$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/F8A90D48B7EA11EB91C5D25EC4F9AE02.roa File: F8A90D48B7EA11EB91C5D25EC4F9AE02.roa (raw, json) Hash identifier: 3oYf4D2aeCXu56f8mNAcOhJ4M4El8ji8s2gDvwvZjUw= Subject key identifier: 03:7D:58:C0:53:32:16:46:3C:C1:CE:C6:8C:50:D2:E3:7F:D5:F8:63 Certificate issuer: /CN=A919C7B8/serialNumber=C03A2E689603204A02B38BEF7B9083B102762691 Certificate serial: 05ED Authority key identifier: C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/F8A90D48B7EA11EB91C5D25EC4F9AE02.roa Signing time: Tue 24 Jun 2025 23:22:46 +0000 ROA not before: Tue 24 Jun 2025 23:22:46 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142113 IP address blocks: 103.166.126.0/23 maxlen: 23 2001:df6:8e80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1517 (0x5ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7B8, serialNumber=C03A2E689603204A02B38BEF7B9083B102762691 Validity Not Before: Jun 24 23:22:46 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=685b3345-6290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:94:0c:77:41:32:41:5d:c5:28:46:09:f1: b4:48:96:e4:8e:06:bf:bf:56:18:85:e0:37:ef:78: 39:cc:03:0c:38:67:28:09:f7:f0:ee:3c:51:e6:82: e7:7b:f5:ce:b3:ec:e2:d4:33:fa:03:71:09:9e:2b: 0b:74:31:bb:7a:b5:87:47:bc:33:0b:9d:f1:96:c2: 10:a5:24:33:27:81:65:51:48:1e:de:0c:e8:e0:74: cd:3f:02:d8:13:ab:2d:ef:8e:ca:08:e3:b4:b9:70: 5b:bf:11:dc:9f:5d:d9:8a:fc:20:0c:2f:18:ad:d6: 8e:8e:b3:de:34:c6:35:0c:92:c9:9d:cf:07:ee:8d: 26:48:a4:f7:43:89:fb:c2:f4:de:e6:15:60:83:18: 45:19:73:70:c3:c5:c1:a7:dd:f0:c2:88:90:1f:e5: d3:54:ed:85:77:e1:f8:63:56:58:14:45:4b:55:0c: 82:c1:32:37:5d:a1:0e:00:3e:e0:a0:54:6b:22:ba: 96:75:12:21:ae:a1:e0:c3:49:9c:29:21:82:47:02: 2f:c4:b1:62:44:62:fd:56:db:a9:ee:8c:6e:b0:53: ec:7b:d8:bd:f4:9e:0d:45:7f:9e:28:05:b2:54:ef: d5:2f:f7:de:0d:90:bd:aa:74:80:99:5a:1d:5f:f4: b0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7D:58:C0:53:32:16:46:3C:C1:CE:C6:8C:50:D2:E3:7F:D5:F8:63 X509v3 Authority Key Identifier: keyid:C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/F8A90D48B7EA11EB91C5D25EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.126.0/23 IPv6: 2001:df6:8e80::/48 Signature Algorithm: sha256WithRSAEncryption 10:d0:5d:c7:0e:28:c7:c0:28:57:d3:e8:87:f4:a9:5c:22:4a: b5:64:1f:ec:7d:e2:ee:08:08:b8:d0:a9:18:8a:fc:2a:a6:c1: 89:54:f4:35:ed:f6:2e:f5:22:6f:46:ed:b1:4d:ec:06:69:2f: 32:bc:df:29:f0:3b:65:f0:a3:c7:5d:02:df:3f:3f:53:31:7d: 4a:35:57:57:c0:43:84:13:e7:35:8f:94:66:f0:4d:9a:76:57: f4:6e:f9:ac:fb:e9:c1:9a:e5:29:8c:a5:00:36:82:39:95:67: e2:4a:34:5e:17:33:64:79:93:1b:ae:60:38:2f:c2:76:ee:69: 3c:97:d7:7b:d2:d2:87:de:1c:ac:54:2e:2e:a8:e7:e2:1b:98: 06:4d:f1:66:e8:ef:dd:71:dc:39:1d:41:21:8b:ed:3b:8c:1f: 1a:2d:49:66:c5:43:45:09:45:32:e9:e4:c8:7b:21:26:1f:0d: a1:2c:b0:f7:32:ea:a5:9a:85:eb:ac:a9:c7:b1:d4:c4:17:44: 7d:2c:94:7f:cd:90:96:2c:cd:8f:e3:97:7d:54:31:88:22:e3: 7b:48:ee:74:36:df:49:18:66:97:57:71:75:8e:33:d0:aa:4c: 11:18:90:92:a9:5f:ec:41:48:41:8d:49:15:ec:e2:2b:49:05: 1e:94:99:2f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QjgxMTAvBgNVBAUTKEMwM0EyRTY4OTYwMzIwNEEwMkIzOEJFRjdCOTA4M0Ix MDI3NjI2OTEwHhcNMjUwNjI0MjMyMjQ2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODViMzM0NS02MjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/CUDHdBMkFdxShGCfG0SJbkjga/v1YYheA373g5zAMMOGcoCffw7jxR5oLn e/XOs+zi1DP6A3EJnisLdDG7erWHR7wzC53xlsIQpSQzJ4FlUUge3gzo4HTNPwLY E6st747KCOO0uXBbvxHcn13ZivwgDC8YrdaOjrPeNMY1DJLJnc8H7o0mSKT3Q4n7 wvTe5hVggxhFGXNww8XBp93wwoiQH+XTVO2Fd+H4Y1ZYFEVLVQyCwTI3XaEOAD7g oFRrIrqWdRIhrqHgw0mcKSGCRwIvxLFiRGL9Vtup7oxusFPse9i99J4NRX+eKAWy VO/VL/feDZC9qnSAmVodX/SwKQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAN9WMBT MhZGPMHOxoxQ0uN/1fhjMB8GA1UdIwQYMBaAFMA6LmiWAyBKArOL73uQg7ECdiaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdCOC9DODdEQTBBNEI3 RTgxMUVCQTU0REMxNUJDNEY5QUUwMi93RG91YUpZRElFb0NzNHZ2ZTVDRHNRSjJK cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEb3VhSllESUVvQ3M0dnZlNUNEc1FKMkpwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUM3QjgvQzg3REEwQTRCN0U4MTFFQkE1NERDMTVCQzRGOUFFMDIvRjhBOTBENDhC N0VBMTFFQjkxQzVEMjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnpn4wDwQCAAIwCQMHACABDfaOgDANBgkqhkiG9w0BAQsF AAOCAQEAENBdxw4ox8AoV9Poh/SpXCJKtWQf7H3i7ggIuNCpGIr8KqbBiVT0Ne32 LvUib0btsU3sBmkvMrzfKfA7ZfCjx10C3z8/UzF9SjVXV8BDhBPnNY+UZvBNmnZX 9G75rPvpwZrlKYylADaCOZVn4ko0XhczZHmTG65gOC/Cdu5pPJfXe9LSh94crFQu Lqjn4huYBk3xZujv3XHcOR1BIYvtO4wfGi1JZsVDRQlFMunkyHshJh8NoSyw9zLq pZqF66ypx7HUxBdEfSyUf82QlizNj+OXfVQxiCLje0judDbfSRhml1dxdY4z0KpM ERiQkqlf7EFIQY1JFeziK0kFHpSZLw== -----END CERTIFICATE-----Generated at Tue Jul 1 14:05:17 2025 by rpki-client