$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/BCE8827C4EB011ECA708A867C4F9AE02.roa File: BCE8827C4EB011ECA708A867C4F9AE02.roa (raw, json) Hash identifier: qtOiVk2etZ3P5B2OTlSoKzmwTGa0QrEwPTimKLmKA7c= Subject key identifier: 1B:8E:C4:18:81:FA:FE:0E:B5:24:AC:F2:75:F8:27:04:15:7D:1F:E7 Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 052B Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/BCE8827C4EB011ECA708A867C4F9AE02.roa Signing time: Wed 21 May 2025 00:25:47 +0000 ROA not before: Wed 21 May 2025 00:25:47 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 209242 IP address blocks: 103.172.110.0/23 maxlen: 23 103.204.13.0/24 maxlen: 24 203.168.128.0/22 maxlen: 22 2001:df7:6e80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1323 (0x52b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: May 21 00:25:47 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=682d1d8b-2d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:20:10:68:25:2c:ed:e8:46:1c:a8:31:1f: 8d:22:99:7f:f7:c8:85:27:dc:2f:de:10:ef:ca:6e: b8:35:22:d8:e4:50:5a:10:8e:b6:d9:33:19:41:5d: ba:5f:30:e3:70:ce:3f:50:e2:7d:8a:8a:24:65:50: 01:77:e5:45:6a:22:bd:ce:5a:10:a1:45:b0:b8:eb: f8:c9:fc:e3:23:f9:d6:a1:26:50:05:32:d6:bf:9b: 01:44:88:63:03:b2:60:fb:4b:41:f9:da:40:17:60: b5:3f:7b:dd:4c:da:7e:b2:70:12:0f:39:69:2e:8f: 83:3b:8b:44:78:14:8d:fc:67:07:ac:fc:13:48:b5: 88:df:0c:6c:9d:d9:96:fb:fc:46:07:a9:d0:d1:66: 06:f8:3f:75:25:3a:89:d3:0e:8f:3b:65:9d:81:cc: fe:be:87:a9:ce:c3:8f:8e:a0:0b:9f:b8:43:ed:7d: f3:c7:2b:e0:29:05:45:f0:24:b4:ae:a0:fc:05:e1: 3e:25:5a:38:4f:35:82:d9:12:f8:c9:17:30:66:b5: 30:2f:a0:eb:c2:e7:d0:08:4f:68:54:4a:39:f8:bf: e2:40:ee:03:eb:43:af:bc:3e:43:03:83:ee:ef:cc: 2b:d7:0c:7b:33:06:7a:f8:0a:99:e1:e1:e3:75:45: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8E:C4:18:81:FA:FE:0E:B5:24:AC:F2:75:F8:27:04:15:7D:1F:E7 X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/BCE8827C4EB011ECA708A867C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.110.0/23 103.204.13.0/24 203.168.128.0/22 IPv6: 2001:df7:6e80::/48 Signature Algorithm: sha256WithRSAEncryption 29:34:a8:01:bd:e5:38:de:10:0e:62:26:29:75:c1:d4:99:25: f0:a9:ff:36:73:4d:06:db:29:04:27:fe:ba:65:fc:75:5c:bf: d0:d5:5a:a6:d4:6b:9e:5c:5a:45:b5:82:08:ed:bc:09:10:e9: 19:2f:78:a2:94:55:9b:37:f5:37:e8:4e:7c:bb:cb:c8:83:de: 1c:30:be:c5:28:2d:13:8f:37:9b:e5:ea:28:97:6d:8c:ec:26: 26:9e:1b:9a:ae:d7:76:6d:2c:20:4e:05:76:b3:c6:73:d0:2e: 43:62:76:87:41:c5:7f:f4:ac:a1:6d:38:27:8d:73:57:7f:22: 7e:d9:d3:b9:3c:70:13:3e:07:a0:2e:7f:b7:9a:fc:c2:98:21: fc:22:60:c1:d9:8a:37:87:1f:f7:e2:7b:48:0e:88:50:25:11: d7:bd:59:56:18:a0:a9:26:3c:3a:2f:03:06:cd:0f:48:c3:54: 64:23:44:f9:b7:1c:8f:08:18:4b:8f:ec:8d:6c:7b:8c:01:2f: 0d:59:d0:ce:e6:2a:49:e2:c1:a6:dc:90:6e:a2:83:c5:56:60: 17:8e:d9:f5:0b:5d:57:8a:eb:cf:2c:3d:94:79:8c:20:ac:2f: 6f:49:fe:64:c8:28:ba:00:48:a3:d3:57:1f:a3:ee:cb:f6:76: 3b:6e:f1:38 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICBSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjUwNTIxMDAyNTQ3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJkMWQ4Yi0yZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfogEGglLO3oRhyoMR+NIpl/98iFJ9wv3hDvym64NSLY5FBaEI622TMZQV26 XzDjcM4/UOJ9iookZVABd+VFaiK9zloQoUWwuOv4yfzjI/nWoSZQBTLWv5sBRIhj A7Jg+0tB+dpAF2C1P3vdTNp+snASDzlpLo+DO4tEeBSN/GcHrPwTSLWI3wxsndmW +/xGB6nQ0WYG+D91JTqJ0w6PO2Wdgcz+voepzsOPjqALn7hD7X3zxyvgKQVF8CS0 rqD8BeE+JVo4TzWC2RL4yRcwZrUwL6DrwufQCE9oVEo5+L/iQO4D60OvvD5DA4Pu 78wr1wx7MwZ6+AqZ4eHjdUW1jQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFBuOxBiB +v4OtSSs8nX4JwQVfR/nMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVEMjUvNjdGMkIwRDgwQkQyMTFFQ0JBQTQ4MDZBQzRGOUFFMDIvQkNFODgyN0M0 RUIwMTFFQ0E3MDhBODY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAFnrG4DBABnzA0DBALLqIAwDwQCAAIwCQMHACABDfdugDAN BgkqhkiG9w0BAQsFAAOCAQEAKTSoAb3lON4QDmImKXXB1Jkl8Kn/NnNNBtspBCf+ umX8dVy/0NVaptRrnlxaRbWCCO28CRDpGS94opRVmzf1N+hOfLvLyIPeHDC+xSgt E483m+XqKJdtjOwmJp4bmq7Xdm0sIE4FdrPGc9AuQ2J2h0HFf/SsoW04J41zV38i ftnTuTxwEz4HoC5/t5r8wpgh/CJgwdmKN4cf9+J7SA6IUCUR171ZVhigqSY8Oi8D Bs0PSMNUZCNE+bccjwgYS4/sjWx7jAEvDVnQzuYqSeLBptyQbqKDxVZgF47Z9Qtd V4rrzyw9lHmMIKwvb0n+ZMgougBIo9NXH6Puy/Z2O27xOA== -----END CERTIFICATE-----Generated at Tue Jun 3 23:52:18 2025 by rpki-client