$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/2D5E84AAC2A911EBB2025B36C4F9AE02.roa File: 2D5E84AAC2A911EBB2025B36C4F9AE02.roa (raw, json) Hash identifier: dCkT6bEicYFMQep7850krPGfdcTTuO3WSPylF2CQFFU= Subject key identifier: 95:B3:35:BA:EE:D9:BA:89:98:FE:23:C9:6D:09:4E:3A:5C:78:B7:67 Certificate issuer: /CN=A911C28A/serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2 Certificate serial: 05BB Authority key identifier: 23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/2D5E84AAC2A911EBB2025B36C4F9AE02.roa Signing time: Fri 02 May 2025 23:34:17 +0000 ROA not before: Fri 02 May 2025 23:34:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142131 IP address blocks: 103.166.179.0/24 maxlen: 24 103.168.176.0/24 maxlen: 24 2001:df6:9680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 22:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1467 (0x5bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28A, serialNumber=23DB3323DD2CD79C3738581D42F4AB0F498834C2 Validity Not Before: May 2 23:34:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68155678-dd6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7d:08:d6:51:78:77:b2:2e:f9:4f:54:e2:ba: 4e:5a:30:af:86:77:4f:9c:7b:e1:40:82:e5:a3:10: 37:5b:36:12:17:88:6c:c4:5b:44:9f:f0:60:19:b5: da:e2:c2:d0:90:19:33:ea:a6:a9:76:7f:a1:53:d8: ab:ae:65:d4:49:57:7f:c5:ab:e0:a2:3a:be:dd:f5: c2:e3:83:7c:a0:d4:83:48:24:07:d6:fd:64:49:86: f6:1f:5b:eb:8c:8d:ca:1c:8f:7f:a6:59:43:cb:10: 58:69:32:75:74:20:71:43:27:41:4e:37:bb:3a:07: b5:c5:cb:0e:f6:4e:99:13:71:ff:cb:63:b0:87:64: 9c:de:d4:76:9e:b8:f7:7d:ae:53:cf:68:65:30:25: 91:6b:7e:09:2d:3f:ae:d5:14:87:73:99:f5:8e:a3: 2e:1d:6e:61:77:fc:fd:9b:75:80:ff:c7:30:32:19: 4a:b0:23:d4:c9:09:b9:b5:91:ea:f5:fb:7b:91:70: d8:81:03:34:25:2e:12:7f:27:e2:01:e6:b4:9f:f8: be:41:7e:71:49:9f:d1:de:c5:5c:38:35:c9:68:89: 3f:c9:5f:79:a9:64:af:d9:c3:25:c7:83:93:66:74: 20:e6:62:8a:e6:d5:e2:6e:08:b0:08:38:64:45:c7: a6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B3:35:BA:EE:D9:BA:89:98:FE:23:C9:6D:09:4E:3A:5C:78:B7:67 X509v3 Authority Key Identifier: keyid:23:DB:33:23:DD:2C:D7:9C:37:38:58:1D:42:F4:AB:0F:49:88:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/I9szI90s15w3OFgdQvSrD0mINMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9szI90s15w3OFgdQvSrD0mINMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28A/2A3566A8C2A511EBB4D34E35C4F9AE02/2D5E84AAC2A911EBB2025B36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.179.0/24 103.168.176.0/24 IPv6: 2001:df6:9680::/48 Signature