$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/A9C1A7F2A9EC11EE800F7626C4F9AE02.roa File: A9C1A7F2A9EC11EE800F7626C4F9AE02.roa (raw, json) Hash identifier: rnXoLY/vGH6qwmV7thRnYiN9Hc46x1QdMXU9ME3UtD4= Subject key identifier: 45:C1:3E:26:F1:B8:0D:5F:45:C0:46:77:39:46:36:17:6D:4D:A4:89 Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Certificate serial: 0119 Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/A9C1A7F2A9EC11EE800F7626C4F9AE02.roa Signing time: Mon 02 Jun 2025 21:49:19 +0000 ROA not before: Mon 02 Jun 2025 21:49:19 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 135339 IP address blocks: 103.85.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 21:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Validity Not Before: Jun 2 21:49:19 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=683e1c5f-955c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:bf:04:3a:4a:37:27:65:b4:a3:3b:2a:b6: 52:ca:ee:8d:3c:32:eb:43:cf:22:03:46:e9:f7:5c: 47:d2:a5:c3:51:25:a2:15:85:7c:c0:2f:20:aa:f9: 73:34:89:13:b9:dc:81:4f:77:0f:3b:3e:ab:bc:c6: 01:41:c6:8e:c0:10:f9:8d:6b:21:df:fe:28:11:ac: 3e:67:77:67:f5:69:7e:65:cc:e4:7c:a6:22:a1:75: 7d:a8:af:e3:3f:de:45:1d:fe:cd:1d:22:1d:ea:dc: af:c8:76:d6:3f:61:ae:1f:93:38:a2:ea:ca:6b:ae: 74:d1:b2:e5:79:2f:ba:90:c2:93:71:43:d4:50:fe: 4a:5c:45:c2:c1:45:11:98:60:22:4a:b4:e1:e0:a6: 35:5b:ad:f4:68:02:94:ed:81:09:6f:ce:c2:fb:35: bb:54:91:39:27:f8:d0:70:8a:9a:e2:0f:9e:f5:14: 99:5b:fd:68:af:5d:e4:da:77:ed:3e:22:d7:81:fc: 38:91:63:6f:74:79:28:e3:8b:8b:3b:c8:79:13:b2: fe:b1:3a:ed:d7:bb:dd:1e:a8:ea:85:ff:51:68:23: 65:3d:19:3c:20:00:ec:9d:cb:77:9d:1c:c1:d2:17: b7:77:fc:e5:db:da:16:4b:c5:53:46:ed:15:1d:ae: 33:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C1:3E:26:F1:B8:0D:5F:45:C0:46:77:39:46:36:17:6D:4D:A4:89 X509v3 Authority Key Identifier: keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/A9C1A7F2A9EC11EE800F7626C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.114.0/24 Signature Algorithm: sha256WithRSAEncryption 96:32:e6:1c:e1:33:7a:15:fa:32:b5:00:57:00:47:b4:5e:f6: 5c:f1:eb:92:79:3c:8e:d0:63:44:0b:6b:60:51:03:53:93:e3: 89:1c:22:4e:eb:36:38:db:73:ce:d9:a9:b7:02:ee:94:64:15: eb:4b:e4:32:35:97:92:70:f4:67:5c:05:bf:08:0b:4e:90:c3: 3d:c1:e6:9d:92:6f:fb:1f:d4:0a:11:65:3f:a9:e5:02:82:d2: ce:97:b8:97:0d:99:a4:19:44:60:f4:8d:f0:7e:d4:6a:41:e8: 80:22:d2:96:f8:fe:9f:93:c2:aa:38:bf:1c:15:52:f8:f6:08: df:19:7b:30:d4:a2:a5:3a:7a:fc:3d:5e:8c:2b:52:89:fc:8e: b3:57:5a:84:d3:e2:c6:a8:a7:6d:e7:c1:ae:9e:77:21:c8:ac: 27:69:77:08:bd:63:56:a0:25:9b:e5:99:67:58:33:c7:86:07: ea:0c:6b:4a:7b:bc:1a:14:0c:4a:45:1a:cd:9a:44:49:6a:a8: 84:7d:65:ca:25:fc:29:95:53:42:15:8e:50:50:c2:d5:03:5d: f4:92:8f:5a:27:12:eb:3e:42:f6:b9:7a:f9:e8:7b:d8:37:d0: 4c:a2:b7:fb:aa:4f:82:c0:f2:bc:85:75:7a:81:58:9c:48:88: a6:e1:33:8d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RTIxMTAvBgNVBAUTKDdEMDYyQzcyREM1RUYxMkYwNUM0MTY3OUZDNkZFMjU1 MkI0RUEwMjAwHhcNMjUwNjAyMjE0OTE5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlMWM1Zi05NTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvba/BDpKNydltKM7KrZSyu6NPDLrQ88iA0bp91xH0qXDUSWiFYV8wC8gqvlz NIkTudyBT3cPOz6rvMYBQcaOwBD5jWsh3/4oEaw+Z3dn9Wl+ZczkfKYioXV9qK/j P95FHf7NHSId6tyvyHbWP2GuH5M4ourKa6500bLleS+6kMKTcUPUUP5KXEXCwUUR mGAiSrTh4KY1W630aAKU7YEJb87C+zW7VJE5J/jQcIqa4g+e9RSZW/1or13k2nft PiLXgfw4kWNvdHko44uLO8h5E7L+sTrt17vdHqjqhf9RaCNlPRk8IADsnct3nRzB 0he3d/zl29oWS8VTRu0VHa4zEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEXBPibx uA1fRcBGdzlGNhdtTaSJMB8GA1UdIwQYMBaAFH0GLHLcXvEvBcQWefxv4lUrTqAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThTOEZ4Qlo1X0dfaVZTdE9v Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZRWXNjdHhlOFM4RnhCWjVfR19pVlN0T29DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUQ4RTIvQzA5MkIxMDYxREVGMTFFQjgzNUUxNTdBQzRGOUFFMDIvQTlDMUE3RjJB OUVDMTFFRTgwMEY3NjI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnVXIwDQYJKoZIhvcNAQELBQADggEBAJYy5hzhM3oV+jK1 AFcAR7Re9lzx65J5PI7QY0QLa2BRA1OT44kcIk7rNjjbc87ZqbcC7pRkFetL5DI1 l5Jw9GdcBb8IC06Qwz3B5p2Sb/sf1AoRZT+p5QKC0s6XuJcNmaQZRGD0jfB+1GpB 6IAi0pb4/p+Twqo4vxwVUvj2CN8ZezDUoqU6evw9XowrUon8jrNXWoTT4saop23n wa6edyHIrCdpdwi9Y1agJZvlmWdYM8eGB+oMa0p7vBoUDEpFGs2aRElqqIR9Zcol /CmVU0IVjlBQwtUDXfSSj1onEus+Qva5evnoe9g30Eyit/uqT4LA8ryFdXqBWJxI iKbhM40= -----END CERTIFICATE-----Generated at Fri Jun 20 18:10:10 2025 by rpki-client