$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/681F32BE9EAF11EC9F1F8B11C4F9AE02.roa File: 681F32BE9EAF11EC9F1F8B11C4F9AE02.roa (raw, json) Hash identifier: Yw6khJ43zV0yhFLOubPvbZbVWU58is2F1BhtT8qiLaI= Subject key identifier: 4C:C2:3A:8C:78:49:5C:38:45:6A:DB:E8:ED:0F:10:CA:27:4A:8C:96 Certificate issuer: /CN=A916ED7C/serialNumber=655B0426EA34B19746EC1D3BDCB1B37674DFA1EC Certificate serial: 0372 Authority key identifier: 65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/681F32BE9EAF11EC9F1F8B11C4F9AE02.roa Signing time: Tue 11 Mar 2025 01:17:18 +0000 ROA not before: Tue 11 Mar 2025 01:17:18 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 134687 IP address blocks: 103.136.108.0/24 maxlen: 24 103.136.109.0/24 maxlen: 24 103.136.110.0/24 maxlen: 24 103.136.111.0/24 maxlen: 24 2404:9140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 882 (0x372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED7C Validity Not Before: Mar 11 01:17:18 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67cf8f1d-1170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f7:3b:1a:f6:65:70:d7:c6:fc:f0:73:98:83: c6:ec:78:75:ab:aa:81:6a:2f:e6:87:15:8e:0f:64: ce:25:87:99:a1:0b:b1:c0:9b:2d:9a:15:d3:7d:c3: 79:60:c5:da:35:b5:72:a6:cd:63:28:04:3f:12:5b: 6d:d5:e9:62:ae:b5:fc:20:cb:f7:07:c3:b7:bd:4a: cf:1d:65:ae:a6:bf:b7:6e:24:54:1f:2b:bc:df:19: d7:8d:ec:c3:f9:cf:40:13:f6:77:f5:19:70:6f:06: aa:b4:68:2c:9c:36:08:c4:42:f2:27:6a:d0:1c:ae: a8:67:e7:a7:fe:60:f1:a4:e7:16:86:fb:8c:b7:d2: 84:9c:f6:75:98:cc:cb:46:fb:29:32:96:d9:99:48: 3f:48:6d:a2:73:f8:fd:be:37:8a:b7:0f:22:02:81: e1:02:f1:01:4b:78:e6:59:70:e9:21:e2:e5:86:34: 6c:6a:7d:bf:a4:6f:55:6a:f4:77:63:0b:98:ac:cb: ec:23:5d:c2:67:57:7f:54:91:64:8e:d6:6a:76:31: 4e:3b:a0:1e:a9:4c:29:3f:01:15:f2:a1:f5:ea:f3: 67:5e:43:d7:31:af:38:fe:62:49:50:ff:88:42:de: e0:7d:68:69:30:ed:02:8a:74:73:d2:24:21:c9:82: f4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C2:3A:8C:78:49:5C:38:45:6A:DB:E8:ED:0F:10:CA:27:4A:8C:96 X509v3 Authority Key Identifier: keyid:65:5B:04:26:EA:34:B1:97:46:EC:1D:3B:DC:B1:B3:76:74:DF:A1:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/ZVsEJuo0sZdG7B073LGzdnTfoew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVsEJuo0sZdG7B073LGzdnTfoew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED7C/4B5BC71C9EAC11ECA06BC10BC4F9AE02/681F32BE9EAF11EC9F1F8B11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.108.0/22 IPv6: 2404:9140::/48 Signature