$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/80FAEBF40A7211EE8FA2CD58C4F9AE02.roa File: 80FAEBF40A7211EE8FA2CD58C4F9AE02.roa (raw, json) Hash identifier: WDSwUUykhbhAxxbv9iCi9Fk3ZDrF3qOJ7ivVqhernd0= Subject key identifier: 3B:CF:3A:02:81:60:64:9D:BB:2F:5F:8F:33:75:39:28:8E:B4:67:82 Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Certificate serial: 036E Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/80FAEBF40A7211EE8FA2CD58C4F9AE02.roa Signing time: Thu 01 May 2025 00:36:47 +0000 ROA not before: Thu 01 May 2025 00:36:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64073 IP address blocks: 103.185.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 878 (0x36e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Validity Not Before: May 1 00:36:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6812c21e-cfbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2c:55:4a:16:a4:46:85:e7:47:9e:c2:15:17: d3:7e:bb:bf:29:b9:c6:8e:18:1c:b7:dd:fa:25:7c: 82:5f:45:39:3e:4b:2a:6c:bd:d3:12:eb:05:2e:a7: 4a:e7:5f:f9:68:72:27:e5:5e:02:a5:af:3e:1d:8f: b1:82:2f:b4:4c:5b:81:df:c4:77:5a:c3:0e:20:e6: 66:a1:91:36:b4:a2:60:fa:73:e3:be:f4:f6:a6:df: d8:0f:b3:92:e6:8a:4e:1c:ad:1b:b6:06:02:5d:ae: 0e:20:62:24:6d:8f:93:b0:08:2d:ee:f4:73:6e:f6: 5e:db:91:ad:59:0f:60:92:2d:e3:ec:9c:f1:72:c1: 40:bd:71:d8:41:1e:6c:ce:3f:b5:a6:2c:0e:7d:8f: 3b:b8:44:cd:fb:87:44:35:12:52:67:87:74:b6:10: 73:97:0f:e6:52:84:3a:d4:6a:33:0a:87:51:23:85: 6a:d7:d9:52:11:3e:ef:90:5c:9e:a6:9b:70:76:1c: c5:80:13:45:ed:b1:6d:ef:b0:a0:7f:a2:76:91:c3: 8c:c6:fa:fd:b8:21:36:4d:da:3a:55:bb:30:dd:6c: e4:9f:61:72:f5:e2:8e:5b:45:5a:c0:4e:cc:db:ad: 13:71:da:4a:a4:d8:f6:dc:65:fa:a4:0b:24:8c:3c: c2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CF:3A:02:81:60:64:9D:BB:2F:5F:8F:33:75:39:28:8E:B4:67:82 X509v3 Authority Key Identifier: keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/80FAEBF40A7211EE8FA2CD58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.185.23.0/24 Signature Algorithm: sha256WithRSAEncryption 13:09:ab:31:35:c1:95:b5:42:fa:eb:74:1b:b5:e1:f6:16:2a: 9d:ab:b1:36:df:05:a7:b1:cc:bf:ae:9a:65:67:76:21:2b:e7: 47:99:7d:c3:42:33:d8:f1:45:2b:05:1b:99:81:fa:e5:e8:ce: ed:8d:46:4d:96:2a:64:ca:d9:b4:ca:26:39:02:50:07:1e:f2: 2f:b1:94:44:93:db:9e:a5:39:7b:7f:46:76:bd:a9:2d:da:82: 58:2d:23:bf:4c:52:a1:27:bd:09:17:c4:76:24:f6:91:3e:b8: 7c:cd:a4:23:11:a9:13:19:34:9f:95:fc:6f:9a:0b:ee:4c:b6: 46:3d:7a:88:b9:e0:e8:ef:4f:3a:7c:63:da:42:86:7e:a6:ee: 87:c1:59:77:38:86:09:cc:e9:f5:5c:c4:42:2d:19:36:e2:5f: 45:18:5d:26:d5:10:50:25:2b:dc:f6:cb:fa:e9:63:4e:18:74: cd:20:04:96:b6:8a:4a:d5:fc:7e:76:08:ee:c8:cf:51:d8:9f: db:8d:41:ef:8d:ee:23:ec:1d:76:b9:96:ca:95:3f:aa:75:19: 18:d8:05:d7:67:50:46:48:95:ef:cc:d9:62:28:3a:fc:20:0b: 99:86:c0:f5:f9:39:11:c5:fb:a6:5f:5f:4c:7e:20:3e:b1:97: fb:ce:f9:70 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4MjYxMTAvBgNVBAUTKDNEMkNDQzkxODM3NDREQzY5NkE4NTU2QkNCOTA0Mzg0 OEU5NURGNzAwHhcNMjUwNTAxMDAzNjQ2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyYzIxZS1jZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwixVShakRoXnR57CFRfTfru/KbnGjhgct936JXyCX0U5PksqbL3TEusFLqdK 51/5aHIn5V4Cpa8+HY+xgi+0TFuB38R3WsMOIOZmoZE2tKJg+nPjvvT2pt/YD7OS 5opOHK0btgYCXa4OIGIkbY+TsAgt7vRzbvZe25GtWQ9gki3j7JzxcsFAvXHYQR5s zj+1piwOfY87uETN+4dENRJSZ4d0thBzlw/mUoQ61GozCodRI4Vq19lSET7vkFye pptwdhzFgBNF7bFt77Cgf6J2kcOMxvr9uCE2Tdo6Vbsw3Wzkn2Fy9eKOW0VawE7M 260TcdpKpNj23GX6pAskjDzCJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDvPOgKB YGSduy9fjzN1OSiOtGeCMB8GA1UdIwQYMBaAFD0szJGDdE3GlqhVa8uQQ4SOld9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDgyNi9DRjRFMUQ3NEFF NEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRjYVdxRlZyeTVCRGhJNlYz M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTek1rWU4wVGNhV3FGVnJ5NUJEaEk2VjMzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQ4MjYvQ0Y0RTFENzRBRTRBMTFFQzg0NkYzRjY4QzRGOUFFMDIvODBGQUVCRjQw QTcyMTFFRThGQTJDRDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnuRcwDQYJKoZIhvcNAQELBQADggEBABMJqzE1wZW1Qvrr dBu14fYWKp2rsTbfBaexzL+ummVndiEr50eZfcNCM9jxRSsFG5mB+uXozu2NRk2W KmTK2bTKJjkCUAce8i+xlEST256lOXt/Rna9qS3aglgtI79MUqEnvQkXxHYk9pE+ uHzNpCMRqRMZNJ+V/G+aC+5MtkY9eoi54OjvTzp8Y9pChn6m7ofBWXc4hgnM6fVc xEItGTbiX0UYXSbVEFAlK9z2y/rpY04YdM0gBJa2ikrV/H52CO7Iz1HYn9uNQe+N 7iPsHXa5lsqVP6p1GRjYBddnUEZIle/M2WIoOvwgC5mGwPX5ORHF+6ZfX0x+ID6x l/vO+XA= -----END CERTIFICATE-----Generated at Wed May 14 10:42:08 2025 by rpki-client