$ rpki-client -vvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C08B23401DA511EBAD78BB46C4F9AE02.roa File: C08B23401DA511EBAD78BB46C4F9AE02.roa (raw, json) Hash identifier: mbwHGhtZC2TCJmz+QPwmy+4qyopASkQ/h0BJkTgUJs4= Subject key identifier: E5:95:FD:65:8E:EB:7C:FA:68:99:69:A6:EF:37:93:C5:B0:9E:37:37 Certificate issuer: /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E Certificate serial: 0764 Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C08B23401DA511EBAD78BB46C4F9AE02.roa Signing time: Mon 28 Apr 2025 22:32:08 +0000 ROA not before: Mon 28 Apr 2025 22:32:08 +0000 ROA not after: Thu 28 Aug 2025 00:00:00 +0000 asID: 139027 IP address blocks: 103.138.168.0/22 maxlen: 24 2404:d1c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1892 (0x764) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E Validity Not Before: Apr 28 22:32:08 2025 GMT Not After : Aug 28 00:00:00 2025 GMT Subject: CN=681001e8-b745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c6:92:06:d8:e2:8d:b1:0e:45:06:9d:3f:fd: 90:50:79:a3:b6:52:65:56:d5:a8:71:90:0b:b6:eb: 9a:54:e1:1f:1b:aa:cf:23:70:b1:61:c9:f9:d0:56: 91:bf:e9:99:44:af:ce:bc:c7:ae:0b:f3:4d:65:f3: 0a:5d:9b:c1:87:26:64:72:d6:2e:98:d5:61:7d:bd: 28:4e:17:36:26:7d:58:e1:2f:46:12:33:b3:d1:82: a7:eb:9b:ee:ae:aa:c4:d4:0e:b7:86:c6:b0:21:34: 37:2a:d1:15:ad:95:ca:34:a9:25:71:d4:dd:e5:06: 36:f5:44:79:43:87:c2:85:14:7f:9b:0f:35:c0:e2: 41:2d:a4:56:22:e3:e8:8a:6c:fc:6d:f0:f8:97:7c: 6b:41:a1:58:25:0b:f7:72:35:ac:2d:a0:ff:44:ea: b9:1d:1a:59:b3:1d:2d:74:dc:3c:13:cd:db:93:17: 8b:51:24:d7:3a:3d:da:ea:ed:34:8a:d6:04:b2:c0: 75:74:1b:11:8e:ec:e2:8a:0e:86:2a:2c:ce:d3:82: 67:42:0a:2b:be:bc:87:f0:a2:86:27:92:96:44:2d: 3e:a0:e2:7b:0a:c3:2c:80:d4:5d:7a:25:ea:96:db: 5b:e2:c2:1d:b5:88:3d:dd:13:dc:ac:b1:4d:e5:ce: 78:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:95:FD:65:8E:EB:7C:FA:68:99:69:A6:EF:37:93:C5:B0:9E:37:37 X509v3 Authority Key Identifier: keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C08B23401DA511EBAD78BB46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.168.0/22 IPv6: 2404:d1c0::/32 Signature Algorithm: sha256WithRSAEncryption 1f:1c:bd:b2:a5:26:b8:52:cc:80:69:4d:e0:1f:d6:0d:bb:48: cc:6c:c0:f7:00:c5:ac:03:71:3b:39:24:d6:ff:7d:ad:10:66: 02:4a:69:45:5d:27:d3:15:3d:2b:8e:9f:fb:0d:c2:19:0f:80: 33:94:93:6d:36:02:25:13:24:62:35:ac:14:3d:bb:35:f4:5a: 74:54:df:72:7d:83:a2:e5:93:55:4e:a9:7d:f2:16:c0:0a:2f: 7f:9c:5f:15:13:d0:1e:0e:6d:72:ce:e1:8d:a4:48:74:90:8d: 5f:3a:a8:06:a0:31:5a:0b:48:90:c7:5a:b6:68:62:87:e9:8a: dd:bd:21:07:0d:ef:b1:88:77:f2:b4:ce:cb:a0:8a:92:87:49: 6b:76:18:2e:9b:20:e5:74:f1:57:aa:b3:00:de:98:cf:b3:96: da:4a:20:4d:4e:07:04:8a:87:a5:d5:ca:f8:07:fb:f1:11:1d: 9c:8b:de:b2:6b:6e:9f:28:ca:53:bf:47:b8:c3:e3:e8:53:0b: 39:28:84:12:e0:f3:ef:fd:21:d5:05:f2:66:cc:33:65:38:de: dd:b6:0d:7f:15:c6:29:ea:8e:8d:1b:f5:44:57:20:5d:e5:4a: 4a:b3:79:8a:9f:0b:fd:5c:ea:8b:ea:6b:2c:f1:80:e0:bc:55: 6d:75:98:7e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3NUIxMTAvBgNVBAUTKEUyNjY1RUUzNjJFNUNDNThGN0Q2N0Y0QTZCNzYyMUFB NDYwQkQzOEUwHhcNMjUwNDI4MjIzMjA4WhcNMjUwODI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODEwMDFlOC1iNzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsaSBtjijbEORQadP/2QUHmjtlJlVtWocZALtuuaVOEfG6rPI3CxYcn50FaR v+mZRK/OvMeuC/NNZfMKXZvBhyZkctYumNVhfb0oThc2Jn1Y4S9GEjOz0YKn65vu rqrE1A63hsawITQ3KtEVrZXKNKklcdTd5QY29UR5Q4fChRR/mw81wOJBLaRWIuPo imz8bfD4l3xrQaFYJQv3cjWsLaD/ROq5HRpZsx0tdNw8E83bkxeLUSTXOj3a6u00 itYEssB1dBsRjuziig6GKizO04JnQgorvryH8KKGJ5KWRC0+oOJ7CsMsgNRdeiXq lttb4sIdtYg93RPcrLFN5c54nwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOWV/WWO 63z6aJlppu83k8Wwnjc3MB8GA1UdIwQYMBaAFOJmXuNi5cxY99Z/Smt2IapGC9OO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjc1Qi81Njc2OUEzMDFE QTQxMUVCQjQxNjNBNDVDNEY5QUUwMi80bVplNDJMbHpGajMxbjlLYTNZaHFrWUww NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRtWmU0MkxsekZqMzFuOUthM1locWtZTDA0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjY3NUIvNTY3NjlBMzAxREE0MTFFQkI0MTYzQTQ1QzRGOUFFMDIvQzA4QjIzNDAx REE1MTFFQkFENzhCQjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJniqgwDQQCAAIwBwMFACQE0cAwDQYJKoZIhvcNAQELBQAD ggEBAB8cvbKlJrhSzIBpTeAf1g27SMxswPcAxawDcTs5JNb/fa0QZgJKaUVdJ9MV PSuOn/sNwhkPgDOUk202AiUTJGI1rBQ9uzX0WnRU33J9g6Llk1VOqX3yFsAKL3+c XxUT0B4ObXLO4Y2kSHSQjV86qAagMVoLSJDHWrZoYofpit29IQcN77GId/K0zsug ipKHSWt2GC6bIOV08VeqswDemM+zltpKIE1OBwSKh6XVyvgH+/ERHZyL3rJrbp8o ylO/R7jD4+hTCzkohBLg8+/9IdUF8mbMM2U43t22DX8Vxinqjo0b9URXIF3lSkqz eYqfC/1c6ovqayzxgOC8VW11mH4= -----END CERTIFICATE-----Generated at Fri May 16 00:13:36 2025 by rpki-client