$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/AF4851DEE36C11EF876EED6BC4F9AE02.roa File: AF4851DEE36C11EF876EED6BC4F9AE02.roa (raw, json) Hash identifier: bj5Hq62UMZISTbn6THoPgyqtMomjzdXyPKa22dPZDMg= Subject key identifier: FE:E6:D5:83:B5:3A:27:64:8D:35:3F:3F:93:6B:05:FF:08:95:0F:7F Certificate issuer: /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9 Certificate serial: 01F5 Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/AF4851DEE36C11EF876EED6BC4F9AE02.roa Signing time: Fri 01 Aug 2025 04:41:23 +0000 ROA not before: Fri 01 Aug 2025 04:41:23 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 150108 IP address blocks: 103.122.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918664E, serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9 Validity Not Before: Aug 1 04:41:23 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=688c4572-cf4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:6c:0a:1a:b9:67:07:82:03:53:30:ff:94: 09:b0:f8:cc:57:1e:2d:d5:e1:b9:b3:fb:bc:06:4e: e7:97:ba:a9:32:b2:b1:1b:c3:a8:2d:6f:e8:21:db: 98:c7:47:29:1d:24:99:56:aa:24:4a:97:b6:c7:60: 87:24:1d:65:ec:5c:c4:64:68:37:0c:58:3d:93:32: 3e:89:8e:1c:1a:53:fe:4c:73:27:c4:52:46:58:a6: f9:ee:74:28:94:01:41:ec:3c:8c:a8:c1:cd:66:a6: 2e:d0:2b:7e:41:4e:ce:42:35:cc:72:f3:7f:03:55: e6:b4:45:68:30:f8:8d:16:d7:89:19:21:13:7f:f0: 98:64:4d:ed:93:20:fb:fa:e7:d8:7e:fa:a2:13:d6: 34:a0:1d:55:e3:09:f0:bc:68:ee:c5:eb:f3:66:c4: 01:14:c5:44:4b:87:48:b0:14:0b:76:53:05:41:f3: 7b:13:34:9c:d0:a4:96:d7:25:9b:a0:9d:46:90:38: bf:d1:50:6d:41:e4:5a:a5:52:dd:21:b9:e0:b4:67: 6d:05:76:63:2a:55:7b:00:79:b8:60:c7:4d:40:71: 03:d8:91:96:a2:f0:88:fe:3d:4a:92:73:5b:4c:9c: 71:9a:f1:bd:d6:dd:24:14:60:ec:86:3f:4b:cd:c6: 29:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E6:D5:83:B5:3A:27:64:8D:35:3F:3F:93:6B:05:FF:08:95:0F:7F X509v3 Authority Key Identifier: keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/AF4851DEE36C11EF876EED6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.222.0/24 Signature Algorithm: sha256WithRSAEncryption c9:e2:74:b7:9b:10:6c:9f:61:14:c0:d7:84:b0:f4:6e:19:93: bb:17:11:36:b8:5c:a4:88:4e:65:12:fe:cb:90:33:c4:89:58: 2e:fe:e3:cc:06:24:c0:e4:98:7d:70:82:8e:17:9d:5d:c7:9c: 5a:3a:3c:f7:a7:c4:cb:76:56:a9:c9:5d:93:cc:19:c5:d1:4a: 6e:06:8e:99:f1:3c:d4:1d:3a:ce:fa:d3:07:09:79:ce:a6:d2: a3:26:e3:f3:ad:2c:ee:a2:d1:c0:13:a2:26:4b:8a:f2:af:0b: 9e:0b:f1:92:2e:f7:6c:14:8c:81:c0:12:90:49:41:d9:c6:45: b1:3f:84:68:1d:94:27:99:b8:31:be:14:9b:d0:be:76:3e:82: 82:6f:7d:6c:1e:de:d1:5c:89:7f:79:51:99:44:21:96:87:2c: 9a:db:0a:52:e3:13:7d:e3:5c:ab:ca:01:bf:3f:cc:7a:7a:a5: ea:67:21:c1:e5:12:61:c5:3c:95:1a:53:cb:83:15:fb:a6:71: 8f:ee:13:31:1d:2d:20:de:70:ec:7a:9b:67:d6:80:64:75:78: 88:71:20:86:ed:57:06:37:21:31:06:e7:da:79:06:78:f0:d0: 69:a2:f4:83:d5:52:af:fa:cd:ab:88:e8:cd:ea:40:b9:69:70: 22:54:c9:3a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2NEUxMTAvBgNVBAUTKDRDMDVCQTg5MzVFOERGM0NDMjMyNTBCNTY3RjIwNTZC ODUwNzE1QjkwHhcNMjUwODAxMDQ0MTIzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhjNDU3Mi1jZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7tsChq5ZweCA1Mw/5QJsPjMVx4t1eG5s/u8Bk7nl7qpMrKxG8OoLW/oIduY x0cpHSSZVqokSpe2x2CHJB1l7FzEZGg3DFg9kzI+iY4cGlP+THMnxFJGWKb57nQo lAFB7DyMqMHNZqYu0Ct+QU7OQjXMcvN/A1XmtEVoMPiNFteJGSETf/CYZE3tkyD7 +ufYfvqiE9Y0oB1V4wnwvGjuxevzZsQBFMVES4dIsBQLdlMFQfN7EzSc0KSW1yWb oJ1GkDi/0VBtQeRapVLdIbngtGdtBXZjKlV7AHm4YMdNQHED2JGWovCI/j1KknNb TJxxmvG91t0kFGDshj9LzcYptQIDAQABo4IClTCCApEwHQYDVR0OBBYEFP7m1YO1 OidkjTU/P5NrBf8IlQ9/MB8GA1UdIwQYMBaAFEwFuok16N88wjJQtWfyBWuFBxW5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY0RS9ERjkwMEUzNkNF RTIxMUVEQTQxQzM4MUNDNEY5QUUwMi9UQVc2aVRYbzN6ekNNbEMxWl9JRmE0VUhG YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RBVzZpVFhvM3p6Q01sQzFaX0lGYTRVSEZiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODY2NEUvREY5MDBFMzZDRUUyMTFFREE0MUMzODFDQzRGOUFFMDIvQUY0ODUxREVF MzZDMTFFRjg3NkVFRDZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnet4wDQYJKoZIhvcNAQELBQADggEBAMnidLebEGyfYRTA 14Sw9G4Zk7sXETa4XKSITmUS/suQM8SJWC7+48wGJMDkmH1wgo4XnV3HnFo6PPen xMt2VqnJXZPMGcXRSm4GjpnxPNQdOs760wcJec6m0qMm4/OtLO6i0cAToiZLivKv C54L8ZIu92wUjIHAEpBJQdnGRbE/hGgdlCeZuDG+FJvQvnY+goJvfWwe3tFciX95 UZlEIZaHLJrbClLjE33jXKvKAb8/zHp6pepnIcHlEmHFPJUaU8uDFfumcY/uEzEd LSDecOx6m2fWgGR1eIhxIIbtVwY3ITEG59p5Bnjw0Gmi9IPVUq/6zauI6M3qQLlp cCJUyTo= -----END CERTIFICATE-----Generated at Mon Aug 11 10:50:38 2025 by rpki-client