$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/AE94F8108CDD11ED8F7B6515C4F9AE02.roa File: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (raw, json) Hash identifier: RmJtDMkcxfQ3eQrKn0Yy1kaaLYDY2h9Y7DjrNYqUSm8= Subject key identifier: 61:9E:84:D9:4B:E1:D1:12:6E:B6:03:EB:D2:F0:46:9F:36:87:A8:53 Certificate issuer: /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Certificate serial: 0184 Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/AE94F8108CDD11ED8F7B6515C4F9AE02.roa Signing time: Mon 27 Jan 2025 02:15:57 +0000 ROA not before: Mon 27 Jan 2025 02:15:57 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 150709 IP address blocks: 103.65.118.0/23 maxlen: 23 103.65.118.0/24 maxlen: 24 103.65.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA19 Validity Not Before: Jan 27 02:15:57 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6796ec5d-945b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b1:4a:2b:49:a5:d0:af:b0:db:51:58:2f:2d: 7f:56:63:41:d3:bd:f0:8e:8b:49:76:91:ad:36:ca: ee:91:ae:ed:5b:92:a5:30:78:75:a8:41:86:43:1b: 0f:07:8b:4a:05:5a:b1:bd:5e:d0:9a:17:39:75:bb: 9a:a6:9a:33:20:0e:7e:3e:bc:4c:22:f7:d4:4a:1f: 99:37:33:be:7e:13:a9:07:dc:4c:e3:0a:c7:ce:8b: e3:59:92:82:2a:c7:eb:9f:dc:32:89:99:08:f9:8b: 42:d3:1d:29:c3:a1:9e:62:cb:da:97:ee:62:67:50: 74:90:76:0f:e9:fa:5d:5e:86:49:03:fc:ed:91:52: fe:0a:e5:2f:95:38:fe:b3:c9:bd:7c:e6:f1:5b:e9: b0:81:47:0e:ea:0b:18:57:f0:c1:22:3e:61:69:e2: 02:c0:37:7e:ef:97:17:88:11:e0:16:a4:56:ce:4b: 6b:0c:aa:23:f4:66:2e:7d:81:15:7f:08:65:a1:e0: 43:f3:b5:2e:ae:89:71:c8:51:ed:0c:4d:e0:cc:d4: b1:8f:f4:8a:32:7d:71:63:ba:d9:df:03:af:67:db: 51:a5:fb:f6:9e:7b:f6:89:68:89:c9:67:9b:33:73: 38:f0:60:e0:04:ce:b1:ce:44:b5:05:e6:50:61:49: 26:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9E:84:D9:4B:E1:D1:12:6E:B6:03:EB:D2:F0:46:9F:36:87:A8:53 X509v3 Authority Key Identifier: keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/AE94F8108CDD11ED8F7B6515C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.65.118.0/23 Signature Algorithm: sha256WithRSAEncryption 99:26:2c:2e:84:b3:fa:1f:4c:b8:d8:af:42:61:0f:b5:9c:71: 63:7b:e1:7a:f0:48:76:a9:a6:62:0e:d8:6c:bb:9a:58:62:c9: ac:43:d6:c6:d6:a4:84:e0:91:95:16:cd:c2:b4:43:d8:d4:c4: 87:78:f9:7b:f8:15:d2:0d:f4:ce:bf:89:92:31:d5:72:12:87: 53:49:15:75:aa:98:38:d8:02:2c:fd:8f:58:d5:4c:f7:6e:38: 4a:d9:16:17:f9:e0:b0:2d:f9:eb:58:ec:99:30:6e:7e:eb:d8: 69:e0:65:bb:ce:56:f1:ee:36:cf:23:e3:9d:e6:7c:a0:51:ca: 0f:b6:ac:41:b7:fe:2c:ce:72:96:aa:43:9f:ac:46:4c:ee:c5: 80:b3:86:1f:56:7c:86:60:0c:d0:d0:f8:29:a6:49:5b:cf:05: 82:c1:42:57:e3:b9:db:97:48:d9:10:59:54:b5:51:b5:99:46: 5e:e2:0d:11:09:67:1b:07:6f:32:31:79:53:10:d3:af:9a:a1: 9d:df:19:d2:e2:b5:c8:91:f9:45:7c:42:e9:9d:1a:05:07:1e: 01:2e:1d:51:46:1e:ad:fa:c2:a3:7b:51:30:eb:9d:9f:22:b0: 30:2c:86:6c:d6:3b:33:92:60:df:17:4d:78:06:98:7e:bd:85: f4:51:f9:de -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMTkxMTAvBgNVBAUTKEM0RjkzMjJFRUU5NjcwOUU0MjIxQzZERDNDRUNCODQw Mzg0RjAyMDEwHhcNMjUwMTI3MDIxNTU3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk2ZWM1ZC05NDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLFKK0ml0K+w21FYLy1/VmNB073wjotJdpGtNsruka7tW5KlMHh1qEGGQxsP B4tKBVqxvV7Qmhc5dbuappozIA5+PrxMIvfUSh+ZNzO+fhOpB9xM4wrHzovjWZKC Ksfrn9wyiZkI+YtC0x0pw6GeYsval+5iZ1B0kHYP6fpdXoZJA/ztkVL+CuUvlTj+ s8m9fObxW+mwgUcO6gsYV/DBIj5haeICwDd+75cXiBHgFqRWzktrDKoj9GYufYEV fwhloeBD87UurolxyFHtDE3gzNSxj/SKMn1xY7rZ3wOvZ9tRpfv2nnv2iWiJyWeb M3M48GDgBM6xzkS1BeZQYUkmQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGGehNlL 4dESbrYD69LwRp82h6hTMB8GA1UdIwQYMBaAFMT5Mi7ulnCeQiHG3TzsuEA4TwIB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ExOS9GODAyQTQyNDhD RDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NKNUNJY2JkUE95NFFEaFBB Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQa3lMdTZXY0o1Q0ljYmRQT3k0UURoUEFnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OENBMTkvRjgwMkE0MjQ4Q0Q5MTFFRDk5MDk3RDBGQzRGOUFFMDIvQUU5NEY4MTA4 Q0REMTFFRDhGN0I2NTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnQXYwDQYJKoZIhvcNAQELBQADggEBAJkmLC6Es/ofTLjY r0JhD7WccWN74XrwSHappmIO2Gy7mlhiyaxD1sbWpITgkZUWzcK0Q9jUxId4+Xv4 FdIN9M6/iZIx1XISh1NJFXWqmDjYAiz9j1jVTPduOErZFhf54LAt+etY7Jkwbn7r 2GngZbvOVvHuNs8j453mfKBRyg+2rEG3/izOcpaqQ5+sRkzuxYCzhh9WfIZgDNDQ +CmmSVvPBYLBQlfjuduXSNkQWVS1UbWZRl7iDREJZxsHbzIxeVMQ06+aoZ3fGdLi tciR+UV8QumdGgUHHgEuHVFGHq36wqN7UTDrnZ8isDAshmzWOzOSYN8XTXgGmH69 hfRR+d4= -----END CERTIFICATE-----Generated at Sat Apr 5 07:08:11 2025 by rpki-client