$ rpki-client -vvf rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/2F840DD2740911EDA7146F2DC4F9AE02.roa File: 2F840DD2740911EDA7146F2DC4F9AE02.roa (raw, json) Hash identifier: YPOOK5AIk3gBw37/F4hGfOPvVpq+0nympVjwZNkZ59I= Subject key identifier: F9:94:8C:B7:EC:BC:6D:8A:86:14:54:5E:E8:1D:5C:8A:39:5E:69:A1 Certificate issuer: /CN=A915517D/serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Certificate serial: 17D2 Authority key identifier: 34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/2F840DD2740911EDA7146F2DC4F9AE02.roa Signing time: Tue 26 Aug 2025 16:55:31 +0000 ROA not before: Tue 26 Aug 2025 16:55:31 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132092 IP address blocks: 103.70.140.0/22 maxlen: 24 182.54.152.0/22 maxlen: 24 2406:c80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6098 (0x17d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915517D, serialNumber=344A775E245CCED080C79521596E32C8F06D88C8 Validity Not Before: Aug 26 16:55:31 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68ade702-dd58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:2b:b6:39:52:d4:44:cb:c9:ea:6c:62:5b: 46:5e:09:10:2a:6f:fe:bf:5f:35:df:92:58:76:f4: bc:50:58:92:50:01:e3:bb:0c:6c:a3:86:4c:43:ab: 57:47:32:34:11:bc:43:c9:72:b5:8c:37:d6:ac:1c: 33:34:da:45:67:61:fe:78:c0:65:23:04:81:e3:c6: a6:4d:26:3c:26:b9:5d:b7:6e:bf:31:83:06:dd:63: 0b:9a:1f:05:2b:f4:d3:8a:b4:3b:8c:48:48:79:e4: 3b:33:54:21:25:b2:be:f0:a2:b4:5e:1f:65:25:6c: 99:99:38:25:de:64:74:85:9a:93:95:fb:c7:75:eb: 9b:e9:bd:46:3c:14:3b:a7:ed:24:40:60:0f:a2:37: 37:fc:71:f0:a0:c1:a8:42:58:c6:23:c9:b2:75:37: eb:6f:d8:bc:a0:a5:7e:65:f2:c2:f6:9d:a0:8a:8a: 7d:7d:49:93:9b:e0:0f:2f:06:99:9d:a2:0d:b7:10: 2a:dd:14:00:c7:68:27:80:25:0a:ba:4b:59:6f:cd: 36:de:4a:98:0d:05:00:75:60:a8:38:52:f7:84:8e: 1f:96:d8:f3:2b:11:ce:28:06:4a:eb:78:01:a1:f6: 89:40:c5:75:14:01:22:5a:6e:9a:a4:03:d1:0a:2c: a3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:94:8C:B7:EC:BC:6D:8A:86:14:54:5E:E8:1D:5C:8A:39:5E:69:A1 X509v3 Authority Key Identifier: keyid:34:4A:77:5E:24:5C:CE:D0:80:C7:95:21:59:6E:32:C8:F0:6D:88:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/NEp3XiRcztCAx5UhWW4yyPBtiMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NEp3XiRcztCAx5UhWW4yyPBtiMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915517D/3D7A6286CF5611E7BF695510C4F9AE02/2F840DD2740911EDA7146F2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.70.140.0/22 182.54.152.0/22 IPv6: 2406:c80::/32 Signature Algorithm: