$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/B65C355AE1E411EAAD5D8545C4F9AE02.roa File: B65C355AE1E411EAAD5D8545C4F9AE02.roa (raw, json) Hash identifier: EHew2Al89yfLEVdXGaRbj1T8KtGh2w0PUC3MBSskoUY= Subject key identifier: 4D:35:5B:42:2B:36:C0:B9:22:AB:20:5B:29:4B:36:F2:AD:5F:F8:55 Certificate issuer: /CN=A919DA63/serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Certificate serial: 081E Authority key identifier: CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/B65C355AE1E411EAAD5D8545C4F9AE02.roa Signing time: Wed 30 Jul 2025 21:32:12 +0000 ROA not before: Wed 30 Jul 2025 21:32:12 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 136741 IP address blocks: 103.95.0.0/22 maxlen: 22 103.95.0.0/24 maxlen: 24 103.95.1.0/24 maxlen: 24 103.95.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2078 (0x81e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA63, serialNumber=CA195E7FD2598D85A36C99EC481B3574C06E3B17 Validity Not Before: Jul 30 21:32:12 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688a8f5c-5183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:30:8c:19:4d:79:df:75:c2:05:32:44:4d: 97:ce:37:b4:6b:0c:da:e9:05:d9:89:eb:61:38:a8: 60:ca:4f:44:e4:0f:db:0f:e3:85:35:92:77:34:6d: 30:0d:3b:92:fd:1e:a0:59:e1:48:6e:ee:37:9e:40: 6d:37:4f:3d:e4:4b:a1:27:c8:4e:c6:88:f1:b6:7b: 3c:ac:0e:f5:f8:d7:8e:1f:2a:78:d7:9e:6b:22:f4: 1b:7c:88:4c:a0:a0:2d:24:af:4c:3e:71:77:3c:19: 5c:16:fc:33:6b:41:5c:46:22:93:a2:48:dc:51:e1: 37:75:7c:d7:92:87:5a:45:cc:20:02:fc:46:59:03: 1c:32:26:59:af:4a:54:64:f9:60:48:34:d8:5a:98: e2:96:be:12:b7:24:a1:84:61:97:64:cd:f7:69:be: a7:5c:a4:ab:10:2b:b4:5f:cd:e9:61:f6:45:1f:a3: 26:3f:b4:fe:25:e1:06:a0:5f:73:c9:47:3e:45:30: a4:13:65:bd:81:22:21:cb:a8:a4:dd:da:c3:3a:dc: 20:87:1b:9a:02:e8:98:8b:a6:76:85:b0:96:37:6b: 26:e4:f9:fd:e4:7c:a1:f7:10:81:40:40:fc:ca:7f: 80:b7:3d:66:71:3f:56:57:6a:97:af:26:e2:57:39: fd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:35:5B:42:2B:36:C0:B9:22:AB:20:5B:29:4B:36:F2:AD:5F:F8:55 X509v3 Authority Key Identifier: keyid:CA:19:5E:7F:D2:59:8D:85:A3:6C:99:EC:48:1B:35:74:C0:6E:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/yhlef9JZjYWjbJnsSBs1dMBuOxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhlef9JZjYWjbJnsSBs1dMBuOxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA63/01BF7BEEE1E311EAB497DD28C4F9AE02/B65C355AE1E411EAAD5D8545C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.95.0.0/22 