Algorithm: sha256WithRSAEncryption 41:65:10:ff:55:1a:c6:e8:6d:9a:c9:30:51:06:c5:2a:29:0a: 39:5a:80:a9:be:17:ab:33:b0:6f:cc:ee:ef:1d:a3:24:2d:3a: 98:99:19:f5:17:99:44:29:b3:59:a0:80:11:2b:3f:c9:97:f7: 00:28:32:e4:22:5f:98:18:8d:ba:02:02:29:01:cc:1e:56:02: 1d:af:1d:97:29:d3:7c:03:15:b8:5f:24:9a:cb:65:42:0e:3d: 9b:41:b2:02:9b:74:2d:f7:ab:24:3f:5f:3e:6d:a1:24:30:96: 42:e3:71:2f:93:0f:08:1f:7b:9f:13:65:5b:ce:af:76:40:ec: ae:07:10:98:0e:6f:6c:50:65:d6:55:ed:a6:18:96:39:c9:53: cd:89:d3:31:28:df:85:ff:8f:22:b7:50:30:66:4f:c4:52:45: ee:ec:33:22:3d:ae:17:23:48:bc:8b:7d:8a:4f:c3:91:25:fe: c5:a0:e2:11:b6:14:e5:e6:f9:5a:d1:d4:d9:01:24:cd:c0:7e: 62:80:4e:03:49:4b:a0:b0:b5:64:2d:f5:d2:db:c7:b8:47:96: df:0c:48:91:5c:14:ef:db:3a:c4:fe:7a:a8:b9:b8:3f:c5:e4: 09:e5:84:b6:7a:8b:87:2f:96:60:9f:20:9a:67:1b:3c:f6:b8: 61:9a:e2:a3 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICBbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEExMTAvBgNVBAUTKDIzREIzMzIzREQyQ0Q3OUMzNzM4NTgxRDQyRjRBQjBG NDk4ODM0QzIwHhcNMjUwNTAyMjMzNDE3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1NTY3OC1kZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq30I1lF4d7Iu+U9U4rpOWjCvhndPnHvhQILloxA3WzYSF4hsxFtEn/BgGbXa 4sLQkBkz6qapdn+hU9irrmXUSVd/xavgojq+3fXC44N8oNSDSCQH1v1kSYb2H1vr jI3KHI9/pllDyxBYaTJ1dCBxQydBTje7Oge1xcsO9k6ZE3H/y2Owh2Sc3tR2nrj3 fa5Tz2hlMCWRa34JLT+u1RSHc5n1jqMuHW5hd/z9m3WA/8cwMhlKsCPUyQm5tZHq 9ft7kXDYgQM0JS4SfyfiAea0n/i+QX5xSZ/R3sVcODXJaIk/yV95qWSv2cMlx4OT ZnQg5mKK5tXibgiwCDhkRcemXwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJWzNbru 2bqJmP4jyW0JTjpceLdnMB8GA1UdIwQYMBaAFCPbMyPdLNecNzhYHUL0qw9JiDTC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4QS8yQTM1NjZBOEMy QTUxMUVCQjREMzRFMzVDNEY5QUUwMi9JOXN6STkwczE1dzNPRmdkUXZTckQwbUlO TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5c3pJOTBzMTV3M09GZ2RRdlNyRDBtSU5NSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEEvMkEzNTY2QThDMkE1MTFFQkI0RDM0RTM1QzRGOUFFMDIvMkQ1RTg0QUFD MkE5MTFFQkIyMDI1QjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABnprMDBABnqLAwDwQCAAIwCQMHACABDfaWgDANBgkqhkiG 9w0BAQsFAAOCAQEAQWUQ/1UaxuhtmskwUQbFKikKOVqAqb4XqzOwb8zu7x2jJC06 mJkZ9ReZRCmzWaCAESs/yZf3ACgy5CJfmBiNugICKQHMHlYCHa8dlynTfAMVuF8k mstlQg49m0GyApt0LferJD9fPm2hJDCWQuNxL5MPCB97nxNlW86vdkDsrgcQmA5v bFBl1lXtphiWOclTzYnTMSjfhf+PIrdQMGZPxFJF7uwzIj2uFyNIvIt9ik/DkSX+ xaDiEbYU5eb5WtHU2QEkzcB+YoBOA0lLoLC1ZC310tvHuEeW3wxIkVwU79s6xP56 qLm4P8XkCeWEtnqLhy+WYJ8gmmcbPPa4YZriow== -----END CERTIFICATE-----Generated at Wed May 7 22:02:30 2025 by rpki-client