$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/F7ACA074DC3F11EC8323B460C4F9AE02.roa File: F7ACA074DC3F11EC8323B460C4F9AE02.roa (raw, json) Hash identifier: fHu5/MPKlLCuXm6cY4db7lpTtm9fZVRYzzIdcMcSwUc= Subject key identifier: DC:F1:34:51:29:5A:E7:4D:98:BB:C2:C5:23:2B:6A:5D:59:96:0C:D8 Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06 Certificate serial: 030B Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/F7ACA074DC3F11EC8323B460C4F9AE02.roa Signing time: Tue 01 Jul 2025 02:07:52 +0000 ROA not before: Tue 01 Jul 2025 02:07:52 +0000 ROA not after: Thu 30 Oct 2025 00:00:00 +0000 asID: 137526 IP address blocks: 103.186.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06 Validity Not Before: Jul 1 02:07:52 2025 GMT Not After : Oct 30 00:00:00 2025 GMT Subject: CN=686342f7-59cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:50:e9:e2:78:b4:93:b0:4a:83:6e:dd:d5: 62:63:89:55:7d:ab:75:53:62:17:1a:ac:d4:38:3e: 7d:eb:2b:0d:56:a3:dd:89:c2:51:1e:c9:15:40:d1: 0d:64:59:65:44:e5:2f:cf:c0:b3:60:05:a2:56:d3: ab:fc:e4:ab:aa:15:7b:e7:7d:55:0e:86:26:8d:45: 11:90:4f:1f:9d:50:f3:d8:65:19:aa:9e:0c:5d:26: b8:01:ff:77:9b:7e:c9:d0:86:2f:74:43:df:16:5e: ee:10:96:7e:48:c4:e9:99:90:0c:34:31:fa:9d:ca: 10:8e:e1:bc:0b:58:53:38:45:9b:dd:79:7a:86:44: b7:38:ee:a7:2c:5d:04:1b:52:e8:47:c4:81:cf:8e: 5f:9b:9c:48:b3:74:06:26:71:fc:49:95:12:33:83: 97:ac:ba:3d:7a:c4:64:6c:04:1a:75:08:58:d8:5f: 10:23:bd:30:97:7b:a2:e4:fb:b1:66:33:11:33:61: f3:26:d6:aa:cc:5e:26:42:cc:44:77:aa:0c:9e:34: cb:f1:52:02:39:05:4c:93:a7:66:61:a7:79:63:d8: 16:60:66:ef:95:96:24:c1:53:55:55:b7:f8:ab:39: 37:a9:d9:1e:2e:c2:2c:ad:9c:c9:47:7f:30:cb:89: 40:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F1:34:51:29:5A:E7:4D:98:BB:C2:C5:23:2B:6A:5D:59:96:0C:D8 X509v3 Authority Key Identifier: keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/F7ACA074DC3F11EC8323B460C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.238.0/23 Signature Algorithm: sha256WithRSAEncryption 36:1e:4b:ae:bb:5e:32:b5:2f:74:1b:af:4c:77:ea:d3:fc:29: dd:6d:62:e9:c3:9a:b6:a9:bb:b1:81:b2:36:da:d6:2f:32:ba: bb:52:a7:4a:1c:3b:84:0b:83:1c:28:a4:37:ec:43:e9:81:b1: f5:cb:59:4a:00:cc:8e:b1:27:2c:7a:a3:55:9e:23:e5:54:3f: 4a:3f:7a:47:30:34:19:0b:dd:08:9b:f2:e9:ea:a4:f5:88:35: 97:4f:64:d9:b9:26:cc:1e:81:80:c3:b8:e7:f0:ea:97:10:87: 5f:e6:c3:98:56:09:3f:40:d3:48:58:c5:96:6a:3f:06:21:6c: 2e:35:09:f5:2d:43:38:ce:7b:a6:e6:dd:0a:7e:8b:11:9e:be: d3:a2:ee:7f:77:f9:7e:19:87:13:d2:be:8f:ad:41:a6:78:04: 9f:a1:cf:28:9e:41:ac:4e:3f:bd:cd:4f:f2:85:bb:0f:ae:0b: 9d:c7:a3:e2:34:76:04:31:02:7a:30:84:2e:29:16:de:81:4e: 1f:a9:3c:c2:a7:49:bb:81:c6:b9:dc:5c:be:fd:0d:e4:69:d3: 53:e4:e1:03:a1:76:1f:b6:26:01:fc:41:5a:a5:37:7c:77:2c: 89:da:78:c8:a1:3c:c5:f5:db:67:7a:52:77:d7:5e:fb:28:c3: 36:29:b5:3b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNTQxMTAvBgNVBAUTKDNFNjdEQkY3ODIyMDI4OTNGMUZCNUFGN0Q2RkMwOUQw MDE4RkRGMDYwHhcNMjUwNzAxMDIwNzUyWhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzNDJmNy01OWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnlQ6eJ4tJOwSoNu3dViY4lVfat1U2IXGqzUOD596ysNVqPdicJRHskVQNEN ZFllROUvz8CzYAWiVtOr/OSrqhV7531VDoYmjUURkE8fnVDz2GUZqp4MXSa4Af93 m37J0IYvdEPfFl7uEJZ+SMTpmZAMNDH6ncoQjuG8C1hTOEWb3Xl6hkS3OO6nLF0E G1LoR8SBz45fm5xIs3QGJnH8SZUSM4OXrLo9esRkbAQadQhY2F8QI70wl3ui5Pux ZjMRM2HzJtaqzF4mQsxEd6oMnjTL8VICOQVMk6dmYad5Y9gWYGbvlZYkwVNVVbf4 qzk3qdkeLsIsrZzJR38wy4lAqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNzxNFEp WudNmLvCxSMral1ZlgzYMB8GA1UdIwQYMBaAFD5n2/eCICiT8fta99b8CdABj98G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE1NC9EODhDRDlENkRD MzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tKUHgtMXIzMXZ3SjBBR1Az d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BtZmI5NElnS0pQeC0xcjMxdndKMEFHUDN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEFBNTQvRDg4Q0Q5RDZEQzM4MTFFQzkzOTEwQjY4QzRGOUFFMDIvRjdBQ0EwNzRE QzNGMTFFQzgzMjNCNDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnuu4wDQYJKoZIhvcNAQELBQADggEBADYeS667XjK1L3Qb r0x36tP8Kd1tYunDmrapu7GBsjba1i8yurtSp0ocO4QLgxwopDfsQ+mBsfXLWUoA zI6xJyx6o1WeI+VUP0o/ekcwNBkL3Qib8unqpPWINZdPZNm5JswegYDDuOfw6pcQ h1/mw5hWCT9A00hYxZZqPwYhbC41CfUtQzjOe6bm3Qp+ixGevtOi7n93+X4ZhxPS vo+tQaZ4BJ+hzyieQaxOP73NT/KFuw+uC53Ho+I0dgQxAnowhC4pFt6BTh+pPMKn SbuBxrncXL79DeRp01Pk4QOhdh+2JgH8QVqlN3x3LInaeMihPMX122d6UnfXXvso wzYptTs= -----END CERTIFICATE-----Generated at Sat Jul 5 05:30:28 2025 by rpki-client