$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/299F07F2E15611EFA15DF23DC4F9AE02.roa File: 299F07F2E15611EFA15DF23DC4F9AE02.roa (raw, json) Hash identifier: fuFQR3XBNeUBp3GuT5Rq8XdFNfctvFuOXUDcjAZyCQA= Subject key identifier: 74:71:1F:CD:B6:57:19:F1:B3:5E:A4:4B:F5:07:D8:83:7E:30:FE:5E Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Certificate serial: 0361 Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/299F07F2E15611EFA15DF23DC4F9AE02.roa Signing time: Wed 20 Aug 2025 16:11:18 +0000 ROA not before: Wed 20 Aug 2025 16:11:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138640 IP address blocks: 103.185.226.0/23 maxlen: 23 103.185.226.0/24 maxlen: 24 103.185.227.0/24 maxlen: 24 2400:6ae0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 865 (0x361) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Validity Not Before: Aug 20 16:11:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68a5f3a6-5e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b6:ae:c5:76:e4:0c:99:d3:9b:a9:a0:48:4b: d4:b8:fd:48:29:d6:c8:eb:41:39:b9:ec:01:d0:d4: 70:75:18:12:6c:59:5a:21:ce:e2:d2:c4:cc:98:2d: 8e:d8:7b:dd:2e:75:30:09:4c:8c:95:24:d0:94:14: 3e:43:46:3e:8f:c1:a8:84:ea:3f:e2:8a:11:d5:98: e4:55:57:b6:e1:1b:2c:48:74:40:8c:91:47:64:0d: 15:76:86:2f:58:27:e7:82:49:2d:a7:f8:fc:a0:43: 81:a8:34:2a:86:a8:19:08:23:98:ac:ac:24:75:14: 73:63:07:6c:8a:e1:4c:b3:7d:62:82:fb:ef:d2:60: 30:3a:4d:dc:de:1e:1c:78:e8:3d:40:f4:1b:3e:87: e5:99:be:32:58:e5:46:4c:69:a5:9a:87:03:c9:77: 2b:2a:8a:af:53:db:64:a3:b5:77:5c:62:42:9f:a4: 90:7b:57:01:33:da:21:7e:0b:21:df:3c:b1:35:b7: 38:60:b7:18:cf:9f:0c:28:2c:db:c3:7b:bf:d9:ab: ec:b3:e6:54:80:e1:b9:12:33:c3:d1:1a:54:8f:b1: f3:90:8d:12:ef:4f:a0:92:75:f5:6f:cb:ee:ca:61: 93:37:fa:8c:7a:7f:8a:07:09:07:1c:0f:7c:83:eb: e3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:71:1F:CD:B6:57:19:F1:B3:5E:A4:4B:F5:07:D8:83:7E:30:FE:5E X509v3 Authority Key Identifier: keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/299F07F2E15611EFA15DF23DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.185.226.0/23 IPv6: 2400:6ae0::/32 Signature Algorithm: sha256WithRSAEncryption 76:7b:50:3e:05:65:61:af:48:7c:de:0c:44:78:5c:99:0a:1a: f7:be:57:b9:1a:ea:75:29:68:7e:82:e5:31:ec:41:82:43:8f: 5a:42:a4:06:fa:82:f8:1e:62:55:ab:41:c2:52:5b:92:c7:ef: 64:00:47:a8:ae:9c:4f:8e:1e:d5:21:cc:65:a1:8b:77:32:14: 2c:00:3f:89:6c:8c:ee:34:a9:c0:19:64:79:bb:8d:6f:a6:74: 79:d1:3f:83:20:95:68:c7:98:ac:dc:7a:88:9c:03:45:24:c9: 89:b2:14:f3:f4:27:4e:a0:d4:34:7f:fa:a2:9d:93:15:21:2a: 84:67:39:30:8d:0a:eb:d2:99:54:39:7e:2e:61:38:2d:d7:30: 5f:a3:29:2d:52:1e:ac:5a:ab:dc:41:94:cb:eb:4a:23:c4:b4: fc:d6:d8:c2:c2:64:09:89:ae:7f:ac:82:44:d7:4e:06:b2:fd: a6:eb:cd:db:1e:0d:f2:8a:a7:fc:c5:cf:9f:3f:fd:d4:7a:c6: 71:fd:dc:11:5d:d3:0d:64:e8:c0:3b:c7:f5:91:c1:c1:ee:40: 39:25:7c:7f:f2:43:a7:18:0d:db:4c:a6:05:55:4e:c4:36:2b: 1c:b1:56:c0:81:a7:57:d8:f0:d4:1c:be:0a:f0:77:52:ac:f5: c2:f0:58:c1 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5 RjVGM0IyQUYwHhcNMjUwODIwMTYxMTE4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE1ZjNhNi01ZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrauxXbkDJnTm6mgSEvUuP1IKdbI60E5uewB0NRwdRgSbFlaIc7i0sTMmC2O 2HvdLnUwCUyMlSTQlBQ+Q0Y+j8GohOo/4ooR1ZjkVVe24RssSHRAjJFHZA0VdoYv WCfngkktp/j8oEOBqDQqhqgZCCOYrKwkdRRzYwdsiuFMs31igvvv0mAwOk3c3h4c eOg9QPQbPoflmb4yWOVGTGmlmocDyXcrKoqvU9tko7V3XGJCn6SQe1cBM9ohfgsh 3zyxNbc4YLcYz58MKCzbw3u/2avss+ZUgOG5EjPD0RpUj7HzkI0S70+gknX1b8vu ymGTN/qMen+KBwkHHA98g+vj6wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFHRxH822 Vxnxs16kS/UH2IN+MP5eMB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5 QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODIxM0IvMDcwNzZGQTBEOUM5MTFFQ0JFMDA3RjZBQzRGOUFFMDIvMjk5RjA3RjJF MTU2MTFFRkExNURGMjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnueIwDQQCAAIwBwMFACQAauAwDQYJKoZIhvcNAQELBQAD ggEBAHZ7UD4FZWGvSHzeDER4XJkKGve+V7ka6nUpaH6C5THsQYJDj1pCpAb6gvge YlWrQcJSW5LH72QAR6iunE+OHtUhzGWhi3cyFCwAP4lsjO40qcAZZHm7jW+mdHnR P4MglWjHmKzceoicA0UkyYmyFPP0J06g1DR/+qKdkxUhKoRnOTCNCuvSmVQ5fi5h OC3XMF+jKS1SHqxaq9xBlMvrSiPEtPzW2MLCZAmJrn+sgkTXTgay/abrzdseDfKK p/zFz58//dR6xnH93BFd0w1k6MA7x/WRwcHuQDklfH/yQ6cYDdtMpgVVTsQ2Kxyx VsCBp1fY8NQcvgrwd1Ks9cLwWME= -----END CERTIFICATE-----Generated at Sun Aug 24 06:37:18 2025 by rpki-client