$ rpki-client -vvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/658CF9F2721411EEAC707910C4F9AE02.roa File: 658CF9F2721411EEAC707910C4F9AE02.roa (raw, json) Hash identifier: q+T3C3H2UjoBgZcZ1La6G7C0poZwdj+81El+MVIEtoY= Subject key identifier: 5F:AC:E1:B0:EF:8B:0D:04:7F:B6:A2:80:74:B1:4B:63:98:81:05:45 Certificate issuer: /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566 Certificate serial: 012C Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/658CF9F2721411EEAC707910C4F9AE02.roa Signing time: Sat 17 May 2025 04:24:19 +0000 ROA not before: Sat 17 May 2025 04:24:19 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 8220 IP address blocks: 103.138.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D313, serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566 Validity Not Before: May 17 04:24:19 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68280f73-4af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0f:40:02:4f:0b:0b:ec:2c:8a:69:55:85:c7: 88:f2:e4:1d:f4:cb:6e:89:f1:c6:ce:3c:8d:70:2e: e3:2c:7a:a6:b6:47:78:c2:58:12:bf:be:2d:05:78: fe:82:15:3a:16:f7:41:70:1c:df:18:df:1a:34:af: fc:1a:79:0e:5e:8d:25:dd:62:37:f0:f5:b7:99:44: 85:15:22:d9:43:8a:cc:45:fe:a8:6c:14:7b:21:2e: 81:6b:33:58:7b:75:be:e0:8b:2e:38:fc:c1:d5:be: a1:c3:b4:e2:01:b5:ba:a7:d0:68:c4:d9:9c:a6:7c: 7f:99:d9:79:61:30:b4:e3:58:02:24:6b:4a:53:6e: ae:c4:ae:d5:3b:e6:d1:e2:56:50:33:bb:23:cb:72: b5:23:c1:59:f6:2d:85:82:61:b1:92:45:02:5a:b7: c1:85:ba:81:93:3c:e5:90:a1:f7:12:00:30:64:ca: d5:70:2f:01:03:8c:ba:eb:44:2f:4b:9a:47:a0:b1: 64:75:a2:d9:16:1e:db:87:84:4d:2b:21:aa:44:02: 51:33:c5:cd:89:42:9d:f7:01:fe:cf:37:23:e8:8c: 4f:f7:d0:4a:15:f8:bf:1e:f6:22:6a:da:e5:9f:24: a1:8e:9b:0e:ce:e9:ae:07:15:8c:7c:f7:a0:df:ea: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AC:E1:B0:EF:8B:0D:04:7F:B6:A2:80:74:B1:4B:63:98:81:05:45 X509v3 Authority Key Identifier: keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/658CF9F2721411EEAC707910C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.100.0/22 Signature Algorithm: sha256WithRSAEncryption aa:5f:75:c7:ad:54:0c:b7:34:fc:66:5e:2e:ac:bb:1a:fa:ce: a6:75:c4:40:16:5c:a9:6b:33:38:5f:c8:ce:73:8b:f7:7c:08: 9d:5b:0f:ba:34:b9:fa:6c:cc:fc:19:31:2e:e0:54:8a:cb:0b: db:5c:df:54:f5:a8:5f:80:31:1a:f7:84:98:04:63:58:59:2b: 1a:b4:0f:ca:cb:3c:f4:b8:56:7f:1c:ec:c7:00:88:f2:5d:15: 7a:17:7a:ca:e4:7e:09:01:61:39:62:4d:3a:f9:37:83:41:ad: 3b:c5:1e:c9:f8:db:ce:c7:f6:58:9f:81:e2:7b:8b:0c:13:c8: 50:c0:c5:db:36:7c:64:2f:90:a0:02:72:65:a1:06:f0:98:37: 2e:87:4f:00:62:dc:80:92:d4:12:5d:9c:73:9d:27:c1:67:73: 6b:7c:ba:ef:ae:23:da:48:3f:c5:61:1a:19:c5:4f:47:44:e7: b6:3c:ce:c1:95:a6:a8:a1:97:40:36:e9:64:35:f8:3e:31:b9: c5:cd:31:6c:e8:44:63:d9:2c:51:52:51:22:7a:ea:5a:26:cc: 4d:08:8f:82:4b:73:06:8b:65:b3:96:f3:d5:3e:35:48:4b:7b: 07:1e:63:9a:3c:63:8c:e4:cf:2e:c2:28:fe:20:60:c4:96:14: 7c:3e:ac:8e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzMTMxMTAvBgNVBAUTKEUxM0M0NzRERDQ0NTcxQThDRUY0MDY2OTRFMDRBRDZB QzYxQjI1NjYwHhcNMjUwNTE3MDQyNDE5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI4MGY3My00YWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Q9AAk8LC+wsimlVhceI8uQd9MtuifHGzjyNcC7jLHqmtkd4wlgSv74tBXj+ ghU6FvdBcBzfGN8aNK/8GnkOXo0l3WI38PW3mUSFFSLZQ4rMRf6obBR7IS6BazNY e3W+4IsuOPzB1b6hw7TiAbW6p9BoxNmcpnx/mdl5YTC041gCJGtKU26uxK7VO+bR 4lZQM7sjy3K1I8FZ9i2FgmGxkkUCWrfBhbqBkzzlkKH3EgAwZMrVcC8BA4y660Qv S5pHoLFkdaLZFh7bh4RNKyGqRAJRM8XNiUKd9wH+zzcj6IxP99BKFfi/HvYiatrl nyShjpsOzumuBxWMfPeg3+rKaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFF+s4bDv iw0Ef7aigHSxS2OYgQVFMB8GA1UdIwQYMBaAFOE8R03URXGozvQGaU4ErWrGGyVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDMxMy8wRjIwNzk3NjZF RjUxMUVFODREQTY5ODJDNEY5QUUwMi80VHhIVGRSRmNhak85QVpwVGdTdGFzWWJK V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRUeEhUZFJGY2FqTzlBWnBUZ1N0YXNZYkpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQzMTMvMEYyMDc5NzY2RUY1MTFFRTg0REE2OTgyQzRGOUFFMDIvNjU4Q0Y5RjI3 MjE0MTFFRUFDNzA3OTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnimQwDQYJKoZIhvcNAQELBQADggEBAKpfdcetVAy3NPxm Xi6suxr6zqZ1xEAWXKlrMzhfyM5zi/d8CJ1bD7o0ufpszPwZMS7gVIrLC9tc31T1 qF+AMRr3hJgEY1hZKxq0D8rLPPS4Vn8c7McAiPJdFXoXesrkfgkBYTliTTr5N4NB rTvFHsn4287H9lifgeJ7iwwTyFDAxds2fGQvkKACcmWhBvCYNy6HTwBi3ICS1BJd nHOdJ8Fnc2t8uu+uI9pIP8VhGhnFT0dE57Y8zsGVpqihl0A26WQ1+D4xucXNMWzo RGPZLFFSUSJ66lomzE0Ij4JLcwaLZbOW89U+NUhLewceY5o8Y4zkzy7CKP4gYMSW FHw+rI4= -----END CERTIFICATE-----Generated at Wed Jun 4 00:02:44 2025 by rpki-client