$ rpki-client -vvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/DD9876F4B19911EFA6C3FD55C4F9AE02.roa File: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (raw, json) Hash identifier: FOUqi/Zhh8esXFcRli/yVF/Rw56vHIwH4UuHSxeTaMk= Subject key identifier: 0E:84:FB:BE:CE:E3:41:C0:3B:12:98:22:9D:92:C8:8B:A3:F4:3A:7B Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Certificate serial: 072E Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/DD9876F4B19911EFA6C3FD55C4F9AE02.roa Signing time: Wed 20 Aug 2025 22:03:14 +0000 ROA not before: Wed 20 Aug 2025 22:03:14 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 151330 IP address blocks: 103.152.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1838 (0x72e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174 Validity Not Before: Aug 20 22:03:14 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68a64622-ff17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cf:6f:52:6a:63:70:06:25:cd:91:97:de:4b: 45:c1:51:ca:b4:60:9d:87:f8:8a:a7:a4:4d:af:fe: c7:7a:4f:46:f4:be:3b:b8:0e:43:12:97:33:c3:cd: 32:15:98:fa:e4:78:ca:45:13:0d:63:4d:b4:fb:a7: c2:8e:9d:32:a9:a6:51:d8:9f:ac:c4:b1:1b:18:e5: 26:69:a8:f1:f5:20:37:71:bd:7b:73:f4:4c:18:de: 81:f4:ea:47:e6:db:8b:ee:c2:85:47:7a:24:0c:c5: 82:f0:ad:f1:bb:5c:98:15:50:9b:3a:86:b6:2f:d7: 63:5f:32:5a:32:ee:5c:e1:1a:cd:27:46:ba:83:d6: 98:15:60:71:00:bb:32:25:28:61:a2:83:b6:35:75: d7:38:4a:bd:06:cd:40:ac:65:07:e3:2d:a0:52:42: 61:d5:7f:98:29:a1:bf:e9:c1:cb:e5:0f:c4:53:ad: f6:44:e8:f5:df:79:dd:b1:99:ad:97:8e:62:9e:c2: 8d:78:9f:56:a5:56:b8:a2:e6:47:22:a1:30:7a:34: 34:fe:fe:b3:d2:3b:8c:89:1f:b4:ac:d1:be:55:d6: 64:82:30:00:91:68:65:ea:17:f2:f2:95:20:81:57: c3:89:51:0e:65:79:72:ed:fa:8c:70:a3:4a:84:c6: d1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:84:FB:BE:CE:E3:41:C0:3B:12:98:22:9D:92:C8:8B:A3:F4:3A:7B X509v3 Authority Key Identifier: keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/DD9876F4B19911EFA6C3FD55C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.100.0/23 Signature Algorithm: sha256WithRSAEncryption 48:39:40:db:7b:77:35:f7:dd:29:b7:aa:25:2d:5c:aa:9c:1f: c6:dd:c6:e6:6e:a4:97:82:6f:ce:32:04:a3:7b:bb:95:a9:a4: 09:76:b4:1d:f9:28:ba:a3:87:13:ec:e2:f3:b5:a4:be:b6:75: a0:cb:b8:28:81:05:46:8c:a3:63:55:73:3a:cc:1e:fa:24:4e: 60:84:64:61:70:d5:05:ba:12:03:93:b8:da:91:07:d6:3d:30: 09:d4:83:1b:97:b1:07:d9:20:3b:7e:d7:4e:ad:c7:09:14:5d: a9:f0:a4:56:3e:4f:a8:c8:e8:7e:79:d9:e5:59:58:ea:85:9d: 7a:31:18:70:22:a6:bf:09:80:d6:5e:22:4d:d9:a5:ec:3d:95: ca:59:c3:1d:8a:8c:e4:9a:b7:2c:71:85:21:c1:f1:7c:c2:14: db:2d:cc:d5:13:3f:c3:fb:ca:dc:ac:11:34:30:95:d5:c2:73: 44:da:14:f8:7e:e5:5f:c0:b6:c0:20:c5:da:2c:8a:32:f5:0f: 3b:58:73:af:e6:47:54:8d:77:82:d7:e6:ed:a4:d5:9d:b0:a2: 74:01:1f:a8:ca:08:e4:1f:5f:47:3b:17:b1:77:d3:36:b4:9d: 74:f0:5b:ca:9d:8e:c9:54:f9:7a:34:a6:ec:43:64:e6:0b:34: 54:0b:08:f4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OUIxMTAvBgNVBAUTKDI0NkY2QTRCRTE1QjAwQ0ZFQzBEQzM5OUE1RTg0MzlG OTM5QzkxNzQwHhcNMjUwODIwMjIwMzE0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2NDYyMi1mZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsM9vUmpjcAYlzZGX3ktFwVHKtGCdh/iKp6RNr/7Hek9G9L47uA5DEpczw80y FZj65HjKRRMNY020+6fCjp0yqaZR2J+sxLEbGOUmaajx9SA3cb17c/RMGN6B9OpH 5tuL7sKFR3okDMWC8K3xu1yYFVCbOoa2L9djXzJaMu5c4RrNJ0a6g9aYFWBxALsy JShhooO2NXXXOEq9Bs1ArGUH4y2gUkJh1X+YKaG/6cHL5Q/EU632ROj133ndsZmt l45insKNeJ9WpVa4ouZHIqEwejQ0/v6z0juMiR+0rNG+VdZkgjAAkWhl6hfy8pUg gVfDiVEOZXly7fqMcKNKhMbRNwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA6E+77O 40HAOxKYIp2SyIuj9Dp7MB8GA1UdIwQYMBaAFCRvakvhWwDP7A3DmaXoQ5+TnJF0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5Qi83MzNEQTRFODVC MzMxMUVCODAwQ0I4MENDNEY5QUUwMi9KRzlxUy1GYkFNX3NEY09acGVoRG41T2Nr WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pHOXFTLUZiQU1fc0RjT1pwZWhEbjVPY2tYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU5OUIvNzMzREE0RTg1QjMzMTFFQjgwMENCODBDQzRGOUFFMDIvREQ5ODc2RjRC MTk5MTFFRkE2QzNGRDU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmGQwDQYJKoZIhvcNAQELBQADggEBAEg5QNt7dzX33Sm3 qiUtXKqcH8bdxuZupJeCb84yBKN7u5WppAl2tB35KLqjhxPs4vO1pL62daDLuCiB BUaMo2NVczrMHvokTmCEZGFw1QW6EgOTuNqRB9Y9MAnUgxuXsQfZIDt+106txwkU XanwpFY+T6jI6H552eVZWOqFnXoxGHAipr8JgNZeIk3Zpew9lcpZwx2KjOSatyxx hSHB8XzCFNstzNUTP8P7ytysETQwldXCc0TaFPh+5V/AtsAgxdosijL1DztYc6/m R1SNd4LX5u2k1Z2wonQBH6jKCOQfX0c7F7F30za0nXTwW8qdjslU+Xo0puxDZOYL NFQLCPQ= -----END CERTIFICATE-----Generated at Sun Aug 24 05:04:41 2025 by rpki-client