$ rpki-client -vvf rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/7FA158782F1D11EDA3E29B09C4F9AE02.roa File: 7FA158782F1D11EDA3E29B09C4F9AE02.roa (raw, json) Hash identifier: NLbyCuuj3PUuIvgjWrH/YA9s60d6QDG0BkYDeVifH9s= Subject key identifier: F9:73:E6:F8:B9:CB:9D:7D:83:7E:9A:B1:2A:F8:3B:DF:05:27:69:8F Certificate issuer: /CN=A914D167/serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Certificate serial: 023C Authority key identifier: 49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/7FA158782F1D11EDA3E29B09C4F9AE02.roa Signing time: Thu 03 Jul 2025 02:37:07 +0000 ROA not before: Thu 03 Jul 2025 02:37:07 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 55581 IP address blocks: 103.67.68.0/24 maxlen: 24 103.93.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D167, serialNumber=49F9282BF4DC87F7C123E5873CBAA5E7D6993248 Validity Not Before: Jul 3 02:37:07 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6865ecd3-b265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:9d:aa:5d:56:92:81:f0:2f:86:cf:42:57: 53:ae:47:fd:36:d3:48:41:7e:d9:ab:c5:4a:1d:01: 32:04:b6:86:e4:a2:ed:56:3c:64:c2:5c:87:07:71: 20:73:86:0e:69:e9:e4:6b:ef:e8:da:80:7e:6b:6b: 3b:9a:99:cb:b3:b6:97:76:26:b7:20:25:fc:f0:ec: bd:b6:6f:6f:80:99:4a:37:a6:a8:7c:52:86:39:c0: 71:01:aa:fc:da:1d:9e:00:65:e9:e2:79:99:f2:00: cc:23:39:c9:7c:88:1e:52:9f:d9:15:2d:18:3d:58: de:34:56:fd:31:56:9f:e9:ad:86:64:e9:81:47:08: 62:b2:e8:c9:69:48:28:81:75:e2:92:78:b7:f4:c5: 75:c4:88:b1:d1:60:98:90:00:08:66:a2:b2:43:20: 7e:47:73:f0:f2:44:2b:53:64:16:ba:c6:72:97:cf: 00:d2:3b:bf:4d:c6:7e:22:ec:cf:6f:d4:03:e0:36: eb:00:5e:4e:97:09:c1:6d:01:b9:7f:b9:5f:b9:f7: f2:f2:ae:86:ec:25:43:c1:9f:72:26:8c:6b:db:2e: 7b:22:53:15:fd:f5:57:42:18:57:c5:b7:ca:8b:20: fd:fd:bc:79:86:26:45:e9:11:a2:da:10:7b:20:a3: 19:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:73:E6:F8:B9:CB:9D:7D:83:7E:9A:B1:2A:F8:3B:DF:05:27:69:8F X509v3 Authority Key Identifier: keyid:49:F9:28:2B:F4:DC:87:F7:C1:23:E5:87:3C:BA:A5:E7:D6:99:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/SfkoK_Tch_fBI-WHPLql59aZMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SfkoK_Tch_fBI-WHPLql59aZMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D167/5D5C42F22F1B11EDBDDAA409C4F9AE02/7FA158782F1D11EDA3E29B09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.68.0/24 103.93.26.0/24 Signature Algorithm: sha256WithRSAEncryption 