$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/8065DE3E355D11F0A8C7F559C4F9AE02.roa File: 8065DE3E355D11F0A8C7F559C4F9AE02.roa (raw, json) Hash identifier: CV9Xtt4wpYX39ZMKm/6DqIr00Lo5ro8Eb2RI05UQ11M= Subject key identifier: 93:2A:47:D1:55:AE:B4:A0:1E:84:F0:6C:39:CC:93:6C:6B:CF:72:0F Certificate issuer: /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24 Certificate serial: 06C4 Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/8065DE3E355D11F0A8C7F559C4F9AE02.roa Signing time: Tue 20 May 2025 09:33:35 +0000 ROA not before: Tue 20 May 2025 09:33:35 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 133731 IP address blocks: 43.254.216.0/22 maxlen: 22 103.238.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1732 (0x6c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24 Validity Not Before: May 20 09:33:35 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=682c4c6f-0b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f3:d1:c0:1c:11:6d:0c:c9:3f:4a:df:e6:6a: ea:b3:64:35:64:d1:f8:00:5e:14:97:24:50:52:3d: 4a:b1:5c:d5:94:f5:c5:42:1a:71:59:ea:7e:23:33: 16:93:5a:f6:f0:32:ca:68:60:65:2c:19:b8:7b:7a: 64:ee:3f:cd:50:1d:0c:1e:ec:cc:e5:3a:ca:3f:9d: 05:90:02:a4:d1:6d:23:95:ec:aa:49:2a:8a:43:a7: 0e:0c:65:4f:ab:0d:5f:d6:de:b8:c5:80:f9:26:75: 7b:c2:52:67:1b:b9:21:be:a3:20:b7:34:9e:ba:9b: 10:6f:d5:8e:71:ef:55:fb:3f:75:d8:51:6b:3a:aa: d6:18:92:1f:c5:1c:18:b7:51:96:f1:11:cf:61:02: 07:a5:47:bf:16:5d:3c:b4:d2:fe:1c:7d:ab:b2:f5: 4c:0d:1a:cd:2d:35:55:15:57:ed:3c:16:4b:62:cf: 04:94:a9:1d:e9:90:74:fd:11:59:04:de:e6:df:12: d6:2d:7c:d3:43:b7:e4:f9:97:15:5c:7d:e0:eb:fe: cf:9a:62:4a:11:7f:64:9a:51:4a:b6:07:06:d1:49: e3:d5:f0:e3:f0:d4:87:dd:24:e4:46:40:75:44:18: 32:bc:bd:60:48:30:6a:99:f8:73:c0:b3:e0:58:ec: c5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2A:47:D1:55:AE:B4:A0:1E:84:F0:6C:39:CC:93:6C:6B:CF:72:0F X509v3 Authority Key Identifier: keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/8065DE3E355D11F0A8C7F559C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.254.216.0/22 103.238.224.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:f5:16:4b:77:e8:3c:4f:7d:b2:02:0a:82:f9:9b:5e:e4:50: a2:17:b4:db:4e:fa:28:2e:04:b0:8b:06:d6:8e:fa:9a:3e:af: 71:08:f2:c8:b0:42:a3:b5:8f:fa:36:b8:77:3f:90:5d:ce:2a: e5:13:e9:45:ed:4c:ca:2d:78:a6:f2:7f:6f:63:e5:45:86:a5: 6c:80:2b:40:c4:be:56:34:8a:85:ed:f7:85:db:af:1e:b5:60: 2d:47:cf:3a:71:cc:af:0a:28:41:27:63:ad:c8:be:b8:9a:db: 71:94:14:b4:e8:40:e1:36:4a:62:c5:11:75:b0:0c:4f:1d:40: ba:37:3d:40:4f:0a:ae:73:66:1e:b7:56:83:cc:a1:d2:bb:90: a5:17:23:b9:cb:19:8a:9f:17:1b:73:bb:33:b2:b9:26:46:44: 3a:a3:c6:03:30:e7:7f:91:ae:95:31:98:a1:a1:02:8b:99:29: 46:51:a6:9c:15:31:5e:e6:44:82:77:d4:43:23:2e:fc:68:aa: 9c:ad:f2:df:b3:1b:78:a4:ad:5a:51:a4:81:e5:7e:95:53:7d: 9c:38:12:39:7e:ef:13:f1:83:de:71:6c:d5:0d:73:34:24:6e: 48:d3:99:f1:cf:ee:2f:4c:b7:f8:36:be:8e:bb:3c:09:fd:69: 83:4e:49:51 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJCNEQxMTAvBgNVBAUTKEVGNDAzNjQzRUE5ODIwQUU2RDlENjIyRjlBRUZEN0E0 QzkxNTRGMjQwHhcNMjUwNTIwMDkzMzM1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJjNGM2Zi0wYjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvPRwBwRbQzJP0rf5mrqs2Q1ZNH4AF4UlyRQUj1KsVzVlPXFQhpxWep+IzMW k1r28DLKaGBlLBm4e3pk7j/NUB0MHuzM5TrKP50FkAKk0W0jleyqSSqKQ6cODGVP qw1f1t64xYD5JnV7wlJnG7khvqMgtzSeupsQb9WOce9V+z912FFrOqrWGJIfxRwY t1GW8RHPYQIHpUe/Fl08tNL+HH2rsvVMDRrNLTVVFVftPBZLYs8ElKkd6ZB0/RFZ BN7m3xLWLXzTQ7fk+ZcVXH3g6/7PmmJKEX9kmlFKtgcG0Unj1fDj8NSH3STkRkB1 RBgyvL1gSDBqmfhzwLPgWOzF2wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJMqR9FV rrSgHoTwbDnMk2xrz3IPMB8GA1UdIwQYMBaAFO9ANkPqmCCubZ1iL5rv16TJFU8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DQTU2M0JFODY1 MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlLNXRuV0l2bXVfWHBNa1ZU eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcwQTJRLXFZSUs1dG5XSXZtdV9YcE1rVlR5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEJCNEQvQ0E1NjNCRTg2NTIyMTFFQjgwRjZFOTRCQzRGOUFFMDIvODA2NURFM0Uz NTVEMTFGMEE4QzdGNTU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr/tgDBAJn7uAwDQYJKoZIhvcNAQELBQADggEBADv1Fkt3 6DxPfbICCoL5m17kUKIXtNtO+iguBLCLBtaO+po+r3EI8siwQqO1j/o2uHc/kF3O KuUT6UXtTMoteKbyf29j5UWGpWyAK0DEvlY0ioXt94Xbrx61YC1HzzpxzK8KKEEn Y63Ivria23GUFLToQOE2SmLFEXWwDE8dQLo3PUBPCq5zZh63VoPModK7kKUXI7nL GYqfFxtzuzOyuSZGRDqjxgMw53+RrpUxmKGhAouZKUZRppwVMV7mRIJ31EMjLvxo qpyt8t+zG3ikrVpRpIHlfpVTfZw4Ejl+7xPxg95xbNUNczQkbkjTmfHP7i9Mt/g2 vo67PAn9aYNOSVE= -----END CERTIFICATE-----Generated at Mon Jun 2 06:33:42 2025 by rpki-client