$ rpki-client -vvf rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/F100A1207F9911EBAFB6C91BC4F9AE02.roa File: F100A1207F9911EBAFB6C91BC4F9AE02.roa (raw, json) Hash identifier: WC17u871QRbv9L0eEf3wRpZbTARtAM6LAemuxBHqCWE= Subject key identifier: D9:DE:16:68:88:86:23:51:2E:37:45:DB:80:03:E5:7F:A8:F6:24:AB Certificate issuer: /CN=A9147DCA/serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Certificate serial: 068C Authority key identifier: 2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/F100A1207F9911EBAFB6C91BC4F9AE02.roa Signing time: Wed 02 Jul 2025 23:02:26 +0000 ROA not before: Wed 02 Jul 2025 23:02:26 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131476 IP address blocks: 43.245.168.0/22 maxlen: 22 43.245.169.0/24 maxlen: 24 43.245.170.0/24 maxlen: 24 43.245.171.0/24 maxlen: 24 103.4.236.0/24 maxlen: 24 103.4.237.0/24 maxlen: 24 103.4.238.0/24 maxlen: 24 103.4.239.0/24 maxlen: 24 202.81.4.0/22 maxlen: 22 202.81.4.0/24 maxlen: 24 202.81.5.0/24 maxlen: 24 202.81.6.0/24 maxlen: 24 202.81.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147DCA, serialNumber=2C3A2A8121CCF8A9BFC7CB6691854AF5E4D219F9 Validity Not Before: Jul 2 23:02:26 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6865ba82-c4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1d:c3:b2:c3:9d:8e:59:5b:63:ea:df:64:06: 5f:df:c7:08:25:b1:99:21:94:8e:0b:7e:a0:57:6d: 42:fc:05:12:56:f9:12:c6:58:e1:05:3b:bb:89:24: 37:24:4c:32:ab:6a:dc:a4:0d:ca:c4:68:96:01:4a: b4:99:e9:7a:26:20:5d:74:8e:43:3e:7e:72:22:55: 8c:c0:fe:d5:49:54:29:47:ba:a5:4d:70:0e:60:82: 0e:ae:c8:d7:54:fc:19:02:7d:bf:e5:d8:ad:fd:44: d1:c6:a5:9c:39:1e:8d:ca:76:bc:c8:28:c1:58:02: 44:7b:89:d2:cb:9f:85:2a:05:1d:d2:76:27:93:97: ab:b3:81:3a:69:af:a5:74:bd:c3:6a:01:a3:12:2b: 72:a3:7c:8b:48:e6:e0:d8:57:04:cc:ed:d5:6a:90: 1d:29:78:9f:be:3e:fd:ea:75:fd:36:53:82:46:88: 79:00:1a:81:17:aa:e9:9f:60:ec:57:ee:37:cd:35: 6c:95:49:41:35:2e:00:8f:5b:fe:b1:57:d2:23:f3: d0:e4:a6:03:d3:44:e1:6a:93:ea:52:ac:ed:ae:e1: fc:a0:b2:45:7a:f9:59:6a:34:66:1a:49:cd:cf:7a: 73:35:a8:6a:2e:78:d0:b3:7f:89:75:ea:0b:89:f5: 53:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DE:16:68:88:86:23:51:2E:37:45:DB:80:03:E5:7F:A8:F6:24:AB X509v3 Authority Key Identifier: keyid:2C:3A:2A:81:21:CC:F8:A9:BF:C7:CB:66:91:85:4A:F5:E4:D2:19:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/LDoqgSHM-Km_x8tmkYVK9eTSGfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LDoqgSHM-Km_x8tmkYVK9eTSGfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147DCA/1C75EDA67D6A11EBA4A5980CC4F9AE02/F100A1207F9911EBAFB6C91BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.168.0/22 103.4.236.0/22 202.81.4.