$ rpki-client -vvf rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/D2E2417A2F7211EB80969C22C4F9AE02.roa File: D2E2417A2F7211EB80969C22C4F9AE02.roa (raw, json) Hash identifier: 3UjfHQVfq3UO/YNci1JaGMI0IHPo5Ydd8fwr47Rzrio= Subject key identifier: 94:70:2C:02:C0:68:F6:3C:A3:8A:9E:BD:A0:BE:99:E1:42:29:79:70 Certificate issuer: /CN=A918B591/serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7 Certificate serial: 074E Authority key identifier: E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/D2E2417A2F7211EB80969C22C4F9AE02.roa Signing time: Tue 08 Jul 2025 22:33:09 +0000 ROA not before: Tue 08 Jul 2025 22:33:09 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 140710 IP address blocks: 103.152.12.0/23 maxlen: 23 2001:df3:ec80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1870 (0x74e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B591, serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7 Validity Not Before: Jul 8 22:33:09 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686d9ca5-a50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:24:c4:22:5d:66:17:0a:9b:94:00:cb:08: 33:93:d7:df:19:4e:2c:52:e5:7a:31:33:f7:69:85: f2:29:f8:96:1b:02:13:70:bb:ef:df:34:f6:e5:ac: b6:85:aa:00:1a:e1:4e:c3:62:7a:18:4e:c8:9c:9e: 79:fa:67:03:37:7d:65:b7:56:af:b6:97:11:64:fa: 87:d4:44:8e:32:bf:d5:d1:b7:2a:fc:e0:35:b3:0f: c6:c7:55:31:d5:7a:3c:af:b8:c7:86:31:02:a9:e4: 6a:12:f8:b8:c9:0f:7d:3e:0e:46:67:e8:39:51:ec: 0e:cd:c8:02:da:b6:6b:a0:90:6e:8e:a0:8e:0d:03: a6:55:e8:5b:3c:ec:49:c5:d9:09:b4:78:f8:67:59: 17:28:eb:8f:b1:1e:74:08:22:af:c7:98:4b:b9:1b: c8:63:30:52:8d:dd:ab:dc:59:f1:39:ac:d2:ff:cb: 12:9d:27:a7:ad:d6:24:9a:b5:a7:a9:24:1a:2b:83: 23:38:5b:f6:79:27:ec:f2:58:96:e3:19:b6:1f:35: e3:29:eb:9f:3e:58:6b:a2:01:b5:90:ad:af:64:06: 1a:1a:68:59:7a:fa:76:94:c8:2f:6f:cb:f1:5f:d8: f0:2d:f0:bd:bd:e5:f5:4a:3f:1c:c9:cb:6d:dc:c5: 81:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:70:2C:02:C0:68:F6:3C:A3:8A:9E:BD:A0:BE:99:E1:42:29:79:70 X509v3 Authority Key Identifier: keyid:E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/D2E2417A2F7211EB80969C22C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.12.0/23 IPv6: 2001:df3:ec80::/48 Signature Algorithm: sha256WithRSAEncryption 8e:b7:8a:b8:20:d0:64:90:40:e7:e6:16:36:2d:93:92:ce:bf: 1e:a9:2a:c6:99:4a:42:df:14:e4:de:a8:c5:b6:70:d6:3b:b8: 48:17:74:aa:ca:8d:7c:1f:a2:67:c3:0c:9b:68:fa:1c:b7:44: 75:02:69:5f:a3:12:f6:a2:94:c6:2e:22:17:87:6e:55:06:59: 42:57:fd:f7:2e:dd:cf:af:b9:4a:7d:c4:86:47:63:73:68:df: 42:30:0e:7c:c1:e8:a9:43:26:fe:90:d5:ea:c6:3d:7f:65:9f: 26:a9:43:ce:8f:6d:0b:4a:0b:73:0b:79:64:64:51:64:75:53: 46:8b:2a:38:10:73:fa:b2:ee:50:69:df:f9:ba:73:23:2a:77: 66:d8:0a:f0:28:ff:56:a1:db:b8:de:a3:bf:0b:c6:b4:22:19: e5:57:d1:2f:7f:a5:a7:50:55:a7:f9:9c:07:00:4f:a2:06:ff: 47:f8:d2:84:4b:2a:d4:9b:c1:b0:02:e3:eb:4b:f1:71:5c:8f: d3:d1:f0:c2:f5:bb:14:a2:7e:df:6e:96:36:1c:39:96:7b:3a: 32:95:56:0d:df:be:80:68:31:5d:b1:b4:53:93:97:fc:e0:4e: b1:b7:33:11:c3:a9:1d:94:6e:5d:3d:f6:31:b9:2a:2a:0e:4d: da:55:5e:89 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1OTExMTAvBgNVBAUTKEUzQjhFQUIxQUU5MTZERjk1QTJENTVBRTdCQjdCQjc5 QTUwQjRBRTcwHhcNMjUwNzA4MjIzMzA5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZkOWNhNS1hNTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteQkxCJdZhcKm5QAywgzk9ffGU4sUuV6MTP3aYXyKfiWGwITcLvv3zT25ay2 haoAGuFOw2J6GE7InJ55+mcDN31lt1avtpcRZPqH1ESOMr/V0bcq/OA1sw/Gx1Ux 1Xo8r7jHhjECqeRqEvi4yQ99Pg5GZ+g5UewOzcgC2rZroJBujqCODQOmVehbPOxJ xdkJtHj4Z1kXKOuPsR50CCKvx5hLuRvIYzBSjd2r3FnxOazS/8sSnSenrdYkmrWn qSQaK4MjOFv2eSfs8liW4xm2HzXjKeufPlhrogG1kK2vZAYaGmhZevp2lMgvb8vx X9jwLfC9veX1Sj8cyctt3MWBJwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJRwLALA aPY8o4qevaC+meFCKXlwMB8GA1UdIwQYMBaAFOO46rGukW35Wi1Vrnu3u3mlC0rn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjU5MS9EMjMzQzY0NjJG NzExMUVCQjZFRDNFMjJDNEY5QUUwMi80N2pxc2E2UmJmbGFMVld1ZTdlN2VhVUxT dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ3anFzYTZSYmZsYUxWV3VlN2U3ZWFVTFN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEI1OTEvRDIzM0M2NDYyRjcxMTFFQkI2RUQzRTIyQzRGOUFFMDIvRDJFMjQxN0Ey RjcyMTFFQjgwOTY5QzIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmAwwDwQCAAIwCQMHACABDfPsgDANBgkqhkiG9w0BAQsF AAOCAQEAjreKuCDQZJBA5+YWNi2Tks6/HqkqxplKQt8U5N6oxbZw1ju4SBd0qsqN fB+iZ8MMm2j6HLdEdQJpX6MS9qKUxi4iF4duVQZZQlf99y7dz6+5Sn3Ehkdjc2jf QjAOfMHoqUMm/pDV6sY9f2WfJqlDzo9tC0oLcwt5ZGRRZHVTRosqOBBz+rLuUGnf +bpzIyp3ZtgK8Cj/VqHbuN6jvwvGtCIZ5VfRL3+lp1BVp/mcBwBPogb/R/jShEsq 1JvBsALj60vxcVyP09HwwvW7FKJ+326WNhw5lns6MpVWDd++gGgxXbG0U5OX/OBO sbczEcOpHZRuXT32MbkqKg5N2lVeiQ== -----END CERTIFICATE-----Generated at Sun Jul 20 03:18:21 2025 by rpki-client