$ rpki-client -vvf rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/E3901F981BD711EEB9597921C4F9AE02.roa File: E3901F981BD711EEB9597921C4F9AE02.roa (raw, json) Hash identifier: sLVF2uLBYBc6LDSXH2VUz3ksriL+t2pMsQjafYLst9Q= Subject key identifier: 4C:3D:E2:1A:60:09:AB:E7:54:63:F2:84:6D:93:F6:11:AB:B3:68:06 Certificate issuer: /CN=A917A67E/serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Certificate serial: 017C Authority key identifier: 4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/E3901F981BD711EEB9597921C4F9AE02.roa Signing time: Tue 01 Jul 2025 04:39:53 +0000 ROA not before: Tue 01 Jul 2025 04:39:53 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151326 IP address blocks: 103.197.254.0/23 maxlen: 23 2001:df2:6fc0::/48 maxlen: 48 2401:ed60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A67E, serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Validity Not Before: Jul 1 04:39:53 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68636699-0a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4e:50:fe:b7:ca:41:ba:31:33:18:23:d3:56: d7:a1:a4:d2:0c:40:9c:d4:64:9c:e8:74:87:c5:4a: f5:ba:79:f4:c2:fe:6b:00:a6:80:06:2d:9a:9b:18: ab:88:fc:93:fe:4d:e1:b0:6c:6f:67:c6:0f:ff:93: 8d:a1:33:46:0c:fc:b9:77:ea:f7:bb:73:d1:94:5b: c4:70:52:05:c4:6e:2d:0d:e1:06:1a:7d:28:c3:37: 42:b0:5d:79:bb:e8:55:59:c8:ca:19:fe:a0:98:72: 14:c7:88:67:15:42:43:96:c5:ea:6c:25:c0:ad:6b: 46:68:27:e0:f0:fe:e3:f2:61:9e:e5:bc:de:58:4b: ae:53:25:39:46:89:26:78:dc:dc:8f:41:5f:bc:f5: a3:01:36:4e:42:f8:68:06:a9:fa:90:85:41:02:f8: 72:d3:d1:89:b0:dd:de:9f:e8:4f:df:ee:83:50:22: 0b:17:c3:21:11:c2:6d:59:5d:81:e4:91:fa:a9:5c: 67:86:97:b0:fd:dd:53:b4:16:e6:54:2a:38:5e:31: 3b:dc:af:05:5c:c1:49:14:ed:07:bd:08:59:5d:e8: 1f:9c:52:d4:37:fb:c0:28:11:43:e9:47:c8:5f:c1: 81:76:87:5e:b4:0b:15:7f:a4:78:01:6a:b1:72:b0: 65:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3D:E2:1A:60:09:AB:E7:54:63:F2:84:6D:93:F6:11:AB:B3:68:06 X509v3 Authority Key Identifier: keyid:4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/E3901F981BD711EEB9597921C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.197.254.0/23 IPv6: 2001:df2:6fc0::/48 2401:ed60::/32 Signature Algorithm: sha256WithRSAEncryption 79:54:06:65:b5:9a:f9:1c:20:a3:82:83:27:ef:b4:cc:a4:9f: 31:21:bc:c1:69:14:6e:57:71:c8:fe:d8:45:2f:6f:4f:18:40: 8d:f3:c7:ee:ff:b5:54:9f:81:ff:65:7c:44:08:bb:62:d6:f0: 92:d1:32:55:9d:ab:41:f3:da:5b:d9:28:fd:e9:b2:87:91:c5: 6e:4e:d6:d6:29:ae:75:2c:53:fc:7e:b6:8c:c1:7f:7f:f3:1d: 4e:5b:1d:a7:c6:4c:cf:9b:0f:ea:8e:94:23:5e:b9:de:80:5c: 1b:f4:9b:4b:16:67:15:d4:da:e8:63:19:bc:b9:90:1a:a1:58: 0c:c5:57:0d:1b:79:5c:b3:8c:57:21:b9:a7:9c:66:93:0f:6c: 41:39:62:fd:19:e7:62:d1:40:ca:3b:67:44:5b:aa:65:ea:df: d6:d2:af:89:ad:7b:0e:5a:75:22:ea:c3:8c:ed:b1:8e:34:1a: ea:02:81:08:b5:1d:ea:12:4c:23:74:23:c0:05:70:58:43:4e: 03:7b:05:df:9e:18:3d:17:eb:e2:86:dd:14:ff:13:43:f8:f2: 4f:b5:fb:5f:3c:a0:03:ad:06:de:02:4e:45:4b:e3:9e:ed:25: f6:7a:34:b0:5c:3c:37:85:f4:89:bb:b7:55:20:2b:9d:51:f0: ac:c9:84:6d -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2N0UxMTAvBgNVBAUTKDRCNzIyQTNBNjc5M0JGMzJDOUJDRjUyRTRFNzcyRTBB NkYzQTYzMTkwHhcNMjUwNzAxMDQzOTUzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzNjY5OS0wYTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE5Q/rfKQboxMxgj01bXoaTSDECc1GSc6HSHxUr1unn0wv5rAKaABi2amxir iPyT/k3hsGxvZ8YP/5ONoTNGDPy5d+r3u3PRlFvEcFIFxG4tDeEGGn0owzdCsF15 u+hVWcjKGf6gmHIUx4hnFUJDlsXqbCXArWtGaCfg8P7j8mGe5bzeWEuuUyU5Rokm eNzcj0FfvPWjATZOQvhoBqn6kIVBAvhy09GJsN3en+hP3+6DUCILF8MhEcJtWV2B 5JH6qVxnhpew/d1TtBbmVCo4XjE73K8FXMFJFO0HvQhZXegfnFLUN/vAKBFD6UfI X8GBdodetAsVf6R4AWqxcrBlNQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEw94hpg CavnVGPyhG2T9hGrs2gGMB8GA1UdIwQYMBaAFEtyKjpnk78yybz1Lk53LgpvOmMZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY3RS82N0I0Q0I4NDFC RDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9TM0lxT21lVHZ6TEp2UFV1VG5jdUNtODZZ eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzSXFPbWVUdnpMSnZQVXVUbmN1Q204Nll4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E2N0UvNjdCNENCODQxQkQzMTFFRTk2NUZFRjM4QzRGOUFFMDIvRTM5MDFGOTgx QkQ3MTFFRUI5NTk3OTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMAwEAgABMAYDBAFnxf4wFgQCAAIwEAMHACABDfJvwAMFACQB7WAwDQYJKoZI hvcNAQELBQADggEBAHlUBmW1mvkcIKOCgyfvtMyknzEhvMFpFG5Xccj+2EUvb08Y QI3zx+7/tVSfgf9lfEQIu2LW8JLRMlWdq0Hz2lvZKP3psoeRxW5O1tYprnUsU/x+ tozBf3/zHU5bHafGTM+bD+qOlCNeud6AXBv0m0sWZxXU2uhjGby5kBqhWAzFVw0b eVyzjFchuaecZpMPbEE5Yv0Z52LRQMo7Z0RbqmXq39bSr4mtew5adSLqw4ztsY40 GuoCgQi1HeoSTCN0I8AFcFhDTgN7Bd+eGD0X6+KG3RT/E0P48k+1+188oAOtBt4C TkVL457tJfZ6NLBcPDeF9Im7t1UgK51R8KzJhG0= -----END CERTIFICATE-----Generated at Fri Jul 4 07:47:26 2025 by rpki-client