$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/0D22F748261A11EA83CE8D17C4F9AE02.roa File: 0D22F748261A11EA83CE8D17C4F9AE02.roa (raw, json) Hash identifier: dTqPYAZ0fYSqCYvtzmzk6vV87y7uZ4+mAQSsb1JNqeI= Subject key identifier: 25:25:68:58:A2:F6:43:8B:1B:DD:D4:59:2D:37:6C:AF:FC:A7:F1:0B Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Certificate serial: 0BA1 Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/0D22F748261A11EA83CE8D17C4F9AE02.roa Signing time: Wed 04 Jun 2025 19:23:14 +0000 ROA not before: Wed 04 Jun 2025 19:23:14 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135307 IP address blocks: 103.76.179.0/24 maxlen: 24 103.76.184.0/24 maxlen: 24 103.76.185.0/24 maxlen: 24 103.213.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 19:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2977 (0xba1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Validity Not Before: Jun 4 19:23:14 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68409d21-509a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b0:b5:e5:91:76:68:d3:37:8d:39:48:7b:a3: ec:4f:24:ea:f3:e3:50:0f:4c:6c:6f:c4:73:7a:42: 29:f1:80:f8:6b:68:62:77:18:17:37:89:99:97:d9: f1:5c:40:f1:3c:fd:7b:82:44:b8:7a:fe:a5:20:ff: be:79:f3:a7:c5:17:8d:06:bd:7e:f9:24:79:28:94: c7:ce:1f:55:2d:83:7f:6f:d2:c8:04:d7:05:99:5c: 4e:ed:4c:81:74:1e:9c:88:cf:50:54:fa:f8:cc:93: f9:47:ab:cc:4b:3a:f9:e7:40:02:79:96:69:9f:58: 2e:ac:fa:aa:8e:cb:9f:8d:98:88:59:f7:7a:c1:07: 3d:ce:2f:bf:46:bd:d5:25:1d:9f:49:c8:2f:a4:02: 7e:b4:9c:5d:de:ac:1c:14:ec:d0:94:28:69:fe:25: 3a:82:8c:4b:50:08:f0:a7:9c:a1:1a:42:14:31:31: 82:3d:f8:90:76:55:bc:8c:96:a0:1b:38:8f:b0:9d: 4d:e5:9e:97:d4:a8:58:93:ed:05:3c:bc:37:10:3b: 79:94:97:2b:99:24:77:77:b0:67:e2:06:c8:8f:5c: 18:cf:37:c8:6c:2c:71:42:c6:02:00:d6:06:49:34: ec:d7:9e:50:fe:d4:3c:15:45:c8:53:4a:46:d9:91: 40:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:25:68:58:A2:F6:43:8B:1B:DD:D4:59:2D:37:6C:AF:FC:A7:F1:0B X509v3 Authority Key Identifier: keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/0D22F748261A11EA83CE8D17C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.179.0/24 103.76.184.0/23 103.213.228.0/24 Signature Algorithm: sha256WithRSAEncryption 17:45:a5:7e:ce:c0:a0:e5:88:2c:34:0c:51:8c:ee:2f:7b:d1: 24:3b:1d:a4:df:a6:a6:ce:62:66:bb:bc:ac:a0:18:e4:ca:52: 16:54:30:76:b1:71:4d:d9:16:11:c2:86:ad:a6:4d:21:13:fd: 2c:28:bb:3c:37:34:e8:a5:11:71:91:f1:31:7b:1f:6c:b2:c0: 17:9c:e5:db:c3:ba:10:09:0a:a0:59:ce:f2:9f:d6:80:ca:c1: 7b:a2:32:74:86:fe:79:a9:92:ad:41:c3:4f:63:63:1d:6b:55: a2:53:cd:d3:a8:53:5a:8b:d1:b7:2c:9c:be:49:2b:40:9b:d7: 1b:c9:6a:29:83:a8:d3:1b:81:c2:2a:65:27:f5:ad:3b:e4:5f: f9:eb:88:9d:86:44:74:a9:5c:17:89:dc:f3:9d:ce:6d:10:1e: 1d:83:63:4f:30:a3:02:32:7c:a2:51:01:dc:65:a4:9b:e5:c1: d9:28:2a:56:1e:2c:a1:cc:07:58:be:5f:1c:2d:f2:cf:5e:c0: cb:b6:2b:6a:69:d5:09:d9:35:0c:af:a8:13:7b:a3:13:b1:ba: cb:a7:da:c8:2f:18:61:c6:e8:31:e0:04:c2:5b:9f:f8:06:2d: 90:09:e1:67:dc:16:6d:af:bc:49:10:20:45:ce:e7:08:78:c0: ab:68:77:6f -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICC6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzNUMxMTAvBgNVBAUTKDg3OEI4Njg2OTVGQzQ1QzlDNjNCNkZCQzU0Q0NCMzUw OUM0QjlGNEIwHhcNMjUwNjA0MTkyMzE0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQwOWQyMS01MDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bC15ZF2aNM3jTlIe6PsTyTq8+NQD0xsb8RzekIp8YD4a2hidxgXN4mZl9nx XEDxPP17gkS4ev6lIP++efOnxReNBr1++SR5KJTHzh9VLYN/b9LIBNcFmVxO7UyB dB6ciM9QVPr4zJP5R6vMSzr550ACeZZpn1gurPqqjsufjZiIWfd6wQc9zi+/Rr3V JR2fScgvpAJ+tJxd3qwcFOzQlChp/iU6goxLUAjwp5yhGkIUMTGCPfiQdlW8jJag GziPsJ1N5Z6X1KhYk+0FPLw3EDt5lJcrmSR3d7Bn4gbIj1wYzzfIbCxxQsYCANYG STTs155Q/tQ8FUXIU0pG2ZFAXQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFCUlaFii 9kOLG93UWS03bK/8p/ELMB8GA1UdIwQYMBaAFIeLhoaV/EXJxjtvvFTMs1CcS59L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM1Qy81MkZDNkI5ODI2 MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJjbkdPMi04Vk15elVKeExu MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g0dUdocFg4UmNuR08yLThWTXl6VUp4TG4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEEzNUMvNTJGQzZCOTgyNjE4MTFFQUJGRURFMTEzQzRGOUFFMDIvMEQyMkY3NDgy NjFBMTFFQTgzQ0U4RDE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnTLMDBAFnTLgDBABn1eQwDQYJKoZIhvcNAQELBQADggEB ABdFpX7OwKDliCw0DFGM7i970SQ7HaTfpqbOYma7vKygGOTKUhZUMHaxcU3ZFhHC hq2mTSET/Swouzw3NOilEXGR8TF7H2yywBec5dvDuhAJCqBZzvKf1oDKwXuiMnSG /nmpkq1Bw09jYx1rVaJTzdOoU1qL0bcsnL5JK0Cb1xvJaimDqNMbgcIqZSf1rTvk X/nriJ2GRHSpXBeJ3POdzm0QHh2DY08wowIyfKJRAdxlpJvlwdkoKlYeLKHMB1i+ Xxwt8s9ewMu2K2pp1QnZNQyvqBN7oxOxusun2sgvGGHG6DHgBMJbn/gGLZAJ4Wfc Fm2vvEkQIEXO5wh4wKtod28= -----END CERTIFICATE-----Generated at Thu Jun 5 19:21:11 2025 by rpki-client