$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/C6C096F68D0D11EFB98F225AC4F9AE02.roa File: C6C096F68D0D11EFB98F225AC4F9AE02.roa (raw, json) Hash identifier: su7egZKtlIHvZSkBil+sdBU+A6UZiBi6htUGZJ9uQWk= Subject key identifier: D4:76:DB:F1:F7:4E:56:5F:5A:89:B5:81:66:48:B9:77:4D:CE:4E:35 Certificate issuer: /CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F Certificate serial: 07C2 Authority key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/C6C096F68D0D11EFB98F225AC4F9AE02.roa Signing time: Thu 26 Jun 2025 21:29:08 +0000 ROA not before: Thu 26 Jun 2025 21:29:08 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 4788 IP address blocks: 45.123.102.0/24 maxlen: 24 45.123.103.0/24 maxlen: 24 103.9.148.0/24 maxlen: 24 103.9.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1986 (0x7c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F2CF, serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F Validity Not Before: Jun 26 21:29:08 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685dbba4-3fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:50:93:b7:5a:a0:f6:c2:73:fd:d6:bf:2f:47: b7:00:5e:bb:27:30:1e:09:de:71:80:5e:63:4f:67: 65:86:8b:e1:b5:b5:98:f6:95:24:b0:2b:0b:9b:bc: 95:99:b8:87:bb:22:02:d8:b9:a9:40:51:25:1b:07: 21:7b:ab:bb:48:fd:07:54:60:63:e4:d9:49:8a:01: 04:62:7b:e2:98:62:3e:91:97:22:75:98:50:1c:3a: 17:75:ef:a2:5d:31:97:37:39:8a:8a:c9:00:b7:b6: cd:b5:40:85:2c:10:95:aa:b9:be:d3:6d:cc:e4:19: 4c:61:81:44:5d:f7:d1:11:a3:0f:e0:8d:84:6a:43: dc:2b:34:a8:c1:40:a1:23:11:b8:50:aa:31:11:5f: 62:b1:3c:6b:e6:b3:7e:4f:8b:54:f9:df:e7:8d:3c: a9:b6:02:24:cc:85:52:2a:0d:59:dd:a2:23:da:fe: 8c:63:cc:3a:95:33:8b:d8:f0:61:4d:78:98:a7:b2: df:f0:b1:62:d2:25:06:54:d1:d7:3c:9a:8e:a6:01: 27:83:38:40:6e:5e:9f:9a:44:33:97:a8:42:8e:38: 62:ca:08:14:a4:1d:04:74:9e:0a:82:f1:a0:2f:d8: ea:8d:9a:38:e7:1e:bc:42:62:0d:98:cf:d1:eb:5c: f6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:76:DB:F1:F7:4E:56:5F:5A:89:B5:81:66:48:B9:77:4D:CE:4E:35 X509v3 Authority Key Identifier: keyid:CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/C6C096F68D0D11EFB98F225AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.123.102.0/23 103.9.148.0/24 103.9.151.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:50:2f:e9:a7:f1:c3:ea:36:d0:a6:2f:5d:b9:96:08:49:d6: 48:6d:98:34:e3:e6:91:8d:a0:f9:36:96:28:5c:65:20:fc:fc: 68:26:45:12:91:b4:93:95:d1:5f:21:dc:7b:f8:69:67:39:8d: d1:5a:c8:21:f3:6f:4a:89:41:46:00:5e:17:66:70:5e:c4:63: fc:b5:23:87:95:50:e9:ff:50:7e:f9:48:5b:26:53:2e:9b:c1: 69:fc:3a:57:55:a7:08:2c:04:15:7a:a2:2d:fa:a9:4a:61:ed: 84:4d:be:15:a5:d2:7a:79:85:fc:87:84:0b:1b:60:35:91:85: 0f:30:08:b6:98:29:61:34:d1:c8:a4:27:50:e9:de:21:90:c2: 43:5e:2f:1c:aa:e0:97:ab:59:f6:cf:6f:5e:7c:26:57:4c:93: 31:1f:c1:e6:18:74:e1:93:46:59:34:e2:60:58:65:85:d3:e2: 5e:3e:80:a5:01:78:41:13:34:d4:2e:f7:0e:27:56:e0:a2:fa: b6:67:e3:87:6f:b4:99:e9:b7:e1:bd:83:e0:6a:d3:20:69:72: cf:9f:d6:af:d8:3d:99:36:1c:b2:f8:57:e0:03:cf:8a:ea:61: f6:d9:47:f0:22:87:d6:45:e5:d9:c2:45:b0:e1:04:6f:40:91: ec:09:81:d8 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYyQ0YxMTAvBgNVBAUTKENCMzBEMzVDNzBERkM4NjZBODM3Q0FFREZFRkNFNkZF Q0JGQzVCNUYwHhcNMjUwNjI2MjEyOTA4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVkYmJhNC0zZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11CTt1qg9sJz/da/L0e3AF67JzAeCd5xgF5jT2dlhovhtbWY9pUksCsLm7yV mbiHuyIC2LmpQFElGwche6u7SP0HVGBj5NlJigEEYnvimGI+kZcidZhQHDoXde+i XTGXNzmKiskAt7bNtUCFLBCVqrm+023M5BlMYYFEXffREaMP4I2EakPcKzSowUCh IxG4UKoxEV9isTxr5rN+T4tU+d/njTyptgIkzIVSKg1Z3aIj2v6MY8w6lTOL2PBh TXiYp7Lf8LFi0iUGVNHXPJqOpgEngzhAbl6fmkQzl6hCjjhiyggUpB0EdJ4KgvGg L9jqjZo45x68QmINmM/R61z2swIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNR22/H3 TlZfWom1gWZIuXdNzk41MB8GA1UdIwQYMBaAFMsw01xw38hmqDfK7f785v7L/Ftf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjJDRi9GNUMxNEVEMjA3 MTAxMUVCOTdGOUY1MzdDNEY5QUUwMi95ekRUWEhEZnlHYW9OOHJ0X3Z6bV9zdjhX MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l6RFRYSERmeUdhb044cnRfdnptX3N2OFcxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUYyQ0YvRjVDMTRFRDIwNzEwMTFFQjk3RjlGNTM3QzRGOUFFMDIvQzZDMDk2RjY4 RDBEMTFFRkI5OEYyMjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAEte2YDBABnCZQDBABnCZcwDQYJKoZIhvcNAQELBQADggEB AC9QL+mn8cPqNtCmL125lghJ1khtmDTj5pGNoPk2lihcZSD8/GgmRRKRtJOV0V8h 3Hv4aWc5jdFayCHzb0qJQUYAXhdmcF7EY/y1I4eVUOn/UH75SFsmUy6bwWn8OldV pwgsBBV6oi36qUph7YRNvhWl0np5hfyHhAsbYDWRhQ8wCLaYKWE00cikJ1Dp3iGQ wkNeLxyq4JerWfbPb158JldMkzEfweYYdOGTRlk04mBYZYXT4l4+gKUBeEETNNQu 9w4nVuCi+rZn44dvtJnpt+G9g+Bq0yBpcs+f1q/YPZk2HLL4V+ADz4rqYfbZR/Ai h9ZF5dnCRbDhBG9AkewJgdg= -----END CERTIFICATE-----Generated at Thu Jul 3 01:04:21 2025 by rpki-client