$ rpki-client -vvf rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/802FBE707FEB11EB8B5E2817C4F9AE02.roa File: 802FBE707FEB11EB8B5E2817C4F9AE02.roa (raw, json) Hash identifier: 7A1IMu+LIGDsrLSPFNBgTLonAK/3FwEXR3H+PIKYqo0= Subject key identifier: 86:95:4C:7B:95:B2:CD:23:28:34:A6:20:16:82:94:B6:06:8A:9C:D4 Certificate issuer: /CN=A911894F/serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Certificate serial: 2673 Authority key identifier: 36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/802FBE707FEB11EB8B5E2817C4F9AE02.roa Signing time: Thu 10 Jul 2025 15:52:53 +0000 ROA not before: Thu 10 Jul 2025 15:52:53 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 58666 IP address blocks: 43.245.80.0/22 maxlen: 23 103.14.68.0/22 maxlen: 23 103.232.180.0/22 maxlen: 23 2404:5700::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9843 (0x2673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911894F, serialNumber=361290692899082CDE23F50453A4155E0AAB7978 Validity Not Before: Jul 10 15:52:53 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686fe1d5-06bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bb:b4:5c:da:f0:84:7f:66:87:cb:b6:e3:dd: 6d:2d:44:cd:57:6c:d0:41:67:28:a9:6d:39:1c:04: 75:ef:90:fe:16:d6:6d:ac:56:31:42:f6:d3:11:f7: a1:84:df:1a:82:93:7b:d9:0e:86:4a:a1:ff:ea:19: 14:49:1d:05:e5:0d:f1:ae:80:6c:39:17:ea:f6:34: 87:a1:2b:10:77:49:00:ce:35:70:22:3b:5d:7c:9d: 1e:7f:7a:4f:c6:7b:5b:33:42:a9:9b:7c:af:f5:7f: 9e:de:ea:b2:b4:95:d7:f2:89:5e:fb:2c:37:ff:d6: 95:fe:dd:b2:bf:76:40:0c:42:b0:06:b5:51:ac:25: 19:bf:7d:4b:49:68:bb:3a:5f:73:49:b1:1f:98:06: 64:5b:9e:46:8f:c3:69:00:90:67:5b:83:05:17:f7: c2:1b:c7:43:9e:d9:86:79:6c:9c:05:ad:4d:2b:7a: d4:10:87:c4:be:bc:8b:48:85:5c:d7:0e:ab:d1:b9: af:68:98:68:61:02:25:d0:96:e5:c9:2c:6e:ef:a8: 39:7b:27:40:a5:bb:d1:62:e0:3f:b3:c1:4b:ad:49: 01:d9:08:73:ca:2c:fd:31:e5:84:e1:2e:55:2d:4b: b7:d0:da:20:97:23:82:45:90:fb:f1:b1:33:19:5e: 21:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:95:4C:7B:95:B2:CD:23:28:34:A6:20:16:82:94:B6:06:8A:9C:D4 X509v3 Authority Key Identifier: keyid:36:12:90:69:28:99:08:2C:DE:23:F5:04:53:A4:15:5E:0A:AB:79:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/NhKQaSiZCCzeI_UEU6QVXgqreXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhKQaSiZCCzeI_UEU6QVXgqreXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911894F/963CF0CEEC5E11E48E7D0119C4F9AE02/802FBE707FEB11EB8B5E2817C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.80.0/22 103.14.68.0/22 103.232.180.0/22 IPv6: 2404:5700::/32 Signature