$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/B351D67E295D11F0B6373D85C4F9AE02.roa File: B351D67E295D11F0B6373D85C4F9AE02.roa (raw, json) Hash identifier: zaPH2MAJeJ91/7IAof0KACedklF43f1hbHSDn20lqZ4= Subject key identifier: 05:1A:CB:79:63:8C:D1:AE:14:1E:74:13:37:8D:2F:F3:BF:DC:56:84 Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Certificate serial: 047D Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/B351D67E295D11F0B6373D85C4F9AE02.roa Signing time: Tue 20 May 2025 12:27:08 +0000 ROA not before: Tue 20 May 2025 12:27:08 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 150110 IP address blocks: 203.32.28.0/24 maxlen: 24 203.32.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 01:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1149 (0x47d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Validity Not Before: May 20 12:27:08 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=682c751c-edc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:6b:9c:9b:a7:5f:26:77:c9:e8:21:85:c3: 36:0f:38:35:21:93:4a:14:38:22:69:2b:d8:8b:04: f6:ab:84:3f:7d:13:59:b0:75:2b:f1:46:c9:4c:96: 03:95:97:b0:1a:4d:23:2c:64:93:d2:5a:d5:4d:5e: 0d:ca:fb:de:e5:e0:78:3a:87:cf:c0:4a:84:e0:b3: 01:38:ef:36:28:a9:44:2a:fc:25:ac:3f:2a:56:cb: 80:57:a8:d7:8c:a0:d7:8c:a3:6e:69:fc:61:07:a4: da:d6:74:ff:3c:b1:d4:26:66:42:7d:6c:5a:3e:de: e2:4e:46:ef:3d:e1:32:db:45:1e:22:0e:d2:a2:93: e6:a6:2f:e8:ce:51:af:59:7b:b1:5d:df:6e:16:58: b3:ee:7d:2d:0e:f8:4a:78:2d:63:57:06:01:bc:f2: f0:86:e0:73:85:4f:35:2b:a3:fd:2a:84:fd:60:d0: 99:ff:76:35:a9:f0:15:aa:e5:ae:bb:15:56:05:63: 9e:3c:e0:78:0d:d9:6f:35:51:6a:49:c5:b2:00:41: 1d:23:c7:c7:77:49:c3:58:98:ea:2b:ff:81:cf:95: 66:eb:9b:58:6d:f5:7c:29:93:73:87:37:3e:04:43: 24:22:20:19:43:f2:66:3c:65:d2:83:31:79:f4:86: 6b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1A:CB:79:63:8C:D1:AE:14:1E:74:13:37:8D:2F:F3:BF:DC:56:84 X509v3 Authority Key Identifier: keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/B351D67E295D11F0B6373D85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.32.28.0/24 203.32.32.0/24 Signature Algorithm: sha256WithRSAEncryption b8:9e:65:33:90:eb:54:56:8e:50:db:a7:66:ad:69:75:69:4d: 61:8b:68:fa:64:9f:7f:9d:63:93:48:46:16:30:fc:ce:49:7e: 0b:d3:b8:1a:ef:84:91:bf:70:5e:14:ca:57:f6:4f:16:27:3a: d6:b6:7b:d7:ef:4c:58:4f:aa:15:5b:d7:23:4e:0b:73:60:91: ff:9f:13:2c:47:3c:8f:36:fc:91:11:c4:63:39:9a:71:96:7c: 40:a5:2d:b1:d7:a5:b2:43:14:4c:6b:0f:f0:fc:fc:e5:dc:b1: a7:5d:bb:5b:25:6a:34:00:57:aa:05:32:ef:dd:4a:68:03:17: 0d:c2:84:d6:1a:52:86:2d:7b:c4:d4:a7:e2:60:01:6a:b8:a6: ec:84:e7:c2:9c:27:dd:0b:24:7d:36:a4:4e:21:40:c6:09:f5: 07:c0:ee:e4:25:39:53:25:69:e1:c0:b0:bd:33:14:5e:2a:07: c1:20:dd:1c:5d:8f:13:53:22:14:00:9b:26:2c:d6:30:af:f6: c4:7f:4f:2b:4b:50:72:ce:8a:5a:75:b5:e3:01:97:7d:48:6e: de:e8:5c:3b:1f:4a:e9:5d:1d:30:76:82:b9:57:fa:9a:71:c3: 9f:88:a2:11:4e:fb:79:97:b6:19:41:de:c2:e7:ad:8c:d8:e9: 18:bb:c7:f5 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF RDk4NDY0OUQwHhcNMjUwNTIwMTIyNzA4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJjNzUxYy1lZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlBBrnJunXyZ3yeghhcM2Dzg1IZNKFDgiaSvYiwT2q4Q/fRNZsHUr8UbJTJYD lZewGk0jLGST0lrVTV4Nyvve5eB4OofPwEqE4LMBOO82KKlEKvwlrD8qVsuAV6jX jKDXjKNuafxhB6Ta1nT/PLHUJmZCfWxaPt7iTkbvPeEy20UeIg7SopPmpi/ozlGv WXuxXd9uFliz7n0tDvhKeC1jVwYBvPLwhuBzhU81K6P9KoT9YNCZ/3Y1qfAVquWu uxVWBWOePOB4DdlvNVFqScWyAEEdI8fHd0nDWJjqK/+Bz5Vm65tYbfV8KZNzhzc+ BEMkIiAZQ/JmPGXSgzF59IZr1QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAUay3lj jNGuFB50EzeNL/O/3FaEMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvQjM1MUQ2N0Uy OTVEMTFGMEI2MzczRDg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADLIBwDBADLICAwDQYJKoZIhvcNAQELBQADggEBALieZTOQ 61RWjlDbp2ataXVpTWGLaPpkn3+dY5NIRhYw/M5JfgvTuBrvhJG/cF4Uylf2TxYn Ota2e9fvTFhPqhVb1yNOC3Ngkf+fEyxHPI82/JERxGM5mnGWfEClLbHXpbJDFExr D/D8/OXcsaddu1slajQAV6oFMu/dSmgDFw3ChNYaUoYte8TUp+JgAWq4puyE58Kc J90LJH02pE4hQMYJ9QfA7uQlOVMlaeHAsL0zFF4qB8Eg3RxdjxNTIhQAmyYs1jCv 9sR/TytLUHLOilp1teMBl31Ibt7oXDsfSuldHTB2grlX+ppxw5+IohFO+3mXthlB 3sLnrYzY6Ri7x/U= -----END CERTIFICATE-----Generated at Wed Jun 4 00:15:07 2025 by rpki-client