$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63255702406911F0A38A9743C4F9AE02.roa File: 63255702406911F0A38A9743C4F9AE02.roa (raw, json) Hash identifier: EtVv8anpCVelfvxwg2gFm7PKCc7yx95h11LP4OxiHJM= Subject key identifier: 33:5C:8C:34:80:84:6D:BD:24:2C:36:45:DF:44:76:51:16:B3:56:21 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BCDC Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63255702406911F0A38A9743C4F9AE02.roa Signing time: Tue 03 Jun 2025 10:56:23 +0000 ROA not before: Tue 03 Jun 2025 10:56:23 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135848 IP address blocks: 45.127.200.0/22 maxlen: 24 103.54.100.0/22 maxlen: 24 103.81.156.0/22 maxlen: 24 103.158.148.0/23 maxlen: 24 103.196.132.0/22 maxlen: 24 2001:df2:3500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 15:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48348 (0xbcdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 3 10:56:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=683ed4d7-429f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:1c:45:6b:ac:c6:77:4c:b2:d5:49:f6:c9: ca:5a:3f:e8:46:63:2b:84:82:36:a4:fa:20:e0:03: 1c:50:75:93:35:7d:e9:23:70:ef:54:bf:83:26:c1: e8:8f:84:30:e7:9e:f3:13:9b:79:eb:ca:97:52:4a: 34:58:47:58:f7:61:dc:89:0b:fb:33:0c:7a:f0:e3: ce:2a:a3:6e:7a:13:f8:21:47:a3:05:b5:a0:fb:d3: ba:95:4d:0a:f9:35:fe:9c:ae:47:a5:1a:5c:59:57: 02:4b:c2:41:71:7f:d3:cc:b4:5c:99:1a:7e:22:24: 4e:5e:d9:7d:6a:1d:f3:36:18:7d:c4:90:2a:98:c4: 1c:8b:f2:c7:7c:18:52:e2:d9:04:73:fe:8d:a6:cd: ba:ed:2d:43:f4:a5:c6:fe:31:a0:1a:56:d2:cd:b1: b1:93:63:84:a7:23:09:b6:77:30:d1:47:b7:b5:9d: 02:1e:00:9e:a7:a4:5c:c3:b9:9d:f8:76:9c:59:21: 6c:de:96:ac:35:92:ff:60:22:4e:7e:30:66:05:85: 51:64:e8:52:9c:4b:24:af:95:a5:61:54:1e:21:4c: d3:46:b4:8a:3c:2c:8b:5e:32:be:63:22:e8:06:14: 2c:09:68:4f:e3:f1:38:41:72:6b:e9:1f:9e:8a:0e: df:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5C:8C:34:80:84:6D:BD:24:2C:36:45:DF:44:76:51:16:B3:56:21 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63255702406911F0A38A9743C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.127.200.0/22 103.54.100.0/22 103.81.156.0/22 103.158.148.0/23 103.196.132.0/22 IPv6: 2001:df2:3500::/48 Signature Algorithm: sha256WithRSAEncryption 7d:50:c8:b1:97:cd:1c:12:16:45:ba:04:ec:ab:a1:93:51:27: 30:6e:48:69:5d:7b:ed:e3:ff:d2:bc:fb:80:86:60:12:18:df: 5f:47:ef:db:7b:2d:6c:1a:93:d4:04:3e:d7:70:1b:4f:83:47: 81:af:a2:fc:1c:a4:9b:84:72:5a:4b:fd:66:80:ef:8a:f6:6f: 94:1d:49:fb:66:e9:80:27:c5:d9:9b:b7:66:09:50:fd:e7:a7: 97:41:e7:cb:bd:df:f4:fb:b5:ee:48:03:81:a4:87:ae:5b:4e: f7:f4:e0:07:a6:80:ff:60:28:8f:44:b1:28:01:89:8e:e8:6e: 66:54:9c:f9:d6:c8:5f:96:8e:e7:52:5e:15:6a:a4:96:9d:e0: 9c:23:c8:b8:39:93:b0:4e:9f:6c:91:45:34:41:23:af:87:35: f5:06:e3:bf:8e:f6:2f:43:45:3b:11:c2:7c:8e:08:72:c5:3b: 4a:d0:8b:89:3f:cd:0d:24:73:ab:21:1d:a9:3a:4e:f2:20:a5: 8f:47:79:48:10:d3:c2:9a:d4:a5:1b:81:29:1e:0a:69:18:fb: 0e:0f:5e:81:ca:f1:08:a5:8b:f7:8c:1e:86:98:64:68:55:70: fd:a8:74:0b:fe:28:12:2c:ed:b4:8f:5f:71:30:07:b7:1d:69: a7:04:e9:e7 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIDALzcMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDYwMzEwNTYyM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgzZWQ0ZDctNDI5ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8tHEVrrMZ3TLLVSfbJylo/6EZjK4SCNqT6IOADHFB1kzV96SNw71S/gybB 6I+EMOee8xObeevKl1JKNFhHWPdh3IkL+zMMevDjziqjbnoT+CFHowW1oPvTupVN Cvk1/pyuR6UaXFlXAkvCQXF/08y0XJkafiIkTl7ZfWod8zYYfcSQKpjEHIvyx3wY UuLZBHP+jabNuu0tQ/Slxv4xoBpW0s2xsZNjhKcjCbZ3MNFHt7WdAh4AnqekXMO5 nfh2nFkhbN6WrDWS/2AiTn4wZgWFUWToUpxLJK+VpWFUHiFM00a0ijwsi14yvmMi 6AYULAloT+PxOEFya+kfnooO3/ECAwEAAaOCAr4wggK6MB0GA1UdDgQWBBQzXIw0 gIRtvSQsNkXfRHZRFrNWITAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzYzMjU1NzAy NDA2OTExRjBBMzhBOTc0M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEgGCCsGAQUFBwEHAQH/ BDkwNzAkBAIAATAeAwQCLX/IAwQCZzZkAwQCZ1GcAwQBZ56UAwQCZ8SEMA8EAgAC MAkDBwAgAQ3yNQAwDQYJKoZIhvcNAQELBQADggEBAH1QyLGXzRwSFkW6BOyroZNR JzBuSGlde+3j/9K8+4CGYBIY319H79t7LWwak9QEPtdwG0+DR4GvovwcpJuEclpL /WaA74r2b5QdSftm6YAnxdmbt2YJUP3np5dB58u93/T7te5IA4Gkh65bTvf04Aem gP9gKI9EsSgBiY7obmZUnPnWyF+WjudSXhVqpJad4JwjyLg5k7BOn2yRRTRBI6+H NfUG47+O9i9DRTsRwnyOCHLFO0rQi4k/zQ0kc6shHak6TvIgpY9HeUgQ08Ka1KUb gSkeCmkY+w4PXoHK8Qili/eMHoaYZGhVcP2odAv+KBIs7bSPX3EwB7cdaacE6ec= -----END CERTIFICATE-----Generated at Mon Jun 9 03:48:16 2025 by rpki-client