$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa File: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (raw, json) Hash identifier: OoPJ9LoUgq0tc4y12+mstCxI2lyn1TigiiywxuD8Tjs= Subject key identifier: C0:EB:7A:C5:67:DF:6D:62:BA:8C:54:0D:65:29:15:6B:3A:AD:31:35 Certificate issuer: /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Certificate serial: 02E0 Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa Signing time: Thu 21 Aug 2025 01:38:40 +0000 ROA not before: Thu 21 Aug 2025 01:38:40 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 150001 IP address blocks: 103.190.132.0/23 maxlen: 23 103.190.132.0/24 maxlen: 24 103.190.133.0/24 maxlen: 24 2400:90a0::/32 maxlen: 32 2400:90a0::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Validity Not Before: Aug 21 01:38:40 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68a678a0-b3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:68:4c:e6:d0:5f:87:3b:ab:8a:04:b3:85:79: 18:c1:26:70:38:e3:d0:78:12:0e:5c:f7:9e:4b:67: e9:c0:d9:79:59:ff:12:b3:73:75:72:1a:b4:bc:7f: 01:9f:ad:4f:06:49:77:7d:0b:da:af:82:3f:99:36: fb:ca:bd:fd:9c:56:18:cf:c1:f4:0b:4d:24:78:f2: 4a:f6:a4:62:15:ee:dc:7b:b6:56:db:26:55:61:09: 61:e2:d5:64:9e:fb:3b:a3:cd:9c:12:72:5d:fa:c1: 9d:15:3a:cd:2a:7e:16:e8:61:fd:ec:ea:82:9d:d9: 96:4c:28:fa:39:7a:89:bc:24:bc:94:24:e2:7e:c2: 81:c1:81:33:de:4b:99:ae:de:be:49:63:d0:b7:18: f3:04:38:10:e1:c5:2f:81:49:18:e2:66:69:ea:5d: 1b:aa:aa:15:7f:f6:b9:f8:8f:4b:6c:33:e8:d0:7d: cc:31:1a:8c:88:b1:a1:26:d3:78:09:fe:b5:45:55: d0:3b:3c:a4:b1:17:8d:c8:0a:64:c1:b5:de:c0:78: 3b:6b:ef:03:02:96:1e:52:64:c1:e2:7e:2d:3d:c8: 09:61:e9:0e:88:9b:36:c0:66:48:34:67:75:cb:85: 05:4e:83:9d:0e:e8:43:4b:5a:96:44:cc:ca:9d:54: 6c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EB:7A:C5:67:DF:6D:62:BA:8C:54:0D:65:29:15:6B:3A:AD:31:35 X509v3 Authority Key Identifier: keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.132.0/23 IPv6: 2400:90a0::/32 Signature Algorithm: sha256WithRSAEncryption 2d:4a:a6:b6:0f:d8:a4:03:ac:2d:4e:01:dc:11:2a:7e:95:49: 2d:ae:8b:9d:90:87:cf:aa:db:5e:bb:6f:58:3d:76:23:18:14: 0e:39:81:82:06:15:c7:e2:a8:b1:9a:7f:89:34:cb:7f:84:6c: 2b:95:1f:6b:6c:68:fa:3e:df:6b:37:9a:06:5c:07:8a:34:b3: c6:5d:50:d6:b6:89:3f:52:86:c5:f6:45:8e:af:0f:a0:1e:23: ab:77:88:ba:72:f0:89:f6:cf:c7:41:c9:7c:91:82:63:53:80: 34:56:e8:73:ba:4b:45:ac:05:ff:a2:eb:a4:51:3b:09:3c:ca: ee:b1:a3:49:dd:1f:0d:11:ee:67:29:d1:b5:9c:6a:14:34:2c: c4:c6:6a:ee:d6:89:90:e2:c7:23:d2:62:12:4e:db:74:ee:bf: 3b:3e:23:7c:92:5a:d7:1d:fc:15:16:35:fd:f4:93:29:cb:e7: b9:08:b3:55:27:5e:39:a3:5f:a8:e1:b7:c2:92:10:ff:be:f4: 28:91:76:77:f8:6c:14:c9:8b:b2:70:a9:72:ce:a6:7a:c6:c3: bb:00:8c:f3:8b:dc:37:02:b1:d5:62:cf:36:ce:0c:1e:c0:c9: 8d:db:71:96:73:23:a5:a0:ac:16:d3:c0:4b:1a:cd:ad:2b:47: 1b:d8:ca:a3 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3QjIxMTAvBgNVBAUTKDk1MTI4NDI2NjRBQzUxQkY2Nzg1NUJDNkU0RjQ2QkUz NTUxQTREQTMwHhcNMjUwODIxMDEzODQwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2NzhhMC1iM2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mhM5tBfhzurigSzhXkYwSZwOOPQeBIOXPeeS2fpwNl5Wf8Ss3N1chq0vH8B n61PBkl3fQvar4I/mTb7yr39nFYYz8H0C00kePJK9qRiFe7ce7ZW2yZVYQlh4tVk nvs7o82cEnJd+sGdFTrNKn4W6GH97OqCndmWTCj6OXqJvCS8lCTifsKBwYEz3kuZ rt6+SWPQtxjzBDgQ4cUvgUkY4mZp6l0bqqoVf/a5+I9LbDPo0H3MMRqMiLGhJtN4 Cf61RVXQOzyksReNyApkwbXewHg7a+8DApYeUmTB4n4tPcgJYekOiJs2wGZINGd1 y4UFToOdDuhDS1qWRMzKnVRsmwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMDresVn 321iuoxUDWUpFWs6rTE1MB8GA1UdIwQYMBaAFJUShCZkrFG/Z4VbxuT0a+NVGk2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjdCMi8wRTYzMjE5NEZC N0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1ViOW5oVnZHNVBScjQxVWFU YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0VKbVNzVWI5bmhWdkc1UFJyNDFVYVRhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI3QjIvMEU2MzIxOTRGQjdCMTFFQ0E4N0E4NzJFQzRGOUFFMDIvMkE0RUExMEVG QjdGMTFFQzhGQjU4RTRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnvoQwDQQCAAIwBwMFACQAkKAwDQYJKoZIhvcNAQELBQAD ggEBAC1KprYP2KQDrC1OAdwRKn6VSS2ui52Qh8+q2167b1g9diMYFA45gYIGFcfi qLGaf4k0y3+EbCuVH2tsaPo+32s3mgZcB4o0s8ZdUNa2iT9ShsX2RY6vD6AeI6t3 iLpy8In2z8dByXyRgmNTgDRW6HO6S0WsBf+i66RROwk8yu6xo0ndHw0R7mcp0bWc ahQ0LMTGau7WiZDixyPSYhJO23Tuvzs+I3ySWtcd/BUWNf30kynL57kIs1UnXjmj X6jht8KSEP++9CiRdnf4bBTJi7JwqXLOpnrGw7sAjPOL3DcCsdVizzbODB7AyY3b cZZzI6WgrBbTwEsaza0rRxvYyqM= -----END CERTIFICATE-----Generated at Sun Aug 24 06:39:24 2025 by rpki-client