$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/D98071A44F4411F0AF01D40FC4F9AE02.roa File: D98071A44F4411F0AF01D40FC4F9AE02.roa (raw, json) Hash identifier: bPBsCe6a2VFWcNMWeHmOx+7VTXSQy1aeyYkZxcsxaxU= Subject key identifier: DC:69:7B:76:7A:CB:AA:2D:C9:E5:30:88:BE:CA:D7:20:82:EE:17:04 Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Certificate serial: 01FF Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/D98071A44F4411F0AF01D40FC4F9AE02.roa Signing time: Sun 22 Jun 2025 08:42:37 +0000 ROA not before: Sun 22 Jun 2025 08:42:37 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 150434 IP address blocks: 103.40.156.0/23 maxlen: 24 2400:c360::/36 maxlen: 36 2400:c360:1000::/36 maxlen: 36 2400:c360:2000::/36 maxlen: 36 2400:c360:3000::/36 maxlen: 36 2400:c360:4000::/36 maxlen: 36 2400:c360:5000::/36 maxlen: 36 2400:c360:6000::/36 maxlen: 36 2400:c360:7000::/36 maxlen: 36 2400:c360:8000::/36 maxlen: 36 2400:c360:9000::/36 maxlen: 36 2400:c360:a000::/36 maxlen: 36 2400:c360:b000::/36 maxlen: 36 2400:c360:c000::/36 maxlen: 36 2400:c360:d000::/36 maxlen: 36 2400:c360:e000::/36 maxlen: 36 2400:c360:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911636A, serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Validity Not Before: Jun 22 08:42:37 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6857c1fd-a669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0d:24:19:fc:86:c8:1b:46:65:b9:6b:a9:04: ca:e6:c9:c4:45:8d:6d:1d:64:6a:23:46:3e:2a:70: 61:18:9a:e7:72:c4:71:86:0f:ef:94:db:82:ee:99: 3f:26:03:dd:e3:06:4d:48:ee:22:63:7f:ba:f2:f9: d5:ce:27:58:76:90:d6:b0:96:7c:39:cb:58:c4:01: 0b:e5:23:ec:53:4a:ef:5e:49:84:75:75:28:7a:8d: c7:04:f0:cb:9c:4e:f3:82:2d:42:de:a0:56:11:20: a4:9d:ba:f7:1e:e1:80:24:48:03:45:71:30:98:13: 86:8c:47:46:3d:67:15:b6:94:a4:18:e3:e4:27:ca: 44:41:b4:a6:54:d2:50:ed:e9:9b:60:80:33:96:0c: 23:86:1e:e0:29:ad:9d:ad:f9:8c:38:43:b0:dc:78: b5:35:a7:8b:0c:ea:b6:1b:ec:d0:5b:71:2d:36:b5: 56:ee:41:85:ef:a1:3b:10:b3:9f:39:1e:cc:df:55: 85:92:ac:8d:3c:86:b8:00:d7:34:4e:34:eb:7b:73: ea:c2:00:9a:ab:01:6d:b2:7f:3d:32:7d:15:94:0c: 89:19:8a:a5:02:68:14:ef:0d:93:13:9c:83:6b:2a: f9:43:05:ac:68:4f:95:04:0b:29:d4:e5:be:92:d0: 92:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:69:7B:76:7A:CB:AA:2D:C9:E5:30:88:BE:CA:D7:20:82:EE:17:04 X509v3 Authority Key Identifier: keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/D98071A44F4411F0AF01D40FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.156.0/23 IPv6: 