97:e4:f6:8a:41:45:da:c9:41:92:46:09:fd:a8:e3:87:c1:0f: ff:1c:16:77:71:bb:57:8a:29:1e:ab:c2:54:d5:a4:0b:49:19: d5:0c:a1:f5:08:bc:ce:d1:fe:d4:6c:81:48:8f:2b:35:00:43: 50:26:23:13:e5:27:00:09:30:fe:76:e6:78:1d:eb:20:d4:43: 92:dd:5f:33:55:ab:71:03:9b:b3:09:ea:91:be:9c:8c:60:73: e6:f9:01:2c:f0:d1:db:2c:b7:6c:c0:3b:4f:c4:32:4c:79:ef: 44:17:bc:48:d6:75:f0:06:8e:c6:64:7e:88:45:1c:3c:97:59: 19:7a:20:f2:db:ed:8a:62:c7:d9:0a:df:ae:ba:e3:50:d9:29: f2:bd:b2:ec:45:3d:dd:d4:91:4e:2a:81:57:4b:91:17:23:d2: ea:23:c7:a9:d9:79:18:53:ca:a3:12:45:17:4a:67:d3:c8:42: 53:b4:df:d1:a7:a7:32:14:a3:24:fc:ca:84:54:e5:f6:6d:09: af:04:d3:25:1d:56:ee:c5:81:79:03:ee:0c:a9:08:06:9b:b6: a5:11:7e:6c:5e:67:2f:b0:c4:c9:51:62:bc:ac:86:c1:eb:e1: f7:69:a8:07:9b:55:74:5a:f9:b6:07:42:c3:8e:c3:3b:3f:74: 25:b1:34:b4 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQxNjcxMTAvBgNVBAUTKDQ5RjkyODJCRjREQzg3RjdDMTIzRTU4NzNDQkFBNUU3 RDY5OTMyNDgwHhcNMjUwNzAzMDIzNzA3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1ZWNkMy1iMjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygudql1WkoHwL4bPQldTrkf9NtNIQX7Zq8VKHQEyBLaG5KLtVjxkwlyHB3Eg c4YOaenka+/o2oB+a2s7mpnLs7aXdia3ICX88Oy9tm9vgJlKN6aofFKGOcBxAar8 2h2eAGXp4nmZ8gDMIznJfIgeUp/ZFS0YPVjeNFb9MVaf6a2GZOmBRwhisujJaUgo gXXikni39MV1xIix0WCYkAAIZqKyQyB+R3Pw8kQrU2QWusZyl88A0ju/TcZ+IuzP b9QD4DbrAF5OlwnBbQG5f7lfuffy8q6G7CVDwZ9yJoxr2y57IlMV/fVXQhhXxbfK iyD9/bx5hiZF6RGi2hB7IKMZnQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPlz5vi5 y519g36asSr4O98FJ2mPMB8GA1UdIwQYMBaAFEn5KCv03If3wSPlhzy6pefWmTJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDE2Ny81RDVDNDJGMjJG MUIxMUVEQkREQUE0MDlDNEY5QUUwMi9TZmtvS19UY2hfZkJJLVdIUExxbDU5YVpN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Nma29LX1RjaF9mQkktV0hQTHFsNTlhWk1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEQxNjcvNUQ1QzQyRjIyRjFCMTFFREJEREFBNDA5QzRGOUFFMDIvN0ZBMTU4Nzgy RjFEMTFFREEzRTI5QjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnQ0QDBABnXRowDQYJKoZIhvcNAQELBQADggEBAJfk9opB RdrJQZJGCf2o44fBD/8cFndxu1eKKR6rwlTVpAtJGdUMofUIvM7R/tRsgUiPKzUA Q1AmIxPlJwAJMP525ngd6yDUQ5LdXzNVq3EDm7MJ6pG+nIxgc+b5ASzw0dsst2zA O0/EMkx570QXvEjWdfAGjsZkfohFHDyXWRl6IPLb7Ypix9kK366641DZKfK9suxF Pd3UkU4qgVdLkRcj0uojx6nZeRhTyqMSRRdKZ9PIQlO039GnpzIUoyT8yoRU5fZt Ca8E0yUdVu7FgXkD7gypCAabtqURfmxeZy+wxMlRYryshsHr4fdpqAebVXRa+bYH QsOOwzs/dCWxNLQ= -----END CERTIFICATE-----Generated at Thu Jul 3 17:37:46 2025 by rpki-client