$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/D635A2BEAA6111EE851A6861C4F9AE02.roa File: D635A2BEAA6111EE851A6861C4F9AE02.roa (raw, json) Hash identifier: qk7Bx30QrpdNU4t2WsWpt2osPi+DUzc4S7fF1pPsooQ= Subject key identifier: 96:FE:DE:C3:2F:53:5A:A5:64:95:9D:0C:4D:88:66:39:92:93:F2:E1 Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 072C Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/D635A2BEAA6111EE851A6861C4F9AE02.roa Signing time: Wed 20 Aug 2025 22:03:13 +0000 ROA not before: Wed 20 Aug 2025 22:03:13 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 142150 IP address blocks: 103.152.100.0/24 maxlen: 24 103.152.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1836 (0x72c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: Aug 20 22:03:13 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68a64620-d90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ee:60:12:af:ec:1a:62:51:14:ba:8e:82:e1: c0:9b:d3:af:d9:dd:06:d0:b2:e1:e5:9e:ad:5f:bf: e9:1d:c1:8d:9b:c8:a5:70:42:40:dc:a0:5f:6a:15: 42:bb:e4:6e:06:a9:46:73:e5:fe:70:08:98:5e:74: 0b:cc:9a:7f:00:80:57:9d:42:bb:50:5e:71:bf:bb: 2b:b7:3e:67:a1:89:1f:95:b4:96:e1:15:a2:47:fa: e6:07:24:4a:13:e3:0c:9f:05:ce:59:30:18:51:fb: e7:11:66:c9:5c:d9:b2:d0:e7:69:1e:16:d0:07:55: df:90:37:97:98:e9:cd:2c:be:73:75:8e:53:d3:02: 45:58:87:f0:9e:90:07:1b:2b:3f:f8:12:3e:a5:b3: 6c:78:a3:89:97:65:f2:c0:e1:b5:8a:27:ea:b2:21: 44:89:d0:41:7f:d4:99:75:82:c5:1b:8f:06:a3:80: d5:a9:da:55:89:03:ac:c8:1b:82:6e:52:63:9f:71: 32:27:a2:e6:e0:23:a3:aa:ad:27:9d:fd:f0:bb:23: ad:d1:35:9e:0a:9d:91:42:44:db:aa:f2:ac:99:7e: 61:ee:87:dc:09:c2:63:4d:19:54:24:cc:25:74:eb: fe:f8:31:0c:9c:04:7f:b1:fe:1e:29:15:59:da:2f: d2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FE:DE:C3:2F:53:5A:A5:64:95:9D:0C:4D:88:66:39:92:93:F2:E1 X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/D635A2BEAA6111EE851A6861C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.100.0/23 Signature Algorithm: sha256WithRSAEncryption c1:e5:46:0a:4c:56:c5:17:dd:54:02:bf:26:31:d6:2f:65:5d: b8:b1:41:ef:80:b1:14:d6:fb:35:e2:8e:a8:d9:13:f1:b7:1c: 59:07:34:3e:e7:ab:21:44:79:bc:26:c5:e0:28:73:7a:0e:90: 2a:cd:b4:a8:84:01:33:8a:28:77:d5:9a:20:71:e7:80:7d:9d: 32:6e:1f:27:0f:cc:2e:e3:60:6e:c5:6f:ff:3d:df:bd:97:55: 0b:50:2e:af:d4:b8:4d:3e:ba:58:b1:38:c3:a3:b3:19:37:12: 61:26:0a:b0:df:7c:2b:48:3a:9a:67:72:47:68:d7:a0:bc:e3: 24:1c:d2:da:7a:8c:dd:06:e6:66:a0:1a:7c:18:0b:fc:e8:23: fe:66:fc:68:8c:24:8f:33:f3:b7:4a:0f:39:ed:80:fa:f4:24: af:7e:13:5d:d3:ac:d5:28:bb:af:de:9d:0b:61:20:0a:c9:d8: fc:ad:03:2f:d3:96:73:cf:04:87:e3:e6:8b:68:80:22:a2:08: a9:8d:b7:d2:38:01:d8:3a:22:8e:9e:f9:c7:08:30:2f:cb:11: fc:7c:14:41:f8:df:7a:83:e3:55:45:da:45:0c:bc:f8:ba:b6: f4:64:62:a1:02:b1:d5:83:bd:22:96:52:ae:31:60:dc:de:e6: 33:31:68:d6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjUwODIwMjIwMzEzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2NDYyMC1kOTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvu5gEq/sGmJRFLqOguHAm9Ov2d0G0LLh5Z6tX7/pHcGNm8ilcEJA3KBfahVC u+RuBqlGc+X+cAiYXnQLzJp/AIBXnUK7UF5xv7srtz5noYkflbSW4RWiR/rmByRK E+MMnwXOWTAYUfvnEWbJXNmy0OdpHhbQB1XfkDeXmOnNLL5zdY5T0wJFWIfwnpAH Gys/+BI+pbNseKOJl2XywOG1iifqsiFEidBBf9SZdYLFG48Go4DVqdpViQOsyBuC blJjn3EyJ6Lm4COjqq0nnf3wuyOt0TWeCp2RQkTbqvKsmX5h7ofcCcJjTRlUJMwl dOv++DEMnAR/sf4eKRVZ2i/SVQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJb+3sMv U1qlZJWdDE2IZjmSk/LhMB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU5OUIvNzMzREE0RTg1QjMzMTFFQjgwMENCODBDQzRGOUFFMDIvRDYzNUEyQkVB QTYxMTFFRTg1MUE2ODYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmGQwDQYJKoZIhvcNAQELBQADggEBAMHlRgpMVsUX3VQC vyYx1i9lXbixQe+AsRTW+zXijqjZE/G3HFkHND7nqyFEebwmxeAoc3oOkCrNtKiE ATOKKHfVmiBx54B9nTJuHycPzC7jYG7Fb/89372XVQtQLq/UuE0+ulixOMOjsxk3 EmEmCrDffCtIOppnckdo16C84yQc0tp6jN0G5magGnwYC/zoI/5m/GiMJI8z87dK DzntgPr0JK9+E13TrNUou6/enQthIArJ2PytAy/TlnPPBIfj5otogCKiCKmNt9I4 Adg6Io6e+ccIMC/LEfx8FEH433qD41VF2kUMvPi6tvRkYqECsdWDvSKWUq4xYNze 5jMxaNY= -----END CERTIFICATE-----Generated at Sat Aug 23 21:31:26 2025 by rpki-client