$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/20544B84F14511ECA1AE5F4EC4F9AE02.roa File: 20544B84F14511ECA1AE5F4EC4F9AE02.roa (raw, json) Hash identifier: AKSEq1IptkG7ARfIThlwJQkrUndd8XeZnVMmB6yQVcA= Subject key identifier: 8B:B7:0C:A0:38:1C:52:57:2C:C6:4E:00:07:B7:6D:02:9D:79:BD:D1 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 094A Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/20544B84F14511ECA1AE5F4EC4F9AE02.roa Signing time: Fri 04 Jul 2025 21:01:29 +0000 ROA not before: Fri 04 Jul 2025 21:01:29 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 136933 IP address blocks: 103.151.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2378 (0x94a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: Jul 4 21:01:29 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68684129-4545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:33:4e:29:3b:51:91:ed:40:f0:fe:ca:6d:ba: 85:b3:70:56:ab:1b:70:d7:d2:85:12:87:f4:3f:9e: f7:95:35:27:1e:cd:77:cb:be:a3:f5:10:1f:82:9b: 37:2d:9b:b0:7c:80:6d:2c:62:62:75:15:42:65:ac: 0d:6c:f3:dc:d4:8a:0b:8e:08:91:b7:b3:d3:9c:8a: 8e:67:d1:41:e0:03:66:64:d4:01:38:39:4c:ed:47: a9:9b:57:5d:cb:81:81:a0:b0:a7:d4:54:c0:86:d4: 4a:1a:c0:78:8a:fd:e1:f0:47:ee:ab:c4:48:a7:07: f8:a4:e9:7f:51:84:b7:72:05:f0:5b:99:71:4c:02: 47:8c:e8:b7:8e:21:92:8a:c0:6c:f1:fe:42:04:fc: 01:a2:2f:84:3f:ac:47:0c:51:a9:4b:cd:81:c2:76: d6:26:85:61:a1:1d:1b:df:a0:bf:36:7e:07:2c:8d: c5:cd:c2:a0:70:20:48:ba:cf:31:43:c8:78:f8:08: a6:1f:8d:61:ce:b6:3f:1f:22:d4:9b:22:3b:9c:0c: 57:95:c5:27:7b:59:d2:74:09:50:9c:6f:97:31:b4: e0:2e:f0:74:c8:a8:46:6a:4d:b8:14:ac:49:a0:0f: 80:b1:5d:15:6d:89:e3:ca:ae:c7:2d:96:17:e4:01: ad:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B7:0C:A0:38:1C:52:57:2C:C6:4E:00:07:B7:6D:02:9D:79:BD:D1 X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/20544B84F14511ECA1AE5F4EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.45.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:06:35:18:c8:e7:c0:21:b5:e2:d6:27:84:23:41:10:b1:4c: fd:89:c8:a2:b8:39:50:28:4b:f2:6a:65:7a:77:04:03:ac:d0: a2:e5:fd:91:bc:16:07:af:83:0e:0d:3e:bc:0b:1a:92:f5:cf: 39:cb:4d:39:f7:08:22:33:3f:64:20:3a:ba:0f:31:a7:c7:aa: cb:be:af:6b:8e:d3:37:3c:ac:8c:5c:9a:e5:13:01:d9:38:d7: 48:4b:0e:99:d5:11:57:fc:83:a5:08:a5:3d:03:fc:7e:f7:ea: 09:0f:54:44:04:70:c5:ff:03:23:d1:78:3e:81:f5:2e:fa:28: 94:49:57:fc:63:28:47:55:a6:00:ea:72:d5:08:22:7b:73:b8: d6:e9:b5:4a:55:12:55:ba:15:5f:26:16:d9:bb:5b:f2:eb:d7: 11:e3:9a:51:8e:a9:33:51:c4:c6:5f:a4:28:bb:34:26:d6:37: e2:0e:9d:1e:90:80:5e:b9:df:ad:e0:07:2f:4a:36:e8:0b:6b: 0f:a0:ad:08:9b:b3:b5:8e:91:65:d1:68:30:68:c5:93:e3:5e: d0:32:fb:6f:38:8d:46:4f:14:1b:03:2c:7d:da:27:83:bb:1c: 3c:3e:99:c5:d5:fc:5b:f6:a4:0a:26:0e:39:a5:4f:3c:43:d4: 5a:45:48:18 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjUwNzA0MjEwMTI5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4NDEyOS00NTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTNOKTtRke1A8P7KbbqFs3BWqxtw19KFEof0P573lTUnHs13y76j9RAfgps3 LZuwfIBtLGJidRVCZawNbPPc1IoLjgiRt7PTnIqOZ9FB4ANmZNQBODlM7Uepm1dd y4GBoLCn1FTAhtRKGsB4iv3h8Efuq8RIpwf4pOl/UYS3cgXwW5lxTAJHjOi3jiGS isBs8f5CBPwBoi+EP6xHDFGpS82BwnbWJoVhoR0b36C/Nn4HLI3FzcKgcCBIus8x Q8h4+AimH41hzrY/HyLUmyI7nAxXlcUne1nSdAlQnG+XMbTgLvB0yKhGak24FKxJ oA+AsV0VbYnjyq7HLZYX5AGtGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIu3DKA4 HFJXLMZOAAe3bQKdeb3RMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0UzNkIvN0MyQzYyNDBBMDkxMTFFQUE5NDI3QzQ0QzRGOUFFMDIvMjA1NDRCODRG MTQ1MTFFQ0ExQUU1RjRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnly0wDQYJKoZIhvcNAQELBQADggEBAF0GNRjI58AhteLW J4QjQRCxTP2JyKK4OVAoS/JqZXp3BAOs0KLl/ZG8Fgevgw4NPrwLGpL1zznLTTn3 CCIzP2QgOroPMafHqsu+r2uO0zc8rIxcmuUTAdk410hLDpnVEVf8g6UIpT0D/H73 6gkPVEQEcMX/AyPReD6B9S76KJRJV/xjKEdVpgDqctUIIntzuNbptUpVElW6FV8m Ftm7W/Lr1xHjmlGOqTNRxMZfpCi7NCbWN+IOnR6QgF65363gBy9KNugLaw+grQib s7WOkWXRaDBoxZPjXtAy+284jUZPFBsDLH3aJ4O7HDw+mcXV/Fv2pAomDjmlTzxD 1FpFSBg= -----END CERTIFICATE-----Generated at Sat Jul 5 08:57:00 2025 by rpki-client