$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/CBB9F6766CE211EEA9499734C4F9AE02.roa File: CBB9F6766CE211EEA9499734C4F9AE02.roa (raw, json) Hash identifier: CJGHkmIeNsyNcyQKQSDuECGqLutAY84BUmcFgCd6XHA= Subject key identifier: FC:1D:E0:CF:E6:DE:A1:76:9F:7A:A1:A2:16:CF:E6:03:89:02:49:91 Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 056F Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/CBB9F6766CE211EEA9499734C4F9AE02.roa Signing time: Tue 29 Jul 2025 00:06:10 +0000 ROA not before: Tue 29 Jul 2025 00:06:10 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 137845 IP address blocks: 103.115.168.0/22 maxlen: 22 103.115.168.0/24 maxlen: 24 103.115.169.0/24 maxlen: 24 2403:1840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 23:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1391 (0x56f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: Jul 29 00:06:10 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68881072-224e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:82:d0:4b:f5:c6:e1:dd:a9:dd:29:f6:a4:3c: 03:03:b4:79:53:89:3c:4e:28:64:d6:51:63:0c:40: 84:1e:9d:cd:4a:42:10:e4:a7:29:52:e3:43:a2:10: 20:ef:a7:39:56:3c:2f:5a:49:c7:9d:c4:2a:b8:0b: 69:00:f7:66:bd:fd:e9:21:ee:2c:15:f0:e5:79:67: 96:89:f5:38:e1:73:e5:20:39:86:d6:c8:3f:70:52: a0:3a:c4:18:b8:7a:c6:46:f5:72:1b:76:b8:0b:86: b5:9e:14:a3:07:26:9a:0d:d5:0b:3c:f9:8e:13:d1: 21:5c:89:eb:1c:0b:50:18:93:3e:35:bb:35:69:76: 36:30:81:12:4f:0b:0a:22:ae:bc:f8:63:86:eb:22: 50:8d:96:51:b3:26:5d:ce:96:63:66:27:41:bf:09: de:73:85:91:ff:e8:65:d0:02:34:8c:2a:95:fe:87: f1:7f:b0:1b:22:c4:d1:b0:00:1e:30:d5:45:0f:87: 3f:7c:8e:03:bb:5f:e1:bc:60:43:c1:19:67:b1:c7: 95:e1:6c:49:b1:63:41:71:0a:11:49:f7:24:c6:8b: e1:fe:47:25:b4:45:f7:c1:42:c1:a5:e4:24:d3:87: a3:79:a3:6e:3a:16:f2:7c:22:ec:c2:c8:a5:ed:bc: c8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1D:E0:CF:E6:DE:A1:76:9F:7A:A1:A2:16:CF:E6:03:89:02:49:91 X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/CBB9F6766CE211EEA9499734C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.168.0/22 IPv6: 2403:1840::/32 Signature Algorithm: sha256WithRSAEncryption 08:d0:65:41:54:66:a0:92:55:01:9a:35:2b:56:27:4b:d0:ff: 89:4e:44:b7:62:67:57:92:43:21:d5:bb:1d:57:84:88:19:75: a9:dc:01:e2:1b:af:e2:e2:3c:73:7b:25:c5:79:06:69:f3:53: e3:01:83:3d:68:82:46:2b:7d:11:b4:29:f4:95:ef:c1:34:2a: 6a:b5:07:53:37:02:59:89:5b:e2:dd:25:28:b5:70:88:a2:5c: c0:9d:9f:e2:d6:14:48:d2:a3:3a:b7:bf:83:60:21:d3:06:1b: 7b:62:43:64:93:e4:34:d4:b0:39:00:5c:e4:30:0e:bd:32:5b: 5a:64:da:99:99:61:83:bc:7f:a1:36:16:80:9d:d3:c5:b6:0f: 09:64:0a:e3:2f:7b:b0:52:6a:24:b9:3f:dc:2d:74:e1:04:9b: 1b:12:48:c4:73:d1:8d:ea:5e:74:13:bd:8e:18:32:64:03:12: 0a:27:d6:e9:4e:19:00:97:2b:02:3f:c5:87:91:2d:26:20:8d: 3b:66:33:e9:fc:b2:cc:1f:ea:23:c9:7f:b9:1d:f4:18:65:e0: c7:bd:6b:c0:88:e1:12:f7:02:d1:fd:f4:96:74:68:81:a3:7b: 7d:ff:37:c8:cf:d2:2f:71:4e:c5:d6:76:7a:f1:6c:c1:c8:c4: 60:a7:5d:85 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjUwNzI5MDAwNjEwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg4MTA3Mi0yMjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYLQS/XG4d2p3Sn2pDwDA7R5U4k8Tihk1lFjDECEHp3NSkIQ5KcpUuNDohAg 76c5VjwvWknHncQquAtpAPdmvf3pIe4sFfDleWeWifU44XPlIDmG1sg/cFKgOsQY uHrGRvVyG3a4C4a1nhSjByaaDdULPPmOE9EhXInrHAtQGJM+Nbs1aXY2MIESTwsK Iq68+GOG6yJQjZZRsyZdzpZjZidBvwnec4WR/+hl0AI0jCqV/ofxf7AbIsTRsAAe MNVFD4c/fI4Du1/hvGBDwRlnsceV4WxJsWNBcQoRSfckxovh/kcltEX3wULBpeQk 04ejeaNuOhbyfCLswsil7bzIoQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPwd4M/m 3qF2n3qhohbP5gOJAkmRMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxNTEvMTJBQ0Q2QkFGNERDMTFFQjhGN0RCOTQ5QzRGOUFFMDIvQ0JCOUY2NzY2 Q0UyMTFFRUE5NDk5NzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnc6gwDQQCAAIwBwMFACQDGEAwDQYJKoZIhvcNAQELBQAD ggEBAAjQZUFUZqCSVQGaNStWJ0vQ/4lORLdiZ1eSQyHVux1XhIgZdancAeIbr+Li PHN7JcV5BmnzU+MBgz1ogkYrfRG0KfSV78E0Kmq1B1M3AlmJW+LdJSi1cIiiXMCd n+LWFEjSozq3v4NgIdMGG3tiQ2ST5DTUsDkAXOQwDr0yW1pk2pmZYYO8f6E2FoCd 08W2DwlkCuMve7BSaiS5P9wtdOEEmxsSSMRz0Y3qXnQTvY4YMmQDEgon1ulOGQCX KwI/xYeRLSYgjTtmM+n8sswf6iPJf7kd9Bhl4Me9a8CI4RL3AtH99JZ0aIGje33/ N8jP0i9xTsXWdnrxbMHIxGCnXYU= -----END CERTIFICATE-----Generated at Sat Aug 9 01:19:22 2025 by rpki-client