$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/97F31854777011E7BF7EED10C4F9AE02.roa File: 97F31854777011E7BF7EED10C4F9AE02.roa (raw, json) Hash identifier: 7+Ks4jZyLMHPbzW7FZP/GDFbxrDItsZ+/jUs9u2MSic= Subject key identifier: 67:2D:A2:C6:B3:3F:07:DC:7F:C4:36:0E:70:53:99:D5:22:27:4A:5C Certificate issuer: /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF Certificate serial: 1986 Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/97F31854777011E7BF7EED10C4F9AE02.roa Signing time: Sat 02 Aug 2025 16:55:20 +0000 ROA not before: Sat 02 Aug 2025 16:55:20 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 58419 IP address blocks: 103.10.252.0/24 maxlen: 24 103.23.214.0/24 maxlen: 24 103.95.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6534 (0x1986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF Validity Not Before: Aug 2 16:55:20 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=688e42f7-eced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:60:ab:98:cd:27:83:a2:1d:30:c8:71:77:ee: 19:36:be:08:3a:24:c9:30:52:7b:33:24:3b:38:28: fc:41:ff:42:08:2b:e3:3c:b0:0d:8c:cc:6c:ae:25: 39:ad:eb:2e:4a:ea:4c:2a:f6:76:83:95:ba:82:67: 15:01:29:0f:2c:4a:14:7f:3f:68:f4:08:6e:ec:20: 01:44:36:10:60:2c:6d:14:0a:cd:a3:70:aa:1a:a0: ae:af:22:2c:57:bf:b4:3e:37:56:15:4a:88:51:86: 1f:1b:af:c7:eb:f5:a5:4b:5e:9c:de:13:3f:35:53: b6:c6:c2:89:7b:6a:55:43:86:79:6d:08:da:2a:86: 54:0b:ad:34:e5:70:44:f5:6e:cf:16:d3:cf:66:d7: 26:1d:e4:7e:27:5a:b2:9d:a0:9d:2f:9d:e8:05:69: e7:bd:4b:a5:49:b9:96:cb:8f:c5:5d:91:d6:d4:f9: 3b:35:bf:d6:f3:98:e9:81:f0:08:20:3e:bb:7f:96: f3:fd:04:e3:a7:dc:98:94:59:61:96:9c:cf:87:96: 3b:0c:ce:cd:68:ba:aa:58:ce:1f:53:ac:9a:85:50: fb:37:28:cf:fa:f0:a7:3f:02:ef:0c:24:d3:78:5b: e1:f9:8b:5e:9c:e4:69:b7:68:41:b1:83:d7:03:fb: 9a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2D:A2:C6:B3:3F:07:DC:7F:C4:36:0E:70:53:99:D5:22:27:4A:5C X509v3 Authority Key Identifier: keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/97F31854777011E7BF7EED10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.252.0/24 103.23.214.0/24 103.95.193.0/24 Signature Algorithm: sha256WithRSAEncryption 43:89:b1:cb:79:81:34:6d:c6:10:6b:d0:20:17:f3:a1:ff:62: b1:4e:d3:47:0f:fc:80:9d:fd:ea:86:40:ac:0e:9c:70:a4:d7: 9b:ca:3c:08:cc:e6:b9:98:de:12:94:cf:9f:1f:7e:9f:2c:e2: c0:3d:5c:94:c4:e3:9a:06:4c:ae:6b:59:d2:e7:58:c3:5c:30: c4:0c:6a:c0:0d:f8:1d:87:c4:d8:68:8b:97:c3:d1:f9:62:1f: ef:06:4a:ae:39:11:4b:cb:b6:f8:2f:d0:cd:d0:40:15:48:78: 82:19:ef:85:0f:7e:c4:83:98:dc:82:26:26:00:30:4a:e8:26: bc:34:4a:c9:7f:39:9a:90:8e:13:4a:2f:9c:ee:da:df:4c:ac: 21:c5:7c:81:46:fd:24:cb:e9:09:f5:c6:1e:5e:cb:5a:6a:5a: f0:25:77:f7:99:b5:51:67:1e:7a:24:f0:40:a0:c3:79:c3:ef: 51:2e:76:98:18:5a:6d:6d:17:7e:4b:c1:e0:91:f4:5a:0d:ad: 8d:07:8d:a0:c7:ec:27:a0:3e:72:d7:18:c6:b4:22:3c:3b:3a: d6:15:3b:37:d6:15:b8:94:a6:23:82:8b:d0:e5:f0:b1:41:80: ba:df:7a:93:dd:01:fe:17:20:bf:01:46:94:bc:ed:b0:bd:15: d0:6f:8e:97 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICGYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczMTMxMTAvBgNVBAUTKEU1NjcyQkJGMThDNENGRUJEM0Y0NzJEMTNCNDg3NzEz NzJEMzRFREYwHhcNMjUwODAyMTY1NTIwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlNDJmNy1lY2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GCrmM0ng6IdMMhxd+4ZNr4IOiTJMFJ7MyQ7OCj8Qf9CCCvjPLANjMxsriU5 resuSupMKvZ2g5W6gmcVASkPLEoUfz9o9Ahu7CABRDYQYCxtFArNo3CqGqCuryIs V7+0PjdWFUqIUYYfG6/H6/WlS16c3hM/NVO2xsKJe2pVQ4Z5bQjaKoZUC6005XBE 9W7PFtPPZtcmHeR+J1qynaCdL53oBWnnvUulSbmWy4/FXZHW1Pk7Nb/W85jpgfAI ID67f5bz/QTjp9yYlFlhlpzPh5Y7DM7NaLqqWM4fU6yahVD7NyjP+vCnPwLvDCTT eFvh+YtenORpt2hBsYPXA/uaVwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFGctosaz Pwfcf8Q2DnBTmdUiJ0pcMB8GA1UdIwQYMBaAFOVnK78YxM/r0/Ry0TtIdxNy007f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzMxMy8zQzM0RUMwQTc3 NkYxMUU3ODJBRDZEMEVDNEY5QUUwMi81V2NydnhqRXotdlQ5SExSTzBoM0UzTFRU dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVXY3J2eGpFei12VDlITFJPMGgzRTNMVFR0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODczMTMvM0MzNEVDMEE3NzZGMTFFNzgyQUQ2RDBFQzRGOUFFMDIvOTdGMzE4NTQ3 NzcwMTFFN0JGN0VFRDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnCvwDBABnF9YDBABnX8EwDQYJKoZIhvcNAQELBQADggEB AEOJsct5gTRtxhBr0CAX86H/YrFO00cP/ICd/eqGQKwOnHCk15vKPAjM5rmY3hKU z58ffp8s4sA9XJTE45oGTK5rWdLnWMNcMMQMasAN+B2HxNhoi5fD0fliH+8GSq45 EUvLtvgv0M3QQBVIeIIZ74UPfsSDmNyCJiYAMEroJrw0Ssl/OZqQjhNKL5zu2t9M rCHFfIFG/STL6Qn1xh5ey1pqWvAld/eZtVFnHnok8ECgw3nD71EudpgYWm1tF35L weCR9FoNrY0HjaDH7CegPnLXGMa0Ijw7OtYVOzfWFbiUpiOCi9Dl8LFBgLrfepPd Af4XIL8BRpS87bC9FdBvjpc= -----END CERTIFICATE-----Generated at Wed Aug 13 05:53:36 2025 by rpki-client