$ rpki-client -vvf rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/9343CE6EE07211E7995BD42EC4F9AE02.roa File: 9343CE6EE07211E7995BD42EC4F9AE02.roa (raw, json) Hash identifier: RmtTkfUtODi3Cy7Cko14SjhPi0et23qfIOBSZSmBkOI= Subject key identifier: 6F:81:92:5E:7A:1A:C5:55:CB:86:04:09:7D:24:EF:E1:F9:D8:84:7D Certificate issuer: /CN=A919B63C/serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Certificate serial: 34E7 Authority key identifier: 25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/9343CE6EE07211E7995BD42EC4F9AE02.roa Signing time: Thu 31 Jul 2025 15:20:55 +0000 ROA not before: Thu 31 Jul 2025 15:20:55 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 45437 IP address blocks: 14.1.16.0/22 maxlen: 22 14.1.16.0/24 maxlen: 24 45.116.108.0/22 maxlen: 24 103.16.96.0/22 maxlen: 24 103.210.76.0/22 maxlen: 24 103.228.213.0/24 maxlen: 24 103.228.214.0/24 maxlen: 24 103.228.215.0/24 maxlen: 24 114.141.96.0/20 maxlen: 24 203.170.88.0/23 maxlen: 23 2406:4d40::/32 maxlen: 32 2406:a800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13543 (0x34e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B63C, serialNumber=2585DA0B980A47FEBA0E235205DEEE402F20B3CB Validity Not Before: Jul 31 15:20:55 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=688b89d7-e527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:02:63:6f:0b:5f:38:cf:80:b9:71:55:23:8d: 0e:f0:90:fd:fc:79:e7:c6:7e:f5:3d:d7:b3:98:09: 0c:d8:a2:8f:b9:15:8b:7c:36:31:6a:62:f5:f1:cb: d2:50:c4:22:a6:2c:62:f0:3c:de:5a:85:91:af:3f: 40:cb:ed:be:aa:eb:79:29:83:2e:5d:f4:a1:60:39: b9:7e:c4:78:43:fd:d7:a3:3e:80:5f:c9:40:fc:7e: 86:7a:30:06:7a:cc:33:16:4a:aa:fc:aa:6f:ef:e5: 05:1c:c9:34:bd:17:c1:de:0a:c0:86:96:aa:b4:29: d4:85:38:b6:39:93:65:6a:cc:23:a7:39:d5:1b:e0: d3:a5:48:cf:d5:da:f7:3b:3e:18:13:ef:a3:9a:48: da:ed:e8:76:02:36:e6:9c:9b:06:6d:ab:b1:0e:c5: b1:a7:3b:d3:0c:f1:22:39:d4:0a:00:97:c7:a4:93: 64:09:e3:b4:8d:cd:21:1e:45:d4:1f:57:4c:67:51: 1f:eb:3d:82:bd:df:34:60:ab:61:cf:93:96:48:fd: ea:32:7d:85:c5:43:6d:0d:a7:6c:34:b9:4a:46:01: 5a:77:2e:dc:70:b3:e1:4e:c8:cb:3c:70:3d:f9:1e: dd:0f:3e:5f:f9:4e:66:f3:d4:97:51:32:92:cb:3f: 9e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:81:92:5E:7A:1A:C5:55:CB:86:04:09:7D:24:EF:E1:F9:D8:84:7D X509v3 Authority Key Identifier: keyid:25:85:DA:0B:98:0A:47:FE:BA:0E:23:52:05:DE:EE:40:2F:20:B3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/JYXaC5gKR_66DiNSBd7uQC8gs8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYXaC5gKR_66DiNSBd7uQC8gs8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B63C/B7ACC26C1D9811E28F10F08208B02CD2/9343CE6EE07211E7995BD42EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.1.16.0/22 45.116.108.0/22 103.16.96.0/22 103.210.76.0/22 