Signature Algorithm: sha256WithRSAEncryption 79:a4:77:46:bb:4f:b6:03:db:23:ed:6d:84:b9:18:f1:5e:6b: 4a:77:af:05:92:4d:7d:10:80:42:6a:98:d6:d5:a2:a3:94:86: 74:f3:ff:57:b5:09:9a:fa:1e:92:0f:8f:e6:d0:1b:2e:d5:ac: 88:b2:d8:53:ea:64:fc:20:c0:80:34:c1:22:38:c3:76:25:a5: ee:4d:c1:01:5d:93:2f:b2:e2:60:60:5a:a2:af:a5:4c:f1:20: 28:70:d3:30:4f:2f:f0:12:b4:6d:e7:b8:da:3d:42:80:43:81: c1:38:d7:be:33:02:8b:4b:6a:c5:b6:ce:44:15:eb:78:b2:9e: 40:ea:6e:1c:aa:9e:bb:0b:4a:54:ca:88:2c:f1:bb:08:44:1a: 68:c7:31:66:f2:87:57:ca:42:89:74:e1:42:65:1f:c1:2c:04: d0:39:d1:1a:b0:a7:ef:b2:d1:7a:2e:f8:f7:41:78:26:77:a9: a0:0b:9d:72:7c:0b:81:97:6a:09:8f:d9:56:75:2a:5e:aa:be: a6:22:d4:93:87:72:14:b4:fe:58:9e:06:86:11:bf:82:4d:6f: 1b:6e:1a:37:1f:8c:0a:b8:c9:bb:98:b3:82:aa:e0:53:a8:64: b0:10:e4:ce:1e:5c:c1:22:da:3a:7e:91:e6:52:d0:a0:9d:e1: 4a:d9:6a:c4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBNjMxMTAvBgNVBAUTKENBMTk1RTdGRDI1OThEODVBMzZDOTlFQzQ4MUIzNTc0 QzA2RTNCMTcwHhcNMjUwNzMwMjEzMjEyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhhOGY1Yy01MTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSUwjBlNed91wgUyRE2Xzje0awza6QXZiethOKhgyk9E5A/bD+OFNZJ3NG0w DTuS/R6gWeFIbu43nkBtN0895EuhJ8hOxojxtns8rA71+NeOHyp4155rIvQbfIhM oKAtJK9MPnF3PBlcFvwza0FcRiKTokjcUeE3dXzXkodaRcwgAvxGWQMcMiZZr0pU ZPlgSDTYWpjilr4StyShhGGXZM33ab6nXKSrECu0X83pYfZFH6MmP7T+JeEGoF9z yUc+RTCkE2W9gSIhy6ik3drDOtwghxuaAuiYi6Z2hbCWN2sm5Pn95Hyh9xCBQED8 yn+Atz1mcT9WV2qXrybiVzn9wwIDAQABo4IClTCCApEwHQYDVR0OBBYEFE01W0Ir NsC5IqsgWylLNvKtX/hVMB8GA1UdIwQYMBaAFMoZXn/SWY2Fo2yZ7EgbNXTAbjsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REE2My8wMUJGN0JFRUUx RTMxMUVBQjQ5N0REMjhDNEY5QUUwMi95aGxlZjlKWmpZV2piSm5zU0JzMWRNQnVP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lobGVmOUpaallXamJKbnNTQnMxZE1CdU94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OURBNjMvMDFCRjdCRUVFMUUzMTFFQUI0OTdERDI4QzRGOUFFMDIvQjY1QzM1NUFF MUU0MTFFQUFENUQ4NTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnXwAwDQYJKoZIhvcNAQELBQADggEBAHmkd0a7T7YD2yPt bYS5GPFea0p3rwWSTX0QgEJqmNbVoqOUhnTz/1e1CZr6HpIPj+bQGy7VrIiy2FPq ZPwgwIA0wSI4w3Ylpe5NwQFdky+y4mBgWqKvpUzxIChw0zBPL/AStG3nuNo9QoBD gcE4174zAotLasW2zkQV63iynkDqbhyqnrsLSlTKiCzxuwhEGmjHMWbyh1fKQol0 4UJlH8EsBNA50Rqwp++y0Xou+PdBeCZ3qaALnXJ8C4GXagmP2VZ1Kl6qvqYi1JOH chS0/lieBoYRv4JNbxtuGjcfjAq4ybuYs4Kq4FOoZLAQ5M4eXMEi2jp+keZS0KCd 4UrZasQ= -----END CERTIFICATE-----Generated at Sun Aug 10 05:35:34 2025 by rpki-client