$ rpki-client -vvf rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/652993B4884F11EBB2A8337FC4F9AE02.roa File: 652993B4884F11EBB2A8337FC4F9AE02.roa (raw, json) Hash identifier: Xrevk4k6Cchylp30Kd2GrTW0U2Yau9k0gu1MIRCl1Z0= Subject key identifier: 38:14:7A:D8:E3:26:D9:55:37:0F:1A:91:22:98:6B:42:E1:2D:A0:5A Certificate issuer: /CN=A919546B/serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47 Certificate serial: 062E Authority key identifier: 95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/652993B4884F11EBB2A8337FC4F9AE02.roa Signing time: Wed 05 Mar 2025 00:11:40 +0000 ROA not before: Wed 05 Mar 2025 00:11:40 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136183 IP address blocks: 103.83.85.0/24 maxlen: 24 103.164.144.0/24 maxlen: 24 2001:df7:d600::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 22:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1582 (0x62e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919546B, serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47 Validity Not Before: Mar 5 00:11:40 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c796bc-002e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:da:02:8c:63:aa:c6:2f:06:97:49:ae:99:29: b1:df:48:6e:08:71:52:61:35:0c:85:75:9e:35:b3: 3e:24:e6:bf:b3:ae:9d:c5:f3:c5:f8:15:aa:c5:cf: ad:2a:9a:77:07:61:cb:0c:e3:e8:3c:d9:a2:2e:bd: 85:d9:a8:9c:4b:aa:1d:af:96:c3:44:b9:d2:ef:29: 9c:5c:f3:5a:dd:8f:70:ef:32:ec:fd:6d:55:be:25: 2c:7d:80:49:04:6e:c2:55:1d:2f:b8:37:e7:5f:1d: 21:51:b4:6e:07:5b:10:2c:46:5c:16:44:62:e7:32: ff:b3:38:27:98:7f:c7:f5:fc:32:12:df:a3:0c:c4: d6:8e:ca:68:6b:80:a4:f4:5b:be:db:bd:67:12:22: 7e:c3:1c:1a:e7:f1:a8:19:bd:d5:16:8d:a3:a3:e4: 43:5e:a1:60:3d:41:ab:24:a5:40:5c:54:fd:87:ba: 52:82:df:e8:d2:50:f1:a3:13:cb:68:88:63:4d:d1: df:a7:26:55:7f:d5:53:e8:78:10:34:7e:97:40:7d: dd:75:1f:67:56:5f:7c:9e:45:3b:29:8f:c1:e1:51: a5:c1:c1:fe:89:b2:cf:42:e4:ce:dc:a6:9b:85:95: d7:b0:47:0a:28:8e:71:fe:96:e6:2d:60:12:e5:80: 79:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:14:7A:D8:E3:26:D9:55:37:0F:1A:91:22:98:6B:42:E1:2D:A0:5A X509v3 Authority Key Identifier: keyid:95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/652993B4884F11EBB2A8337FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.85.0/24 103.164.144.0/24 IPv6: 2001:df7:d600::/48 Signature Algorithm: sha256WithRSAEncryption b2:6c:db:22:f1:2f:45:ec:33:34:b8:83:bf:10:b1:cd:ee:e1: 85:26:c5:26:28:d5:47:8a:c1:f2:5d:88:5e:3d:cb:43:c1:44: de:56:6a:8a:b0:33:80:d7:fc:54:5e:6e:0d:e2:22:04:f9:ff: 49:13:40:61:57:30:18:a7:e5:3d:1c:93:ee:bb:9d:27:7d:37: 2a:27:87:0d:c9:85:94:91:b2:fa:f0:21:7d:81:ec:dd:e0:2e: 7a:53:66:33:50:20:4d:78:ec:74:cd:0d:a9:f3:e7:d3:f9:25: 86:99:75:d1:1c:af:53:ea:38:4d:79:a9:48:54:cf:e2:33:83: c5:47:57:5f:74:68:96:a0:63:72:b3:fd:69:3e:a6:9a:46:8c: 29:d1:4e:94:82:f9:d1:db:96:81:aa:03:5a:2a:29:b2:7b:ca: fa:96:1e:f2:01:82:ac:4d:0a:31:0d:a6:dc:cb:4d:3e:fe:c9: f0:d9:36:41:4b:44:6e:26:2e:e6:45:32:91:a8:e4:94:52:39: ae:41:bd:cf:95:3d:15:91:7e:59:90:21:0e:b5:6c:aa:b0:3a: eb:1f:2b:f2:c6:56:77:4a:0f:ba:1b:24:8c:49:af:c5:c5:3e: 4a:ce:62:4d:c1:57:9e:37:a6:98:dd:44:18:fc:e5:43:b3:a4: 1b:c9:fb:9d -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0NkIxMTAvBgNVBAUTKDk1OTUxRUNGQzkxRDBGNTVBRDhFRDhBRkJGRTYzQ0I0 MTYxOUZDNDcwHhcNMjUwMzA1MDAxMTQwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3OTZiYy0wMDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4toCjGOqxi8Gl0mumSmx30huCHFSYTUMhXWeNbM+JOa/s66dxfPF+BWqxc+t Kpp3B2HLDOPoPNmiLr2F2aicS6odr5bDRLnS7ymcXPNa3Y9w7zLs/W1VviUsfYBJ BG7CVR0vuDfnXx0hUbRuB1sQLEZcFkRi5zL/szgnmH/H9fwyEt+jDMTWjspoa4Ck 9Fu+271nEiJ+wxwa5/GoGb3VFo2jo+RDXqFgPUGrJKVAXFT9h7pSgt/o0lDxoxPL aIhjTdHfpyZVf9VT6HgQNH6XQH3ddR9nVl98nkU7KY/B4VGlwcH+ibLPQuTO3Kab hZXXsEcKKI5x/pbmLWAS5YB5lwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFDgUetjj JtlVNw8akSKYa0LhLaBaMB8GA1UdIwQYMBaAFJWVHs/JHQ9VrY7Yr7/mPLQWGfxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTQ2Qi9FNUFFNDQwQTg4 NEQxMUVCOTg1RUUzN0RDNEY5QUUwMi9sWlVlejhrZEQxV3RqdGl2di1ZOHRCWVpf RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xaVWV6OGtkRDFXdGp0aXZ2LVk4dEJZWl9FYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTU0NkIvRTVBRTQ0MEE4ODREMTFFQjk4NUVFMzdEQzRGOUFFMDIvNjUyOTkzQjQ4 ODRGMTFFQkIyQTgzMzdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnU1UDBABnpJAwDwQCAAIwCQMHACABDffWADANBgkqhkiG 9w0BAQsFAAOCAQEAsmzbIvEvRewzNLiDvxCxze7hhSbFJijVR4rB8l2IXj3LQ8FE 3lZqirAzgNf8VF5uDeIiBPn/SRNAYVcwGKflPRyT7rudJ303KieHDcmFlJGy+vAh fYHs3eAuelNmM1AgTXjsdM0NqfPn0/klhpl10RyvU+o4TXmpSFTP4jODxUdXX3Ro lqBjcrP9aT6mmkaMKdFOlIL50duWgaoDWiopsnvK+pYe8gGCrE0KMQ2m3MtNPv7J 8Nk2QUtEbiYu5kUykajklFI5rkG9z5U9FZF+WZAhDrVsqrA66x8r8sZWd0oPuhsk jEmvxcU+Ss5iTcFXnjemmN1EGPzlQ7OkG8n7nQ== -----END CERTIFICATE-----Generated at Tue Apr 22 12:37:42 2025 by rpki-client