$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/96D7EE96AF0111EB8FE37446C4F9AE02.roa File: 96D7EE96AF0111EB8FE37446C4F9AE02.roa (raw, json) Hash identifier: XobrFToMUwwxQ4hI6JoyUOwAGYgM+9dP9JteDhsTr+c= Subject key identifier: 1F:F3:5F:B9:79:AB:F2:6A:53:E8:B9:A6:91:79:AF:55:69:17:D8:FD Certificate issuer: /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Certificate serial: 062D Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/96D7EE96AF0111EB8FE37446C4F9AE02.roa Signing time: Fri 18 Jul 2025 23:35:20 +0000 ROA not before: Fri 18 Jul 2025 23:35:20 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 132585 IP address blocks: 103.119.104.0/23 maxlen: 23 103.119.106.0/23 maxlen: 23 2403:4240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 23:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1581 (0x62d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22 Validity Not Before: Jul 18 23:35:20 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=687ada38-abbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:ec:b2:2d:a7:5b:20:54:f9:d2:58:31:18: 33:55:5c:10:3c:33:71:1c:2a:69:a8:8e:00:af:0f: 7f:b9:dc:35:f6:62:75:2b:c4:cf:f2:82:89:b2:3f: e4:5a:6b:1f:68:38:19:59:18:31:b9:c7:85:54:66: 12:8d:e0:05:f0:01:c0:65:2d:97:9f:46:91:a0:57: 45:7d:b4:29:f1:7b:b7:64:bf:f8:be:ba:a1:29:c8: a2:e2:84:00:b1:0b:c4:fb:25:6e:33:73:00:71:30: 99:da:2f:ba:8f:db:68:e7:2c:77:87:b9:1a:b7:e1: 4d:c3:aa:81:a2:03:01:6e:37:3a:d1:3d:7e:22:c1: 5c:cd:33:0d:e0:37:b5:d2:da:ff:ac:58:12:74:96: ce:52:93:ab:55:82:63:f2:b5:af:89:2d:4f:77:6f: fc:3e:e5:88:bf:bf:4d:94:91:f9:c9:65:ea:f2:d0: d3:d1:3f:df:80:97:2e:57:a0:b4:89:3b:27:be:90: c1:8f:c1:2e:03:14:82:ef:98:48:f9:77:6b:3e:b9: 04:54:28:a6:f2:3b:fa:a4:ee:e2:e6:72:1b:fc:a2: 1f:48:bf:49:a9:42:17:f9:8a:b9:0d:ca:c7:98:d1: 4f:96:bc:56:94:b4:dd:04:f1:84:98:2d:10:b3:e3: 7c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F3:5F:B9:79:AB:F2:6A:53:E8:B9:A6:91:79:AF:55:69:17:D8:FD X509v3 Authority Key Identifier: keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/96D7EE96AF0111EB8FE37446C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.104.0/22 IPv6: 2403:4240::/32 Signature Algorithm: sha256WithRSAEncryption bf:28:9e:86:71:53:65:11:e0:7d:79:64:dc:93:b1:3d:7c:d2: 10:bb:b5:8e:bd:06:70:c2:26:1c:cd:b3:31:50:f7:b2:8c:c2: 87:12:ff:dd:5b:7d:05:e3:47:f2:61:a2:11:4d:6d:12:48:9c: c4:7d:22:4a:42:18:43:05:2c:e5:da:70:bd:3f:15:1d:e0:f1: 2a:1f:ab:69:2e:6f:47:4c:ff:46:b4:e3:55:18:1d:6a:b8:0f: 41:3b:92:09:b9:54:04:09:31:ed:3c:1a:fc:ae:12:a3:bf:0d: a0:8c:4d:db:65:5e:f6:c9:20:21:22:ed:91:ce:75:7d:e7:51: b8:8c:2c:87:e3:18:79:8d:d8:a6:65:3d:01:39:73:a6:23:74: 85:9a:eb:86:a9:5b:c5:d9:fa:8e:e4:d1:07:2b:57:92:27:93: 58:0f:99:30:b4:c1:d7:13:ac:aa:9f:0c:2d:4a:5d:79:17:09: de:f2:21:69:32:3e:07:8c:4a:36:f2:f3:d6:1c:bf:4b:aa:97: d4:68:af:65:de:c9:04:a4:18:f6:cf:1c:0b:56:8c:f8:91:0f: f8:4d:18:8b:8c:4f:ed:d2:80:e4:02:09:67:a5:73:ff:19:35: dc:8a:c3:22:87:64:08:db:71:9a:18:04:54:dc:93:2f:6a:18: b9:54:1d:42 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlCNTAxMTAvBgNVBAUTKDNEQUZGRkJDN0U5MTJFOUZGQ0QyQTJFMEQ5MjA4RUJD OTk3MDlCMjIwHhcNMjUwNzE4MjMzNTIwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdhZGEzOC1hYmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnObssi2nWyBU+dJYMRgzVVwQPDNxHCppqI4Arw9/udw19mJ1K8TP8oKJsj/k WmsfaDgZWRgxuceFVGYSjeAF8AHAZS2Xn0aRoFdFfbQp8Xu3ZL/4vrqhKcii4oQA sQvE+yVuM3MAcTCZ2i+6j9to5yx3h7kat+FNw6qBogMBbjc60T1+IsFczTMN4De1 0tr/rFgSdJbOUpOrVYJj8rWviS1Pd2/8PuWIv79NlJH5yWXq8tDT0T/fgJcuV6C0 iTsnvpDBj8EuAxSC75hI+XdrPrkEVCim8jv6pO7i5nIb/KIfSL9JqUIX+Yq5DcrH mNFPlrxWlLTdBPGEmC0Qs+N83wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFB/zX7l5 q/JqU+i5ppF5r1VpF9j9MB8GA1UdIwQYMBaAFD2v/7x+kS6f/NKi4NkgjryZcJsi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUI1MC9DNkMwNDlCMkFF RkUxMUVCODA5MzI2M0VDNEY5QUUwMi9QYV9fdkg2UkxwXzgwcUxnMlNDT3ZKbHdt eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BhX192SDZSTHBfODBxTGcyU0NPdkpsd215SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzlCNTAvQzZDMDQ5QjJBRUZFMTFFQjgwOTMyNjNFQzRGOUFFMDIvOTZEN0VFOTZB RjAxMTFFQjhGRTM3NDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnd2gwDQQCAAIwBwMFACQDQkAwDQYJKoZIhvcNAQELBQAD ggEBAL8onoZxU2UR4H15ZNyTsT180hC7tY69BnDCJhzNszFQ97KMwocS/91bfQXj R/JhohFNbRJInMR9IkpCGEMFLOXacL0/FR3g8Sofq2kub0dM/0a041UYHWq4D0E7 kgm5VAQJMe08GvyuEqO/DaCMTdtlXvbJICEi7ZHOdX3nUbiMLIfjGHmN2KZlPQE5 c6YjdIWa64apW8XZ+o7k0QcrV5Ink1gPmTC0wdcTrKqfDC1KXXkXCd7yIWkyPgeM Sjby89Ycv0uql9Ror2XeyQSkGPbPHAtWjPiRD/hNGIuMT+3SgOQCCWelc/8ZNdyK wyKHZAjbcZoYBFTcky9qGLlUHUI= -----END CERTIFICATE-----Generated at Wed Aug 6 14:19:05 2025 by rpki-client