$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/6535FEC0345C11F0B4126F3CC4F9AE02.roa File: 6535FEC0345C11F0B4126F3CC4F9AE02.roa (raw, json) Hash identifier: pjUqvx9LjqZcGK0IESA4LP1Wg4xMY3NQqlqvkln9QM0= Subject key identifier: 5C:EA:62:8B:4B:4B:89:CF:05:13:E0:80:6B:36:9E:55:32:D3:C7:68 Certificate issuer: /CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Certificate serial: 0828 Authority key identifier: 15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/6535FEC0345C11F0B4126F3CC4F9AE02.roa Signing time: Sat 24 May 2025 18:43:04 +0000 ROA not before: Sat 24 May 2025 18:43:04 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59332 IP address blocks: 103.228.0.0/23 maxlen: 23 103.228.0.0/24 maxlen: 24 103.228.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2088 (0x828) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0EA, serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Validity Not Before: May 24 18:43:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68321338-a913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d8:05:d8:4c:e7:c1:90:2f:be:02:4d:e5:90: f9:c5:05:bd:19:54:e5:82:02:e8:4e:96:3d:90:16: 00:5e:50:07:ba:68:0b:52:a3:31:76:39:25:be:2c: ec:e9:5f:19:3e:ed:f0:a3:f7:b4:42:8f:86:0b:25: db:a3:ff:ed:42:6e:59:84:40:d1:72:e1:0f:86:36: db:5b:7d:f1:84:70:f0:d3:13:3d:b7:9b:34:4d:02: f8:ff:4a:10:d8:61:5e:a2:b8:ae:16:3e:7d:1c:61: 88:a1:18:17:e5:4d:8a:7c:98:9b:7d:22:13:5d:28: cc:ef:47:80:a5:05:0a:64:a3:50:b0:41:7e:c7:60: 9f:79:93:47:c4:82:cb:d4:cb:ee:a4:d1:3b:b0:f1: ac:16:32:7c:ee:4f:e1:00:fb:9c:c2:c2:70:20:49: 42:40:b1:8a:92:5e:9d:ab:04:16:17:dd:8c:2c:ba: 4b:d2:e1:20:2d:ea:0f:90:7b:c6:2a:23:96:51:60: 21:af:56:f3:93:ab:9f:a7:25:d9:3c:2e:00:10:96: 39:06:1f:69:33:b0:9b:30:a5:21:5e:8b:e3:e0:03: 43:68:5e:c6:76:16:2a:f5:77:b8:f9:c9:8a:97:43: 70:21:33:a5:89:8c:bc:e9:41:5f:b2:dd:43:b2:25: 9d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EA:62:8B:4B:4B:89:CF:05:13:E0:80:6B:36:9E:55:32:D3:C7:68 X509v3 Authority Key Identifier: keyid:15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/6535FEC0345C11F0B4126F3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.228.0.0/23 Signature Algorithm: sha256WithRSAEncryption c5:24:5b:18:a7:c1:d6:77:a7:dd:f2:a9:6d:cf:99:a3:ca:d1: 9b:4e:27:ae:29:3a:0b:f8:f3:5c:cc:ed:3a:e9:49:ba:2d:9a: 6a:9f:af:bd:62:85:51:6c:5f:8f:5a:5b:a9:86:b5:17:90:31: 5a:07:94:4e:78:1d:a7:90:78:23:42:f1:4d:82:3b:4a:d5:71: bb:68:91:a9:fc:91:d4:bd:25:b0:9c:b5:8b:f1:0a:75:73:21: c3:44:f2:60:24:d6:4d:fd:c6:b1:aa:aa:28:3f:c7:b4:38:48: 3c:4a:76:cb:0a:01:08:37:a7:5a:55:ee:59:19:d1:28:9a:48: d5:8e:b9:ef:1e:cf:c9:f2:eb:e4:69:e7:fe:5c:f3:9d:8b:05: a2:cd:6f:ca:6e:b4:ec:63:92:a4:2c:40:0c:89:f0:86:ea:c5: 35:59:45:27:c0:4f:0c:9d:e5:60:60:ce:b1:5b:9b:71:b9:78: c7:90:c3:75:f1:65:4a:b8:80:34:b7:7d:bc:48:7a:8f:f2:fc: 75:0d:1d:cd:af:c3:f8:e1:bd:ff:98:eb:6f:26:1c:72:bd:2b: ee:62:da:88:8b:6c:8e:40:27:c3:00:b2:6a:64:5d:89:05:60: 49:b7:d3:6c:fb:c6:18:d6:05:9d:37:ea:81:6d:1c:06:c6:56: 09:86:8a:3e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwRUExMTAvBgNVBAUTKDE1REY3OUEwMDczOUJDMzlCNzE3ODkyNTk1OERGRUU5 OUJFMDBENDIwHhcNMjUwNTI0MTg0MzA0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODMyMTMzOC1hOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dgF2EznwZAvvgJN5ZD5xQW9GVTlggLoTpY9kBYAXlAHumgLUqMxdjklvizs 6V8ZPu3wo/e0Qo+GCyXbo//tQm5ZhEDRcuEPhjbbW33xhHDw0xM9t5s0TQL4/0oQ 2GFeoriuFj59HGGIoRgX5U2KfJibfSITXSjM70eApQUKZKNQsEF+x2CfeZNHxILL 1MvupNE7sPGsFjJ87k/hAPucwsJwIElCQLGKkl6dqwQWF92MLLpL0uEgLeoPkHvG KiOWUWAhr1bzk6ufpyXZPC4AEJY5Bh9pM7CbMKUhXovj4ANDaF7GdhYq9Xe4+cmK l0NwITOliYy86UFfst1DsiWdHwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFzqYotL S4nPBRPggGs2nlUy08doMB8GA1UdIwQYMBaAFBXfeaAHObw5txeJJZWN/umb4A1C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZEbTNGNGtsbFkzLTZadmdE VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkOTVvQWM1dkRtM0Y0a2xsWTMtNlp2Z0RVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkIwRUEvNEQ4RTQ5QjAwQjc0MTFFQUE1ODQwMDFDQzRGOUFFMDIvNjUzNUZFQzAz NDVDMTFGMEI0MTI2RjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn5AAwDQYJKoZIhvcNAQELBQADggEBAMUkWxinwdZ3p93y qW3PmaPK0ZtOJ64pOgv481zM7TrpSbotmmqfr71ihVFsX49aW6mGtReQMVoHlE54 HaeQeCNC8U2CO0rVcbtokan8kdS9JbCctYvxCnVzIcNE8mAk1k39xrGqqig/x7Q4 SDxKdssKAQg3p1pV7lkZ0SiaSNWOue8ez8ny6+Rp5/5c852LBaLNb8putOxjkqQs QAyJ8IbqxTVZRSfATwyd5WBgzrFbm3G5eMeQw3XxZUq4gDS3fbxIeo/y/HUNHc2v w/jhvf+Y628mHHK9K+5i2oiLbI5AJ8MAsmpkXYkFYEm302z7xhjWBZ036oFtHAbG VgmGij4= -----END CERTIFICATE-----Generated at Mon Jun 2 07:15:19 2025 by rpki-client