$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/E37CCF70718911EFA0C30257C4F9AE02.roa File: E37CCF70718911EFA0C30257C4F9AE02.roa (raw, json) Hash identifier: /gAZLPIK5N+oUjrTM1zm3bFOQvpgh0r/tqZUpI/jzmU= Subject key identifier: 80:06:6B:DD:0C:CB:B3:10:5F:32:A4:E2:54:1D:14:41:D5:82:82:5E Certificate issuer: /CN=A9196F7C/serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Certificate serial: F5 Authority key identifier: C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/E37CCF70718911EFA0C30257C4F9AE02.roa Signing time: Wed 25 Jun 2025 01:19:34 +0000 ROA not before: Wed 25 Jun 2025 01:19:34 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152699 IP address blocks: 103.15.236.0/23 maxlen: 24 124.158.118.0/24 maxlen: 24 202.36.94.0/23 maxlen: 24 203.16.163.0/24 maxlen: 24 2001:df3:aec0::/48 maxlen: 48 2401:b820:1000::/48 maxlen: 48 2401:b820:1001::/48 maxlen: 48 2401:b820:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196F7C, serialNumber=C0E31B5F45CFE52BAC5CEDB8DCC6A1A322F4705D Validity Not Before: Jun 25 01:19:34 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=685b4ea6-f78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:16:47:66:f1:d5:9a:2c:24:97:50:54:58: 82:95:9f:21:db:d7:9a:fa:15:d8:ea:b9:d6:bb:97: b7:6a:05:08:8c:59:38:6a:28:be:8a:0f:c8:72:87: 71:7d:be:cc:77:5b:62:ac:b2:99:75:51:1e:70:85: 43:5e:31:64:0b:90:2a:de:cd:f8:00:dd:1b:59:cd: d3:9a:74:82:39:2a:dd:c5:94:3e:e8:97:ff:4c:85: 57:d2:d9:c4:bc:8d:5c:76:dc:4d:0e:b6:de:07:65: d3:88:50:b5:f5:47:d5:c1:41:05:e1:e6:e7:61:3b: 61:3b:5d:3e:4e:a3:a0:f6:3b:49:6d:34:91:cc:ed: 48:1c:0c:c8:78:c5:dd:6f:3c:20:58:95:b0:8a:4a: 40:2e:32:28:6b:1f:a0:8d:d5:58:85:23:22:b3:55: f1:56:5f:01:67:90:6a:02:e7:76:40:e8:f0:6b:bf: 2c:2f:1a:9e:9a:a3:c1:63:31:59:b6:76:db:c5:c5: 03:11:80:db:b8:96:2e:04:1d:b0:b7:95:7b:0a:96: 78:0c:bb:3b:b8:c2:dc:31:a4:f3:2b:39:93:2f:d2: 8d:b1:b9:8c:56:07:92:f5:2f:6a:f1:1e:ca:56:99: 5b:8b:a9:8b:04:f0:d9:e5:0a:cf:8d:43:5e:8e:7e: 06:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:06:6B:DD:0C:CB:B3:10:5F:32:A4:E2:54:1D:14:41:D5:82:82:5E X509v3 Authority Key Identifier: keyid:C0:E3:1B:5F:45:CF:E5:2B:AC:5C:ED:B8:DC:C6:A1:A3:22:F4:70:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/wOMbX0XP5SusXO243MahoyL0cF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wOMbX0XP5SusXO243MahoyL0cF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/86F9161CFC5B11EEA3FF9D47C4F9AE02/E37CCF70718911EFA0C30257C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.15.236.0/23 124.158.118.0/24 202.36.94.0/23 203.16.163.0/24 IPv6: 2001:df3:aec0::/48 2401:b820:1000::/47 