$ rpki-client -vvf rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/76CF6D4C746E11EE8A2F7739C4F9AE02.roa File: 76CF6D4C746E11EE8A2F7739C4F9AE02.roa (raw, json) Hash identifier: EklU2yYDZmbaPYZyZPtK0kbQPPoSC3rB5vaEtJ2TbLI= Subject key identifier: 34:A0:7C:43:36:E4:64:A8:E0:BC:AA:E4:A3:3D:30:30:20:F1:BF:C1 Certificate issuer: /CN=A912C15B/serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Certificate serial: 013A Authority key identifier: 15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/76CF6D4C746E11EE8A2F7739C4F9AE02.roa Signing time: Wed 25 Jun 2025 04:13:35 +0000 ROA not before: Wed 25 Jun 2025 04:13:35 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140625 IP address blocks: 103.151.62.0/24 maxlen: 24 103.164.234.0/24 maxlen: 24 2001:df3:ac80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C15B, serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Validity Not Before: Jun 25 04:13:35 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685b776f-361d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:70:93:88:97:43:0b:79:1b:21:77:b4:dd:a5: 66:79:d1:60:9b:6a:11:ee:b0:89:f9:fb:07:6a:07: 59:9d:43:77:e8:87:9e:16:bf:0d:8b:8c:8e:80:f9: 96:60:7a:02:88:d5:f5:df:21:d1:e9:2b:fb:b3:e3: 49:94:f9:6f:16:62:ce:f2:07:e2:09:15:29:57:d8: 0d:0b:b7:48:3b:e4:a0:eb:26:b3:f3:da:13:64:e0: 06:af:9e:e4:11:19:7b:58:c7:f0:63:3e:91:a5:49: ef:24:42:7f:7f:20:4b:f0:89:92:82:bd:7c:d5:a0: 75:6d:04:5a:29:23:e1:af:80:0e:21:7e:27:bd:26: 83:79:cc:3d:4b:5f:06:aa:54:a6:bd:31:d2:7a:89: 4b:99:b0:04:fb:2c:a0:40:f7:2b:47:76:58:18:fa: 4e:54:64:bc:87:0a:02:bf:84:82:e4:e5:e7:ac:c9: 66:7b:3f:96:c2:d1:ff:2e:9b:1f:bc:aa:0d:53:5c: fc:30:cd:50:69:8e:95:68:76:99:32:a4:89:0f:a3: c3:d2:5e:5d:a1:a6:21:1a:c2:04:44:98:d2:ca:c7: d9:0f:66:49:a0:c9:3e:d7:52:0d:46:7d:98:3b:1a: 4b:4d:f1:7f:08:05:ac:8c:d9:b9:ac:00:07:1e:9b: a9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A0:7C:43:36:E4:64:A8:E0:BC:AA:E4:A3:3D:30:30:20:F1:BF:C1 X509v3 Authority Key Identifier: keyid:15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/76CF6D4C746E11EE8A2F7739C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.62.0/24 103.164.234.0/24 IPv6: 2001:df3:ac80::/48 Signature Algorithm: sha256WithRSAEncryption 40:94:62:1f:63:95:de:26:b4:3a:34:19:17:2e:aa:18:16:cf: 87:01:72:ac:d0:1e:cd:eb:22:fe:40:d5:cb:b3:c8:3d:c2:b1: b8:02:0c:19:71:80:70:a9:9b:11:76:23:63:64:15:35:0d:bd: 24:e6:ba:1d:59:a9:3c:ae:7c:1b:78:87:0f:f7:83:6c:8b:ba: c1:ad:de:f9:df:23:7b:33:2b:9a:c4:e6:3a:3f:e6:41:f3:e8: 09:3f:07:66:9f:dc:3e:85:c1:87:57:e7:89:14:6f:c6:11:75: cb:e6:ef:a6:2d:a4:4f:99:5a:1b:dc:2f:a2:ee:06:18:85:b6: 73:e0:6e:5e:fe:50:ce:60:4c:8b:3e:2c:68:8d:f4:5c:f4:c8: 2a:4b:91:fe:dc:58:eb:99:f6:ed:93:e9:80:e2:94:e5:44:d6: 75:5f:60:7c:04:06:22:7f:ba:f1:80:bb:2f:61:09:03:73:7e: f5:d8:b8:4b:f0:8f:16:76:5f:a7:4d:c4:ef:b4:99:ef:83:b2: c9:30:a4:fa:f6:1f:ef:d9:f7:1c:65:e0:e6:59:51:5f:5f:d8: 4f:ab:9a:2a:98:c9:3b:30:43:d3:9b:74:e8:ca:4e:c9:8e:24: 7a:5c:3d:bd:95:ad:c7:49:d2:d5:39:b9:e9:6a:35:8c:28:c5: 30:4f:9c:56 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxNUIxMTAvBgNVBAUTKDE1MzYxMzQ3QTEwODE0QTNFNjY4QjcyNjlGRTIwNzA3 QjE4RTc5NzMwHhcNMjUwNjI1MDQxMzM1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODViNzc2Zi0zNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3CTiJdDC3kbIXe03aVmedFgm2oR7rCJ+fsHagdZnUN36IeeFr8Ni4yOgPmW YHoCiNX13yHR6Sv7s+NJlPlvFmLO8gfiCRUpV9gNC7dIO+Sg6yaz89oTZOAGr57k ERl7WMfwYz6RpUnvJEJ/fyBL8ImSgr181aB1bQRaKSPhr4AOIX4nvSaDecw9S18G qlSmvTHSeolLmbAE+yygQPcrR3ZYGPpOVGS8hwoCv4SC5OXnrMlmez+WwtH/Lpsf vKoNU1z8MM1QaY6VaHaZMqSJD6PD0l5doaYhGsIERJjSysfZD2ZJoMk+11INRn2Y OxpLTfF/CAWsjNm5rAAHHpup5QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFDSgfEM2 5GSo4Lyq5KM9MDAg8b/BMB8GA1UdIwQYMBaAFBU2E0ehCBSj5mi3Jp/iBwexjnlz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzE1Qi9FOTdERUY0MDc0 NkQxMUVFOUU2MzNDMzdDNEY5QUUwMi9GVFlUUjZFSUZLUG1hTGNtbi1JSEI3R09l WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZUWVRSNkVJRktQbWFMY21uLUlIQjdHT2VYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkMxNUIvRTk3REVGNDA3NDZEMTFFRTlFNjMzQzM3QzRGOUFFMDIvNzZDRjZENEM3 NDZFMTFFRThBMkY3NzM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnlz4DBABnpOowDwQCAAIwCQMHACABDfOsgDANBgkqhkiG 9w0BAQsFAAOCAQEAQJRiH2OV3ia0OjQZFy6qGBbPhwFyrNAezesi/kDVy7PIPcKx uAIMGXGAcKmbEXYjY2QVNQ29JOa6HVmpPK58G3iHD/eDbIu6wa3e+d8jezMrmsTm Oj/mQfPoCT8HZp/cPoXBh1fniRRvxhF1y+bvpi2kT5laG9wvou4GGIW2c+BuXv5Q zmBMiz4saI30XPTIKkuR/txY65n27ZPpgOKU5UTWdV9gfAQGIn+68YC7L2EJA3N+ 9di4S/CPFnZfp03E77SZ74OyyTCk+vYf79n3HGXg5llRX1/YT6uaKpjJOzBD05t0 6MpOyY4kelw9vZWtx0nS1Tm56Wo1jCjFME+cVg== -----END CERTIFICATE-----Generated at Wed Jul 2 21:53:17 2025 by rpki-client