sha256WithRSAEncryption b3:46:e7:aa:00:20:31:c8:d2:99:a9:bf:0a:92:6d:1b:fa:22: 84:c7:0d:69:5d:a5:a6:5d:e5:ab:4c:f5:b3:f5:07:45:37:c0: e9:bc:df:50:6f:61:c7:d9:f4:53:25:5e:91:2f:7b:03:d7:c7: a2:0f:d7:d3:e1:83:53:3d:20:3c:e5:f4:16:ff:da:ef:52:79: 05:3a:e2:1e:2c:4f:64:52:78:4a:b8:b2:3d:80:14:e1:fe:b2: b2:ff:46:76:ff:06:95:35:98:b1:7b:68:9f:fa:3e:05:89:3f: 3d:ea:6a:06:71:f2:21:88:1b:a0:34:95:68:e8:0f:f2:45:97: a4:36:5b:5e:d1:6e:90:06:5e:e4:94:ac:94:6a:e7:99:42:0e: 87:39:bf:0f:b8:f6:f5:81:12:fd:77:1e:81:23:d0:65:40:4b: 0e:c6:b3:e2:c2:f6:3a:ad:fa:ae:b3:88:af:02:f8:89:27:27: 7c:36:98:07:da:8b:3a:81:45:f9:49:b7:c6:43:57:fb:03:35: 3a:6e:6a:86:2d:1e:8b:83:d9:82:92:09:fd:af:b4:ec:85:07: b6:eb:35:f7:5d:28:2b:34:7c:db:ae:ef:d7:24:93:13:4d:66: 4b:f1:e1:53:53:3c:8e:63:eb:3d:a3:94:05:22:8e:a6:1e:78: 95:4f:e3:17 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICF9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxN0QxMTAvBgNVBAUTKDM0NEE3NzVFMjQ1Q0NFRDA4MEM3OTUyMTU5NkUzMkM4 RjA2RDg4QzgwHhcNMjUwODI2MTY1NTMxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFkZTcwMi1kZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymcrtjlS1ETLyepsYltGXgkQKm/+v18135JYdvS8UFiSUAHjuwxso4ZMQ6tX RzI0EbxDyXK1jDfWrBwzNNpFZ2H+eMBlIwSB48amTSY8Jrldt26/MYMG3WMLmh8F K/TTirQ7jEhIeeQ7M1QhJbK+8KK0Xh9lJWyZmTgl3mR0hZqTlfvHdeub6b1GPBQ7 p+0kQGAPojc3/HHwoMGoQljGI8mydTfrb9i8oKV+ZfLC9p2giop9fUmTm+APLwaZ naINtxAq3RQAx2gngCUKuktZb8023kqYDQUAdWCoOFL3hI4fltjzKxHOKAZK63gB ofaJQMV1FAEiWm6apAPRCiyjFwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPmUjLfs vG2KhhRUXugdXIo5XmmhMB8GA1UdIwQYMBaAFDRKd14kXM7QgMeVIVluMsjwbYjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTE3RC8zRDdBNjI4NkNG NTYxMUU3QkY2OTU1MTBDNEY5QUUwMi9ORXAzWGlSY3p0Q0F4NVVoV1c0eXlQQnRp TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05FcDNYaVJjenRDQXg1VWhXVzR5eVBCdGlNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTUxN0QvM0Q3QTYyODZDRjU2MTFFN0JGNjk1NTEwQzRGOUFFMDIvMkY4NDBERDI3 NDA5MTFFREE3MTQ2RjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnRowDBAK2NpgwDQQCAAIwBwMFACQGDIAwDQYJKoZIhvcN AQELBQADggEBALNG56oAIDHI0pmpvwqSbRv6IoTHDWldpaZd5atM9bP1B0U3wOm8 31BvYcfZ9FMlXpEvewPXx6IP19Phg1M9IDzl9Bb/2u9SeQU64h4sT2RSeEq4sj2A FOH+srL/Rnb/BpU1mLF7aJ/6PgWJPz3qagZx8iGIG6A0lWjoD/JFl6Q2W17RbpAG XuSUrJRq55lCDoc5vw+49vWBEv13HoEj0GVASw7Gs+LC9jqt+q6ziK8C+IknJ3w2 mAfaizqBRflJt8ZDV/sDNTpuaoYtHouD2YKSCf2vtOyFB7brNfddKCs0fNuu79ck kxNNZkvx4VNTPI5j6z2jlAUijqYeeJVP4xc= -----END CERTIFICATE-----Generated at Thu Nov 6 01:12:51 2025 by rpki-client