2401:b820:2000::/48 Signature Algorithm: sha256WithRSAEncryption 93:5a:20:e4:40:bb:d2:9b:ab:32:fb:85:33:0c:69:87:97:c8: 7d:c2:07:7f:a2:61:4c:19:e3:38:c7:9f:72:43:10:3e:da:14: fb:b8:f9:66:dd:f8:93:1a:0d:81:8e:bd:58:4e:9c:42:7b:71: 40:95:f0:6b:f3:65:ad:09:36:92:76:ab:6c:64:67:1d:89:28: 7c:a1:6c:2a:54:d7:dc:5e:7e:58:30:a3:bc:cb:f8:fc:60:75: 03:79:85:ea:a4:ec:88:c1:ed:e0:11:45:43:1a:41:64:f8:bf: 2e:db:d9:d8:5c:44:d2:3b:04:00:08:c4:c4:a9:80:ac:65:42: 11:56:9f:00:e2:1c:6c:88:7d:14:fb:d7:bd:30:99:65:11:fd: e5:41:1b:3a:a6:25:d3:0c:6d:30:df:d5:dd:eb:1d:d0:b3:7a: 61:a7:35:19:14:69:96:59:19:37:4a:80:6e:e3:2c:41:46:d8: 45:2a:a8:12:c5:02:af:da:09:03:1e:4f:99:2d:df:e1:43:fc: 01:86:9b:1d:6a:76:25:11:20:76:08:33:e4:61:98:fd:2c:ee: c7:39:40:1c:bb:05:bf:30:96:6e:1e:35:c5:a4:42:cb:f5:73: 89:f1:76:58:33:ab:e1:eb:9f:d9:5f:f7:ec:59:18:9e:f0:28: cc:02:aa:55 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZGN0MxMTAvBgNVBAUTKEMwRTMxQjVGNDVDRkU1MkJBQzVDRURCOERDQzZBMUEz MjJGNDcwNUQwHhcNMjUwNjI1MDExOTM0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODViNGVhNi1mNzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDwWR2bx1ZosJJdQVFiClZ8h29ea+hXY6rnWu5e3agUIjFk4aii+ig/Icodx fb7Md1tirLKZdVEecIVDXjFkC5Aq3s34AN0bWc3TmnSCOSrdxZQ+6Jf/TIVX0tnE vI1cdtxNDrbeB2XTiFC19UfVwUEF4ebnYTthO10+TqOg9jtJbTSRzO1IHAzIeMXd bzwgWJWwikpALjIoax+gjdVYhSMis1XxVl8BZ5BqAud2QOjwa78sLxqemqPBYzFZ tnbbxcUDEYDbuJYuBB2wt5V7CpZ4DLs7uMLcMaTzKzmTL9KNsbmMVgeS9S9q8R7K Vplbi6mLBPDZ5QrPjUNejn4G/wIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFIAGa90M y7MQXzKk4lQdFEHVgoJeMB8GA1UdIwQYMBaAFMDjG19Fz+UrrFztuNzGoaMi9HBd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3Qy84NkY5MTYxQ0ZD NUIxMUVFQTNGRjlENDdDNEY5QUUwMi93T01iWDBYUDVTdXNYTzI0M01haG95TDBj RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dPTWJYMFhQNVN1c1hPMjQzTWFob3lMMGNGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTZGN0MvODZGOTE2MUNGQzVCMTFFRUEzRkY5RDQ3QzRGOUFFMDIvRTM3Q0NGNzA3 MTg5MTFFRkEwQzMwMjU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVAYIKwYBBQUHAQcBAf8E RTBDMB4EAgABMBgDBAFnD+wDBAB8nnYDBAHKJF4DBADLEKMwIQQCAAIwGwMHACAB DfOuwAMHASQBuCAQAAMHACQBuCAgADANBgkqhkiG9w0BAQsFAAOCAQEAk1og5EC7 0purMvuFMwxph5fIfcIHf6JhTBnjOMefckMQPtoU+7j5Zt34kxoNgY69WE6cQntx QJXwa/NlrQk2knarbGRnHYkofKFsKlTX3F5+WDCjvMv4/GB1A3mF6qTsiMHt4BFF QxpBZPi/LtvZ2FxE0jsEAAjExKmArGVCEVafAOIcbIh9FPvXvTCZZRH95UEbOqYl 0wxtMN/V3esd0LN6Yac1GRRpllkZN0qAbuMsQUbYRSqoEsUCr9oJAx5PmS3f4UP8 AYabHWp2JREgdggz5GGY/SzuxzlAHLsFvzCWbh41xaRCy/VzifF2WDOr4euf2V/3 7FkYnvAozAKqVQ== -----END CERTIFICATE-----Generated at Fri Jul 4 19:29:11 2025 by rpki-client