$ rpki-client -vvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/DE137C362C7811EC97C8D979C4F9AE02.roa File: DE137C362C7811EC97C8D979C4F9AE02.roa (raw, json) Hash identifier: ORPxj2tqrIsIpHEdVkZPm4n/aNb1Vqu1v7KB5t0Gcw8= Subject key identifier: 36:B4:1E:C1:8F:F0:97:AD:A4:99:43:7F:B7:26:B4:53:89:F2:31:63 Certificate issuer: /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Certificate serial: 0A7F Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/DE137C362C7811EC97C8D979C4F9AE02.roa Signing time: Mon 26 May 2025 19:53:54 +0000 ROA not before: Mon 26 May 2025 19:53:54 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 56214 IP address blocks: 103.204.248.0/22 maxlen: 24 202.44.60.0/24 maxlen: 24 202.44.61.0/24 maxlen: 24 202.44.62.0/24 maxlen: 24 202.44.63.0/24 maxlen: 24 2400:7700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2687 (0xa7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918748C, serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8 Validity Not Before: May 26 19:53:54 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6834c6d2-14b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:b8:60:56:cc:c1:67:44:61:2d:4f:86:ff: a5:ca:04:8d:29:0c:2b:a5:21:62:71:6e:96:8b:fd: 3b:ad:e8:d0:25:e9:e8:04:5b:64:52:6f:dc:f4:8c: 60:6c:1b:55:b4:2d:9f:88:df:1d:82:0c:d6:3f:fd: 0b:b0:07:6a:b3:ce:9c:07:b6:dc:21:68:06:ff:e9: bd:6b:79:a5:63:03:9e:2f:c0:12:4c:e6:a2:f5:a4: a2:e4:7c:e6:58:4a:a9:63:d1:70:c1:5f:14:74:50: ef:31:cd:3a:aa:9d:ba:e7:8a:56:31:95:33:11:a6: ff:5d:4c:fa:02:25:78:12:18:e2:e9:9f:b8:4c:a9: a0:23:99:81:3f:9d:e4:ad:66:d2:88:56:cb:5b:f5: 81:36:b3:d0:3e:11:e2:b8:0c:b2:20:87:99:99:f3: 8b:a5:c2:c2:d8:78:65:72:84:06:af:2c:3f:1a:dd: 48:b9:c6:35:73:f5:8c:b5:dc:44:25:a5:e7:f9:8c: fa:6f:80:f4:a7:c0:1f:b9:a1:83:0c:62:71:59:f2: ab:7f:52:d3:7d:82:6d:9a:96:64:4a:0b:31:03:e5: 4d:36:8a:e0:27:f7:0c:5e:bd:6d:b6:d7:12:f2:92: b1:b3:c4:54:b5:29:b2:84:30:48:ef:16:42:4b:58: 5a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B4:1E:C1:8F:F0:97:AD:A4:99:43:7F:B7:26:B4:53:89:F2:31:63 X509v3 Authority Key Identifier: keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/DE137C362C7811EC97C8D979C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.204.248.0/22 202.44.60.0/22 IPv6: 2400:7700::/32 Signature Algorithm: sha256WithRSAEncryption 49:9e:11:a3:8a:56:dd:52:c0:c2:82:53:a9:d2:eb:d7:96:9d: 64:79:c8:28:2c:77:32:54:52:dc:6a:33:1f:04:2c:d5:21:f6: 44:31:34:d0:90:67:f7:ff:51:a3:33:34:03:5e:ae:2b:e1:5e: 55:50:95:c1:78:89:c7:e2:7b:b9:55:95:db:28:d8:75:1e:3e: 5d:36:0c:82:8f:52:f8:6f:cb:b5:11:ea:4a:2b:23:0b:45:df: b2:97:8c:70:17:b9:07:80:d0:d1:7b:ff:27:15:d3:70:71:d2: 51:91:85:66:79:5d:e8:48:a0:ee:b1:c9:98:20:71:2d:a0:5b: 7d:f9:0f:d8:55:9c:e9:f5:a5:ad:60:73:f9:3f:6c:31:e4:13: 1f:c6:40:4c:e1:ca:94:db:e7:22:9d:12:f3:17:6c:3d:ca:63: dc:47:72:39:70:8b:ef:17:64:24:b4:b5:b9:02:e2:a0:9e:f0: 1f:58:59:19:46:d9:98:66:17:17:c0:c4:3d:d2:08:aa:fb:3a: 07:4b:d8:75:eb:65:87:b0:46:6e:42:85:d3:14:33:54:25:83: d0:2d:f5:e2:74:3f:4c:98:4b:05:39:54:97:f4:c4:40:32:58: 14:dd:68:d1:0a:b7:d4:f6:b0:90:df:8e:41:c0:c9:bb:29:92: 40:eb:04:59 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0OEMxMTAvBgNVBAUTKDI4OTYyNEIyRTAwQjc3NEQzRDM5MEY1QTBBRDEwQjVC QzM1RjU2RDgwHhcNMjUwNTI2MTk1MzU0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM0YzZkMi0xNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkW4YFbMwWdEYS1Phv+lygSNKQwrpSFicW6Wi/07rejQJenoBFtkUm/c9Ixg bBtVtC2fiN8dggzWP/0LsAdqs86cB7bcIWgG/+m9a3mlYwOeL8ASTOai9aSi5Hzm WEqpY9FwwV8UdFDvMc06qp2654pWMZUzEab/XUz6AiV4Ehji6Z+4TKmgI5mBP53k rWbSiFbLW/WBNrPQPhHiuAyyIIeZmfOLpcLC2HhlcoQGryw/Gt1IucY1c/WMtdxE JaXn+Yz6b4D0p8AfuaGDDGJxWfKrf1LTfYJtmpZkSgsxA+VNNorgJ/cMXr1tttcS 8pKxs8RUtSmyhDBI7xZCS1hawQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFDa0HsGP 8JetpJlDf7cmtFOJ8jFjMB8GA1UdIwQYMBaAFCiWJLLgC3dNPTkPWgrRC1vDX1bY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ4Qy9BNzREQTc3MjY0 QjQxMUVBQjM4QTM0MERDNEY5QUUwMi9LSllrc3VBTGQwMDlPUTlhQ3RFTFc4TmZW dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tKWWtzdUFMZDAwOU9ROWFDdEVMVzhOZlZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc0OEMvQTc0REE3NzI2NEI0MTFFQUIzOEEzNDBEQzRGOUFFMDIvREUxMzdDMzYy Qzc4MTFFQzk3QzhEOTc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnzPgDBALKLDwwDQQCAAIwBwMFACQAdwAwDQYJKoZIhvcN AQELBQADggEBAEmeEaOKVt1SwMKCU6nS69eWnWR5yCgsdzJUUtxqMx8ELNUh9kQx NNCQZ/f/UaMzNANerivhXlVQlcF4icfie7lVldso2HUePl02DIKPUvhvy7UR6kor IwtF37KXjHAXuQeA0NF7/ycV03Bx0lGRhWZ5XehIoO6xyZggcS2gW335D9hVnOn1 pa1gc/k/bDHkEx/GQEzhypTb5yKdEvMXbD3KY9xHcjlwi+8XZCS0tbkC4qCe8B9Y WRlG2ZhmFxfAxD3SCKr7OgdL2HXrZYewRm5ChdMUM1Qlg9At9eJ0P0yYSwU5VJf0 xEAyWBTdaNEKt9T2sJDfjkHAybspkkDrBFk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:53:22 2025 by rpki-client