$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/39FBB4168B9811EE9C0BA252C4F9AE02.roa File: 39FBB4168B9811EE9C0BA252C4F9AE02.roa (raw, json) Hash identifier: ULpDjDQWqs4ItvC1i6NuU7QsQ6pk8dYjef/smDJ1Zeg= Subject key identifier: 60:07:BA:2C:4D:FC:B6:90:FF:29:BF:18:77:FD:B5:3A:CD:75:77:F8 Certificate issuer: /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A Certificate serial: 07A4 Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/39FBB4168B9811EE9C0BA252C4F9AE02.roa Signing time: Thu 12 Jun 2025 21:39:30 +0000 ROA not before: Thu 12 Jun 2025 21:39:30 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 55799 IP address blocks: 103.42.212.0/24 maxlen: 24 116.193.157.0/24 maxlen: 24 2404:be00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 21:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1956 (0x7a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A Validity Not Before: Jun 12 21:39:30 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684b4911-6a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:47:ac:2e:18:17:83:76:bf:e2:4b:71:06:20: 5c:a3:f7:42:3b:c4:b7:f5:7b:4a:36:33:c5:ff:d0: 37:cb:fe:3f:af:2e:66:a2:0e:7f:14:39:df:97:93: 98:25:58:fd:47:ce:f3:af:b6:d5:fd:90:8d:01:3e: 84:fb:f4:50:85:67:56:b3:79:bf:ce:e1:b5:75:6d: be:d8:f5:c0:f5:88:1c:31:53:4e:32:26:49:40:2c: fe:e0:ef:24:4b:8b:e9:8a:12:8c:16:e4:17:34:25: 3e:db:94:1e:2a:7f:5c:aa:5c:6b:c2:5f:8f:78:df: ed:3c:77:0a:80:af:4a:37:77:09:79:82:d5:9a:2b: 20:e7:d1:77:3a:90:86:18:bd:b7:6f:cc:c6:76:52: 56:89:45:96:ab:65:d0:ea:ee:6c:8f:1e:a4:38:fc: c9:6a:03:c9:1c:c4:d8:3b:c9:16:06:de:e4:97:1f: 5b:4c:04:b3:ee:65:9d:64:a0:4a:24:09:41:92:90: 05:f6:b6:17:2e:ff:b4:1d:3d:75:d4:76:52:66:a7: e6:c6:ac:3d:6a:10:ab:c1:db:a5:b7:ef:c8:2a:95: 1d:8b:63:58:02:a7:ae:23:21:66:a7:3e:07:d5:96: 04:7d:27:d5:74:59:90:72:af:d6:39:8d:00:7a:40: 9d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:07:BA:2C:4D:FC:B6:90:FF:29:BF:18:77:FD:B5:3A:CD:75:77:F8 X509v3 Authority Key Identifier: keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/39FBB4168B9811EE9C0BA252C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.212.0/24 116.193.157.0/24 IPv6: 2404:be00::/32 Signature Algorithm: sha256WithRSAEncryption c9:b4:fd:1a:f2:e4:d2:5b:75:af:1c:dd:82:ad:53:48:cf:94: 59:01:76:39:e4:05:6a:d5:8e:a1:51:58:56:36:f6:e4:06:e3: 0d:e0:01:c9:27:4f:f9:17:3b:9d:8c:df:36:c8:0e:64:d7:fe: 32:79:6d:d9:bc:75:d9:52:bd:5b:d4:1d:d1:9b:d4:90:a7:ab: 65:96:00:81:ff:e9:ea:10:48:f4:35:35:15:57:f9:3c:e6:65: fb:9c:d8:7b:fe:7d:60:0b:ef:cb:82:da:ea:d0:33:58:db:20: 76:b1:24:90:68:66:3c:d4:5c:54:2b:83:84:52:50:87:39:40: 28:f1:9b:39:39:78:a7:7b:30:38:d9:bc:38:30:b3:88:05:cb: 9f:bb:03:b8:ad:6e:1c:f5:89:ee:13:1e:26:d0:66:09:af:03: 90:9f:e1:c5:36:d7:1b:75:2e:e5:90:ce:b3:c8:4d:b0:fc:7c: 08:03:5c:11:89:9e:1b:ea:d9:ea:23:ad:f7:f3:c0:6e:9a:bf: 89:79:e2:80:29:55:60:12:b0:2a:69:da:39:b0:18:51:88:63: 54:11:07:02:7d:dd:94:02:49:29:dc:4f:73:b8:08:b2:89:db: 80:2d:5c:ba:e3:2d:b0:af:19:99:89:e4:59:4d:32:05:e0:f5: 92:6e:8e:3b -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2NUExMTAvBgNVBAUTKDc4NUUwQkZGMDdCOTAzN0M2MDMzNEIyREYzMzY5Mjgx QTREQzNGNUEwHhcNMjUwNjEyMjEzOTMwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRiNDkxMS02YTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUesLhgXg3a/4ktxBiBco/dCO8S39XtKNjPF/9A3y/4/ry5mog5/FDnfl5OY JVj9R87zr7bV/ZCNAT6E+/RQhWdWs3m/zuG1dW2+2PXA9YgcMVNOMiZJQCz+4O8k S4vpihKMFuQXNCU+25QeKn9cqlxrwl+PeN/tPHcKgK9KN3cJeYLVmisg59F3OpCG GL23b8zGdlJWiUWWq2XQ6u5sjx6kOPzJagPJHMTYO8kWBt7klx9bTASz7mWdZKBK JAlBkpAF9rYXLv+0HT111HZSZqfmxqw9ahCrwdult+/IKpUdi2NYAqeuIyFmpz4H 1ZYEfSfVdFmQcq/WOY0AekCd4wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFGAHuixN /LaQ/ym/GHf9tTrNdXf4MB8GA1UdIwQYMBaAFHheC/8HuQN8YDNLLfM2koGk3D9a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1QS84ODk0QTcwQTFD NTUxMUVCQUI4OEMxODJDNEY5QUUwMi9lRjRMX3dlNUEzeGdNMHN0OHphU2dhVGNQ MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGNExfd2U1QTN4Z00wc3Q4emFTZ2FUY1Axby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTQ2NUEvODg5NEE3MEExQzU1MTFFQkFCODhDMTgyQzRGOUFFMDIvMzlGQkI0MTY4 Qjk4MTFFRTlDMEJBMjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBABnKtQDBAB0wZ0wDQQCAAIwBwMFACQEvgAwDQYJKoZIhvcN AQELBQADggEBAMm0/Rry5NJbda8c3YKtU0jPlFkBdjnkBWrVjqFRWFY29uQG4w3g AcknT/kXO52M3zbIDmTX/jJ5bdm8ddlSvVvUHdGb1JCnq2WWAIH/6eoQSPQ1NRVX +TzmZfuc2Hv+fWAL78uC2urQM1jbIHaxJJBoZjzUXFQrg4RSUIc5QCjxmzk5eKd7 MDjZvDgws4gFy5+7A7itbhz1ie4THibQZgmvA5Cf4cU21xt1LuWQzrPITbD8fAgD XBGJnhvq2eojrffzwG6av4l54oApVWASsCpp2jmwGFGIY1QRBwJ93ZQCSSncT3O4 CLKJ24AtXLrjLbCvGZmJ5FlNMgXg9ZJujjs= -----END CERTIFICATE-----Generated at Fri Jun 20 11:14:27 2025 by rpki-client