$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/DBC08AD4457911E9BA84DA51C4F9AE02.roa File: DBC08AD4457911E9BA84DA51C4F9AE02.roa (raw, json) Hash identifier: 2WzkstGBbGRj/Y7Ml4qowog4ksR3on7JJQYm4a6p25I= Subject key identifier: 15:56:45:85:67:6E:8E:B9:AB:0B:28:1F:2F:82:49:13:DC:D5:B1:24 Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Certificate serial: 107A Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/DBC08AD4457911E9BA84DA51C4F9AE02.roa Signing time: Thu 26 Jun 2025 17:19:19 +0000 ROA not before: Thu 26 Jun 2025 17:19:19 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 132277 IP address blocks: 103.12.2.0/24 maxlen: 24 103.96.108.0/24 maxlen: 24 2001:df0:2ba::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4218 (0x107a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913559B, serialNumber=D032E0614923F4A582338EB7636C39684AED51ED Validity Not Before: Jun 26 17:19:19 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685d8117-2ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6a:48:c1:48:be:3c:5b:4a:37:50:df:52:37: 74:03:5c:43:97:da:55:d7:f8:70:32:9d:3b:e6:2c: 79:e9:5a:e4:39:9a:9d:4b:42:8c:9f:b7:43:59:bc: 89:a7:61:a7:63:3c:c5:85:13:11:bf:af:19:ee:df: 5c:d2:8a:55:07:47:1a:c8:d8:a9:a6:25:68:98:bf: 2c:4c:f4:af:d2:4d:ef:99:42:f5:6e:a3:9a:48:aa: 4d:38:37:12:a7:84:13:c3:29:71:cb:54:1f:e0:6e: 65:20:40:b0:27:28:c8:9d:27:95:d0:11:1c:95:c5: 95:4d:64:49:e2:73:eb:ce:39:a3:91:88:64:f2:bd: 64:99:b5:91:ff:04:03:f8:8c:83:e3:7b:37:7f:71: 6e:df:02:5a:d7:2b:73:35:22:26:29:ae:ec:de:b7: 16:15:06:57:bd:90:27:07:b7:23:2b:f2:bf:62:ef: 02:0c:5f:04:6a:2d:e4:8a:ea:79:46:cc:bc:ac:31: 5e:5b:7f:ae:12:12:09:d1:8c:9e:e5:06:b8:e2:dc: b2:eb:2b:8c:cf:16:56:0e:02:2a:81:0b:41:98:15: a4:dd:64:1e:83:0e:fb:e8:c6:1d:4f:1b:d4:79:a4: 7c:04:c4:cd:cb:72:71:17:88:45:67:6a:79:fb:0b: 93:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:56:45:85:67:6E:8E:B9:AB:0B:28:1F:2F:82:49:13:DC:D5:B1:24 X509v3 Authority Key Identifier: keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/DBC08AD4457911E9BA84DA51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.12.2.0/24 103.96.108.0/24 IPv6: 2001:df0:2ba::/48 Signature Algorithm: sha256WithRSAEncryption 18:aa:38:1c:68:96:2f:83:fe:17:02:fc:ef:35:57:f4:ce:62: 10:56:4b:d4:45:75:86:42:79:26:6e:f3:9b:95:70:e6:82:42: c9:3b:cb:31:b6:d7:58:b5:87:99:6f:e8:38:20:be:73:7a:8d: a1:5a:eb:28:60:67:3c:f0:c2:84:13:18:98:8c:32:c4:23:3d: b1:e3:6c:3e:39:ab:9c:1e:2c:1e:c6:2b:94:0f:2d:01:1a:fd: a8:7e:bc:50:e0:f0:56:f2:13:07:4e:21:ce:7f:8c:2f:66:71: 93:78:11:07:28:90:58:56:df:61:84:ae:ae:91:91:cc:ec:e6: 4f:45:5d:ee:ce:5d:58:dc:66:1e:a8:6a:b7:b2:43:fb:5c:bd: 68:7a:eb:8c:57:2b:78:08:c3:91:3e:72:18:f3:f5:19:57:90: ba:37:f8:d5:6b:51:76:89:5e:93:89:bf:f3:a7:d6:95:62:19: 84:0e:5f:8a:ee:4c:9d:f2:c6:70:bc:c4:7d:b5:16:fc:a4:13: aa:57:08:d6:cc:d6:d6:65:15:10:b6:02:7b:96:66:06:59:e5: d5:66:73:91:9f:28:44:2a:92:4e:d9:ab:96:34:6d:ae:93:ee: 3e:4a:3a:c7:59:15:a0:f4:76:a4:63:12:e6:00:98:49:3b:b0: 54:f3:09:15 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICEHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OUIxMTAvBgNVBAUTKEQwMzJFMDYxNDkyM0Y0QTU4MjMzOEVCNzYzNkMzOTY4 NEFFRDUxRUQwHhcNMjUwNjI2MTcxOTE5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVkODExNy0yZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mpIwUi+PFtKN1DfUjd0A1xDl9pV1/hwMp075ix56VrkOZqdS0KMn7dDWbyJ p2GnYzzFhRMRv68Z7t9c0opVB0cayNippiVomL8sTPSv0k3vmUL1bqOaSKpNODcS p4QTwylxy1Qf4G5lIECwJyjInSeV0BEclcWVTWRJ4nPrzjmjkYhk8r1kmbWR/wQD +IyD43s3f3Fu3wJa1ytzNSImKa7s3rcWFQZXvZAnB7cjK/K/Yu8CDF8Eai3kiup5 Rsy8rDFeW3+uEhIJ0Yye5Qa44tyy6yuMzxZWDgIqgQtBmBWk3WQegw776MYdTxvU eaR8BMTNy3JxF4hFZ2p5+wuTZwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFBVWRYVn bo65qwsoHy+CSRPc1bEkMB8GA1UdIwQYMBaAFNAy4GFJI/SlgjOOt2NsOWhK7VHt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Qi82QzFBMEVGQTM2 N0MxMUU5QjI3OEY5M0JDNEY5QUUwMi8wRExnWVVrajlLV0NNNDYzWTJ3NWFFcnRV ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBETGdZVWtqOUtXQ000NjNZMnc1YUVydFVlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzU1OUIvNkMxQTBFRkEzNjdDMTFFOUIyNzhGOTNCQzRGOUFFMDIvREJDMDhBRDQ0 NTc5MTFFOUJBODREQTUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnDAIDBABnYGwwDwQCAAIwCQMHACABDfACujANBgkqhkiG 9w0BAQsFAAOCAQEAGKo4HGiWL4P+FwL87zVX9M5iEFZL1EV1hkJ5Jm7zm5Vw5oJC yTvLMbbXWLWHmW/oOCC+c3qNoVrrKGBnPPDChBMYmIwyxCM9seNsPjmrnB4sHsYr lA8tARr9qH68UODwVvITB04hzn+ML2Zxk3gRByiQWFbfYYSurpGRzOzmT0Vd7s5d WNxmHqhqt7JD+1y9aHrrjFcreAjDkT5yGPP1GVeQujf41WtRdolek4m/86fWlWIZ hA5fiu5MnfLGcLzEfbUW/KQTqlcI1szW1mUVELYCe5ZmBlnl1WZzkZ8oRCqSTtmr ljRtrpPuPko6x1kVoPR2pGMS5gCYSTuwVPMJFQ== -----END CERTIFICATE-----Generated at Fri Jul 4 00:49:34 2025 by rpki-client