Algorithm: sha256WithRSAEncryption 4c:6f:9e:f5:97:c7:55:1f:14:9f:b4:3a:cb:84:02:66:74:87: eb:58:9f:35:e1:da:4a:b4:b2:95:bf:7e:46:0c:86:fd:7b:21: bd:60:42:3d:4c:5c:18:29:35:f2:14:e1:05:cd:d9:ee:7c:4b: de:ad:a3:45:b6:0a:5c:6c:03:5a:44:d8:f0:8b:5a:50:65:09: 7a:7d:ab:38:e8:39:e0:70:bf:af:80:ac:03:ea:f7:fb:06:2f: 1c:8e:e6:7b:79:a4:56:e6:93:88:90:f8:12:1c:b8:a7:99:14: 4d:4e:3e:40:01:54:fd:e1:64:3b:1e:88:dd:3b:d6:2a:f5:15: 0a:60:45:64:e6:38:87:58:46:2f:63:ef:d5:ef:2a:64:84:62: 41:23:5f:3e:77:4f:ad:ef:9f:f3:d4:07:4a:33:0b:1d:9a:42: 28:46:b8:45:21:0f:90:c7:49:6e:7d:cc:61:63:07:74:ee:8f: 27:32:ec:b8:0b:8d:29:fe:a7:a9:b2:f6:28:a5:1d:0e:e8:d6: 62:03:ad:99:8a:28:c7:d3:45:8a:62:59:82:15:77:bb:59:5f: ff:aa:89:e6:ab:55:1c:35:9b:73:f8:29:9f:83:ed:be:f0:a2: 0e:b1:9c:5e:31:a4:c0:d5:2c:5e:de:9a:77:7f:45:84:5f:c8: d6:61:92:a9 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICJnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg5NEYxMTAvBgNVBAUTKDM2MTI5MDY5Mjg5OTA4MkNERTIzRjUwNDUzQTQxNTVF MEFBQjc5NzgwHhcNMjUwNzEwMTU1MjUzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZmZTFkNS0wNmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7u0XNrwhH9mh8u2491tLUTNV2zQQWcoqW05HAR175D+FtZtrFYxQvbTEfeh hN8agpN72Q6GSqH/6hkUSR0F5Q3xroBsORfq9jSHoSsQd0kAzjVwIjtdfJ0ef3pP xntbM0Kpm3yv9X+e3uqytJXX8ole+yw3/9aV/t2yv3ZADEKwBrVRrCUZv31LSWi7 Ol9zSbEfmAZkW55Gj8NpAJBnW4MFF/fCG8dDntmGeWycBa1NK3rUEIfEvryLSIVc 1w6r0bmvaJhoYQIl0JblySxu76g5eydApbvRYuA/s8FLrUkB2Qhzyiz9MeWE4S5V LUu30NoglyOCRZD78bEzGV4hwQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIaVTHuV ss0jKDSmIBaClLYGipzUMB8GA1UdIwQYMBaAFDYSkGkomQgs3iP1BFOkFV4Kq3l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk0Ri85NjNDRjBDRUVD NUUxMUU0OEU3RDAxMTlDNEY5QUUwMi9OaEtRYVNpWkNDemVJX1VFVTZRVlhncXJl WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05oS1FhU2laQ0N6ZUlfVUVVNlFWWGdxcmVYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTg5NEYvOTYzQ0YwQ0VFQzVFMTFFNDhFN0QwMTE5QzRGOUFFMDIvODAyRkJFNzA3 RkVCMTFFQjhCNUUyODE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAIr9VADBAJnDkQDBAJn6LQwDQQCAAIwBwMFACQEVwAwDQYJ KoZIhvcNAQELBQADggEBAExvnvWXx1UfFJ+0OsuEAmZ0h+tYnzXh2kq0spW/fkYM hv17Ib1gQj1MXBgpNfIU4QXN2e58S96to0W2ClxsA1pE2PCLWlBlCXp9qzjoOeBw v6+ArAPq9/sGLxyO5nt5pFbmk4iQ+BIcuKeZFE1OPkABVP3hZDseiN071ir1FQpg RWTmOIdYRi9j79XvKmSEYkEjXz53T63vn/PUB0ozCx2aQihGuEUhD5DHSW59zGFj B3Tujycy7LgLjSn+p6my9iilHQ7o1mIDrZmKKMfTRYpiWYIVd7tZX/+qiearVRw1 m3P4KZ+D7b7wog6xnF4xpMDVLF7emnd/RYRfyNZhkqk= -----END CERTIFICATE-----Generated at Sun Aug 24 11:35:58 2025 by rpki-client