$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/C2ED1EEE617111EBBC678459C4F9AE02.roa File: C2ED1EEE617111EBBC678459C4F9AE02.roa (raw, json) Hash identifier: /hGH0Pm/VcL/t48Buv7bSF4xPC6xqGHOH5JeW2XnqTU= Subject key identifier: 66:C8:20:80:18:14:85:1F:EB:94:43:A1:89:3E:15:17:BB:65:55:C3 Certificate issuer: /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C Certificate serial: 0DF0 Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/C2ED1EEE617111EBBC678459C4F9AE02.roa Signing time: Sat 26 Jul 2025 18:27:49 +0000 ROA not before: Sat 26 Jul 2025 18:27:49 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 138172 IP address blocks: 103.116.248.0/24 maxlen: 24 103.116.249.0/24 maxlen: 24 103.116.250.0/24 maxlen: 24 103.116.251.0/24 maxlen: 24 2403:dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3568 (0xdf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D1D9, serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C Validity Not Before: Jul 26 18:27:49 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68851e25-ce65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:59:08:d7:2c:24:f2:a4:33:bc:a2:90:05: 61:05:6d:26:04:b5:85:7c:d3:bb:4f:8d:e8:79:84: 7f:25:5e:6b:00:85:f7:a5:99:3a:0d:21:f9:a4:46: 69:60:f4:5d:0c:83:77:d9:d7:7b:1c:64:ce:63:cc: 2f:66:99:7e:54:c7:e7:81:1d:3d:b0:4e:54:7a:03: 44:76:72:df:ca:32:86:aa:24:20:2c:f2:b6:46:ca: 81:31:b6:60:44:62:38:1c:c8:69:7a:4f:3d:85:75: 9b:e2:63:95:a9:6f:47:e2:35:9b:9f:c1:d6:ee:c8: 63:a7:61:d9:ad:7b:1f:80:c8:9f:37:af:9f:5b:2e: 2d:1e:0b:1c:8a:96:73:46:09:0c:43:b2:38:e5:48: 0a:1c:af:40:8d:2b:29:99:3f:f1:aa:5d:e7:ac:52: ff:e1:d6:3f:68:90:17:35:e9:fe:b8:4f:5d:47:10: d1:d7:22:c6:74:59:01:3e:1d:c0:80:d5:aa:ef:58: ec:16:0f:a4:58:3a:71:cc:a3:02:d3:67:77:28:6b: b2:f3:92:97:3a:5d:2a:56:55:75:50:07:57:ab:02: 0b:79:79:0f:70:76:d3:de:2f:02:18:ba:ff:3f:72: 9a:ef:8c:04:3c:2c:ac:84:28:6c:ef:3f:1c:3b:6b: 25:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C8:20:80:18:14:85:1F:EB:94:43:A1:89:3E:15:17:BB:65:55:C3 X509v3 Authority Key Identifier: keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/C2ED1EEE617111EBBC678459C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.248.0/22 IPv6: 2403:dc0::/32 Signature Algorithm: sha256WithRSAEncryption 31:bc:4b:d1:70:f6:2e:48:62:52:82:a7:e7:17:0b:84:36:81: ec:4d:de:73:b1:ef:a3:fe:f5:8b:74:25:35:4f:80:a4:e5:13: 63:52:e6:6a:6e:62:55:4d:09:35:b4:e4:4b:7f:72:d6:ec:39: 56:4a:81:ba:42:1c:df:b6:5f:36:50:57:ea:ee:e7:bd:80:9a: e8:e3:fe:79:85:a0:ab:3f:c8:24:eb:df:d9:43:74:de:96:40: a8:a3:24:23:4d:e9:61:9e:51:94:43:f8:b2:db:1f:87:37:27: 28:62:3d:c2:54:b1:f0:c8:ad:9d:ee:f2:cc:db:a3:49:98:f5: 33:dd:50:5b:a2:13:31:52:dc:f1:c4:e3:f9:05:6f:2c:69:a5: 97:2b:ab:9e:51:d7:10:61:00:da:82:38:3f:4b:98:36:54:86: ab:71:fe:de:e9:b9:95:3b:34:90:1e:c7:d9:71:c2:a1:a2:14: 4b:41:e1:6f:54:79:3c:d8:bf:2b:d5:18:05:b9:fb:8f:cd:0a: a1:4c:c4:e7:63:ff:03:4a:36:7c:3b:a1:0c:e8:38:53:ec:bb: b0:cc:fb:1f:70:25:f1:75:80:40:41:8b:13:d9:c5:e4:44:39: c9:3e:fb:14:e8:63:f2:6d:f4:48:78:2d:10:e6:3d:5d:33:a2: fd:11:79:2e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxRDkxMTAvBgNVBAUTKEE4MEMzNjdGOTIyMjk0NkY5OEI4MzZCQ0U4RjZEMDAz NjQ4ODFDN0MwHhcNMjUwNzI2MTgyNzQ5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg1MWUyNS1jZTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaFZCNcsJPKkM7yikAVhBW0mBLWFfNO7T43oeYR/JV5rAIX3pZk6DSH5pEZp YPRdDIN32dd7HGTOY8wvZpl+VMfngR09sE5UegNEdnLfyjKGqiQgLPK2RsqBMbZg RGI4HMhpek89hXWb4mOVqW9H4jWbn8HW7shjp2HZrXsfgMifN6+fWy4tHgscipZz RgkMQ7I45UgKHK9AjSspmT/xql3nrFL/4dY/aJAXNen+uE9dRxDR1yLGdFkBPh3A gNWq71jsFg+kWDpxzKMC02d3KGuy85KXOl0qVlV1UAdXqwILeXkPcHbT3i8CGLr/ P3Ka74wEPCyshChs7z8cO2slUQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGbIIIAY FIUf65RDoYk+FRe7ZVXDMB8GA1UdIwQYMBaAFKgMNn+SIpRvmLg2vOj20ANkiBx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDFEOS82QTM5QTBERUMz MzgxMUU5ODA0OEZCN0RDNEY5QUUwMi9xQXcyZjVJaWxHLVl1RGE4NlBiUUEyU0lI SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FBdzJmNUlpbEctWXVEYTg2UGJRQTJTSUhIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQxRDkvNkEzOUEwREVDMzM4MTFFOTgwNDhGQjdEQzRGOUFFMDIvQzJFRDFFRUU2 MTcxMTFFQkJDNjc4NDU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJndPgwDQQCAAIwBwMFACQDDcAwDQYJKoZIhvcNAQELBQAD ggEBADG8S9Fw9i5IYlKCp+cXC4Q2gexN3nOx76P+9Yt0JTVPgKTlE2NS5mpuYlVN CTW05Et/ctbsOVZKgbpCHN+2XzZQV+ru572Amujj/nmFoKs/yCTr39lDdN6WQKij JCNN6WGeUZRD+LLbH4c3JyhiPcJUsfDIrZ3u8szbo0mY9TPdUFuiEzFS3PHE4/kF byxppZcrq55R1xBhANqCOD9LmDZUhqtx/t7puZU7NJAex9lxwqGiFEtB4W9UeTzY vyvVGAW5+4/NCqFMxOdj/wNKNnw7oQzoOFPsu7DM+x9wJfF1gEBBixPZxeREOck+ +xToY/Jt9Eh4LRDmPV0zov0ReS4= -----END CERTIFICATE-----Generated at Sat Aug 9 10:44:33 2025 by rpki-client