Algorithm: sha256WithRSAEncryption a4:54:eb:23:3f:c7:8e:11:80:43:e8:78:13:37:55:ac:f0:14: 63:b9:4b:77:61:0d:e6:af:d6:9e:50:66:37:a0:86:7d:06:a2: f3:01:13:8e:df:e7:97:7e:b6:53:2c:e8:ef:f0:8e:ad:da:15: ec:63:70:d5:2e:e4:cf:eb:e5:19:4a:73:73:18:3c:5b:86:c9: 10:35:ac:03:aa:87:b5:e8:87:9d:e8:65:3a:f1:6d:04:03:b6: 8f:c0:40:2f:ed:d1:3b:5d:ca:a9:61:ba:f8:bb:e0:c5:8f:d1: 1b:63:33:62:2a:55:5d:54:4a:da:f0:0e:0a:3b:98:20:85:5e: df:a2:bb:98:8f:85:f3:83:5e:9c:cd:3d:5e:9e:e2:0c:82:f5: db:40:a0:45:9d:1a:e8:0c:cd:7c:d8:37:75:2d:6a:d9:77:45: 11:fe:5e:f8:b1:50:36:55:f1:91:63:c6:d0:aa:1a:0d:15:a1: fd:5e:b3:24:58:47:cf:c5:cd:75:c0:96:bb:f7:4e:ba:75:69: d6:e3:03:a6:4a:6c:60:6b:90:a3:49:e4:73:3b:d3:d8:f9:1d: f4:b0:8d:6e:1c:20:51:26:dd:c7:fd:4a:80:78:cc:ce:83:93: 1a:c7:92:8d:1e:4e:f8:29:e2:1b:3d:7e:fe:60:a5:58:dc:fe: b2:88:0f:ac -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEN0MxMTAvBgNVBAUTKDY1NUIwNDI2RUEzNEIxOTc0NkVDMUQzQkRDQjFCMzc2 NzRERkExRUMwHhcNMjUwMzExMDExNzE4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2NmOGYxZC0xMTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfc7GvZlcNfG/PBzmIPG7Hh1q6qBai/mhxWOD2TOJYeZoQuxwJstmhXTfcN5 YMXaNbVyps1jKAQ/Eltt1elirrX8IMv3B8O3vUrPHWWupr+3biRUHyu83xnXjezD +c9AE/Z39RlwbwaqtGgsnDYIxELyJ2rQHK6oZ+en/mDxpOcWhvuMt9KEnPZ1mMzL RvspMpbZmUg/SG2ic/j9vjeKtw8iAoHhAvEBS3jmWXDpIeLlhjRsan2/pG9VavR3 YwuYrMvsI13CZ1d/VJFkjtZqdjFOO6AeqUwpPwEV8qH16vNnXkPXMa84/mJJUP+I Qt7gfWhpMO0CinRz0iQhyYL0NwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEzCOox4 SVw4RWrb6O0PEMonSoyWMB8GA1UdIwQYMBaAFGVbBCbqNLGXRuwdO9yxs3Z036Hs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQ3Qy80QjVCQzcxQzlF QUMxMUVDQTA2QkMxMEJDNEY5QUUwMi9aVnNFSnVvMHNaZEc3QjA3M0xHemRuVGZv ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWc0VKdW8wc1pkRzdCMDczTEd6ZG5UZm9ldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkVEN0MvNEI1QkM3MUM5RUFDMTFFQ0EwNkJDMTBCQzRGOUFFMDIvNjgxRjMyQkU5 RUFGMTFFQzlGMUY4QjExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAJniGwwDwQCAAIwCQMHACQEkUAAADANBgkqhkiG9w0BAQsF AAOCAQEApFTrIz/HjhGAQ+h4EzdVrPAUY7lLd2EN5q/WnlBmN6CGfQai8wETjt/n l362Uyzo7/COrdoV7GNw1S7kz+vlGUpzcxg8W4bJEDWsA6qHteiHnehlOvFtBAO2 j8BAL+3RO13KqWG6+LvgxY/RG2MzYipVXVRK2vAOCjuYIIVe36K7mI+F84NenM09 Xp7iDIL120CgRZ0a6AzNfNg3dS1q2XdFEf5e+LFQNlXxkWPG0KoaDRWh/V6zJFhH z8XNdcCWu/dOunVp1uMDpkpsYGuQo0nkczvT2Pkd9LCNbhwgUSbdx/1KgHjMzoOT GseSjR5O+CniGz1+/mClWNz+sogPrA== -----END CERTIFICATE-----Generated at Sun Apr 6 10:16:00 2025 by rpki-client