$ rpki-client -vvf rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/C8E49B061B4A11EFB0254061C4F9AE02.roa File: C8E49B061B4A11EFB0254061C4F9AE02.roa (raw, json) Hash identifier: Da3gilq2F4wW4dkNKWQ9yuSo221iFTPD958FIRS9awA= Subject key identifier: C0:35:3D:D2:B6:29:FC:CB:A5:C0:71:3A:75:1E:90:FC:33:B6:04:07 Certificate issuer: /CN=A916216D/serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B Certificate serial: 2CC0 Authority key identifier: AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/C8E49B061B4A11EFB0254061C4F9AE02.roa Signing time: Tue 20 May 2025 15:43:11 +0000 ROA not before: Tue 20 May 2025 15:43:11 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 58717 IP address blocks: 103.26.246.0/23 maxlen: 24 157.119.184.0/22 maxlen: 22 157.119.184.0/22 maxlen: 24 157.119.184.0/24 maxlen: 24 157.119.185.0/24 maxlen: 24 157.119.186.0/24 maxlen: 24 157.119.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11456 (0x2cc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916216D, serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B Validity Not Before: May 20 15:43:11 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682ca30f-a137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:7d:be:66:29:a7:92:b6:78:88:fb:42:6d: a4:25:a3:a5:f0:e1:d6:5e:2d:e0:1c:1d:0a:08:ff: 25:9c:cb:c1:96:95:a5:cf:db:69:5c:19:a1:83:ee: 7b:73:39:09:19:b7:40:cc:d0:c4:39:0b:fb:a4:20: 97:5c:ab:1b:b3:f2:37:83:e3:1e:f9:ea:e9:f7:21: 22:49:02:a3:ea:66:83:01:64:61:15:8b:bd:e7:69: 11:13:95:b4:09:4d:27:69:f8:75:53:7d:55:e3:15: 77:d0:32:ba:2a:3b:f2:47:ea:fd:03:66:83:a6:db: 85:99:d4:c4:07:c6:f5:29:f8:fd:21:d8:35:0d:21: 82:b7:59:a4:50:1c:70:2c:7e:6d:79:42:e9:7c:11: 06:8d:7c:36:56:c8:5a:ed:b6:1b:ad:a7:d2:32:e0: d6:32:3c:ca:66:ef:df:27:43:11:a9:fd:26:00:90: 97:50:7a:2a:12:dc:77:a4:e0:fd:e8:21:37:5d:3a: 5e:a6:50:a3:ec:e6:6c:48:fa:79:a1:7b:87:1c:28: 29:3d:5a:77:c4:21:24:47:c1:74:21:f0:11:a3:5e: 9d:33:b4:1d:df:58:ba:71:d3:84:ea:08:6f:65:33: e5:a1:b4:44:ac:fc:d8:2e:1f:68:ea:ee:c7:2a:a1: 6f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:35:3D:D2:B6:29:FC:CB:A5:C0:71:3A:75:1E:90:FC:33:B6:04:07 X509v3 Authority Key Identifier: keyid:AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/C8E49B061B4A11EFB0254061C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.26.246.0/23 157.119.184.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:53:c2:ef:58:17:84:7f:eb:44:c5:67:60:b0:f5:69:2f:f4: cc:36:b2:bd:73:b0:79:18:1e:44:1e:e1:c9:6c:27:d7:c4:c1: 9e:a0:36:33:2b:3f:d8:72:97:0f:2f:9a:a4:dc:62:1f:50:36: b2:24:bd:79:8f:a5:c0:91:4d:a8:e7:01:31:14:a1:fc:95:0f: c4:68:98:8a:9b:cd:55:48:c9:0b:80:fc:f1:af:27:7e:1e:f6: 33:30:71:0b:54:c5:60:96:a9:9b:f3:24:16:75:ea:a9:c0:50: b1:d3:ff:32:56:92:70:b4:48:46:08:59:57:86:b2:18:ec:30: 7f:53:d2:48:61:06:87:79:27:62:d6:dc:a4:23:c3:1a:bc:88: 5c:73:ad:7a:35:ef:af:64:8a:05:74:ed:c0:8b:78:a1:93:0b: 9d:e4:db:c4:99:1c:d6:78:62:e0:2c:e6:37:75:b1:15:ac:78: 26:4a:f3:6d:61:10:a7:65:6b:7c:c3:c9:2b:a6:7d:2c:56:f5: d7:39:14:04:1a:1f:b7:4b:4e:25:da:82:e3:65:a7:91:52:6a: 32:8c:98:cc:44:30:68:f6:0f:18:42:34:5a:2d:25:4d:fc:e6: fd:f2:fe:a7:82:5d:3f:02:a3:20:44:e3:dd:71:78:d2:70:69: 10:b9:d3:b8 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICLMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIxNkQxMTAvBgNVBAUTKEFBRkZCQUYyNjVBQUNBNEM5NTE3QUZFQjdGNTRGQ0NC MEZCMURDMUIwHhcNMjUwNTIwMTU0MzExWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJjYTMwZi1hMTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEh9vmYpp5K2eIj7Qm2kJaOl8OHWXi3gHB0KCP8lnMvBlpWlz9tpXBmhg+57 czkJGbdAzNDEOQv7pCCXXKsbs/I3g+Me+erp9yEiSQKj6maDAWRhFYu952kRE5W0 CU0nafh1U31V4xV30DK6KjvyR+r9A2aDptuFmdTEB8b1Kfj9Idg1DSGCt1mkUBxw LH5teULpfBEGjXw2Vsha7bYbrafSMuDWMjzKZu/fJ0MRqf0mAJCXUHoqEtx3pOD9 6CE3XTpeplCj7OZsSPp5oXuHHCgpPVp3xCEkR8F0IfARo16dM7Qd31i6cdOE6ghv ZTPlobRErPzYLh9o6u7HKqFvAQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMA1PdK2 KfzLpcBxOnUekPwztgQHMB8GA1UdIwQYMBaAFKr/uvJlqspMlRev639U/MsPsdwb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjE2RC9BMzk5MUUyNEI3 QzAxMUUzQjQ5OUYxMzI1OTExRUEzMi9xdi02OG1XcXlreVZGNl9yZjFUOHl3LXgz QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F2LTY4bVdxeWt5VkY2X3JmMVQ4eXcteDNCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjIxNkQvQTM5OTFFMjRCN0MwMTFFM0I0OTlGMTMyNTkxMUVBMzIvQzhFNDlCMDYx QjRBMTFFRkIwMjU0MDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnGvYDBAKdd7gwDQYJKoZIhvcNAQELBQADggEBAF9Twu9Y F4R/60TFZ2Cw9Wkv9Mw2sr1zsHkYHkQe4clsJ9fEwZ6gNjMrP9hylw8vmqTcYh9Q NrIkvXmPpcCRTajnATEUofyVD8RomIqbzVVIyQuA/PGvJ34e9jMwcQtUxWCWqZvz JBZ16qnAULHT/zJWknC0SEYIWVeGshjsMH9T0khhBod5J2LW3KQjwxq8iFxzrXo1 769kigV07cCLeKGTC53k28SZHNZ4YuAs5jd1sRWseCZK821hEKdla3zDySumfSxW 9dc5FAQaH7dLTiXaguNlp5FSajKMmMxEMGj2DxhCNFotJU385v3y/qeCXT8CoyBE 491xeNJwaRC507g= -----END CERTIFICATE-----Generated at Mon Jun 2 07:18:43 2025 by rpki-client