$ rpki-client -vvf rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/20B772FA7F4411F0B804E363C4F9AE02.roa File: 20B772FA7F4411F0B804E363C4F9AE02.roa (raw, json) Hash identifier: THjHA4guYY5uJuJ175z9tOk8R5b9GNGyznT6U7OeFNg= Subject key identifier: 39:06:05:2C:24:2A:67:72:48:63:41:6C:9E:F2:31:1D:86:03:28:E0 Certificate issuer: /CN=A9150984/serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92 Certificate serial: 04ED Authority key identifier: C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/20B772FA7F4411F0B804E363C4F9AE02.roa Signing time: Fri 22 Aug 2025 10:40:08 +0000 ROA not before: Fri 22 Aug 2025 10:40:08 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 136910 IP address blocks: 103.98.204.0/22 maxlen: 24 2401:9f40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1261 (0x4ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150984, serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92 Validity Not Before: Aug 22 10:40:08 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=68a84908-966b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:1f:b7:cd:65:ab:e3:cc:4d:20:e9:dd:be: af:57:d8:59:0c:be:e0:66:e8:af:6d:fc:c1:de:7f: 21:32:68:ea:0c:d1:a4:d2:73:de:99:5b:74:cd:9e: 7e:b6:90:f1:76:d8:d0:db:98:ad:95:6f:8d:58:3f: c0:0e:10:81:9c:5a:92:fe:d8:8c:eb:ff:3c:9b:3f: 9e:4e:84:05:0e:02:57:37:fc:5c:24:91:0b:88:d3: 13:8a:46:d9:cf:38:bd:52:81:9d:61:92:8c:2a:cc: ca:6c:74:b7:c6:bf:9b:c8:ee:03:a1:6e:55:95:2a: cd:6f:75:2e:35:49:a8:78:46:1f:d8:db:93:16:e0: f2:f9:e9:fd:e9:6a:67:1f:18:a1:98:5d:0b:f5:dd: c2:c5:91:83:f9:8b:b3:92:78:26:b7:02:ea:f3:0f: 8d:1d:3f:fd:61:b0:e0:6d:ed:18:0f:31:07:5c:92: 76:02:78:69:8f:8e:30:7b:f3:db:22:c8:a0:f0:a1: 2c:aa:42:a7:5a:6b:0c:4f:9e:5e:05:bd:29:9b:9c: 2c:a0:47:b5:5d:18:ee:72:f2:21:b7:6a:a0:4e:19: f4:d7:e3:d3:48:c9:1f:05:22:4c:47:43:da:4a:d0: b4:3f:d6:a3:6d:af:b5:9d:bc:e0:e5:39:76:e6:66: 24:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:06:05:2C:24:2A:67:72:48:63:41:6C:9E:F2:31:1D:86:03:28:E0 X509v3 Authority Key Identifier: keyid:C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/20B772FA7F4411F0B804E363C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.98.204.0/22 IPv6: 2401:9f40::/32 Signature Algorithm: sha256WithRSAEncryption 64:dc:5a:83:5b:c9:51:b5:eb:3e:50:7e:1c:e2:6a:c7:5f:e2: f9:f8:70:ce:e1:e2:1d:f6:c0:1a:0c:c1:4e:93:f3:48:58:79: cc:91:3e:07:7c:d5:c4:9b:2a:46:49:1d:e1:24:94:89:d6:93: cb:c5:eb:6e:26:37:90:45:e5:8a:f7:fd:40:dd:e1:aa:17:e0: 8a:c6:4e:90:f3:a5:56:10:b5:44:b2:ed:9d:99:86:ae:8b:3f: 13:dc:50:55:95:73:a6:52:36:12:00:f5:a1:b2:df:15:b6:44: f9:b9:3c:c3:6d:af:9f:35:9e:ee:28:b2:ec:50:13:d6:32:44: ac:3e:30:51:c4:33:3c:36:13:f2:25:7a:14:af:dc:0b:1a:c1: 77:49:5e:69:38:e8:c9:e0:66:eb:00:31:6c:dc:5f:8a:3a:59: 62:d1:bb:71:61:0e:48:21:fa:02:d8:b3:d5:a7:e2:73:3a:e8: 44:9a:a9:b5:7b:a9:01:c0:08:67:6b:01:fa:cf:cc:7a:80:c9: 24:69:b3:d8:10:94:89:ff:3d:92:4d:58:35:75:3d:c7:08:c9: f2:69:60:a4:e9:bd:d4:c5:31:35:c4:08:07:17:f2:1f:45:82: 93:8e:2a:0c:4d:8c:cf:9d:49:66:42:33:89:c9:7f:8f:71:3c: 24:fb:a9:49 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA5ODQxMTAvBgNVBAUTKEMwNEM4MUE2NTE1RTUwMjZFMjFCRTY4Q0I5RDUxRDQx MzlBODVBOTIwHhcNMjUwODIyMTA0MDA4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE4NDkwOC05NjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9Uft81lq+PMTSDp3b6vV9hZDL7gZuivbfzB3n8hMmjqDNGk0nPemVt0zZ5+ tpDxdtjQ25itlW+NWD/ADhCBnFqS/tiM6/88mz+eToQFDgJXN/xcJJELiNMTikbZ zzi9UoGdYZKMKszKbHS3xr+byO4DoW5VlSrNb3UuNUmoeEYf2NuTFuDy+en96Wpn HxihmF0L9d3CxZGD+YuzkngmtwLq8w+NHT/9YbDgbe0YDzEHXJJ2Anhpj44we/Pb Isig8KEsqkKnWmsMT55eBb0pm5wsoEe1XRjucvIht2qgThn01+PTSMkfBSJMR0Pa StC0P9ajba+1nbzg5Tl25mYkeQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDkGBSwk KmdySGNBbJ7yMR2GAyjgMB8GA1UdIwQYMBaAFMBMgaZRXlAm4hvmjLnVHUE5qFqS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDk4NC80MEU4MjY2QTJD M0IxMUVDQjRENTMwMThDNEY5QUUwMi93RXlCcGxGZVVDYmlHLWFNdWRVZFFUbW9X cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dFeUJwbEZlVUNiaUctYU11ZFVkUVRtb1dwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTA5ODQvNDBFODI2NkEyQzNCMTFFQ0I0RDUzMDE4QzRGOUFFMDIvMjBCNzcyRkE3 RjQ0MTFGMEI4MDRFMzYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnYswwDQQCAAIwBwMFACQBn0AwDQYJKoZIhvcNAQELBQAD ggEBAGTcWoNbyVG16z5Qfhziasdf4vn4cM7h4h32wBoMwU6T80hYecyRPgd81cSb KkZJHeEklInWk8vF624mN5BF5Yr3/UDd4aoX4IrGTpDzpVYQtUSy7Z2Zhq6LPxPc UFWVc6ZSNhIA9aGy3xW2RPm5PMNtr581nu4osuxQE9YyRKw+MFHEMzw2E/IlehSv 3AsawXdJXmk46MngZusAMWzcX4o6WWLRu3FhDkgh+gLYs9Wn4nM66ESaqbV7qQHA CGdrAfrPzHqAySRps9gQlIn/PZJNWDV1PccIyfJpYKTpvdTFMTXECAcX8h9FgpOO KgxNjM+dSWZCM4nJf49xPCT7qUk= -----END CERTIFICATE-----Generated at Sun Aug 24 02:36:52 2025 by rpki-client