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:5d:5e:46:fc:23:e9:a4:75:29:ec:c5:b9:06:7d:6d:4b:bd: ec:ed:c9:53:72:a3:53:a1:e7:6f:4e:a8:1b:c7:a6:4a:d0:66: a8:60:a7:69:54:0e:ea:6d:bf:83:29:5e:1c:fb:80:86:79:0f: 4e:39:5a:c5:bd:d2:b7:58:8d:44:c0:79:97:d6:fd:34:f3:86: 7a:80:d0:06:b3:f2:42:a7:4d:d8:ab:57:a5:d2:47:27:70:07: c1:f4:75:2d:19:e9:c8:67:f4:75:a5:28:da:f5:ee:37:f1:96: 95:38:f5:1d:71:70:c1:5a:e7:9c:b9:b3:44:c0:6c:6c:28:5d: a3:59:09:f3:8e:41:cd:61:f8:f9:8b:ac:ef:10:e3:3d:75:a9: 2e:8e:8d:ff:49:3f:32:33:1e:01:58:3e:59:93:13:a5:3e:72: bb:3b:f4:02:50:43:11:28:02:73:77:75:59:7a:b5:2d:19:e1: 84:c8:c9:7b:4e:8f:6a:f8:ce:6f:4d:40:82:7a:13:e1:c9:e9: 3e:06:32:8f:89:91:0e:6e:5c:37:ba:e5:6b:d8:28:8f:35:23: 15:9b:d2:68:f2:db:b3:6f:ed:d4:bc:83:b0:d3:90:14:6b:9d: 41:95:9b:80:77:87:17:8c:44:e6:84:1f:9d:07:41:65:a7:d4: 39:57:aa:58 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdEQ0ExMTAvBgNVBAUTKDJDM0EyQTgxMjFDQ0Y4QTlCRkM3Q0I2NjkxODU0QUY1 RTREMjE5RjkwHhcNMjUwNzAyMjMwMjI2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1YmE4Mi1jNGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2h3DssOdjllbY+rfZAZf38cIJbGZIZSOC36gV21C/AUSVvkSxljhBTu7iSQ3 JEwyq2rcpA3KxGiWAUq0mel6JiBddI5DPn5yIlWMwP7VSVQpR7qlTXAOYIIOrsjX VPwZAn2/5dit/UTRxqWcOR6Nyna8yCjBWAJEe4nSy5+FKgUd0nYnk5ers4E6aa+l dL3DagGjEityo3yLSObg2FcEzO3VapAdKXifvj796nX9NlOCRoh5ABqBF6rpn2Ds V+43zTVslUlBNS4Aj1v+sVfSI/PQ5KYD00ThapPqUqztruH8oLJFevlZajRmGknN z3pzNahqLnjQs3+JdeoLifVTxwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNneFmiI hiNRLjdF24AD5X+o9iSrMB8GA1UdIwQYMBaAFCw6KoEhzPipv8fLZpGFSvXk0hn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0RDQS8xQzc1RURBNjdE NkExMUVCQTRBNTk4MENDNEY5QUUwMi9MRG9xZ1NITS1LbV94OHRta1lWSzllVFNH ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEb3FnU0hNLUttX3g4dG1rWVZLOWVUU0dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdEQ0EvMUM3NUVEQTY3RDZBMTFFQkE0QTU5ODBDQzRGOUFFMDIvRjEwMEExMjA3 Rjk5MTFFQkFGQjZDOTFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAIr9agDBAJnBOwDBALKUQQwDQYJKoZIhvcNAQELBQADggEB AExdXkb8I+mkdSnsxbkGfW1LveztyVNyo1Oh529OqBvHpkrQZqhgp2lUDuptv4Mp Xhz7gIZ5D045WsW90rdYjUTAeZfW/TTzhnqA0Aaz8kKnTdirV6XSRydwB8H0dS0Z 6chn9HWlKNr17jfxlpU49R1xcMFa55y5s0TAbGwoXaNZCfOOQc1h+PmLrO8Q4z11 qS6Ojf9JPzIzHgFYPlmTE6U+crs79AJQQxEoAnN3dVl6tS0Z4YTIyXtOj2r4zm9N QIJ6E+HJ6T4GMo+JkQ5uXDe65WvYKI81IxWb0mjy27Nv7dS8g7DTkBRrnUGVm4B3 hxeMROaEH50HQWWn1DlXqlg= -----END CERTIFICATE-----Generated at Thu Jul 3 23:45:58 2025 by rpki-client