$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/21E1440A1E7711EFB69BE070C4F9AE02.roa File: 21E1440A1E7711EFB69BE070C4F9AE02.roa (raw, json) Hash identifier: g9az2eJZ2fUas4ad3d/QH9wXCAIefnJD9ePsqv2jusw= Subject key identifier: EF:48:CD:27:48:88:80:9F:0B:09:5C:45:EF:08:52:57:AC:46:54:3A Certificate issuer: /CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256 Certificate serial: 024A Authority key identifier: 83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/21E1440A1E7711EFB69BE070C4F9AE02.roa Signing time: Thu 31 Jul 2025 01:06:20 +0000 ROA not before: Thu 31 Jul 2025 01:06:20 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 152605 IP address blocks: 103.151.46.0/23 maxlen: 24 2400:3fa0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 586 (0x24a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917357E, serialNumber=8352A734E82144F322C50B728A4F765A33D72256 Validity Not Before: Jul 31 01:06:20 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=688ac18c-dfae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:84:42:1e:04:70:51:af:2b:86:93:8d:4b: d1:3e:1e:53:48:c7:5b:2d:ca:e5:ad:cc:bb:9d:a7: 36:65:10:aa:09:71:b1:73:4e:48:8d:60:02:2c:fd: be:7e:d5:d3:73:70:6e:04:57:b4:43:80:e4:61:9e: 4d:7b:d6:ac:a4:51:6f:b8:7e:36:16:31:d9:54:eb: 61:67:bf:a3:54:41:d2:49:4a:b8:c4:31:46:70:b3: 56:4d:b0:9f:04:93:66:19:10:aa:6d:61:e0:40:5a: c2:88:ea:26:7b:89:0d:a0:93:1c:37:f1:93:9c:69: 55:0e:72:1a:1d:af:f4:d3:e9:81:6a:b4:ed:38:7e: 14:2f:58:5f:7e:af:14:59:8b:11:1f:59:5c:c2:46: b5:10:6d:73:3b:90:44:95:ea:cb:9c:0d:62:fc:f0: c3:2a:92:b6:71:13:ab:4b:96:cf:06:11:40:e4:e9: 17:8a:f3:7b:f2:1f:89:46:b8:64:25:c5:ff:7d:1a: bc:cd:a5:69:91:e8:91:7c:7a:20:2a:26:9d:d4:f4: af:e1:d6:ac:a5:f7:bf:b7:7a:db:f4:4f:67:99:12: 93:66:2d:06:7e:ee:7f:0e:14:b7:ad:36:e7:0d:af: 40:19:63:66:5d:84:14:6c:67:75:bb:a1:b5:61:4b: e0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:48:CD:27:48:88:80:9F:0B:09:5C:45:EF:08:52:57:AC:46:54:3A X509v3 Authority Key Identifier: keyid:83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/21E1440A1E7711EFB69BE070C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.46.0/23 IPv6: 2400:3fa0::/32 Signature Algorithm: sha256WithRSAEncryption 5d:8d:01:08:c7:c4:b9:93:b1:f6:e4:75:ff:41:6b:97:6b:11: e3:d8:8d:8e:94:55:d1:a0:b5:7e:32:9d:af:85:bd:56:18:69: b3:5d:8c:53:e6:db:98:2d:45:6d:aa:67:c8:b1:24:49:5f:f2: 06:78:d6:32:8f:a3:a0:81:c1:10:04:f7:00:af:e8:35:2e:6e: 96:a5:22:1a:40:37:0d:2c:0c:dc:1d:46:41:6f:d8:20:c9:16: ac:64:cf:68:72:97:06:52:6d:9f:cf:83:98:e5:20:22:05:9d: 7b:24:82:20:31:b1:78:3c:9d:df:5c:1e:4e:cd:69:3e:0a:d8: b8:c4:ae:1b:2e:25:05:c4:62:d7:65:a7:54:69:fd:d6:78:43: 49:cb:8d:f8:b3:26:70:0f:cc:a1:83:44:21:b2:56:18:e7:22: 58:e9:02:fa:8c:95:5a:32:25:24:0f:55:7b:7c:84:ba:b3:bb: 1b:71:ce:84:55:c2:cc:3f:63:c6:1d:5f:b6:7a:ae:c6:7b:e3: f4:b2:2f:c8:92:ba:65:98:cc:aa:97:d9:31:1b:f0:33:56:65: fd:ad:ff:9f:53:97:f5:d9:c1:21:8d:f5:19:90:a6:06:cc:89: 0e:1e:de:1a:7e:7a:b4:51:0a:43:3b:03:6f:04:bb:58:7a:9c: 40:f3:d7:38 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1N0UxMTAvBgNVBAUTKDgzNTJBNzM0RTgyMTQ0RjMyMkM1MEI3MjhBNEY3NjVB MzNENzIyNTYwHhcNMjUwNzMxMDEwNjIwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhYzE4Yy1kZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMaEQh4EcFGvK4aTjUvRPh5TSMdbLcrlrcy7nac2ZRCqCXGxc05IjWACLP2+ ftXTc3BuBFe0Q4DkYZ5Ne9aspFFvuH42FjHZVOthZ7+jVEHSSUq4xDFGcLNWTbCf BJNmGRCqbWHgQFrCiOome4kNoJMcN/GTnGlVDnIaHa/00+mBarTtOH4UL1hffq8U WYsRH1lcwka1EG1zO5BElerLnA1i/PDDKpK2cROrS5bPBhFA5OkXivN78h+JRrhk JcX/fRq8zaVpkeiRfHogKiad1PSv4daspfe/t3rb9E9nmRKTZi0Gfu5/DhS3rTbn Da9AGWNmXYQUbGd1u6G1YUvg0wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFO9IzSdI iICfCwlcRe8IUlesRlQ6MB8GA1UdIwQYMBaAFINSpzToIUTzIsULcopPdloz1yJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9nMUtuTk9naFJQTWl4UXR5aWs5MldqUFhJ bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxS25OT2doUlBNaXhRdHlpazkyV2pQWElsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzM1N0UvNjAyRDc2RDg1RDczMTFFQ0EzMjQ4ODUzQzRGOUFFMDIvMjFFMTQ0MEEx RTc3MTFFRkI2OUJFMDcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnly4wDQQCAAIwBwMFACQAP6AwDQYJKoZIhvcNAQELBQAD ggEBAF2NAQjHxLmTsfbkdf9Ba5drEePYjY6UVdGgtX4yna+FvVYYabNdjFPm25gt RW2qZ8ixJElf8gZ41jKPo6CBwRAE9wCv6DUubpalIhpANw0sDNwdRkFv2CDJFqxk z2hylwZSbZ/Pg5jlICIFnXskgiAxsXg8nd9cHk7NaT4K2LjErhsuJQXEYtdlp1Rp /dZ4Q0nLjfizJnAPzKGDRCGyVhjnIljpAvqMlVoyJSQPVXt8hLqzuxtxzoRVwsw/ Y8YdX7Z6rsZ74/SyL8iSumWYzKqX2TEb8DNWZf2t/59Tl/XZwSGN9RmQpgbMiQ4e 3hp+erRRCkM7A28Eu1h6nEDz1zg= -----END CERTIFICATE-----Generated at Mon Aug 11 10:44:26 2025 by rpki-client