$ rpki-client -vvf rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/4B9461EE360211F0B340176EC4F9AE02.roa File: 4B9461EE360211F0B340176EC4F9AE02.roa (raw, json) Hash identifier: bOe8nr2E8t1ATROZ4KuuEHTILvcglG1TUoH86rOv6Xs= Subject key identifier: 9B:5F:75:19:15:D2:AB:A0:DB:81:C8:AE:F4:0C:63:56:69:DD:31:19 Certificate issuer: /CN=A916EC8B/serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE Certificate serial: 01DD Authority key identifier: 11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/4B9461EE360211F0B340176EC4F9AE02.roa Signing time: Wed 21 May 2025 05:13:13 +0000 ROA not before: Wed 21 May 2025 05:13:13 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 63957 IP address blocks: 103.52.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 01:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EC8B, serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE Validity Not Before: May 21 05:13:13 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=682d60e9-e3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:00:b6:12:21:85:a3:48:49:48:a8:2b:eb: d6:de:32:f2:e5:6c:72:0f:96:af:5d:0c:26:c1:63: 47:d3:04:5e:5a:da:85:0e:3a:7c:64:05:68:fd:ac: d1:d0:86:ca:49:24:79:35:82:6c:91:9f:a7:e5:9b: a5:9a:12:36:48:f5:b5:68:5c:c4:39:55:42:f6:47: 80:3d:3a:cb:69:e6:c2:a7:3d:73:c3:d0:9e:e5:58: 2a:91:64:7a:0c:2a:1f:6f:db:3c:04:5f:61:08:d4: 6d:c2:e9:3d:cc:ef:07:26:ac:20:95:4c:7b:4c:a1: 8f:22:9f:53:50:17:6e:72:f8:99:51:19:3a:a2:d9: a5:d6:ab:c2:2d:53:a5:73:78:f9:53:27:b7:6f:14: a3:3a:ee:b3:bf:fa:26:2a:b3:3c:72:1d:37:5d:2f: e0:91:75:ab:99:b6:45:4e:4e:d3:a1:af:45:bb:d9: b9:e4:dc:0a:ec:bf:2c:c8:d1:5c:53:05:b6:5e:49: 87:96:ae:34:84:7c:e5:88:11:91:08:8f:fa:8d:9d: f6:ee:32:80:34:89:2f:12:c7:20:c6:14:ac:9c:bb: 4e:bf:06:21:d9:c2:1e:68:f5:ed:9d:d7:62:c4:31: 19:df:db:0d:91:c4:af:a1:07:ab:9c:52:f7:a8:cf: e8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5F:75:19:15:D2:AB:A0:DB:81:C8:AE:F4:0C:63:56:69:DD:31:19 X509v3 Authority Key Identifier: keyid:11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/4B9461EE360211F0B340176EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.52.142.0/24 Signature Algorithm: sha256WithRSAEncryption 75:d9:ef:19:a3:dc:3c:c5:f6:eb:9e:a1:1f:c3:40:26:4b:6d: eb:1e:c4:d8:96:a4:f7:81:b1:06:18:4d:b0:b1:f8:c0:ef:3b: 52:4e:86:39:b0:2e:22:ac:02:bd:55:d8:e4:ec:0e:a6:d4:e6: df:0d:40:ea:2f:7e:71:da:c8:12:16:a5:1c:f2:8e:c0:ad:13: 27:94:35:03:5c:16:49:87:ee:2b:ee:a9:6f:76:bc:a8:a5:d3: e3:55:9f:01:d6:b3:06:a4:01:4e:8f:14:a7:91:54:ab:5a:c2: 0f:76:66:29:17:6f:b9:52:49:e7:2e:23:3d:60:55:b9:d7:62: 79:7c:b5:f3:a5:74:7d:d1:88:ae:c2:aa:0d:d1:b1:76:30:aa: 30:11:fb:98:8c:4e:8d:72:d3:0b:39:78:18:61:cf:82:1e:81: 37:78:2b:99:1c:83:4b:14:06:2b:c5:71:64:72:b7:99:65:77: 29:a7:90:62:b1:66:d4:1b:db:6d:a5:12:e5:b1:ec:b3:8d:9e: 57:be:bf:d9:c2:3f:27:40:cc:1b:fe:46:fd:e4:42:67:68:ac: 2f:dd:27:9a:75:b6:e2:7a:85:68:3c:cf:07:be:af:d9:21:35: fc:31:ad:a3:3a:87:6b:57:50:f9:24:08:e7:48:67:08:8a:34: f8:f2:fd:96 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVDOEIxMTAvBgNVBAUTKDExMDRDRTJDNkQ5MUVGOUQ5QTMzOTU2RjA3MzFEOUUy M0YxM0FGQkUwHhcNMjUwNTIxMDUxMzEzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODJkNjBlOS1lM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucUAthIhhaNISUioK+vW3jLy5WxyD5avXQwmwWNH0wReWtqFDjp8ZAVo/azR 0IbKSSR5NYJskZ+n5ZulmhI2SPW1aFzEOVVC9keAPTrLaebCpz1zw9Ce5VgqkWR6 DCofb9s8BF9hCNRtwuk9zO8HJqwglUx7TKGPIp9TUBducviZURk6otml1qvCLVOl c3j5Uye3bxSjOu6zv/omKrM8ch03XS/gkXWrmbZFTk7Toa9Fu9m55NwK7L8syNFc UwW2XkmHlq40hHzliBGRCI/6jZ327jKANIkvEscgxhSsnLtOvwYh2cIeaPXtnddi xDEZ39sNkcSvoQernFL3qM/orQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJtfdRkV 0qug24HIrvQMY1Zp3TEZMB8GA1UdIwQYMBaAFBEEzixtke+dmjOVbwcx2eI/E6++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUM4Qi9EODFENTM3MDZG Q0UxMUVEQkMwMjk0NURDNEY5QUUwMi9FUVRPTEcyUjc1MmFNNVZ2QnpIWjRqOFRy NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VRVE9MRzJSNzUyYU01VnZCekhaNGo4VHI3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkVDOEIvRDgxRDUzNzA2RkNFMTFFREJDMDI5NDVEQzRGOUFFMDIvNEI5NDYxRUUz NjAyMTFGMEIzNDAxNzZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnNI4wDQYJKoZIhvcNAQELBQADggEBAHXZ7xmj3DzF9uue oR/DQCZLbesexNiWpPeBsQYYTbCx+MDvO1JOhjmwLiKsAr1V2OTsDqbU5t8NQOov fnHayBIWpRzyjsCtEyeUNQNcFkmH7ivuqW92vKil0+NVnwHWswakAU6PFKeRVKta wg92ZikXb7lSSecuIz1gVbnXYnl8tfOldH3RiK7Cqg3RsXYwqjAR+5iMTo1y0ws5 eBhhz4IegTd4K5kcg0sUBivFcWRyt5lldymnkGKxZtQb222lEuWx7LONnle+v9nC PydAzBv+Rv3kQmdorC/dJ5p1tuJ6hWg8zwe+r9khNfwxraM6h2tXUPkkCOdIZwiK NPjy/ZY= -----END CERTIFICATE-----Generated at Mon Jun 9 16:19:09 2025 by rpki-client