$ rpki-client -vvf rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/24F33D7877AF11EB8E972C66C4F9AE02.roa File: 24F33D7877AF11EB8E972C66C4F9AE02.roa (raw, json) Hash identifier: 4G6we2Th1FMc0knctpDnaHzpZ2DpvqNSVPvecBD6QV8= Subject key identifier: FB:7F:CB:E1:E9:39:6E:F3:D9:88:D0:75:3E:29:09:5B:34:10:7F:FF Certificate issuer: /CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12 Certificate serial: 069C Authority key identifier: 21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/24F33D7877AF11EB8E972C66C4F9AE02.roa Signing time: Wed 18 Jun 2025 22:30:44 +0000 ROA not before: Wed 18 Jun 2025 22:30:44 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 140912 IP address blocks: 103.153.88.0/23 maxlen: 23 103.153.88.0/24 maxlen: 24 103.153.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1692 (0x69c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914022F, serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12 Validity Not Before: Jun 18 22:30:44 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68533e14-c7f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:06:2f:cf:9f:f7:f6:b9:dc:16:94:40:5c:2b: 37:3e:17:57:5e:5c:c4:bb:5c:c5:66:2c:92:10:bb: b9:0d:29:2e:5e:b1:74:19:51:99:be:92:d5:d5:ed: 16:dd:65:1c:f5:d0:77:0d:0d:f6:1e:cf:c9:62:a0: 1b:24:7d:fe:9d:2d:e3:4e:29:ac:be:92:cb:6a:f2: ae:65:09:1f:64:bf:05:ad:a0:06:24:4f:7b:ee:e8: 1b:38:23:d5:b1:08:72:4a:07:97:ef:60:45:a1:0f: df:99:05:32:64:b3:67:fe:62:17:03:13:52:b4:48: 20:b1:c6:16:6f:4b:fa:5e:fa:10:4e:aa:50:05:23: 7f:76:74:7e:15:bb:1d:81:09:38:1f:88:f9:55:f8: bb:30:f4:b8:9d:1b:7d:ff:7b:c6:0f:8c:74:97:f9: 33:0a:b9:9e:94:d4:ef:fa:d1:2b:62:39:ed:32:43: 50:1c:05:0d:3f:a9:6f:ef:96:7a:00:5b:67:a6:b2: 53:4f:07:81:ed:bd:8a:26:28:0f:e3:f5:4f:d4:f7: 92:a6:11:bf:ab:5e:01:32:36:c5:96:4b:00:a8:07: 2a:ae:d6:59:58:b6:22:11:f0:8d:a6:40:ec:2c:28: e8:fa:7e:36:f3:57:c3:9e:0a:c6:0f:7c:92:58:64: 2d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7F:CB:E1:E9:39:6E:F3:D9:88:D0:75:3E:29:09:5B:34:10:7F:FF X509v3 Authority Key Identifier: keyid:21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/24F33D7877AF11EB8E972C66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.88.0/23 Signature Algorithm: sha256WithRSAEncryption c4:77:6b:ef:a9:b0:a8:ec:f0:45:84:6e:2c:3a:c4:ee:9a:30: 65:7d:3f:a2:ab:0a:9a:42:29:d3:96:22:85:07:1a:98:04:23: 59:22:47:e5:63:a4:db:4a:8d:70:82:5a:e3:2d:5f:48:1a:52: 9c:4d:dc:c9:a8:e0:80:05:3d:c6:2f:d9:c6:25:c2:be:2d:b2: c6:7d:20:79:9c:10:12:27:9d:93:09:a6:5f:5f:d6:e8:ad:4e: 25:16:8f:f7:8c:69:78:eb:2c:45:5f:2c:8d:0d:40:bb:93:d6: d4:ae:82:bb:90:4e:b0:2d:36:fa:5f:fa:14:e3:2c:e2:5b:47: 26:fc:c3:ad:88:b1:ee:d0:06:0f:ba:23:61:ef:26:dd:0a:cd: ba:e3:60:cd:92:50:b2:ba:5c:b7:73:80:66:a1:67:ef:83:a3: 9d:01:de:52:be:23:ab:d1:1a:e6:60:16:52:16:47:d2:89:e3: c2:f3:74:fb:66:a7:af:cd:92:56:05:e6:58:d9:4a:0f:d6:13: 0d:ec:36:08:32:09:03:04:8a:20:44:fa:e6:75:50:53:1b:16: ca:4c:7d:e0:21:7f:4e:c8:17:ad:0d:8d:ab:3a:7d:4e:f1:cf: 33:65:83:4d:06:50:be:a9:d1:dd:50:5d:9d:1b:96:2e:be:29: cd:09:a1:15 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyMkYxMTAvBgNVBAUTKDIxNEIyRkNGNDJCQjJCOTg5MDU4NDVENzMzRDk0NUQ5 NUMyRENBMTIwHhcNMjUwNjE4MjIzMDQ0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUzM2UxNC1jN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwYvz5/39rncFpRAXCs3PhdXXlzEu1zFZiySELu5DSkuXrF0GVGZvpLV1e0W 3WUc9dB3DQ32Hs/JYqAbJH3+nS3jTimsvpLLavKuZQkfZL8FraAGJE977ugbOCPV sQhySgeX72BFoQ/fmQUyZLNn/mIXAxNStEggscYWb0v6XvoQTqpQBSN/dnR+Fbsd gQk4H4j5Vfi7MPS4nRt9/3vGD4x0l/kzCrmelNTv+tErYjntMkNQHAUNP6lv75Z6 AFtnprJTTweB7b2KJigP4/VP1PeSphG/q14BMjbFlksAqAcqrtZZWLYiEfCNpkDs LCjo+n4281fDngrGD3ySWGQtvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPt/y+Hp OW7z2YjQdT4pCVs0EH//MB8GA1UdIwQYMBaAFCFLL89CuyuYkFhF1zPZRdlcLcoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDIyRi83QzY0NDQyNjc3 NjQxMUVCQjFDNEY1NDVDNEY5QUUwMi9JVXN2ejBLN0s1aVFXRVhYTTlsRjJWd3R5 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lVc3Z6MEs3SzVpUVdFWFhNOWxGMlZ3dHloSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDAyMkYvN0M2NDQ0MjY3NzY0MTFFQkIxQzRGNTQ1QzRGOUFFMDIvMjRGMzNENzg3 N0FGMTFFQjhFOTcyQzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmVgwDQYJKoZIhvcNAQELBQADggEBAMR3a++psKjs8EWE biw6xO6aMGV9P6KrCppCKdOWIoUHGpgEI1kiR+VjpNtKjXCCWuMtX0gaUpxN3Mmo 4IAFPcYv2cYlwr4tssZ9IHmcEBInnZMJpl9f1uitTiUWj/eMaXjrLEVfLI0NQLuT 1tSugruQTrAtNvpf+hTjLOJbRyb8w62Ise7QBg+6I2HvJt0KzbrjYM2SULK6XLdz gGahZ++Do50B3lK+I6vRGuZgFlIWR9KJ48LzdPtmp6/NklYF5ljZSg/WEw3sNggy CQMEiiBE+uZ1UFMbFspMfeAhf07IF60Njas6fU7xzzNlg00GUL6p0d1QXZ0bli6+ Kc0JoRU= -----END CERTIFICATE-----Generated at Thu Jul 3 11:54:31 2025 by rpki-client