$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/DE95A942581611EE878B2E54C4F9AE02.roa File: DE95A942581611EE878B2E54C4F9AE02.roa (raw, json) Hash identifier: WtW7MaINV2ct1TbshV/6OrkYfiug7pmKoz4c9cKXHaQ= Subject key identifier: 04:35:65:92:6F:DC:E9:F1:CB:83:61:D1:CA:4C:DE:DA:46:7E:C7:9F Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Certificate serial: 1DE4 Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/DE95A942581611EE878B2E54C4F9AE02.roa Signing time: Mon 30 Jun 2025 16:26:09 +0000 ROA not before: Mon 30 Jun 2025 16:26:09 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135408 IP address blocks: 103.217.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7652 (0x1de4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B01D, serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Validity Not Before: Jun 30 16:26:09 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6862baa1-887c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:51:7b:36:f3:a8:d3:8d:0f:c5:8d:f7:42:c8: 3f:ce:d1:1e:dd:76:a7:e1:97:e2:3b:b6:1a:c4:bc: 36:45:62:94:a3:3a:bd:f4:d3:b1:98:d4:e5:0e:22: 53:a3:10:bf:5e:d7:1c:a6:14:c9:82:ce:f7:35:8b: 52:f0:23:22:68:3e:d2:63:50:5e:fd:ed:1f:f6:fc: 12:fe:04:92:54:cc:a8:05:9b:07:57:29:74:f7:db: 59:e3:79:a8:8e:4b:1c:48:f8:91:24:94:b9:84:c1: b0:f4:d4:3f:19:16:dd:63:ee:7c:f2:d6:78:83:bf: 46:25:b0:5d:2f:69:d6:13:61:cf:25:fb:51:8a:90: df:22:4d:94:1e:4a:28:a3:76:4f:c6:25:5a:1d:0e: 05:55:9c:95:99:b0:cf:18:5c:cc:eb:b2:9a:d0:a3: 74:95:ee:89:f6:91:31:fe:1e:a5:d5:9b:cb:5f:55: b9:13:f3:b2:93:7b:2f:70:a4:24:2e:4a:b2:2a:4c: 4c:56:79:03:6f:7a:f6:99:08:4e:2c:3e:0d:5e:0b: 08:8f:68:eb:7a:f3:b5:9f:58:51:ef:33:c3:60:9d: 8d:d0:f3:4f:93:71:71:0c:47:b2:dd:f6:0c:32:7f: 5f:b1:e3:0e:1b:2f:7b:33:f3:a9:08:0b:e3:1f:76: 87:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:35:65:92:6F:DC:E9:F1:CB:83:61:D1:CA:4C:DE:DA:46:7E:C7:9F X509v3 Authority Key Identifier: keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/DE95A942581611EE878B2E54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.217.248.0/24 Signature Algorithm: sha256WithRSAEncryption 38:aa:d4:da:7e:fc:bf:ec:7c:2b:e6:36:03:8d:1d:10:81:48: 6d:4c:b2:12:44:d5:3f:74:5e:35:4c:b6:2e:ac:90:f9:13:ea: 6e:59:ce:b4:12:e1:ee:f0:30:e8:ae:44:b0:55:f7:3f:7a:67: ed:8f:0e:e3:09:72:5a:19:54:a4:38:cc:e1:4d:99:eb:00:7d: 44:1f:a0:9d:40:dd:2e:72:0f:34:47:e2:d5:cc:4d:0c:af:fb: a9:7d:d9:f8:27:9f:40:a5:51:26:19:22:a5:5d:c1:04:7a:c6: b1:9b:b2:5a:df:82:db:86:55:bc:5d:94:e0:98:81:72:55:03: 7c:39:29:5a:79:14:80:d0:38:aa:c3:30:c2:b8:4a:d1:9a:04: 90:3e:88:9d:cc:81:d4:3c:82:a2:32:29:76:77:68:dc:f7:35: 69:f6:26:1c:2d:30:01:5d:5e:9a:c5:11:43:66:1e:3d:51:6b: fa:3b:24:8a:90:51:ff:e0:23:3c:eb:7a:bc:50:01:52:da:83: 51:50:1d:b4:e5:7e:7e:79:6f:bb:32:cd:a6:b2:9d:ef:04:e7: ad:0b:d9:88:32:e4:ab:b6:5b:ce:88:15:4f:d8:cf:a5:44:89: aa:93:e8:be:b4:1c:9c:69:04:5c:b8:2f:56:45:51:a7:f3:82: e4:ec:91:ba -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwMUQxMTAvBgNVBAUTKDFDMkY5MENEM0Y1MUI4QUNEMDAyMTBFMzU3REU5QTgx Q0I0NUQxNzEwHhcNMjUwNjMwMTYyNjA5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYyYmFhMS04ODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVF7NvOo040PxY33Qsg/ztEe3Xan4ZfiO7YaxLw2RWKUozq99NOxmNTlDiJT oxC/XtccphTJgs73NYtS8CMiaD7SY1Be/e0f9vwS/gSSVMyoBZsHVyl099tZ43mo jkscSPiRJJS5hMGw9NQ/GRbdY+588tZ4g79GJbBdL2nWE2HPJftRipDfIk2UHkoo o3ZPxiVaHQ4FVZyVmbDPGFzM67Ka0KN0le6J9pEx/h6l1ZvLX1W5E/Oyk3svcKQk LkqyKkxMVnkDb3r2mQhOLD4NXgsIj2jrevO1n1hR7zPDYJ2N0PNPk3FxDEey3fYM Mn9fseMOGy97M/OpCAvjH3aHiQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAQ1ZZJv 3Onxy4Nh0cpM3tpGfsefMB8GA1UdIwQYMBaAFBwvkM0/Ubis0AIQ41femoHLRdFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjAxRC8yMTkyOTUxNjk1 QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVLelFBaERqVjk2YWdjdEYw WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hDLVF6VDlSdUt6UUFoRGpWOTZhZ2N0RjBYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUIwMUQvMjE5Mjk1MTY5NUMzMTFFNjg1NUEzRTFDQzRGOUFFMDIvREU5NUE5NDI1 ODE2MTFFRTg3OEIyRTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn2fgwDQYJKoZIhvcNAQELBQADggEBADiq1Np+/L/sfCvm NgONHRCBSG1MshJE1T90XjVMti6skPkT6m5ZzrQS4e7wMOiuRLBV9z96Z+2PDuMJ cloZVKQ4zOFNmesAfUQfoJ1A3S5yDzRH4tXMTQyv+6l92fgnn0ClUSYZIqVdwQR6 xrGbslrfgtuGVbxdlOCYgXJVA3w5KVp5FIDQOKrDMMK4StGaBJA+iJ3MgdQ8gqIy KXZ3aNz3NWn2JhwtMAFdXprFEUNmHj1Ra/o7JIqQUf/gIzzrerxQAVLag1FQHbTl fn55b7syzaayne8E560L2Ygy5Ku2W86IFU/Yz6VEiaqT6L60HJxpBFy4L1ZFUafz guTskbo= -----END CERTIFICATE-----Generated at Thu Jul 3 18:36:07 2025 by rpki-client