$ rpki-client -vvf rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/B5E8546EBF2611EE8879BB66C4F9AE02.roa File: B5E8546EBF2611EE8879BB66C4F9AE02.roa (raw, json) Hash identifier: Ffk69KcnGpR49Ar8hlO4ru2sBWN0PK6gedzkE21rPTE= Subject key identifier: 2A:F7:43:2D:EC:40:C0:90:76:76:1A:31:CD:CC:DF:D3:20:09:70:5C Certificate issuer: /CN=A918DFCE/serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B Certificate serial: FE Authority key identifier: 10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/B5E8546EBF2611EE8879BB66C4F9AE02.roa Signing time: Sat 17 May 2025 05:05:34 +0000 ROA not before: Sat 17 May 2025 05:05:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8075 IP address blocks: 203.12.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DFCE, serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B Validity Not Before: May 17 05:05:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6828191e-b95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:e4:42:72:27:d6:c0:63:f2:44:bf:e1:c2: 52:b0:b5:37:15:1b:e5:a4:71:64:1a:de:87:c0:66: 61:65:2e:d0:03:63:48:b0:aa:d7:6a:c6:97:65:9c: fe:b9:b1:23:6b:15:fe:2d:9d:e7:20:a8:6d:62:f1: 4c:3d:9b:5a:ce:8c:2b:d2:d6:c2:f7:b2:b3:f7:52: 73:b2:93:84:7c:c1:28:c6:2c:dc:73:36:63:d2:c2: cb:d3:5b:83:11:81:3d:a2:b4:c3:c7:59:b2:02:c6: 2f:12:96:37:85:15:7b:3a:6e:d6:80:27:a2:33:28: ce:1f:0f:20:04:5b:09:01:f6:1a:ce:35:fa:01:7d: b8:5d:63:72:e0:1b:d1:db:33:8e:e5:42:74:ef:c0: 6d:40:d1:4a:c0:f0:f5:42:5e:19:b5:34:e6:08:04: d5:2e:39:67:ae:6c:91:0d:d2:3e:e6:08:5a:38:41: b3:b6:ec:37:db:a1:45:a6:25:6b:7a:33:90:1b:29: 63:af:56:e1:65:33:eb:c3:d7:3b:eb:94:6a:e7:35: bd:40:30:fa:85:66:57:4e:28:4c:8d:fc:3f:5f:38: 3e:9c:e4:03:42:b9:a1:0a:04:dc:26:a8:03:d5:b1: 58:db:c8:4c:13:af:71:f7:85:c6:3d:b2:bb:2e:71: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F7:43:2D:EC:40:C0:90:76:76:1A:31:CD:CC:DF:D3:20:09:70:5C X509v3 Authority Key Identifier: keyid:10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/B5E8546EBF2611EE8879BB66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.12.31.0/24 Signature Algorithm: sha256WithRSAEncryption d8:7d:f2:a1:3e:ff:69:61:25:e5:54:d1:75:8a:18:d9:d0:88: 74:d9:f0:22:8e:22:41:f4:15:b1:03:0a:77:45:0b:5b:20:d9: ec:84:03:58:49:5c:4e:86:d2:d4:00:06:37:fe:62:52:74:79: 2a:19:0c:ed:80:06:39:23:fe:c2:e2:91:b9:4f:c0:00:48:ff: 33:3a:33:58:28:0d:53:07:3d:13:98:dc:98:79:bc:fd:b5:64: c0:ac:6e:8f:d4:44:1e:b4:5f:29:41:1a:b5:e7:91:6e:67:0b: e3:7f:b5:b7:9b:f3:fa:a1:ee:1b:a0:b2:de:ca:39:0e:b6:27: 7a:89:3d:9a:a6:37:74:82:5b:8d:79:4e:1f:df:bd:39:c6:44: 31:84:14:5c:7e:18:0a:ca:90:de:e6:c4:64:d0:b5:1c:a2:c7: a8:ac:ed:88:3b:c7:4a:37:a3:76:a0:00:42:0a:05:83:a5:7f: 27:54:f7:aa:35:6a:e4:6e:05:f1:01:96:a9:57:c7:46:c2:97: f7:99:f6:59:26:c1:d3:fb:87:93:31:a3:9e:9a:be:2b:fe:72: ae:31:ba:c8:c3:15:9c:ce:b9:34:85:f8:77:c0:d5:d1:e6:2d: d5:14:6c:be:ec:43:f8:d8:20:bc:ba:b3:7f:2f:6c:e0:3a:37: fa:68:89:07 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERGQ0UxMTAvBgNVBAUTKDEwNDQwMjlGRjgzMTc0QzZGMUQ2NkM4QUQwRDNGQTE2 NjRFRkU1M0IwHhcNMjUwNTE3MDUwNTM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI4MTkxZS1iOTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlzkQnIn1sBj8kS/4cJSsLU3FRvlpHFkGt6HwGZhZS7QA2NIsKrXasaXZZz+ ubEjaxX+LZ3nIKhtYvFMPZtazowr0tbC97Kz91JzspOEfMEoxizcczZj0sLL01uD EYE9orTDx1myAsYvEpY3hRV7Om7WgCeiMyjOHw8gBFsJAfYazjX6AX24XWNy4BvR 2zOO5UJ078BtQNFKwPD1Ql4ZtTTmCATVLjlnrmyRDdI+5ghaOEGztuw326FFpiVr ejOQGyljr1bhZTPrw9c765Rq5zW9QDD6hWZXTihMjfw/Xzg+nOQDQrmhCgTcJqgD 1bFY28hME69x94XGPbK7LnFqAQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCr3Qy3s QMCQdnYaMc3M39MgCXBcMB8GA1UdIwQYMBaAFBBEAp/4MXTG8dZsitDT+hZk7+U7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REZDRS84MEFDNTRDQUJG MUQxMUVFODc1QUUyN0ZDNEY5QUUwMi9FRVFDbl9neGRNYngxbXlLME5QNkZtVHY1 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFUUNuX2d4ZE1ieDFteUswTlA2Rm1UdjVUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OERGQ0UvODBBQzU0Q0FCRjFEMTFFRTg3NUFFMjdGQzRGOUFFMDIvQjVFODU0NkVC RjI2MTFFRTg4NzlCQjY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLDB8wDQYJKoZIhvcNAQELBQADggEBANh98qE+/2lhJeVU 0XWKGNnQiHTZ8CKOIkH0FbEDCndFC1sg2eyEA1hJXE6G0tQABjf+YlJ0eSoZDO2A Bjkj/sLikblPwABI/zM6M1goDVMHPROY3Jh5vP21ZMCsbo/URB60XylBGrXnkW5n C+N/tbeb8/qh7hugst7KOQ62J3qJPZqmN3SCW415Th/fvTnGRDGEFFx+GArKkN7m xGTQtRyix6is7Yg7x0o3o3agAEIKBYOlfydU96o1auRuBfEBlqlXx0bCl/eZ9lkm wdP7h5Mxo56aviv+cq4xusjDFZzOuTSF+HfA1dHmLdUUbL7sQ/jYILy6s38vbOA6 N/poiQc= -----END CERTIFICATE-----Generated at Mon Jun 2 06:35:17 2025 by rpki-client