$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/B70383D6385411E9A0023656C4F9AE02.roa File: B70383D6385411E9A0023656C4F9AE02.roa (raw, json) Hash identifier: hZ5doOK+jse2f7YOUsrZen2UhaHJhjvMNUJY2o1BAWU= Subject key identifier: 5A:F5:A5:0F:F3:EC:EC:4B:55:EA:67:3E:49:A7:7D:68:86:BE:80:1B Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Certificate serial: 106B Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/B70383D6385411E9A0023656C4F9AE02.roa Signing time: Mon 30 Jun 2025 17:49:48 +0000 ROA not before: Mon 30 Jun 2025 17:49:48 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 136598 IP address blocks: 103.93.90.0/24 maxlen: 24 103.96.234.0/24 maxlen: 24 103.96.235.0/24 maxlen: 24 103.122.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4203 (0x106b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C Validity Not Before: Jun 30 17:49:48 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6862ce3c-e5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e2:12:16:8d:f0:e1:f8:86:e7:cd:02:f8:39: 64:f9:89:45:64:4a:3c:67:0a:2e:67:ce:68:44:f2: 72:92:dd:a5:29:77:ed:29:ea:51:ab:27:6d:dd:b0: 5b:60:3e:fc:54:11:cd:d6:57:36:94:77:c3:dc:8d: e7:4c:7e:5d:31:e1:51:f5:05:4a:79:6c:3f:91:11: 30:f3:a2:26:b7:82:d0:df:0c:90:19:a8:00:1e:16: b1:eb:18:d6:f6:31:6e:82:d0:75:ec:d0:f5:41:ad: 7b:05:e0:49:b9:b2:4b:bb:d4:b4:09:2f:67:c6:50: f1:f1:01:35:c1:32:c6:a3:35:0a:f0:b3:49:e8:70: 2e:03:0d:96:03:f8:e4:9c:40:ce:2c:03:73:c9:e5: b5:37:db:eb:51:18:7f:53:3e:9d:3f:0c:61:15:0b: 6c:8f:27:19:82:f6:29:2e:40:e2:a1:82:d5:8f:15: 90:41:91:a5:ea:de:22:08:6d:03:f0:32:29:f8:a3: 18:31:51:33:ab:de:e5:82:15:61:65:6c:82:b8:1d: 64:e4:7c:04:c4:8c:64:a5:90:d9:bd:1d:c9:bf:6e: 2f:c0:75:46:53:a3:d6:70:6a:56:a0:8e:f8:21:ae: 0d:c6:d2:4c:3f:f1:bd:3b:70:5a:8a:c0:ba:2c:68: b9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F5:A5:0F:F3:EC:EC:4B:55:EA:67:3E:49:A7:7D:68:86:BE:80:1B X509v3 Authority Key Identifier: keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/B70383D6385411E9A0023656C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.93.90.0/24 103.96.234.0/23 103.122.44.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:39:d6:3f:7f:e9:5b:17:0a:2b:25:a1:c6:cf:e7:75:52:5f: ad:75:31:40:3d:ae:a4:de:a4:a6:a2:5f:c8:b3:25:07:d9:18: ab:c3:73:97:fa:3a:a6:8d:12:6c:df:18:bc:5b:52:b4:41:ef: ec:ff:d6:c4:bd:95:88:ab:3c:de:09:d0:f6:c7:14:58:8d:a2: da:18:a1:08:7f:17:6a:54:2a:cc:b3:19:82:34:2c:09:bd:93: 96:44:fa:9e:17:03:c7:4f:28:2a:48:63:12:37:c7:ae:c9:6d: 71:1a:ed:48:d0:f3:f6:dd:8c:d0:94:a8:f7:fb:f8:ee:42:5c: f5:23:0b:d5:50:77:11:81:70:c2:07:8e:43:c3:44:a1:15:32: ce:08:20:f0:1b:af:d8:18:68:a3:6b:69:69:ef:53:a0:9b:93: 63:ad:44:98:b4:c4:47:5d:32:5c:75:f5:99:66:dd:cd:29:1d: 0b:70:86:2c:33:5b:6b:80:8a:42:0a:29:6a:1e:10:3f:33:14: 20:1d:55:96:4f:3e:02:58:ad:ec:47:a5:88:ec:ae:e1:84:4e: ff:3c:83:40:5f:2b:18:c2:1a:b5:79:76:b6:b9:4b:de:3f:40: 32:87:51:b7:97:ed:4d:ee:55:4c:c1:91:1b:e7:d1:76:87:aa: 2e:4c:77:ec -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICEGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlCOUUxMTAvBgNVBAUTKDI1MDRFOUY4MEE5ODQyQjU0QTQ5MjY5Q0MyRjRCMUFD MkI2RTg1NEMwHhcNMjUwNjMwMTc0OTQ4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYyY2UzYy1lNWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8OISFo3w4fiG580C+Dlk+YlFZEo8ZwouZ85oRPJykt2lKXftKepRqydt3bBb YD78VBHN1lc2lHfD3I3nTH5dMeFR9QVKeWw/kREw86Imt4LQ3wyQGagAHhax6xjW 9jFugtB17ND1Qa17BeBJubJLu9S0CS9nxlDx8QE1wTLGozUK8LNJ6HAuAw2WA/jk nEDOLANzyeW1N9vrURh/Uz6dPwxhFQtsjycZgvYpLkDioYLVjxWQQZGl6t4iCG0D 8DIp+KMYMVEzq97lghVhZWyCuB1k5HwExIxkpZDZvR3Jv24vwHVGU6PWcGpWoI74 Ia4NxtJMP/G9O3BaisC6LGi5nQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFFr1pQ/z 7OxLVepnPkmnfWiGvoAbMB8GA1UdIwQYMBaAFCUE6fgKmEK1SkkmnML0sawrboVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUI5RS85OEI1N0Q4NjM4 NTMxMUU5QUQ0NDI4NTJDNEY5QUUwMi9KUVRwLUFxWVFyVktTU2Fjd3ZTeHJDdHVo VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRVHAtQXFZUXJWS1NTYWN3dlN4ckN0dWhVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjlCOUUvOThCNTdEODYzODUzMTFFOUFENDQyODUyQzRGOUFFMDIvQjcwMzgzRDYz ODU0MTFFOUEwMDIzNjU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnXVoDBAFnYOoDBABneiwwDQYJKoZIhvcNAQELBQADggEB AAo51j9/6VsXCislocbP53VSX611MUA9rqTepKaiX8izJQfZGKvDc5f6OqaNEmzf GLxbUrRB7+z/1sS9lYirPN4J0PbHFFiNotoYoQh/F2pUKsyzGYI0LAm9k5ZE+p4X A8dPKCpIYxI3x67JbXEa7UjQ8/bdjNCUqPf7+O5CXPUjC9VQdxGBcMIHjkPDRKEV Ms4IIPAbr9gYaKNraWnvU6Cbk2OtRJi0xEddMlx19Zlm3c0pHQtwhiwzW2uAikIK KWoeED8zFCAdVZZPPgJYrexHpYjsruGETv88g0BfKxjCGrV5dra5S94/QDKHUbeX 7U3uVUzBkRvn0XaHqi5Md+w= -----END CERTIFICATE-----Generated at Thu Jul 3 17:20:17 2025 by rpki-client