$ rpki-client -vvf rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/730B201A81E911EEAEFE7735C4F9AE02.roa File: 730B201A81E911EEAEFE7735C4F9AE02.roa (raw, json) Hash identifier: s0CFqQaJE4zfLQbz4CeHwWhJkg8L6CDsaxGgDdisTeI= Subject key identifier: 55:AE:64:71:C6:50:EB:BF:71:E2:49:6B:E0:4A:AF:5A:5F:AB:BF:E6 Certificate issuer: /CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Certificate serial: 0131 Authority key identifier: DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/730B201A81E911EEAEFE7735C4F9AE02.roa Signing time: Tue 03 Jun 2025 04:42:50 +0000 ROA not before: Tue 03 Jun 2025 04:42:50 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 15353 IP address blocks: 103.186.159.0/24 maxlen: 24 2400:72e0:9f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A7CA, serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Validity Not Before: Jun 3 04:42:50 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683e7d4a-7c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e6:e0:47:68:f5:b6:e5:91:ec:c9:14:a6:d4: df:53:e4:82:2a:77:d1:9f:b3:93:01:aa:b8:be:71: 39:48:0b:ce:c7:9e:71:46:b3:36:34:8f:4f:40:f3: a1:35:98:82:bc:58:6d:5c:ad:e3:d8:2e:13:15:95: 41:45:6e:e8:30:fb:aa:42:f1:70:41:58:81:92:d9: 5f:79:28:e1:04:18:c1:83:da:44:d2:3d:0c:11:30: ab:bf:40:1f:74:45:7d:05:8e:da:33:d8:cd:f5:de: 63:21:c0:63:f9:bd:fe:43:5b:8d:b0:61:a8:8a:09: cc:f5:64:be:0b:cc:e0:23:fd:61:90:ee:b4:ad:2b: 7d:de:c0:c1:8e:84:da:11:26:18:f4:8d:aa:bd:b1: 27:45:ac:07:9d:6b:52:40:5c:fb:b1:fe:e4:d2:8e: 84:ba:fd:e8:89:8a:f2:da:e5:74:d7:e5:08:8f:20: b7:90:57:8b:a2:cd:c5:b7:58:0c:74:2f:b8:e2:8b: 92:04:ba:f6:33:aa:34:2a:a9:05:2a:18:b8:ab:5f: 1a:6e:ba:ed:c2:28:c3:e7:f4:17:0f:17:ef:62:c4: 49:fb:60:83:2d:ad:ab:24:f5:4b:90:5c:24:f9:58: 24:4a:1f:05:3a:ee:1a:16:c2:5d:d9:2e:25:4e:c9: df:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AE:64:71:C6:50:EB:BF:71:E2:49:6B:E0:4A:AF:5A:5F:AB:BF:E6 X509v3 Authority Key Identifier: keyid:DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/730B201A81E911EEAEFE7735C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.159.0/24 IPv6: 2400:72e0:9f00::/40 Signature Algorithm: sha256WithRSAEncryption 42:42:02:9c:6b:e5:10:73:c0:0a:f5:54:8b:c8:e0:8c:70:b5: ac:00:d9:82:d0:37:f2:bf:6c:b2:4b:5e:45:73:42:9b:df:e2: 11:7b:78:d0:c1:85:d2:af:07:25:82:10:85:67:85:e5:c0:58: be:08:fd:cd:5a:44:52:e1:68:05:c4:b5:4d:cd:e9:d0:37:ab: 5d:cd:20:52:4f:32:b2:a2:f6:d5:a1:6c:7b:7d:ae:b1:3d:be: a8:4d:45:ac:14:b6:19:09:64:95:81:ba:54:98:64:e5:b9:2e: 9e:57:4d:8f:67:65:51:1e:36:82:40:c1:77:06:9b:25:79:bd: f4:8e:10:96:c4:27:81:47:5e:02:55:e9:32:c3:9d:b3:4f:39: 2b:50:2a:bf:1e:00:cb:bc:4f:1e:47:6f:8f:fe:72:f9:df:ec: 1f:b0:a2:f6:54:fd:3c:fa:3e:bb:00:b4:d9:30:51:1f:fd:fc: f7:70:24:da:14:ff:6f:5c:d7:17:b8:2a:1b:e7:eb:7e:6b:01: 9c:0b:81:0a:e3:a0:bf:cc:4b:33:a7:bc:d0:1f:e7:24:35:d9: 0a:2f:e5:f3:67:64:66:7e:3d:db:50:c0:70:d3:98:f4:7b:4d: 74:1c:e2:55:9b:1e:ae:78:3e:7d:3c:7b:af:2c:7a:3f:6d:de: 07:88:b1:69 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3Q0ExMTAvBgNVBAUTKERBMURCMkNEMzFGNDU0RjY5NTYxRDg2NjVEQzkzRUY4 MTJGMzk3QjAwHhcNMjUwNjAzMDQ0MjUwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlN2Q0YS03Yzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ubgR2j1tuWR7MkUptTfU+SCKnfRn7OTAaq4vnE5SAvOx55xRrM2NI9PQPOh NZiCvFhtXK3j2C4TFZVBRW7oMPuqQvFwQViBktlfeSjhBBjBg9pE0j0METCrv0Af dEV9BY7aM9jN9d5jIcBj+b3+Q1uNsGGoignM9WS+C8zgI/1hkO60rSt93sDBjoTa ESYY9I2qvbEnRawHnWtSQFz7sf7k0o6Euv3oiYry2uV01+UIjyC3kFeLos3Ft1gM dC+44ouSBLr2M6o0KqkFKhi4q18abrrtwijD5/QXDxfvYsRJ+2CDLa2rJPVLkFwk +VgkSh8FOu4aFsJd2S4lTsnffQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFWuZHHG UOu/ceJJa+BKr1pfq7/mMB8GA1UdIwQYMBaAFNodss0x9FT2lWHYZl3JPvgS85ew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTdDQS80Q0Y3RjE1ODdF QjcxMUVFOTYyM0U5MUFDNEY5QUUwMi8yaDJ5elRIMFZQYVZZZGhtWGNrLS1CTHps N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJoMnl6VEgwVlBhVllkaG1YY2stLUJMemw3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE3Q0EvNENGN0YxNTg3RUI3MTFFRTk2MjNFOTFBQzRGOUFFMDIvNzMwQjIwMUE4 MUU5MTFFRUFFRkU3NzM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBABnup8wDgQCAAIwCAMGACQAcuCfMA0GCSqGSIb3DQEBCwUA A4IBAQBCQgKca+UQc8AK9VSLyOCMcLWsANmC0Dfyv2yyS15Fc0Kb3+IRe3jQwYXS rwclghCFZ4XlwFi+CP3NWkRS4WgFxLVNzenQN6tdzSBSTzKyovbVoWx7fa6xPb6o TUWsFLYZCWSVgbpUmGTluS6eV02PZ2VRHjaCQMF3Bpsleb30jhCWxCeBR14CVeky w52zTzkrUCq/HgDLvE8eR2+P/nL53+wfsKL2VP08+j67ALTZMFEf/fz3cCTaFP9v XNcXuCob5+t+awGcC4EK46C/zEszp7zQH+ckNdkKL+XzZ2Rmfj3bUMBw05j0e010 HOJVmx6ueD59PHuvLHo/bd4HiLFp -----END CERTIFICATE-----Generated at Fri Jun 20 13:19:21 2025 by rpki-client