103.228.213.0-103.228.215.255 114.141.96.0/20 203.170.88.0/23 IPv6: 2406:4d40::/32 2406:a800::/32 Signature Algorithm: sha256WithRSAEncryption 97:1c:c1:0d:76:e2:bb:ff:66:48:30:04:3c:7a:ef:da:78:9b: 3f:bc:11:f4:9b:4f:73:b5:36:cf:b2:ae:84:3e:d8:67:cf:7e: 48:a4:08:07:d4:3b:2f:b6:15:5e:3b:6f:7c:21:51:0b:d2:b4: 9b:96:a4:d6:1a:e1:00:58:c0:90:d1:db:6b:cd:fd:6f:84:5a: fc:ea:95:55:ca:8d:00:fb:63:36:47:b2:dc:e4:0c:df:0c:34: 2e:24:e6:68:e4:5b:8f:a8:fa:04:9d:50:c6:92:97:eb:c0:3a: 72:fe:e9:c7:ef:f3:a5:76:ac:28:d6:c6:6e:b5:41:4b:0c:67: a3:34:46:35:a6:44:65:49:b3:96:7b:07:a6:5a:79:c2:0e:e6: bc:7f:10:02:b7:33:36:eb:9b:86:6f:61:e6:38:45:b4:ec:1e: c5:01:79:f8:09:1c:89:b0:37:d1:ad:fb:e6:b5:b9:ec:1d:9f: ef:2f:d3:95:92:f0:a7:1a:f5:61:b4:6b:24:0d:9c:45:1a:cf: 12:de:ed:16:03:b6:58:d3:ec:94:06:b6:85:c2:9b:ec:59:77: 43:23:bb:e4:5d:03:82:68:d2:da:30:6f:9e:61:85:7c:9e:5f: 22:b7:94:92:4c:33:3d:2d:8c:2d:df:d2:29:27:42:f4:25:a2: 9a:1c:31:35 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgICNOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2M0MxMTAvBgNVBAUTKDI1ODVEQTBCOTgwQTQ3RkVCQTBFMjM1MjA1REVFRTQw MkYyMEIzQ0IwHhcNMjUwNzMxMTUyMDU1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhiODlkNy1lNTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gJjbwtfOM+AuXFVI40O8JD9/Hnnxn71PdezmAkM2KKPuRWLfDYxamL18cvS UMQipixi8DzeWoWRrz9Ay+2+qut5KYMuXfShYDm5fsR4Q/3Xoz6AX8lA/H6GejAG eswzFkqq/Kpv7+UFHMk0vRfB3grAhpaqtCnUhTi2OZNlaswjpznVG+DTpUjP1dr3 Oz4YE++jmkja7eh2AjbmnJsGbauxDsWxpzvTDPEiOdQKAJfHpJNkCeO0jc0hHkXU H1dMZ1Ef6z2Cvd80YKthz5OWSP3qMn2FxUNtDadsNLlKRgFady7ccLPhTsjLPHA9 +R7dDz5f+U5m89SXUTKSyz+ePQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFG+Bkl56 GsVVy4YECX0k7+H52IR9MB8GA1UdIwQYMBaAFCWF2guYCkf+ug4jUgXe7kAvILPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjYzQy9CN0FDQzI2QzFE OTgxMUUyOEYxMEYwODIwOEIwMkNEMi9KWVhhQzVnS1JfNjZEaU5TQmQ3dVFDOGdz OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZWGFDNWdLUl82NkRpTlNCZDd1UUM4Z3M4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUI2M0MvQjdBQ0MyNkMxRDk4MTFFMjhGMTBGMDgyMDhCMDJDRDIvOTM0M0NFNkVF MDcyMTFFNzk5NUJENDJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYQYIKwYBBQUHAQcBAf8E UjBQMDgEAgABMDIDBAIOARADBAItdGwDBAJnEGADBAJn0kwwDAMEAGfk1QMEA2fk 0AMEBHKNYAMEAcuqWDAUBAIAAjAOAwUAJAZNQAMFACQGqAAwDQYJKoZIhvcNAQEL BQADggEBAJccwQ124rv/ZkgwBDx679p4mz+8EfSbT3O1Ns+yroQ+2GfPfkikCAfU Oy+2FV47b3whUQvStJuWpNYa4QBYwJDR22vN/W+EWvzqlVXKjQD7YzZHstzkDN8M NC4k5mjkW4+o+gSdUMaSl+vAOnL+6cfv86V2rCjWxm61QUsMZ6M0RjWmRGVJs5Z7 B6ZaecIO5rx/EAK3Mzbrm4ZvYeY4RbTsHsUBefgJHImwN9Gt++a1uewdn+8v05WS 8Kca9WG0ayQNnEUazxLe7RYDtljT7JQGtoXCm+xZd0Mju+RdA4Jo0towb55hhXye XyK3lJJMMz0tjC3f0iknQvQlopocMTU= -----END CERTIFICATE-----Generated at Fri Aug 8 20:45:39 2025 by rpki-client