$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/FAAC7098424911EFABBC7D78C4F9AE02.roa File: FAAC7098424911EFABBC7D78C4F9AE02.roa (raw, json) Hash identifier: 4v+rsnRLFBgrun/uIoRgYYIQkVKTxUpRVf++DCzZXn4= Subject key identifier: 4A:7C:A5:18:D3:92:39:38:4E:56:3F:52:E5:1D:24:FE:AF:34:05:35 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0DDF Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/FAAC7098424911EFABBC7D78C4F9AE02.roa Signing time: Mon 31 Mar 2025 18:17:18 +0000 ROA not before: Mon 31 Mar 2025 18:17:18 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138624 IP address blocks: 103.134.225.0/24 maxlen: 24 2001:df7:d500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3551 (0xddf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1 Validity Not Before: Mar 31 18:17:18 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67eadc2e-51d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8a:c8:b7:3c:20:5f:b5:b5:01:98:e7:1f:68: dd:8e:79:2b:2a:07:37:f0:3e:16:a5:bf:79:6c:40: 6d:63:db:0f:5d:1c:ef:b0:c7:32:a4:a5:ff:a6:46: 5d:3c:af:b3:2e:68:8e:41:84:f6:31:9d:e5:ef:13: 73:43:c6:7b:ce:fd:eb:62:80:d7:86:cd:e8:dc:f2: 59:3d:8f:9e:5c:8a:f0:af:86:89:0e:22:30:82:c8: 47:91:1b:a5:0d:d0:78:50:f4:b4:50:71:8b:6e:f0: 16:62:06:4a:f7:70:21:54:e5:c7:2e:5f:c6:4d:fc: 55:74:93:09:33:ab:d8:09:e0:23:be:95:36:22:ca: 47:4d:f6:20:7a:44:89:83:a0:ae:b8:38:28:88:59: f8:9f:bd:cc:f7:b0:c9:5b:36:12:67:42:ac:1d:e7: eb:82:5a:e3:d6:d9:ff:00:9b:9b:6b:e0:5e:fa:fa: 92:25:5c:2f:47:31:bc:30:98:88:f9:24:f5:5f:a6: 2b:27:83:06:c1:b3:d5:75:39:7d:9e:4f:a9:11:cf: 0f:48:40:4c:79:c3:90:ca:7b:3c:2d:92:4b:a2:47: eb:6a:6a:ea:08:a6:ae:83:7a:42:d1:e8:6b:0e:f7: 29:17:45:ac:b6:7b:e3:23:cc:a1:5b:5b:a0:82:43: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7C:A5:18:D3:92:39:38:4E:56:3F:52:E5:1D:24:FE:AF:34:05:35 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/FAAC7098424911EFABBC7D78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.225.0/24 IPv6: 2001:df7:d500::/48 Signature Algorithm: sha256WithRSAEncryption 8e:06:28:dd:ea:8d:88:b5:af:78:a8:53:6f:37:33:cf:68:60: f5:73:c6:9f:95:9f:54:bb:c9:89:4a:df:52:aa:1a:cc:3f:89: c9:47:97:98:f9:c0:ca:fc:df:01:b7:f1:b9:39:3d:85:f2:90: 15:b7:cd:2d:9d:b4:bf:ea:46:96:91:c6:95:a2:cc:93:1b:72: 04:ab:53:cb:8a:56:60:f6:ac:8d:97:08:14:38:da:e5:92:c1: c9:c8:5b:7f:c2:83:a7:5b:bc:0d:1f:d8:3a:e4:db:e6:7b:62: 8a:82:92:15:96:7f:08:3c:53:db:06:f1:5e:ab:f3:9c:a3:eb: 1a:85:a6:e9:2d:45:cf:19:ab:bf:2d:19:ed:df:27:1e:9d:95: dc:91:2d:a1:0c:e4:03:c0:c1:df:e9:a5:36:8f:dd:19:9d:e3: ce:fe:07:ba:59:f9:0d:c4:d9:11:d8:34:56:99:30:88:4c:57: 9a:11:56:be:71:9f:be:98:e8:6d:68:74:3f:46:eb:16:fe:91: 77:d4:b4:4c:84:9d:e6:62:48:f5:93:e9:6f:88:c6:1c:ba:7d: ae:dd:27:f5:91:c1:5b:ce:7b:3c:2a:22:7f:07:e8:bc:1f:de: 32:26:79:f3:f9:fb:47:15:9d:cc:06:c7:94:0a:ac:bf:56:72: 9b:2a:91:ca -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjUwMzMxMTgxNzE4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhZGMyZS01MWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnorItzwgX7W1AZjnH2jdjnkrKgc38D4Wpb95bEBtY9sPXRzvsMcypKX/pkZd PK+zLmiOQYT2MZ3l7xNzQ8Z7zv3rYoDXhs3o3PJZPY+eXIrwr4aJDiIwgshHkRul DdB4UPS0UHGLbvAWYgZK93AhVOXHLl/GTfxVdJMJM6vYCeAjvpU2IspHTfYgekSJ g6CuuDgoiFn4n73M97DJWzYSZ0KsHefrglrj1tn/AJuba+Be+vqSJVwvRzG8MJiI +ST1X6YrJ4MGwbPVdTl9nk+pEc8PSEBMecOQyns8LZJLokframrqCKaug3pC0ehr DvcpF0WstnvjI8yhW1uggkPt/wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEp8pRjT kjk4TlY/UuUdJP6vNAU1MB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY4QjEvN0Q1NEEwQ0FCNTg2MTFFOUFBNUY0RDY1QzRGOUFFMDIvRkFBQzcwOTg0 MjQ5MTFFRkFCQkM3RDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnhuEwDwQCAAIwCQMHACABDffVADANBgkqhkiG9w0BAQsF AAOCAQEAjgYo3eqNiLWveKhTbzczz2hg9XPGn5WfVLvJiUrfUqoazD+JyUeXmPnA yvzfAbfxuTk9hfKQFbfNLZ20v+pGlpHGlaLMkxtyBKtTy4pWYPasjZcIFDja5ZLB ychbf8KDp1u8DR/YOuTb5ntiioKSFZZ/CDxT2wbxXqvznKPrGoWm6S1Fzxmrvy0Z 7d8nHp2V3JEtoQzkA8DB3+mlNo/dGZ3jzv4Huln5DcTZEdg0VpkwiExXmhFWvnGf vpjobWh0P0brFv6Rd9S0TISd5mJI9ZPpb4jGHLp9rt0n9ZHBW857PCoifwfovB/e MiZ58/n7RxWdzAbHlAqsv1ZymyqRyg== -----END CERTIFICATE-----Generated at Sun Apr 6 18:07:01 2025 by rpki-client