$ rpki-client -vvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/894D6CDE1C3511EFA78E995CC4F9AE02.roa File: 894D6CDE1C3511EFA78E995CC4F9AE02.roa (raw, json) Hash identifier: ZVnbf0eZss/W/BW/uaATqG881vi7quF65kC8w3J0+jw= Subject key identifier: 55:4A:96:16:E0:54:7B:53:EC:81:78:C3:ED:7B:0C:1A:FE:2B:BC:00 Certificate issuer: /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8 Certificate serial: CD Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/894D6CDE1C3511EFA78E995CC4F9AE02.roa Signing time: Wed 07 May 2025 05:12:30 +0000 ROA not before: Wed 07 May 2025 05:12:30 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152708 IP address blocks: 103.40.52.0/23 maxlen: 24 2001:df3:b7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 05:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CFCE, serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8 Validity Not Before: May 7 05:12:30 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681aebbe-4ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:62:fa:e0:75:5a:7a:01:9a:48:54:47:e9: 22:6a:be:fa:e5:a3:bf:d0:82:ee:9f:80:b9:ea:cc: e1:bb:6a:75:b8:bc:5e:dc:47:78:c7:cb:b3:c3:91: e5:46:ef:13:59:a6:47:57:cd:db:0c:84:6e:c8:63: 9d:f1:f2:13:8e:2f:d1:d4:6a:5c:76:c0:cf:76:ca: 41:48:1b:e2:81:2d:69:4f:09:22:6c:b2:c3:5f:7b: 4e:f8:9a:65:5d:da:62:5d:7b:dc:cb:66:9f:8b:e1: 21:3f:8e:cf:30:e5:3f:f9:e1:c7:c7:10:b0:68:56: 36:bb:0f:36:0d:ec:34:2c:51:3d:ee:42:58:3c:f9: 15:58:95:d8:0a:c0:6e:4f:87:c8:e9:34:2f:7a:40: 31:75:fb:11:9d:fc:93:c8:71:f6:b3:fa:fa:57:1f: ba:07:8b:96:a6:77:b6:82:cb:3a:a4:12:a7:5f:4c: 43:89:9d:03:b4:96:f8:f4:c9:e2:92:01:1d:7d:aa: a1:5d:ca:3a:c8:46:4f:b9:5f:6b:81:81:20:fc:0a: 21:f4:19:13:51:98:1d:4b:29:da:65:ea:6f:1e:5e: 26:83:f1:4e:69:79:77:f0:b8:36:2e:29:be:7a:93: 71:d5:11:fe:82:22:1c:15:10:21:b7:8d:b7:a0:a8: f6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4A:96:16:E0:54:7B:53:EC:81:78:C3:ED:7B:0C:1A:FE:2B:BC:00 X509v3 Authority Key Identifier: keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/894D6CDE1C3511EFA78E995CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.40.52.0/23 IPv6: 2001:df3:b7c0::/48 Signature Algorithm: sha256WithRSAEncryption 99:9e:55:1c:c5:64:85:1d:ff:99:73:ac:76:f8:c4:ce:d7:b0: a1:dc:78:75:01:a6:9a:49:3f:12:43:dd:ba:46:04:5b:83:76: 01:a4:c2:13:c5:30:ed:03:e6:35:58:60:82:70:72:17:fe:bc: 34:78:65:6e:d6:b4:f6:7a:85:8c:4b:b4:06:54:3b:b7:67:39: ca:6f:b2:dc:51:c4:24:f5:78:0a:ec:26:24:44:65:f7:79:fa: e6:e6:94:1f:c0:a8:2b:26:eb:ec:18:75:a0:97:06:ef:ec:5b: d5:f5:8c:3e:cf:d1:36:9f:f5:85:69:6b:ad:c7:7d:a9:9b:d6: d2:f7:50:bc:db:eb:50:6a:d4:77:16:74:09:56:3a:0a:9e:0c: 9b:22:90:3e:e2:a8:4b:b3:32:ed:90:7d:be:e9:64:2b:f5:24: bb:96:71:b6:03:ca:f1:63:b3:99:87:c4:77:da:59:10:c5:c0: d4:14:d4:8f:25:7c:dd:a5:51:27:76:99:79:33:96:4c:59:aa: ec:a9:20:5d:78:84:2e:9f:45:47:3c:67:fe:ad:88:47:b0:c2: 5c:07:2e:68:61:79:6b:dc:8e:c6:77:95:6e:1d:db:ec:7f:cf: 57:d9:05:90:c1:d9:dd:d0:f9:0b:bb:f6:d8:32:99:3f:9d:13: 32:09:ae:0c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNGQ0UxMTAvBgNVBAUTKDg2NkU3OEQxQTQ1RThGRDEyNjgwOEFGRjdDRUE0RkMw OEU3RDkyQTgwHhcNMjUwNTA3MDUxMjMwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhZWJiZS00YWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0Ri+uB1WnoBmkhUR+kiar765aO/0ILun4C56szhu2p1uLxe3Ed4x8uzw5Hl Ru8TWaZHV83bDIRuyGOd8fITji/R1GpcdsDPdspBSBvigS1pTwkibLLDX3tO+Jpl XdpiXXvcy2afi+EhP47PMOU/+eHHxxCwaFY2uw82Dew0LFE97kJYPPkVWJXYCsBu T4fI6TQvekAxdfsRnfyTyHH2s/r6Vx+6B4uWpne2gss6pBKnX0xDiZ0DtJb49Mni kgEdfaqhXco6yEZPuV9rgYEg/Aoh9BkTUZgdSynaZepvHl4mg/FOaXl38Lg2Lim+ epNx1RH+giIcFRAht423oKj23wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFVKlhbg VHtT7IF4w+17DBr+K7wAMB8GA1UdIwQYMBaAFIZueNGkXo/RJoCK/3zqT8COfZKo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0ZDRS9FMEJFMzZBQzAy M0YxMUVGOEU1QzFFNThDNEY5QUUwMi9obTU0MGFSZWo5RW1nSXJfZk9wUHdJNTlr cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2htNTQwYVJlajlFbWdJcl9mT3BQd0k1OWtxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNGQ0UvRTBCRTM2QUMwMjNGMTFFRjhFNUMxRTU4QzRGOUFFMDIvODk0RDZDREUx QzM1MTFFRkE3OEU5OTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnKDQwDwQCAAIwCQMHACABDfO3wDANBgkqhkiG9w0BAQsF AAOCAQEAmZ5VHMVkhR3/mXOsdvjEztewodx4dQGmmkk/EkPdukYEW4N2AaTCE8Uw 7QPmNVhggnByF/68NHhlbta09nqFjEu0BlQ7t2c5ym+y3FHEJPV4CuwmJERl93n6 5uaUH8CoKybr7Bh1oJcG7+xb1fWMPs/RNp/1hWlrrcd9qZvW0vdQvNvrUGrUdxZ0 CVY6Cp4MmyKQPuKoS7My7ZB9vulkK/Uku5ZxtgPK8WOzmYfEd9pZEMXA1BTUjyV8 3aVRJ3aZeTOWTFmq7KkgXXiELp9FRzxn/q2IR7DCXAcuaGF5a9yOxneVbh3b7H/P V9kFkMHZ3dD5C7v22DKZP50TMgmuDA== -----END CERTIFICATE-----Generated at Sat May 17 13:32:48 2025 by rpki-client