2400:c360::/32 Signature Algorithm: sha256WithRSAEncryption 38:71:05:a6:05:6d:df:81:fb:96:8d:c3:3f:51:6a:db:f7:ea: cf:b7:f9:6d:7f:45:ff:67:59:29:7c:b7:62:9f:ea:99:04:2f: ae:8d:56:99:4e:43:93:d2:e0:c7:ca:d1:e5:3c:55:76:e7:a7: 02:a6:62:17:4a:1f:d8:d1:29:83:39:ef:22:ff:c7:a3:b7:fd: 19:66:2d:09:5a:c3:da:94:f1:94:a1:24:72:a5:0a:73:c4:e1: df:d5:f9:41:f0:b7:bd:27:db:25:98:f0:4a:1d:cd:87:e6:37: f2:cd:c4:16:a9:b2:a6:e5:56:13:a6:6b:e8:0a:ee:9d:a6:31: e8:82:81:7c:9b:e7:6c:71:d5:52:fa:a0:da:5e:f6:9a:70:54: df:b4:be:0b:c4:43:06:0b:2f:96:75:d9:8a:a5:f2:b6:1c:06: 7e:22:a9:a6:7d:c3:09:10:c3:d8:ca:04:3f:82:c3:ca:74:a5: 18:24:c0:51:49:07:ce:bc:1e:60:53:10:3c:fd:cf:3f:1e:e5: b2:e0:a1:4c:12:93:d1:c4:df:d0:59:56:33:7d:3c:19:30:88: 8d:fa:91:8a:d8:8b:77:b2:72:f9:ea:22:ea:2f:ed:4a:dc:5f: d2:96:ed:bd:28:e2:19:52:bc:0c:72:38:72:a3:48:76:e8:fe: 99:56:f9:20 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNkExMTAvBgNVBAUTKDVDOUNDMTE0MkE5MDc1NjBDRDk5RjA2RTVERDAyREU0 RTIyRTk0NDUwHhcNMjUwNjIyMDg0MjM3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU3YzFmZC1hNjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqg0kGfyGyBtGZblrqQTK5snERY1tHWRqI0Y+KnBhGJrncsRxhg/vlNuC7pk/ JgPd4wZNSO4iY3+68vnVzidYdpDWsJZ8OctYxAEL5SPsU0rvXkmEdXUoeo3HBPDL nE7zgi1C3qBWESCknbr3HuGAJEgDRXEwmBOGjEdGPWcVtpSkGOPkJ8pEQbSmVNJQ 7embYIAzlgwjhh7gKa2drfmMOEOw3Hi1NaeLDOq2G+zQW3EtNrVW7kGF76E7ELOf OR7M31WFkqyNPIa4ANc0TjTre3PqwgCaqwFtsn89Mn0VlAyJGYqlAmgU7w2TE5yD ayr5QwWsaE+VBAsp1OW+ktCSHQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNxpe3Z6 y6otyeUwiL7K1yCC7hcEMB8GA1UdIwQYMBaAFFycwRQqkHVgzZnwbl3QLeTiLpRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM2QS9CMEYzM0QyQTY2 RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRXRE5tZkJ1WGRBdDVPSXVs RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKekJGQ3FRZFdETm1mQnVYZEF0NU9JdWxFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTYzNkEvQjBGMzNEMkE2NkVFMTFFREIzQjQxQTVEQzRGOUFFMDIvRDk4MDcxQTQ0 RjQ0MTFGMEFGMDFENDBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnKJwwDQQCAAIwBwMFACQAw2AwDQYJKoZIhvcNAQELBQAD ggEBADhxBaYFbd+B+5aNwz9Ratv36s+3+W1/Rf9nWSl8t2Kf6pkEL66NVplOQ5PS 4MfK0eU8VXbnpwKmYhdKH9jRKYM57yL/x6O3/RlmLQlaw9qU8ZShJHKlCnPE4d/V +UHwt70n2yWY8EodzYfmN/LNxBapsqblVhOma+gK7p2mMeiCgXyb52xx1VL6oNpe 9ppwVN+0vgvEQwYLL5Z12Yql8rYcBn4iqaZ9wwkQw9jKBD+Cw8p0pRgkwFFJB868 HmBTEDz9zz8e5bLgoUwSk9HE39BZVjN9PBkwiI36kYrYi3eycvnqIuov7UrcX9KW 7b0o4hlSvAxyOHKjSHbo/plW+SA= -----END CERTIFICATE-----Generated at Thu Jul 3 17:34:48 2025 by rpki-client