$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/545743246D1911E7A4448D81C4F9AE02.roa File: 545743246D1911E7A4448D81C4F9AE02.roa (raw, json) Hash identifier: 93fAGoBbKb8s2g7H+M2m6OkfN68jU6Ckev28RigcvkM= Subject key identifier: 58:55:C0:8E:03:17:B1:27:EC:D2:1D:F2:1B:D9:AB:71:BA:9D:7B:8C Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Certificate serial: 19BA Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/545743246D1911E7A4448D81C4F9AE02.roa Signing time: Sat 02 Aug 2025 16:55:10 +0000 ROA not before: Sat 02 Aug 2025 16:55:10 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 9234 IP address blocks: 103.11.140.0/23 maxlen: 24 103.29.106.0/23 maxlen: 24 203.78.148.0/22 maxlen: 22 203.78.148.0/24 maxlen: 24 203.78.149.0/24 maxlen: 24 203.78.150.0/24 maxlen: 24 203.78.151.0/24 maxlen: 24 2402:5900::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6586 (0x19ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Validity Not Before: Aug 2 16:55:10 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688e42ed-2ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:49:5a:21:e4:78:e0:42:4b:92:f7:f8:4e:92: cf:55:56:5f:3a:f5:56:89:2a:0e:bc:6a:0d:33:b2: 5b:f5:9c:c7:ad:35:e8:7a:10:5e:e7:0d:4a:fc:8c: f1:32:46:1b:08:e6:78:3f:5b:a2:5e:67:38:26:fb: 05:5c:56:7f:d0:71:c6:67:22:64:8a:99:41:27:c8: 7b:03:16:31:e5:e9:4d:50:80:1d:6f:dd:40:d3:e9: dd:d5:d4:03:2a:70:94:5c:4b:8e:b4:23:c0:be:9d: c5:94:d3:9a:eb:bf:3e:fa:30:bb:69:c5:f4:c4:00: 2d:a5:5b:ef:09:eb:54:a5:3d:a5:90:3b:6e:34:f6: 8b:9a:cb:cb:96:85:7c:49:32:4c:b5:c1:a5:c0:e6: 4f:35:12:82:f5:2c:a5:13:31:95:66:18:b9:05:7f: a4:a9:bf:08:87:e3:5c:25:70:91:9d:d8:ca:10:f6: e0:73:9b:e5:42:49:11:4c:13:31:51:a4:fb:dc:12: fa:83:94:1a:23:ac:e4:e4:2e:66:4b:65:20:b6:f1: ff:09:37:47:df:23:cd:73:53:5c:31:6b:54:61:a2: c7:a2:12:a7:25:dc:37:3f:d8:cb:90:f2:95:e9:4d: 1b:0e:d6:6b:64:d0:b5:88:33:81:1c:fa:6e:7a:87: cd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:55:C0:8E:03:17:B1:27:EC:D2:1D:F2:1B:D9:AB:71:BA:9D:7B:8C X509v3 Authority Key Identifier: keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/545743246D1911E7A4448D81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.11.140.0/23 103.29.106.0/23 203.78.148.0/22 IPv6: 2402:5900::/32 Signature Algorithm: sha256WithRSAEncryption 0b:68:0f:4b:fc:6e:94:42:0c:8a:cf:81:53:c6:ea:d1:87:5f: d2:d7:0f:48:8b:03:73:6c:03:a0:6e:6c:9b:59:02:d6:a9:b6: 93:86:96:a2:b9:d7:37:33:a3:a6:ca:25:77:dc:3a:ec:de:7e: a4:c4:9c:70:a3:79:68:c7:3d:da:07:ae:8b:2f:70:b1:a6:e9: ca:31:d0:23:e3:43:4d:8a:2e:a1:d3:f4:84:63:46:01:e1:2f: 90:14:a8:28:9c:ca:58:19:64:a7:05:07:91:25:d1:69:24:18: 46:b8:d7:fd:4e:8d:d7:b1:20:b4:2b:80:d5:8b:7a:d0:c1:da: cf:53:1a:d4:56:3d:36:48:41:b3:d6:10:ba:6d:b4:21:9e:66: 8d:28:1c:22:dc:c8:99:f4:d6:77:1b:5b:ad:c8:e8:97:67:71: f0:51:22:63:03:ac:c2:11:a3:6f:34:cb:53:79:d7:e4:f0:12: 4b:b8:7f:13:cf:e1:60:ce:66:92:54:7e:83:f1:f5:44:e0:4e: 05:2a:ce:4c:52:14:50:2a:48:10:e8:4c:52:94:28:fc:1d:24: 26:fc:83:37:5a:0f:ce:28:16:ef:70:ed:44:37:dc:9f:e2:81: f3:61:e4:03:25:23:81:5e:41:47:f4:e8:67:95:38:46:07:d0: ef:48:8a:2a -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICGbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKEVEMzY5NDIxOERDQjFFQUYzRDFBRjVDNkFCQzAzMUE2 REI3RTZDRTUwHhcNMjUwODAyMTY1NTEwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlNDJlZC0yZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyElaIeR44EJLkvf4TpLPVVZfOvVWiSoOvGoNM7Jb9ZzHrTXoehBe5w1K/Izx MkYbCOZ4P1uiXmc4JvsFXFZ/0HHGZyJkiplBJ8h7AxYx5elNUIAdb91A0+nd1dQD KnCUXEuOtCPAvp3FlNOa678++jC7acX0xAAtpVvvCetUpT2lkDtuNPaLmsvLloV8 STJMtcGlwOZPNRKC9SylEzGVZhi5BX+kqb8Ih+NcJXCRndjKEPbgc5vlQkkRTBMx UaT73BL6g5QaI6zk5C5mS2UgtvH/CTdH3yPNc1NcMWtUYaLHohKnJdw3P9jLkPKV 6U0bDtZrZNC1iDOBHPpueofNbQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFFhVwI4D F7En7NId8hvZq3G6nXuMMB8GA1UdIwQYMBaAFO02lCGNyx6vPRr1xqvAMabbfmzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85RDIwMERCQzZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhxODlHdlhHcThBeHB0dC1i T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUYVVJWTNMSHE4OUd2WEdxOEF4cHR0LWJPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVBRjMvOUQyMDBEQkM2RDE4MTFFN0E4MTVEQTgwQzRGOUFFMDIvNTQ1NzQzMjQ2 RDE5MTFFN0E0NDQ4RDgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAFnC4wDBAFnHWoDBALLTpQwDQQCAAIwBwMFACQCWQAwDQYJ KoZIhvcNAQELBQADggEBAAtoD0v8bpRCDIrPgVPG6tGHX9LXD0iLA3NsA6BubJtZ AtaptpOGlqK51zczo6bKJXfcOuzefqTEnHCjeWjHPdoHrosvcLGm6cox0CPjQ02K LqHT9IRjRgHhL5AUqCicylgZZKcFB5El0WkkGEa41/1OjdexILQrgNWLetDB2s9T GtRWPTZIQbPWELpttCGeZo0oHCLcyJn01ncbW63I6JdncfBRImMDrMIRo280y1N5 1+TwEku4fxPP4WDOZpJUfoPx9UTgTgUqzkxSFFAqSBDoTFKUKPwdJCb8gzdaD84o Fu9w7UQ33J/igfNh5AMlI4FeQUf06GeVOEYH0O9Iiio= -----END CERTIFICATE-----Generated at Wed Aug 13 00:27:40 2025 by rpki-client