$ rpki-client -vvf rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/C355C10243E611E8843B4E66C4F9AE02.roa File: C355C10243E611E8843B4E66C4F9AE02.roa (raw, json) Hash identifier: 5VbFHuIW6aaxrhGlGBpgNLnc8AtIEGwJvLioejJi97Q= Subject key identifier: 9D:79:1F:C4:D2:E4:3A:E2:AB:F2:98:C4:81:CE:E1:AB:2B:7C:00:D8 Certificate issuer: /CN=A919C233/serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Certificate serial: 1537 Authority key identifier: DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/C355C10243E611E8843B4E66C4F9AE02.roa Signing time: Thu 22 May 2025 17:27:52 +0000 ROA not before: Thu 22 May 2025 17:27:52 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137572 IP address blocks: 103.113.224.0/22 maxlen: 24 2402:c440::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5431 (0x1537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C233, serialNumber=DBC21849BB4C1704D23193C41B70C66B1A96562F Validity Not Before: May 22 17:27:52 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=682f5e97-63e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0b:54:aa:a9:e2:d2:43:84:cc:9e:52:8e:a0: f8:bb:e9:71:c5:e0:0a:d2:4a:89:80:68:49:f2:39: 69:eb:4e:2e:9b:55:b1:bb:b3:e5:ae:ed:04:43:e6: 23:73:e0:8e:23:4c:69:75:f9:14:c3:32:c3:8b:f9: 53:90:69:e4:ec:3c:88:d6:04:9f:a1:50:ef:9c:99: 3c:9b:c3:f4:d9:73:6f:40:30:74:c9:aa:04:5f:d2: df:5e:30:02:11:52:9e:ab:62:1d:a0:b1:89:1c:3c: d3:42:0b:99:1d:52:b7:c4:f9:1f:c4:9c:b4:70:bf: 66:ba:e4:fc:ad:21:93:0a:cd:df:dd:74:96:b7:da: 1c:8f:36:3a:c8:4e:b5:b1:b6:68:ff:97:f9:0f:de: 80:c5:80:a7:cf:e4:68:70:7c:49:76:98:b5:ab:a3: 2f:1e:8d:8e:d3:69:f8:9b:49:ca:7b:3f:34:57:71: d0:35:c2:b2:3b:70:8e:c3:46:df:79:71:f5:e5:6e: b8:ca:0c:52:dc:7a:8a:a9:95:02:2a:36:99:1f:08: fb:68:cf:e8:95:93:d8:54:62:24:c7:c8:a6:e6:43: 85:61:5b:b5:3c:84:a3:36:0d:d0:7f:25:ac:46:44: d8:43:9c:6c:07:a6:c5:d6:a8:10:12:0a:e3:f2:ab: e3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:79:1F:C4:D2:E4:3A:E2:AB:F2:98:C4:81:CE:E1:AB:2B:7C:00:D8 X509v3 Authority Key Identifier: keyid:DB:C2:18:49:BB:4C:17:04:D2:31:93:C4:1B:70:C6:6B:1A:96:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/28IYSbtMFwTSMZPEG3DGaxqWVi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28IYSbtMFwTSMZPEG3DGaxqWVi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C233/1FDAFD6243E611E8BC415F65C4F9AE02/C355C10243E611E8843B4E66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.224.0/22 IPv6: 2402:c440::/32 Signature Algorithm: sha256WithRSAEncryption 