$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/8174C3BEF16411E980D2F667C4F9AE02.roa File: 8174C3BEF16411E980D2F667C4F9AE02.roa (raw, json) Hash identifier: hN5uWTMLKihaDnB2GMrlEkHThQZGD2la1832Pp7TIb4= Subject key identifier: FB:8B:C8:E4:9F:00:53:D8:01:D3:9F:B4:DF:8B:34:A1:E9:51:53:D1 Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0CA1 Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/8174C3BEF16411E980D2F667C4F9AE02.roa Signing time: Sat 26 Apr 2025 18:27:17 +0000 ROA not before: Sat 26 Apr 2025 18:27:17 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 38493 IP address blocks: 103.123.8.0/22 maxlen: 24 123.136.24.0/21 maxlen: 24 2404:7e00::/32 maxlen: 36 2404:7e00:500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3233 (0xca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Apr 26 18:27:17 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=680d2585-5918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2a:3b:10:50:58:29:13:8c:9f:77:8a:5a:1d: e7:af:34:d4:26:27:8d:48:5a:0d:54:71:f6:5b:a0: 18:e4:21:1b:fc:56:b4:98:2b:35:95:f2:3f:05:fe: 1f:06:42:b2:7d:f5:af:8f:a0:a2:00:a0:1d:fe:ef: c9:66:ab:ff:40:a5:5d:8a:2b:a3:6c:15:71:ec:6a: 3c:7a:f5:36:8a:89:4a:22:be:0c:2d:89:4e:8f:9a: 5c:9b:e9:c1:a1:73:5d:28:2d:eb:3c:33:95:73:f4: 4a:3b:f6:27:5a:4e:41:92:f4:6d:f6:b6:90:c7:b6: a1:ec:8a:fc:da:79:47:5a:a3:85:ee:e0:90:d6:fd: 41:bc:06:57:0e:13:db:d9:70:06:56:d0:4e:ef:46: be:af:5a:1b:10:cb:67:82:2f:f1:ce:d8:df:fc:cd: 03:1e:41:2a:8e:e2:92:65:3f:53:e7:03:04:64:4b: d1:1f:19:d8:28:20:52:f8:42:ef:55:bb:ad:28:dc: 65:e6:b1:e6:1e:6a:e7:5d:29:21:e3:e2:c9:45:c3: cd:b0:d7:c6:6a:86:52:7a:88:08:75:d6:e8:69:a9: fa:02:c7:a1:a4:8a:ca:6d:63:d0:c1:9a:86:12:8d: cb:86:4b:1f:75:c2:a7:8b:95:3d:4c:81:ed:2e:f0: e0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8B:C8:E4:9F:00:53:D8:01:D3:9F:B4:DF:8B:34:A1:E9:51:53:D1 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/8174C3BEF16411E980D2F667C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.8.0/22 123.136.24.0/21 IPv6: 2404:7e00::/32 Signature Algorithm: sha256WithRSAEncryption 18:4c:ed:0f:9d:18:a1:4b:08:3c:47:3c:bf:f0:42:15:84:7e: 22:01:68:d3:89:0b:d1:9d:c9:47:ae:13:ac:e6:5e:9d:8d:51: 23:de:16:f4:af:b1:ac:46:b2:63:7a:61:d9:86:da:71:72:e2: aa:50:93:ab:b2:3f:89:59:34:de:c8:b5:0e:b9:03:57:a4:d3: 8a:98:b8:3c:af:91:b0:6e:0b:98:96:ac:c5:1a:69:11:c1:b5: d5:9b:2a:81:41:9c:fc:7c:c8:78:f8:fe:f6:f9:83:d7:20:01: 83:b4:3f:fd:aa:78:01:fd:42:33:91:c8:df:2c:ed:13:bf:cb: ac:e5:76:c8:10:f2:00:c9:d4:a1:23:06:4f:58:6b:8a:15:36: f7:ac:4e:45:15:46:4a:ab:04:97:6c:ea:e2:f6:1d:a6:c2:2d: 09:39:e6:47:4b:60:26:6b:ba:44:e5:97:3e:1c:d3:27:1b:83: 0d:f4:16:7d:9f:61:24:a9:e2:38:d6:e4:2f:c4:f0:b2:19:0c: aa:db:8c:0a:74:4a:9b:1d:c2:65:b0:86:52:4f:a5:79:2c:3c: 6b:0c:1b:f9:5b:6e:68:06:8e:d6:ae:6f:f9:4a:57:0a:08:2f: 00:91:63:fa:a0:3b:01:44:d7:2c:f2:82:f6:af:df:c4:98:07: 5d:99:dc:67 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjUwNDI2MTgyNzE3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODBkMjU4NS01OTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSo7EFBYKROMn3eKWh3nrzTUJieNSFoNVHH2W6AY5CEb/Fa0mCs1lfI/Bf4f BkKyffWvj6CiAKAd/u/JZqv/QKVdiiujbBVx7Go8evU2iolKIr4MLYlOj5pcm+nB oXNdKC3rPDOVc/RKO/YnWk5BkvRt9raQx7ah7Ir82nlHWqOF7uCQ1v1BvAZXDhPb 2XAGVtBO70a+r1obEMtngi/xztjf/M0DHkEqjuKSZT9T5wMEZEvRHxnYKCBS+ELv VbutKNxl5rHmHmrnXSkh4+LJRcPNsNfGaoZSeogIddboaan6AsehpIrKbWPQwZqG Eo3LhksfdcKni5U9TIHtLvDg2QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPuLyOSf AFPYAdOftN+LNKHpUVPRMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjcwOEYvNTZEQjBGMjRGMTYzMTFFOTlEQkVERjY1QzRGOUFFMDIvODE3NEMzQkVG MTY0MTFFOTgwRDJGNjY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnewgDBAN7iBgwDQQCAAIwBwMFACQEfgAwDQYJKoZIhvcN AQELBQADggEBABhM7Q+dGKFLCDxHPL/wQhWEfiIBaNOJC9GdyUeuE6zmXp2NUSPe FvSvsaxGsmN6YdmG2nFy4qpQk6uyP4lZNN7ItQ65A1ek04qYuDyvkbBuC5iWrMUa aRHBtdWbKoFBnPx8yHj4/vb5g9cgAYO0P/2qeAH9QjORyN8s7RO/y6zldsgQ8gDJ 1KEjBk9Ya4oVNvesTkUVRkqrBJds6uL2HabCLQk55kdLYCZrukTllz4c0ycbgw30 Fn2fYSSp4jjW5C/E8LIZDKrbjAp0SpsdwmWwhlJPpXksPGsMG/lbbmgGjtaub/lK VwoILwCRY/qgOwFE1yzygvav38SYB12Z3Gc= -----END CERTIFICATE-----Generated at Mon Oct 20 19:27:13 2025 by rpki-client