$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/8479151EC72011EA8062547CC4F9AE02.roa File: 8479151EC72011EA8062547CC4F9AE02.roa (raw, json) Hash identifier: zvA6nn6pR2vh2EORIjGvhMyUwOGcEaYAyPuniRtqvy0= Subject key identifier: 5C:12:A6:0C:48:DD:14:34:F4:55:EC:93:00:96:54:38:31:B4:05:67 Certificate issuer: /CN=A915DB55/serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF Certificate serial: 0866 Authority key identifier: 83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/8479151EC72011EA8062547CC4F9AE02.roa Signing time: Fri 30 May 2025 20:59:31 +0000 ROA not before: Fri 30 May 2025 20:59:31 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139034 IP address blocks: 103.138.186.0/24 maxlen: 24 103.138.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2150 (0x866) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DB55, serialNumber=832333E64C4C8B0B586DEF937BB9624821B8C1DF Validity Not Before: May 30 20:59:31 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683a1c33-0862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1b:1b:de:c0:73:5b:08:4f:03:47:05:54:55: 6c:5c:3b:09:56:38:39:26:8d:85:01:19:4c:99:f3: 6e:c1:ab:e0:ce:77:3e:bd:c5:1e:32:a8:ce:a9:63: cb:7d:32:d8:ff:b3:a1:53:83:9f:13:c3:c4:61:e9: 0d:26:34:89:9f:1d:00:ae:92:d3:9e:d1:cf:36:b6: 77:f5:da:59:19:a2:5b:63:80:b7:bd:22:39:70:7c: 1d:f7:d0:83:c9:9e:f4:c9:f4:cd:e9:a0:6e:d0:0a: ed:1a:c8:37:38:d1:c7:80:19:a5:d0:aa:e0:05:d8: 19:44:bc:02:88:6b:84:fa:64:86:e4:56:fe:ad:d8: 40:43:ab:43:f7:56:95:a2:d9:37:56:88:35:05:c8: 5e:cc:9e:2b:52:3d:6e:b4:65:29:a1:28:98:52:36: c4:66:32:c4:34:39:d0:dc:21:da:c3:68:44:ee:e1: da:fe:25:d7:14:6e:da:77:11:18:e2:bc:cf:8e:63: 3e:da:3d:c1:83:f5:14:01:72:d0:1e:b9:28:ba:3a: 1f:79:94:03:fe:11:5b:b7:a6:94:11:b8:03:dc:13: 37:42:49:f8:69:9d:34:75:ff:37:f5:89:4c:0e:f0: d5:1e:09:bb:3b:c3:dc:c8:d1:85:ac:7e:8f:c7:5e: 4f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:12:A6:0C:48:DD:14:34:F4:55:EC:93:00:96:54:38:31:B4:05:67 X509v3 Authority Key Identifier: keyid:83:23:33:E6:4C:4C:8B:0B:58:6D:EF:93:7B:B9:62:48:21:B8:C1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/gyMz5kxMiwtYbe-Te7liSCG4wd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMz5kxMiwtYbe-Te7liSCG4wd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB55/5AAFD7E6C71F11EA9FB1E378C4F9AE02/8479151EC72011EA8062547CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.186.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:5a:f8:8a:3b:dc:75:fa:21:15:50:6a:04:7e:e7:a5:b1:e1: e7:c8:2c:96:6a:36:70:70:2f:3b:f2:5b:37:72:55:92:e6:32: c1:26:e0:5f:d8:08:35:20:c3:50:71:c8:84:d6:ca:c2:7d:1c: 56:ed:13:30:1b:58:82:30:48:9d:7d:ea:6d:9b:c2:16:d8:bb: a7:17:d8:02:d7:19:51:13:0b:34:f2:58:95:b6:f1:ba:47:79: 51:4e:82:63:75:db:6a:40:a3:77:4e:eb:40:40:da:cd:b9:dd: 78:98:2b:03:b8:e5:b1:a8:24:40:3a:dd:ae:2e:52:c4:6e:be: 83:9a:e9:37:2f:10:6a:f1:20:83:b8:2e:04:34:68:b0:97:76: ec:39:cb:a5:a6:6c:86:8b:29:c7:46:25:e4:1f:bd:20:bf:ee: 86:f1:0b:bc:43:45:03:0c:fc:d9:5a:91:2c:ea:33:e8:03:95: ba:71:22:1e:e9:c8:3c:84:aa:a8:97:5d:0f:60:1d:ff:9a:ab: 62:a3:f1:5c:40:77:0e:12:20:0c:38:72:2a:6d:ff:48:94:28: 22:22:aa:a9:b0:4e:ce:d3:c0:f9:c6:75:cc:f7:a8:ba:03:89: 2b:75:cb:ed:ef:2e:cc:21:25:a1:ac:de:d0:5a:a4:4a:b3:ff: 6c:9e:9c:ef -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURCNTUxMTAvBgNVBAUTKDgzMjMzM0U2NEM0QzhCMEI1ODZERUY5MzdCQjk2MjQ4 MjFCOEMxREYwHhcNMjUwNTMwMjA1OTMxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNhMWMzMy0wODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Bsb3sBzWwhPA0cFVFVsXDsJVjg5Jo2FARlMmfNuwavgznc+vcUeMqjOqWPL fTLY/7OhU4OfE8PEYekNJjSJnx0ArpLTntHPNrZ39dpZGaJbY4C3vSI5cHwd99CD yZ70yfTN6aBu0ArtGsg3ONHHgBml0KrgBdgZRLwCiGuE+mSG5Fb+rdhAQ6tD91aV otk3Vog1BchezJ4rUj1utGUpoSiYUjbEZjLENDnQ3CHaw2hE7uHa/iXXFG7adxEY 4rzPjmM+2j3Bg/UUAXLQHrkoujofeZQD/hFbt6aUEbgD3BM3Qkn4aZ00df839YlM DvDVHgm7O8PcyNGFrH6Px15PkwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFwSpgxI 3RQ09FXskwCWVDgxtAVnMB8GA1UdIwQYMBaAFIMjM+ZMTIsLWG3vk3u5YkghuMHf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REI1NS81QUFGRDdFNkM3 MUYxMUVBOUZCMUUzNzhDNEY5QUUwMi9neU16NWt4TWl3dFliZS1UZTdsaVNDRzR3 ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5TXo1a3hNaXd0WWJlLVRlN2xpU0NHNHdkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NURCNTUvNUFBRkQ3RTZDNzFGMTFFQTlGQjFFMzc4QzRGOUFFMDIvODQ3OTE1MUVD NzIwMTFFQTgwNjI1NDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnirowDQYJKoZIhvcNAQELBQADggEBAIta+Io73HX6IRVQ agR+56Wx4efILJZqNnBwLzvyWzdyVZLmMsEm4F/YCDUgw1BxyITWysJ9HFbtEzAb WIIwSJ196m2bwhbYu6cX2ALXGVETCzTyWJW28bpHeVFOgmN122pAo3dO60BA2s25 3XiYKwO45bGoJEA63a4uUsRuvoOa6TcvEGrxIIO4LgQ0aLCXduw5y6WmbIaLKcdG JeQfvSC/7obxC7xDRQMM/NlakSzqM+gDlbpxIh7pyDyEqqiXXQ9gHf+aq2Kj8VxA dw4SIAw4cipt/0iUKCIiqqmwTs7TwPnGdcz3qLoDiSt1y+3vLswhJaGs3tBapEqz /2yenO8= -----END CERTIFICATE-----Generated at Wed Jun 4 00:05:03 2025 by rpki-client