41:81:3f:cb:4e:e8:4c:b5:6a:82:85:80:7e:77:75:56:e3:8f: c9:f3:80:2f:1d:fd:94:ea:2c:bd:92:c0:fd:40:84:fd:43:c6: 21:4b:ca:39:74:62:9e:00:fd:23:11:b7:b4:e3:8f:67:4e:b9: 52:3e:4a:06:f0:56:ae:cf:bb:20:64:2d:4c:8a:0a:12:94:cc: 19:2d:85:8e:2b:03:75:67:8a:70:a0:15:dc:9a:26:78:9c:8d: ad:bc:61:00:a5:81:50:b2:16:04:e5:f7:5d:a0:64:ee:7b:90: 9c:2c:eb:6e:dd:4f:89:b0:08:79:7e:d4:e8:bd:fa:65:8c:f6: c1:ed:b0:00:7c:bb:d9:22:af:83:5e:05:46:b5:5f:fd:5a:1c: d8:1c:07:20:e5:1a:74:2f:1a:2b:4c:19:85:d1:f6:7e:32:bb: a5:00:5f:ce:79:5b:cd:4d:a0:68:43:6a:6b:76:78:2c:65:f5: 18:74:f3:4c:77:cf:b3:0e:7b:44:0b:f4:7b:16:22:5e:a7:48: a4:72:0c:d7:6a:f8:da:f6:5b:d2:2d:c6:8a:ab:84:be:01:30: 1f:cb:d0:8f:81:a1:f6:a5:9c:43:d3:fc:57:a4:50:f7:68:36: 3d:ce:c7:57:94:a3:99:c6:8e:d5:67:5e:da:a9:e8:aa:61:d2: cc:97:be:68 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICFTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMyMzMxMTAvBgNVBAUTKERCQzIxODQ5QkI0QzE3MDREMjMxOTNDNDFCNzBDNjZC MUE5NjU2MkYwHhcNMjUwNTIyMTcyNzUyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmNWU5Ny02M2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwtUqqni0kOEzJ5SjqD4u+lxxeAK0kqJgGhJ8jlp604um1Wxu7Plru0EQ+Yj c+COI0xpdfkUwzLDi/lTkGnk7DyI1gSfoVDvnJk8m8P02XNvQDB0yaoEX9LfXjAC EVKeq2IdoLGJHDzTQguZHVK3xPkfxJy0cL9muuT8rSGTCs3f3XSWt9ocjzY6yE61 sbZo/5f5D96AxYCnz+RocHxJdpi1q6MvHo2O02n4m0nKez80V3HQNcKyO3COw0bf eXH15W64ygxS3HqKqZUCKjaZHwj7aM/olZPYVGIkx8im5kOFYVu1PISjNg3QfyWs RkTYQ5xsB6bF1qgQEgrj8qvjfQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJ15H8TS 5Driq/KYxIHO4asrfADYMB8GA1UdIwQYMBaAFNvCGEm7TBcE0jGTxBtwxmsallYv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzIzMy8xRkRBRkQ2MjQz RTYxMUU4QkM0MTVGNjVDNEY5QUUwMi8yOElZU2J0TUZ3VFNNWlBFRzNER2F4cVdW aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4SVlTYnRNRndUU01aUEVHM0RHYXhxV1ZpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUMyMzMvMUZEQUZENjI0M0U2MTFFOEJDNDE1RjY1QzRGOUFFMDIvQzM1NUMxMDI0 M0U2MTFFODg0M0I0RTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnceAwDQQCAAIwBwMFACQCxEAwDQYJKoZIhvcNAQELBQAD ggEBAEGBP8tO6Ey1aoKFgH53dVbjj8nzgC8d/ZTqLL2SwP1AhP1DxiFLyjl0Yp4A /SMRt7Tjj2dOuVI+SgbwVq7PuyBkLUyKChKUzBkthY4rA3VninCgFdyaJnicja28 YQClgVCyFgTl912gZO57kJws627dT4mwCHl+1Oi9+mWM9sHtsAB8u9kir4NeBUa1 X/1aHNgcByDlGnQvGitMGYXR9n4yu6UAX855W81NoGhDamt2eCxl9Rh080x3z7MO e0QL9HsWIl6nSKRyDNdq+Nr2W9ItxoqrhL4BMB/L0I+BofalnEPT/FekUPdoNj3O x1eUo5nGjtVnXtqp6Kph0syXvmg= -----END CERTIFICATE-----Generated at Mon Jun 2 06:45:52 2025 by rpki-client