$ rpki-client -vvf rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/CC2E531EAA7811ECB6791A3EC4F9AE02.roa File: CC2E531EAA7811ECB6791A3EC4F9AE02.roa (raw, json) Hash identifier: Mqskw9Y8RqndiVtB/sczxL2ZoSm43CtM51EkD9hWUXg= Subject key identifier: A2:F5:39:CE:28:83:F6:BC:BF:0E:37:B4:7F:74:17:BB:71:3F:9A:19 Certificate issuer: /CN=A914AA58/serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1 Certificate serial: 035A Authority key identifier: 6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/CC2E531EAA7811ECB6791A3EC4F9AE02.roa Signing time: Thu 03 Apr 2025 01:26:55 +0000 ROA not before: Thu 03 Apr 2025 01:26:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132537 IP address blocks: 103.183.194.0/23 maxlen: 23 103.183.194.0/24 maxlen: 24 103.183.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 858 (0x35a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914AA58, serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1 Validity Not Before: Apr 3 01:26:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67ede3df-4ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:0a:63:0a:fb:b6:18:6f:7e:b5:0f:a9:65: 95:3f:bc:d6:99:b9:d5:f2:f5:c8:19:53:4c:f0:5d: 6b:69:06:42:88:7d:95:8e:23:02:37:a7:a5:48:c9: ea:23:96:5d:36:45:c7:cd:1c:f1:34:43:b3:a5:f6: df:53:e1:e7:29:82:31:e8:0f:7a:eb:ef:81:37:73: f3:d7:11:28:cf:c7:3f:e2:ef:8e:92:8e:16:05:1e: 2a:22:95:a3:0c:45:99:a7:e4:31:57:db:7b:8a:8d: af:fc:02:54:80:e4:cf:01:99:e2:02:89:1e:3a:2a: 72:a9:44:94:b0:c2:e3:3c:be:fb:30:ee:8e:86:59: 5a:ae:3d:b1:f4:f4:eb:1e:58:57:0a:d0:1a:8a:6e: 59:61:8b:06:94:40:80:db:5a:8e:b9:f8:44:b0:65: e6:60:65:15:4a:16:02:fd:90:16:4c:f9:df:08:b3: d0:aa:f2:df:8e:04:26:81:b4:e5:5e:25:c0:c9:33: a6:9a:c5:d8:81:73:b5:4e:e4:b1:f2:24:79:c1:b1: f3:e8:2d:8a:21:17:42:ea:a9:7e:c1:a4:9d:5c:d1: ca:de:f4:da:1a:49:2a:d1:e8:71:38:5e:e0:11:e0: 85:88:df:e4:98:68:bb:c3:52:43:a8:28:4d:1d:4d: 2b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F5:39:CE:28:83:F6:BC:BF:0E:37:B4:7F:74:17:BB:71:3F:9A:19 X509v3 Authority Key Identifier: keyid:6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/CC2E531EAA7811ECB6791A3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.183.194.0/23 Signature Algorithm: sha256WithRSAEncryption 84:44:bb:42:8f:d3:9d:3a:e8:0f:e0:52:37:a8:08:cc:e8:f8: 88:e3:e7:8a:cd:8a:90:7b:20:63:c3:4b:8d:8c:69:43:47:f4: 58:f3:e6:8c:77:15:88:b6:dd:51:ab:82:1e:84:2c:d8:4b:6d: e8:02:89:2f:86:45:cc:c9:ab:de:74:d4:1a:79:bf:71:b0:85: b9:27:3f:db:9a:0b:54:e8:5f:ef:c9:a1:1e:23:d2:c9:5c:b8: 90:c5:42:6e:e4:dd:02:7f:b2:16:f2:a9:19:0b:29:8a:63:1b: 63:9d:47:f8:01:ce:18:ea:52:32:e2:2c:61:48:62:29:27:10: 2f:77:b0:9f:84:91:15:bd:af:76:90:0f:2b:9b:81:1e:1a:45: b7:ee:8f:4b:b4:b4:e7:17:90:fe:5f:ba:0c:0f:9e:00:4a:2a: 90:fa:c0:02:bd:71:ff:95:0d:c1:79:f3:59:4a:0d:77:e5:48: e5:1f:45:53:a4:73:ca:e4:cb:d5:47:68:e2:95:f0:d5:20:44: 5b:ab:7e:ce:43:d5:b2:ce:05:3a:71:91:4f:c0:1c:cc:4f:5c: f6:79:8f:ae:38:4f:4e:1f:6c:ab:df:3b:fe:a3:27:49:58:6e: 8a:32:70:67:2f:2a:56:6a:6e:9c:81:23:e4:46:03:28:cf:ac: fd:b7:19:60 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFBNTgxMTAvBgNVBAUTKDZFM0E0MkNEMkIyMzlEQTNFNjU4RUZCOTdFQUQxNUIw RTZFRERBQTEwHhcNMjUwNDAzMDEyNjU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkZTNkZi00ZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsV4KYwr7thhvfrUPqWWVP7zWmbnV8vXIGVNM8F1raQZCiH2VjiMCN6elSMnq I5ZdNkXHzRzxNEOzpfbfU+HnKYIx6A966++BN3Pz1xEoz8c/4u+Oko4WBR4qIpWj DEWZp+QxV9t7io2v/AJUgOTPAZniAokeOipyqUSUsMLjPL77MO6Ohllarj2x9PTr HlhXCtAaim5ZYYsGlECA21qOufhEsGXmYGUVShYC/ZAWTPnfCLPQqvLfjgQmgbTl XiXAyTOmmsXYgXO1TuSx8iR5wbHz6C2KIRdC6ql+waSdXNHK3vTaGkkq0ehxOF7g EeCFiN/kmGi7w1JDqChNHU0rNwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKL1Oc4o g/a8vw43tH90F7txP5oZMB8GA1UdIwQYMBaAFG46Qs0rI52j5ljvuX6tFbDm7dqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUE1OC8wRkRDQTZGRUFB NzYxMUVDOEY3RDU2MzlDNEY5QUUwMi9ianBDelNzam5hUG1XTy01ZnEwVnNPYnQy cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JqcEN6U3NqbmFQbVdPLTVmcTBWc09idDJxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEFBNTgvMEZEQ0E2RkVBQTc2MTFFQzhGN0Q1NjM5QzRGOUFFMDIvQ0MyRTUzMUVB QTc4MTFFQ0I2NzkxQTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnt8IwDQYJKoZIhvcNAQELBQADggEBAIREu0KP05066A/g UjeoCMzo+Ijj54rNipB7IGPDS42MaUNH9Fjz5ox3FYi23VGrgh6ELNhLbegCiS+G RczJq9501Bp5v3GwhbknP9uaC1ToX+/JoR4j0slcuJDFQm7k3QJ/shbyqRkLKYpj G2OdR/gBzhjqUjLiLGFIYiknEC93sJ+EkRW9r3aQDyubgR4aRbfuj0u0tOcXkP5f ugwPngBKKpD6wAK9cf+VDcF581lKDXflSOUfRVOkc8rky9VHaOKV8NUgRFurfs5D 1bLOBTpxkU/AHMxPXPZ5j644T04fbKvfO/6jJ0lYbooycGcvKlZqbpyBI+RGAyjP rP23GWA= -----END CERTIFICATE-----Generated at Wed Apr 16 22:16:49 2025 by rpki-client