$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/7740AE687F8A11EE89807F7CC4F9AE02.roa File: 7740AE687F8A11EE89807F7CC4F9AE02.roa (raw, json) Hash identifier: ioHyUTgCHnCGMUHWoGRwcexhSo8qMCJK1mxXffaCMDM= Subject key identifier: AC:70:22:6E:BE:9C:42:8E:40:5D:75:4D:F8:23:2C:98:17:F9:0A:25 Certificate issuer: /CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Certificate serial: 0139 Authority key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/7740AE687F8A11EE89807F7CC4F9AE02.roa Signing time: Thu 03 Jul 2025 00:03:42 +0000 ROA not before: Thu 03 Jul 2025 00:03:42 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 139060 IP address blocks: 103.139.20.0/24 maxlen: 24 103.139.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EF21, serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB Validity Not Before: Jul 3 00:03:42 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6865c8de-a694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b0:44:21:e8:0f:ba:07:36:38:b6:11:f7:0e: c7:b7:82:e2:a5:61:2c:88:fa:0c:8d:63:ec:a2:ea: 8f:43:81:0f:00:82:d1:ff:e5:1d:31:c6:39:37:f1: bd:62:5c:3a:92:49:69:b0:03:68:6c:a1:2f:51:da: f4:d9:93:b8:0c:4e:4b:05:b7:6b:56:a1:e9:c4:8c: 3a:e7:81:86:76:ef:6b:26:bc:f8:2b:ca:0a:0d:ef: ba:60:df:ef:b7:b5:ca:16:ef:99:0f:0b:62:31:14: 18:91:6d:bc:48:c2:d1:2c:64:05:92:10:7b:25:38: 15:14:49:f4:89:29:43:b8:50:30:0b:7d:67:e3:fb: c5:5a:17:83:91:b9:a1:a2:05:89:21:07:f6:e9:bb: 63:71:c6:cc:3d:8a:96:26:1b:9a:c5:c2:6c:b5:a4: 25:df:1c:a2:59:1f:ea:1c:a0:dd:6e:65:c8:14:b4: b1:4c:8d:f8:0e:11:fd:51:b4:fc:fb:93:31:56:64: f7:f2:b8:d0:e0:f3:31:a0:87:a4:5a:ce:d0:82:02: 13:59:e1:74:83:a0:90:69:db:2f:28:d8:28:ed:21: 1f:0f:16:ec:a8:9f:30:12:bc:9c:11:14:8d:d8:58: 6a:59:69:2d:1c:b4:94:5a:ed:3f:c1:43:ff:2c:7c: 44:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:70:22:6E:BE:9C:42:8E:40:5D:75:4D:F8:23:2C:98:17:F9:0A:25 X509v3 Authority Key Identifier: keyid:F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/7740AE687F8A11EE89807F7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.20.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:25:6b:4c:a2:4c:e4:57:a4:19:4b:ad:eb:0d:20:c1:05:f1: c7:d4:62:04:af:37:f3:5b:a0:33:6f:e4:99:60:4e:1f:31:fc: 96:60:80:27:cd:10:37:87:49:8d:a9:a4:23:7a:8d:54:31:5e: 88:91:a3:4c:79:e1:bc:54:85:f4:7f:41:2e:2f:c5:35:c1:86: 87:f3:60:c5:ad:2f:fa:df:e0:d8:14:dc:8f:3e:c9:ae:d7:55: 68:ab:06:f0:bc:d0:92:93:e7:6a:cb:cf:53:50:b8:cd:29:01: 04:ef:15:99:95:d0:b0:45:63:a8:c0:c6:0c:38:c9:e3:0d:10: 67:2f:ef:93:9f:79:4d:45:39:6a:9d:02:b0:c8:b6:12:47:7e: 80:94:6e:cd:6b:f8:97:96:6b:b1:90:b9:6b:6d:29:00:66:fa: 0d:72:2b:a7:0c:44:5f:16:a8:59:6d:6f:79:56:b8:5b:37:ba: e9:06:65:f9:ec:7f:1f:ef:be:e8:4d:85:58:34:84:84:6b:94: d9:9f:c7:d8:b5:32:b6:25:f9:4b:28:1b:18:6b:c4:24:9f:60: 68:13:7d:a5:67:96:52:44:07:6a:a2:44:7a:3e:80:1f:93:d5: f5:3f:b1:b3:87:4c:ab:e0:d6:a7:3a:44:27:00:b6:7f:bd:48: c1:2b:c6:1d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVGMjExMTAvBgNVBAUTKEY0QzA2NDEzNzQ5NzVBNThCNTRFQzAyQzEwNDk3MzJF QzhBNzBBQ0IwHhcNMjUwNzAzMDAwMzQyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1YzhkZS1hNjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbBEIegPugc2OLYR9w7Ht4LipWEsiPoMjWPsouqPQ4EPAILR/+UdMcY5N/G9 Ylw6kklpsANobKEvUdr02ZO4DE5LBbdrVqHpxIw654GGdu9rJrz4K8oKDe+6YN/v t7XKFu+ZDwtiMRQYkW28SMLRLGQFkhB7JTgVFEn0iSlDuFAwC31n4/vFWheDkbmh ogWJIQf26btjccbMPYqWJhuaxcJstaQl3xyiWR/qHKDdbmXIFLSxTI34DhH9UbT8 +5MxVmT38rjQ4PMxoIekWs7QggITWeF0g6CQadsvKNgo7SEfDxbsqJ8wErycERSN 2FhqWWktHLSUWu0/wUP/LHxEfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKxwIm6+ nEKOQF11TfgjLJgX+QolMB8GA1UdIwQYMBaAFPTAZBN0l1pYtU7ALBBJcy7IpwrL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUYyMS9FQURCQjQxMjAx ODMxMUVDQjU2NDE2MjlDNEY5QUUwMi85TUJrRTNTWFdsaTFUc0FzRUVsekxzaW5D c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNQmtFM1NYV2xpMVRzQXNFRWx6THNpbkNzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVGMjEvRUFEQkI0MTIwMTgzMTFFQ0I1NjQxNjI5QzRGOUFFMDIvNzc0MEFFNjg3 RjhBMTFFRTg5ODA3RjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnixQwDQYJKoZIhvcNAQELBQADggEBAF4la0yiTORXpBlL resNIMEF8cfUYgSvN/NboDNv5JlgTh8x/JZggCfNEDeHSY2ppCN6jVQxXoiRo0x5 4bxUhfR/QS4vxTXBhofzYMWtL/rf4NgU3I8+ya7XVWirBvC80JKT52rLz1NQuM0p AQTvFZmV0LBFY6jAxgw4yeMNEGcv75OfeU1FOWqdArDIthJHfoCUbs1r+JeWa7GQ uWttKQBm+g1yK6cMRF8WqFltb3lWuFs3uukGZfnsfx/vvuhNhVg0hIRrlNmfx9i1 MrYl+UsoGxhrxCSfYGgTfaVnllJEB2qiRHo+gB+T1fU/sbOHTKvg1qc6RCcAtn+9 SMErxh0= -----END CERTIFICATE-----Generated at Thu Jul 3 05:53:52 2025 by rpki-client