$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/8FC6588099D711EFB8A4757AC4F9AE02.roa File: 8FC6588099D711EFB8A4757AC4F9AE02.roa (raw, json) Hash identifier: unwOXbdTfZz7FftNdr0FctWsJH4pDCRSkIqFT/8g7b8= Subject key identifier: 7B:6C:7C:23:83:2B:63:FF:E6:76:D1:E4:6C:62:78:33:E2:A6:49:06 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 26C0 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/8FC6588099D711EFB8A4757AC4F9AE02.roa Signing time: Wed 25 Jun 2025 11:33:20 +0000 ROA not before: Wed 25 Jun 2025 11:33:19 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 64005 IP address blocks: 103.139.235.0/24 maxlen: 24 103.228.200.0/24 maxlen: 24 2001:df4:3800::/48 maxlen: 48 2400:eb80::/32 maxlen: 32 2400:eb80::/48 maxlen: 48 2400:eb80:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9920 (0x26c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Jun 25 11:33:19 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=685bde7f-2651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:08:31:77:df:93:a7:06:d6:fc:12:ec:41:87: 32:73:18:11:93:73:a1:31:88:86:65:ba:f1:89:2a: 14:2b:92:96:eb:cc:52:4c:16:91:b2:c8:bf:04:e6: 01:db:38:47:20:3e:19:10:67:46:67:00:ca:58:96: ca:c4:e8:2e:1d:f8:55:da:f8:55:ea:d8:9f:70:69: 3c:e1:ee:a7:c3:af:74:74:eb:51:42:14:fb:93:31: f0:12:fb:73:5f:75:95:05:f7:3b:c6:73:e5:68:34: c7:47:58:41:44:92:cc:5a:b6:a4:2b:9a:bf:b3:78: f5:d2:19:33:89:21:46:52:10:29:cf:78:f5:98:ef: 17:89:a6:0b:52:cf:8f:63:38:b6:6f:9c:20:ad:c6: fe:9d:08:c5:e0:39:d3:ce:80:b4:45:9a:63:11:59: 16:7d:b9:0b:20:be:82:85:84:ba:3f:a1:a3:32:bc: 52:3e:95:97:7a:4e:f1:72:7a:a1:f2:20:80:25:81: cb:25:8b:db:a1:de:d6:1b:7a:ea:48:cd:ec:18:04: 76:4e:6a:57:1d:fb:fa:9b:6c:81:3e:1b:3d:95:ab: e8:97:b3:29:d8:00:56:e8:ef:5c:c4:9f:65:b5:83: 40:7d:3a:47:13:83:2c:7a:f3:05:09:f9:1a:f8:4a: 20:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6C:7C:23:83:2B:63:FF:E6:76:D1:E4:6C:62:78:33:E2:A6:49:06 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/8FC6588099D711EFB8A4757AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.235.0/24 103.228.200.0/24 IPv6: 2001:df4:3800::/48 2400:eb80::/32 Signature Algorithm: sha256WithRSAEncryption 91:84:41:17:85:c4:e8:e8:95:f9:08:07:c0:39:6a:88:1b:c8: 38:b5:87:5e:3d:7f:ee:1e:d0:12:ec:86:1d:e3:33:b9:82:75: 4d:30:fc:99:35:70:b8:f0:36:e8:33:a8:90:f1:3d:80:d6:b6: 27:f4:55:02:39:d1:dd:8e:79:ef:60:c7:0a:ce:0c:ce:8b:24: f9:d7:7f:ff:27:9c:a5:d6:4f:0b:50:40:50:10:a7:9b:eb:58: 81:e8:ad:9b:f2:72:52:a8:cc:bb:1e:c8:04:0b:4c:fd:7f:84: 70:9b:4d:7c:c5:6f:05:60:5b:d3:b9:f7:b0:13:1c:1b:34:63: 8d:ab:6f:ad:03:f8:97:c6:fd:02:bb:79:2c:9b:41:2c:e8:b4: 40:04:fd:9a:7f:66:ed:4b:62:b1:8a:7d:98:66:98:26:54:eb: 22:b6:d3:b6:10:72:e5:a9:7f:0d:94:c5:4b:9f:f8:ba:54:96: b0:b6:e6:78:8c:87:46:a6:70:0d:bf:cc:20:64:a3:4d:a3:c9: 65:d8:78:1d:e1:90:6a:73:73:75:d3:da:10:c1:e0:3f:11:22: 63:a8:f7:38:26:0e:4b:1f:a5:76:1a:f2:93:27:3c:bf:d7:16: 4c:04:a3:83:b6:a3:b5:c2:da:c9:3c:c7:15:5f:96:bf:6b:52: a7:37:2d:e0 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICJsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjUwNjI1MTEzMzE5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODViZGU3Zi0yNjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Agxd9+TpwbW/BLsQYcycxgRk3OhMYiGZbrxiSoUK5KW68xSTBaRssi/BOYB 2zhHID4ZEGdGZwDKWJbKxOguHfhV2vhV6tifcGk84e6nw690dOtRQhT7kzHwEvtz X3WVBfc7xnPlaDTHR1hBRJLMWrakK5q/s3j10hkziSFGUhApz3j1mO8XiaYLUs+P Yzi2b5wgrcb+nQjF4DnTzoC0RZpjEVkWfbkLIL6ChYS6P6GjMrxSPpWXek7xcnqh 8iCAJYHLJYvbod7WG3rqSM3sGAR2TmpXHfv6m2yBPhs9lavol7Mp2ABW6O9cxJ9l tYNAfTpHE4MsevMFCfka+EogxwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFHtsfCOD K2P/5nbR5GxieDPipkkGMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNEQjAvQjg5NUFGNzQwNTE1MTFFNThENDlBRTQyQzRGOUFFMDIvOEZDNjU4ODA5 OUQ3MTFFRkI4QTQ3NTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMBIEAgABMAwDBABni+sDBABn5MgwFgQCAAIwEAMHACABDfQ4AAMFACQA64Aw DQYJKoZIhvcNAQELBQADggEBAJGEQReFxOjolfkIB8A5aogbyDi1h149f+4e0BLs hh3jM7mCdU0w/Jk1cLjwNugzqJDxPYDWtif0VQI50d2Oee9gxwrODM6LJPnXf/8n nKXWTwtQQFAQp5vrWIHorZvyclKozLseyAQLTP1/hHCbTXzFbwVgW9O597ATHBs0 Y42rb60D+JfG/QK7eSybQSzotEAE/Zp/Zu1LYrGKfZhmmCZU6yK207YQcuWpfw2U xUuf+LpUlrC25niMh0amcA2/zCBko02jyWXYeB3hkGpzc3XT2hDB4D8RImOo9zgm DksfpXYa8pMnPL/XFkwEo4O2o7XC2sk8xxVflr9rUqc3LeA= -----END CERTIFICATE-----Generated at Thu Jul 3 07:58:41 2025 by rpki-client