$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/B6A436A8411F11EBA45D5857C4F9AE02.roa File: B6A436A8411F11EBA45D5857C4F9AE02.roa (raw, json) Hash identifier: 8umaFtJV5TgBXJUzmNOXuQWmgpWLTZbpyNtna3LX4IY= Subject key identifier: 93:0A:39:7B:88:10:86:FD:A1:DE:68:64:AC:88:BA:71:88:0A:98:C9 Certificate issuer: /CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF Certificate serial: 0738 Authority key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/B6A436A8411F11EBA45D5857C4F9AE02.roa Signing time: Tue 12 Aug 2025 22:34:17 +0000 ROA not before: Tue 12 Aug 2025 22:34:17 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 131226 IP address blocks: 103.37.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848 (0x738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148F50, serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF Validity Not Before: Aug 12 22:34:17 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=689bc168-5f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c7:bc:eb:ad:f5:8e:c5:b2:8b:bb:13:b4:f6: ed:a1:93:b5:8c:68:0b:36:79:ce:9b:a0:d8:21:40: 59:40:73:9b:57:40:f6:5a:11:ff:c6:cb:31:91:0f: 7f:8b:1c:95:b4:88:30:1f:20:97:ed:d2:4d:7c:6a: e9:7a:28:1b:52:79:31:27:a6:c9:b4:6a:81:b4:63: da:ee:e8:22:71:dc:12:0e:da:0f:33:7f:96:6c:e1: 84:bc:17:60:89:b3:9f:cc:86:6e:69:ab:72:21:f7: c9:0f:2d:1d:07:e1:d9:ec:20:4c:fb:67:b6:89:72: 59:1c:a6:e2:0b:e4:24:c1:13:04:b5:2a:82:cc:b8: b7:95:13:95:e5:71:34:e9:1e:a0:31:0f:b6:3e:79: 34:7d:a4:be:bc:68:d3:e7:a1:7d:9e:e3:99:e9:2b: 5e:b9:55:96:54:30:4b:ba:40:a5:b4:e3:42:89:1f: d0:37:ee:9e:f3:cc:8a:f9:d7:63:b1:c5:54:90:69: d4:a2:c1:28:60:60:2f:85:5f:5a:d7:57:3f:00:04: 4e:03:4d:57:e3:b3:73:72:19:f2:38:3a:7f:01:4b: 4f:dc:ac:f1:da:56:19:94:6a:37:a2:99:de:4c:bf: 81:89:0d:8a:db:00:b4:0e:c4:ab:25:9b:ca:e1:c5: 23:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0A:39:7B:88:10:86:FD:A1:DE:68:64:AC:88:BA:71:88:0A:98:C9 X509v3 Authority Key Identifier: keyid:4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/B6A436A8411F11EBA45D5857C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.37.200.0/23 Signature Algorithm: sha256WithRSAEncryption 19:56:0a:f6:51:31:5e:7c:77:5c:1f:a3:51:7b:58:74:a6:35: 36:de:93:f2:93:a4:c2:c5:c5:6d:dc:7a:0d:fb:aa:72:13:2b: 8d:8b:b9:46:ab:22:01:10:2f:e2:05:72:0e:f4:33:76:59:06: bd:e6:27:7d:46:27:6d:c1:90:11:a9:b7:bb:e2:98:21:2b:33: 3d:6d:3a:b0:b9:74:cc:b3:57:7a:ee:af:0f:c5:c9:d6:92:4b: ed:c3:41:5e:f3:2d:ac:bf:33:07:55:2c:f5:b9:17:c9:54:88: 16:1d:5f:ff:5e:92:49:52:85:15:77:38:17:dc:b4:eb:41:b3: 33:d2:57:9e:88:4f:b8:bf:d9:f1:7a:0e:cd:67:4a:b0:29:6e: 07:ad:d3:ae:1a:d2:87:bf:32:85:c2:1c:12:2d:e2:a9:f4:64: 20:34:6a:9d:c8:7e:6f:33:c1:87:24:4a:08:3d:14:ad:e8:ed: b5:30:0d:22:0b:d4:5a:b2:6c:0c:12:0e:ca:53:d0:2a:59:2d: 95:93:37:7b:d5:d9:34:a6:6a:5f:d0:33:df:71:da:59:60:54: 53:f4:81:1f:5e:b5:2d:cb:d1:96:dd:8c:8f:3a:4e:8b:99:0b: 65:e0:e4:00:fd:7a:18:ab:7f:3b:08:64:c0:9a:eb:c8:a2:3c: d0:cf:76:cf -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGNTAxMTAvBgNVBAUTKDRDRjZCQTI5NDI2Q0JDMjA3NERGNjJDNTFGQUYzNzhD NDJEM0I4QUYwHhcNMjUwODEyMjIzNDE3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODliYzE2OC01Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0se86631jsWyi7sTtPbtoZO1jGgLNnnOm6DYIUBZQHObV0D2WhH/xssxkQ9/ ixyVtIgwHyCX7dJNfGrpeigbUnkxJ6bJtGqBtGPa7ugicdwSDtoPM3+WbOGEvBdg ibOfzIZuaatyIffJDy0dB+HZ7CBM+2e2iXJZHKbiC+QkwRMEtSqCzLi3lROV5XE0 6R6gMQ+2Pnk0faS+vGjT56F9nuOZ6SteuVWWVDBLukCltONCiR/QN+6e88yK+ddj scVUkGnUosEoYGAvhV9a11c/AAROA01X47NzchnyODp/AUtP3Kzx2lYZlGo3opne TL+BiQ2K2wC0DsSrJZvK4cUj2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJMKOXuI EIb9od5oZKyIunGICpjJMB8GA1UdIwQYMBaAFEz2uilCbLwgdN9ixR+vN4xC07iv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEY1MC9BMUUxRjc5QzQx MUUxMUVCQTBCOEZBNTZDNEY5QUUwMi9UUGE2S1VKc3ZDQjAzMkxGSDY4M2pFTFR1 SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RQYTZLVUpzdkNCMDMyTEZINjgzakVMVHVLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhGNTAvQTFFMUY3OUM0MTFFMTFFQkEwQjhGQTU2QzRGOUFFMDIvQjZBNDM2QTg0 MTFGMTFFQkE0NUQ1ODU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnJcgwDQYJKoZIhvcNAQELBQADggEBABlWCvZRMV58d1wf o1F7WHSmNTbek/KTpMLFxW3ceg37qnITK42LuUarIgEQL+IFcg70M3ZZBr3mJ31G J23BkBGpt7vimCErMz1tOrC5dMyzV3rurw/FydaSS+3DQV7zLay/MwdVLPW5F8lU iBYdX/9ekklShRV3OBfctOtBszPSV56IT7i/2fF6Ds1nSrApbget064a0oe/MoXC HBIt4qn0ZCA0ap3Ifm8zwYckSgg9FK3o7bUwDSIL1FqybAwSDspT0CpZLZWTN3vV 2TSmal/QM99x2llgVFP0gR9etS3L0ZbdjI86TouZC2Xg5AD9ehirfzsIZMCa68ii PNDPds8= -----END CERTIFICATE-----Generated at Sun Aug 24 04:47:49 2025 by rpki-client