3:6c:dc:a5:16:9c:7d:f0:7c:a8:7a:53:47:57: b3:5c:28:81:f9:59:86:c9:b0:9c:b3:e9:bc:99:07: 93:eb:fb:e8:ed:9d:c9:4a:72:97:e0:5f:e3:36:91: 98:69:dc:0e:68:59:9d:d1:5c:eb:f4:f1:99:60:6b: b4:27:db:78:0d:d2:ae:ff:84:b6:1b:4e:97:08:6b: f8:5b:54:9f:80:da:95:7d:a3:ee:99:7b:73:e6:ee: 35:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0D:98:18:D0:BD:F0:46:56:76:DD:32:44:DF:17:D9:92:EC:E2:F6 X509v3 Authority Key Identifier: keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/C847114C07D411ECBF875117C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.170.0/23 103.227.234.0/23 Signature Algorithm: sha256WithRSAEncryption bc:56:20:a9:d8:43:bb:31:f2:cc:29:c3:0e:39:f4:b5:03:54: 23:58:bc:72:b4:cc:32:16:b7:00:3b:f0:3d:59:5b:00:08:c7: f9:82:09:e2:15:c4:38:42:34:af:43:bf:d3:c9:1a:fa:bd:2f: 31:d7:cd:e9:90:87:cf:5d:7d:30:7d:17:84:e3:cf:e6:f8:bb: 3c:5a:38:2f:47:9f:fc:be:ad:a1:d3:41:6f:4e:12:52:07:b4: a3:3e:22:4b:a8:dd:6e:b6:e3:e2:19:03:85:97:24:bc:c5:bf: 69:27:10:f6:1d:c3:89:32:03:9d:b2:e2:25:dd:6b:cf:b9:2b: 48:ae:8b:63:0d:63:e2:f3:64:8b:d8:3a:29:9e:bf:d3:f1:08: 87:5d:6b:0c:08:55:a3:47:cb:a8:88:14:31:f9:7e:39:68:26: 6c:2a:6b:3a:a0:c2:ce:b4:45:6f:25:ff:f6:cf:da:4e:bb:52: 3b:90:02:c5:29:e1:d8:05:92:62:3b:ee:5a:4a:12:98:55:ca: b8:c5:47:9a:dc:f3:7f:22:a0:a5:03:67:94:07:68:b8:56:69: 47:63:f6:75:93:83:7f:25:ad:67:b1:da:89:d3:86:f3:ea:bc: d6:e9:b8:90:30:22:5c:b9:60:ca:01:2d:53:61:c9:a3:d4:6c: 00:ba:e3:1c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1QUUxMTAvBgNVBAUTKDAxREY2MTU3MjQ3N0EyMzBFNzlGOEYyOENGREQ2RDI4 Mzc3RjIyMkIwHhcNMjUwNDA4MjMzNDMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y1YjI4Ni00MGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv35ArEBciQi7pa/U7R9ZVRde+EzqaPI6Ex2q95xiR6QNWDzqxwuxFoWBQbo0 /TuLrzu7kjFUKXsTDxiBaodih7rJa1FkekWYxg4P0UFEx+v7jLKS+MX6ULs69LvY iyUWH3psTvkbC2JZmtCWJ0yL1Dme3KdjkvOBzn3eK3LPlfmU/n1yEt1rRhr2GuR9 +1fgn3kX5EFyUxA+R/FAXspMBWyjjKXMo2zcpRacffB8qHpTR1ezXCiB+VmGybCc s+m8mQeT6/vo7Z3JSnKX4F/jNpGYadwOaFmd0Vzr9PGZYGu0J9t4DdKu/4S2G06X CGv4W1SfgNqVfaPumXtz5u414wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOENmBjQ vfBGVnbdMkTfF9mS7OL2MB8GA1UdIwQYMBaAFAHfYVckd6Iw55+PKM/dbSg3fyIr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTVBRS80NkQ0MjJGMDA3 RDIxMUVDQUE4MkI2MTFDNEY5QUUwMi9BZDloVnlSM29qRG5uNDhvejkxdEtEZF9J aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FkOWhWeVIzb2pEbm40OG96OTF0S0RkX0lpcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEU1QUUvNDZENDIyRjAwN0QyMTFFQ0FBODJCNjExQzRGOUFFMDIvQzg0NzExNEMw N0Q0MTFFQ0JGODc1MTE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFndKoDBAFn4+owDQYJKoZIhvcNAQELBQADggEBALxWIKnY Q7sx8swpww459LUDVCNYvHK0zDIWtwA78D1ZWwAIx/mCCeIVxDhCNK9Dv9PJGvq9 LzHXzemQh89dfTB9F4Tjz+b4uzxaOC9Hn/y+raHTQW9OElIHtKM+Ikuo3W624+IZ A4WXJLzFv2knEPYdw4kyA52y4iXda8+5K0iui2MNY+LzZIvYOimev9PxCIddawwI VaNHy6iIFDH5fjloJmwqazqgws60RW8l//bP2k67UjuQAsUp4dgFkmI77lpKEphV yrjFR5rc838ioKUDZ5QHaLhWaUdj9nWTg38lrWex2onThvPqvNbpuJAwIly5YMoB LVNhyaPUbAC64xw= -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:35 2025 by rpki-client