$ rpki-client -vvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/67E15AC4E40611EC8410A53CC4F9AE02.roa File: 67E15AC4E40611EC8410A53CC4F9AE02.roa (raw, json) Hash identifier: 1/yTpShgqoeKbCKqEMF0Si0Chl1G0Zkl0xm5lVtqvRg= Subject key identifier: C3:7B:11:1C:27:7E:7E:43:23:86:09:13:11:92:9B:23:4D:10:AD:D9 Certificate issuer: /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D Certificate serial: 0319 Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/67E15AC4E40611EC8410A53CC4F9AE02.roa Signing time: Fri 01 Aug 2025 02:38:25 +0000 ROA not before: Fri 01 Aug 2025 02:38:25 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 139901 IP address blocks: 103.189.10.0/24 maxlen: 24 103.189.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 793 (0x319) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917414E, serialNumber=AF67132D837D576FFF777227A3725D601ED9105D Validity Not Before: Aug 1 02:38:25 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=688c28a1-5eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:8c:f7:cf:85:c3:c4:7c:da:d7:3a:35:0d: b9:4b:51:2f:dd:f1:b1:0c:ac:fd:70:01:7b:b3:9f: 2f:66:d3:03:1e:61:41:53:db:d5:e4:0c:34:b3:e5: 96:46:78:6e:62:76:02:ff:ae:4e:2a:20:11:73:66: c5:3a:f7:24:2a:7c:7c:34:c9:98:74:1d:83:fc:ec: e9:4e:c7:56:7b:0d:09:40:ed:96:2c:f2:ea:a5:10: 5f:54:59:6b:b1:e6:ed:0f:36:4e:0e:d1:31:8e:fb: cb:3f:cb:26:65:45:5a:e7:99:a8:83:c7:c9:71:ca: 22:8c:b1:80:73:98:9d:aa:66:f8:5c:0f:e7:20:1c: 57:4a:45:5f:fc:65:1b:66:a0:4f:ad:7f:3a:ba:4d: d7:c4:b0:00:e0:3d:57:26:d7:79:71:79:4a:fa:ad: 43:a8:47:bd:27:96:f5:e9:93:f3:17:46:92:da:2a: b5:5a:3d:bb:16:cc:9e:45:35:b8:6e:5d:b2:b3:45: 4c:c0:5d:89:22:d3:8d:9e:6f:69:86:3b:a8:bc:a7: c4:c4:ec:33:0c:66:9e:88:8e:7b:1b:87:55:be:25: f9:9f:9f:09:09:2c:5e:00:fa:0f:42:ad:20:34:0d: d8:5a:1d:36:03:bf:0c:06:5d:bd:5f:b7:1d:fb:5d: 8a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7B:11:1C:27:7E:7E:43:23:86:09:13:11:92:9B:23:4D:10:AD:D9 X509v3 Authority Key Identifier: keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/67E15AC4E40611EC8410A53CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.10.0/23 Signature Algorithm: sha256WithRSAEncryption 42:cb:35:1a:3e:6c:67:14:5c:a6:41:90:21:65:a3:5d:8b:8c: 6f:26:1f:11:85:93:24:81:e4:9e:79:0d:9a:9d:e7:25:e8:04: fe:11:bd:4a:da:dc:3a:c5:6e:c8:05:fe:12:83:2f:4a:f2:3c: f5:04:8c:14:c6:e4:78:a9:27:b3:5a:2e:e7:d4:3c:9d:22:ac: dc:2b:a1:5f:0e:1b:5e:88:20:a9:d1:6f:57:b3:9d:2b:20:f0: 11:f8:9b:b8:16:40:4a:3b:0f:92:e0:8d:e0:87:90:b0:8a:3c: 32:91:be:cd:f2:66:46:4e:1a:27:75:2f:d2:43:ca:b3:0a:4c: 8e:5e:2c:5c:df:f5:78:c1:98:dc:6b:12:15:dd:c9:a2:d0:cc: 55:28:b6:7f:1e:29:d9:e0:df:b0:47:69:42:e8:14:cf:3e:2f: 01:9e:49:a8:64:0b:b6:3c:3f:40:44:e5:d9:dd:e7:d9:f3:f3: 45:a3:fa:0b:77:97:59:b2:55:1c:48:01:80:06:b8:89:5a:8d: 83:6b:d8:8e:60:49:65:e6:f5:5b:ae:e8:1b:e0:64:23:f9:c2: 2c:69:26:eb:6f:71:01:03:cc:3f:af:43:ab:62:47:8a:d7:9f: 56:d9:c2:bf:34:f5:a0:58:ed:ef:f7:31:b6:f5:8d:57:e1:3b: be:7d:7c:64 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxNEUxMTAvBgNVBAUTKEFGNjcxMzJEODM3RDU3NkZGRjc3NzIyN0EzNzI1RDYw MUVEOTEwNUQwHhcNMjUwODAxMDIzODI1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhjMjhhMS01ZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlnqM98+Fw8R82tc6NQ25S1Ev3fGxDKz9cAF7s58vZtMDHmFBU9vV5Aw0s+WW RnhuYnYC/65OKiARc2bFOvckKnx8NMmYdB2D/OzpTsdWew0JQO2WLPLqpRBfVFlr sebtDzZODtExjvvLP8smZUVa55mog8fJccoijLGAc5idqmb4XA/nIBxXSkVf/GUb ZqBPrX86uk3XxLAA4D1XJtd5cXlK+q1DqEe9J5b16ZPzF0aS2iq1Wj27FsyeRTW4 bl2ys0VMwF2JItONnm9phjuovKfExOwzDGaeiI57G4dVviX5n58JCSxeAPoPQq0g NA3YWh02A78MBl29X7cd+12KPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMN7ERwn fn5DI4YJExGSmyNNEK3ZMB8GA1UdIwQYMBaAFK9nEy2DfVdv/3dyJ6NyXWAe2RBd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE0RS80QzVFMkZCOEUz RkYxMUVDQUMyMTA1NzJDNEY5QUUwMi9yMmNUTFlOOVYyX19kM0lubzNKZFlCN1pF RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IyY1RMWU45VjJfX2QzSW5vM0pkWUI3WkVGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzQxNEUvNEM1RTJGQjhFM0ZGMTFFQ0FDMjEwNTcyQzRGOUFFMDIvNjdFMTVBQzRF NDA2MTFFQzg0MTBBNTNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnvQowDQYJKoZIhvcNAQELBQADggEBAELLNRo+bGcUXKZB kCFlo12LjG8mHxGFkySB5J55DZqd5yXoBP4RvUra3DrFbsgF/hKDL0ryPPUEjBTG 5HipJ7NaLufUPJ0irNwroV8OG16IIKnRb1eznSsg8BH4m7gWQEo7D5LgjeCHkLCK PDKRvs3yZkZOGid1L9JDyrMKTI5eLFzf9XjBmNxrEhXdyaLQzFUotn8eKdng37BH aULoFM8+LwGeSahkC7Y8P0BE5dnd59nz80Wj+gt3l1myVRxIAYAGuIlajYNr2I5g SWXm9Vuu6BvgZCP5wixpJutvcQEDzD+vQ6tiR4rXn1bZwr809aBY7e/3Mbb1jVfh O759fGQ= -----END CERTIFICATE-----Generated at Sun Aug 10 16:03:41 2025 by rpki-client