$ rpki-client -vvf rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/4861945C599A11ED99A5B776C4F9AE02.roa File: 4861945C599A11ED99A5B776C4F9AE02.roa (raw, json) Hash identifier: WWunrSKNr/tHvzh6M3TsIN0SasCbbY/rUP6pCCee+Bg= Subject key identifier: 28:ED:98:55:36:F4:A9:FA:BA:C0:B5:DC:5E:C8:07:BD:95:A3:A1:58 Certificate issuer: /CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3 Certificate serial: 1560 Authority key identifier: CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/4861945C599A11ED99A5B776C4F9AE02.roa Signing time: Sun 29 Jun 2025 07:19:58 +0000 ROA not before: Sun 29 Jun 2025 07:19:58 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137809 IP address blocks: 103.114.92.0/22 maxlen: 22 103.114.92.0/24 maxlen: 24 103.114.93.0/24 maxlen: 24 103.114.94.0/24 maxlen: 24 103.114.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5472 (0x1560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D99E, serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3 Validity Not Before: Jun 29 07:19:58 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6860e91e-a7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7d:4a:68:02:4c:c8:fa:22:d7:c9:3e:62:4d: db:f5:88:6c:7c:6c:a5:3d:48:1a:05:97:ed:56:89: b5:2d:be:b1:3e:48:ab:e9:b0:2d:ee:82:f0:f2:59: 67:86:ef:a4:c4:61:95:ef:16:ca:5f:f4:66:44:06: df:62:89:c3:56:67:1d:fe:27:ca:54:5c:e6:e8:b2: 89:1e:1e:45:fb:eb:a7:5a:ac:b2:c3:46:00:a8:09: 33:75:ca:a3:61:73:37:14:09:19:f6:4d:0c:5c:81: d5:0d:b4:39:92:4c:1d:92:c8:e0:c4:01:75:12:26: 55:0b:88:3c:79:46:49:b8:38:de:84:00:09:6a:2d: 90:48:90:ad:3f:68:9c:ec:68:bd:c7:88:8b:fe:fa: cf:9b:b2:6a:32:d6:a7:6f:30:f8:52:72:80:e0:ce: 96:d0:cb:24:f0:01:32:ea:44:6f:36:e7:91:86:0c: 0f:19:4f:73:4f:fe:89:df:46:cb:2f:97:f2:e9:bc: 9e:f2:13:67:6b:9c:ed:16:7d:4d:5c:88:15:b2:95: 89:73:cd:6f:d3:11:cc:88:a3:1b:e1:9e:15:d3:3f: 61:50:c9:93:ef:72:45:2c:57:51:9a:87:71:4a:d5: 3d:dc:7f:15:ac:f7:10:3d:ee:dd:9f:66:3e:34:ff: fb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:ED:98:55:36:F4:A9:FA:BA:C0:B5:DC:5E:C8:07:BD:95:A3:A1:58 X509v3 Authority Key Identifier: keyid:CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/4861945C599A11ED99A5B776C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.114.92.0/22 Signature Algorithm: sha256WithRSAEncryption 14:78:d2:66:16:f6:45:7d:1c:af:1e:94:31:b0:75:df:30:5d: 4b:52:36:35:ac:d5:5d:29:23:15:2c:52:a0:ef:e3:8d:02:7d: 1e:9c:04:66:78:8d:c6:80:1b:87:ed:b1:88:dd:2f:75:13:2f: af:4b:78:d8:51:bc:a7:20:96:fc:92:d5:14:09:bb:a6:e7:18: 9f:62:c9:70:44:69:e6:21:d3:fb:49:b4:90:c0:b9:8b:33:2f: 5a:2e:73:f1:03:f9:7d:ff:b0:5d:ec:0e:3f:ba:d4:3d:94:d2: 66:66:3f:00:b0:c1:1e:ab:fe:74:e7:79:d0:de:17:2b:e2:2e: cc:18:92:46:7e:3b:d5:d1:2b:e3:c8:82:64:b3:ac:25:54:8f: 00:ce:1c:ac:a6:50:f4:18:1d:2a:74:63:dd:69:61:94:c5:35: 05:83:f5:17:e4:f7:87:d6:04:d7:30:74:f3:da:49:65:1f:49: 0c:ca:43:8d:4b:dc:28:d7:f7:72:7e:7b:1c:88:a5:95:59:6f: 66:44:52:6f:cd:48:c4:be:0e:6a:b9:79:27:99:ea:e9:6b:8d: ea:79:a1:45:0b:37:f7:be:fc:a2:fe:38:98:ac:47:be:41:b7: 24:f7:ba:60:83:80:f0:00:65:fb:58:aa:0f:19:2f:91:c0:92: 71:07:af:62 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5OUUxMTAvBgNVBAUTKENBRjBCNzg0QjEzRTE0MDBFRUI0MjI1QkEyMkQ2Rjk4 Mzg4MjRFQzMwHhcNMjUwNjI5MDcxOTU4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYwZTkxZS1hN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyH1KaAJMyPoi18k+Yk3b9YhsfGylPUgaBZftVom1Lb6xPkir6bAt7oLw8lln hu+kxGGV7xbKX/RmRAbfYonDVmcd/ifKVFzm6LKJHh5F++unWqyyw0YAqAkzdcqj YXM3FAkZ9k0MXIHVDbQ5kkwdksjgxAF1EiZVC4g8eUZJuDjehAAJai2QSJCtP2ic 7Gi9x4iL/vrPm7JqMtanbzD4UnKA4M6W0Msk8AEy6kRvNueRhgwPGU9zT/6J30bL L5fy6bye8hNna5ztFn1NXIgVspWJc81v0xHMiKMb4Z4V0z9hUMmT73JFLFdRmodx StU93H8VrPcQPe7dn2Y+NP/7cwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCjtmFU2 9Kn6usC13F7IB72Vo6FYMB8GA1UdIwQYMBaAFMrwt4SxPhQA7rQiW6Itb5g4gk7D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDk5RS80NjA0OEM3MDQ5 NzExMUU4QTdGOUE2NzJDNEY5QUUwMi95dkMzaExFLUZBRHV0Q0pib2kxdm1EaUNU c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2QzNoTEUtRkFEdXRDSmJvaTF2bURpQ1RzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQ5OUUvNDYwNDhDNzA0OTcxMTFFOEE3RjlBNjcyQzRGOUFFMDIvNDg2MTk0NUM1 OTlBMTFFRDk5QTVCNzc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnclwwDQYJKoZIhvcNAQELBQADggEBABR40mYW9kV9HK8e lDGwdd8wXUtSNjWs1V0pIxUsUqDv440CfR6cBGZ4jcaAG4ftsYjdL3UTL69LeNhR vKcglvyS1RQJu6bnGJ9iyXBEaeYh0/tJtJDAuYszL1ouc/ED+X3/sF3sDj+61D2U 0mZmPwCwwR6r/nTnedDeFyviLswYkkZ+O9XRK+PIgmSzrCVUjwDOHKymUPQYHSp0 Y91pYZTFNQWD9Rfk94fWBNcwdPPaSWUfSQzKQ41L3CjX93J+exyIpZVZb2ZEUm/N SMS+Dmq5eSeZ6ulrjep5oUULN/e+/KL+OJisR75BtyT3umCDgPAAZftYqg8ZL5HA knEHr2I= -----END CERTIFICATE-----Generated at Thu Jul 3 18:54:55 2025 by rpki-client