$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/6E32028AD48511EF8239D526C4F9AE02.roa File: 6E32028AD48511EF8239D526C4F9AE02.roa (raw, json) Hash identifier: AA5WeVvXVNFXQwzizIn+RSDzp541QHk6IiOY/0z6xeo= Subject key identifier: 93:D5:8D:50:27:CC:BF:21:70:13:C8:E5:AB:2D:6F:8E:BF:AF:DD:4E Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 0340 Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/6E32028AD48511EF8239D526C4F9AE02.roa Signing time: Sun 11 May 2025 01:07:32 +0000 ROA not before: Sun 11 May 2025 01:07:32 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 153494 IP address blocks: 43.241.152.0/22 maxlen: 24 43.242.44.0/22 maxlen: 24 103.37.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832 (0x340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Validity Not Before: May 11 01:07:32 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681ff854-be37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f8:65:80:ad:04:2c:f7:ab:4d:90:8d:a5:36: a7:7a:ff:ac:bb:9f:24:dc:72:5f:82:93:3d:51:81: e9:b1:6b:f3:d0:ae:cf:11:d3:97:62:24:72:0f:49: a5:7a:14:11:fe:81:a5:2e:12:63:7c:c4:cf:c8:70: 85:82:fc:bc:c1:ac:f0:7b:94:c8:08:71:3c:bc:89: 1a:83:20:51:41:86:b1:11:7c:c7:28:59:ec:62:9a: 5f:24:b9:76:b6:02:5f:20:a4:93:ad:60:44:35:0c: ca:5f:f3:b3:c9:cf:55:e3:de:47:c0:0e:be:41:98: 0c:f9:e8:47:bd:bb:79:45:b2:1d:9b:51:84:f5:8a: ac:1d:e3:85:13:a7:ec:86:a3:5b:a5:90:4b:9c:f6: 59:99:d7:17:a4:b3:05:f3:67:83:69:cb:42:61:af: bd:58:df:7d:a3:95:56:c9:1b:e8:05:0f:5c:71:ce: 7e:21:46:a0:8b:c6:43:83:1c:4a:e4:f9:b9:ab:bc: c4:8b:5c:2f:f6:ce:8a:f4:a9:94:39:84:92:50:68: df:54:5e:d8:23:15:09:1a:37:57:01:37:ed:81:e2: 48:71:79:9c:a0:84:83:1c:cb:4e:e1:ee:a6:f9:25: ca:a2:3a:59:77:98:89:81:41:9e:d6:69:1b:ca:a1: 6b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D5:8D:50:27:CC:BF:21:70:13:C8:E5:AB:2D:6F:8E:BF:AF:DD:4E X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/6E32028AD48511EF8239D526C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.241.152.0/22 43.242.44.0/22 103.37.248.0/22 Signature Algorithm: sha256WithRSAEncryption 17:be:76:98:a3:d6:22:56:37:bc:d2:28:b5:0f:48:57:f5:4b: 86:48:5e:8c:43:4f:eb:7e:2b:69:ee:92:6c:b9:e6:8b:5d:94: 67:c6:95:4c:a5:fc:9a:43:cb:32:1d:76:a6:79:fb:be:2f:e1: 84:73:9e:49:0c:d1:12:49:e2:fe:67:b9:68:94:26:c1:e7:d4: 38:2a:62:3c:03:af:e0:28:f5:26:5c:9f:b1:6a:78:ee:35:66: 78:8f:61:9b:67:04:bd:3b:2d:3f:a8:91:15:d3:be:b9:c2:ca: db:7e:ec:4a:95:e8:90:db:e5:19:14:4e:f3:f2:e2:93:cf:71: a4:dd:4c:ee:10:17:fc:06:42:b1:c6:2a:96:0f:e4:e4:98:cc: 02:d6:a3:09:20:3f:ac:6c:01:60:81:c7:86:b9:bd:b3:3c:49: f8:e3:94:ce:80:cf:96:90:fb:a8:97:fd:5e:3f:98:3c:53:2e: 0e:b4:2a:0a:c9:82:d3:f6:cd:6b:79:fc:f6:34:de:05:dd:a1: 9b:25:7b:c1:ad:52:0e:f2:02:dd:d6:bf:89:59:f3:65:d9:d4: b3:bb:3d:35:3e:c9:16:94:ff:ab:dc:1a:97:c2:41:dd:5c:cd: 9d:45:c6:93:4d:48:a4:fd:84:84:bd:18:37:91:7a:4d:f4:bf: 3c:0f:ab:9e -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjUwNTExMDEwNzMyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFmZjg1NC1iZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPhlgK0ELPerTZCNpTanev+su58k3HJfgpM9UYHpsWvz0K7PEdOXYiRyD0ml ehQR/oGlLhJjfMTPyHCFgvy8wazwe5TICHE8vIkagyBRQYaxEXzHKFnsYppfJLl2 tgJfIKSTrWBENQzKX/Ozyc9V495HwA6+QZgM+ehHvbt5RbIdm1GE9YqsHeOFE6fs hqNbpZBLnPZZmdcXpLMF82eDactCYa+9WN99o5VWyRvoBQ9ccc5+IUagi8ZDgxxK 5Pm5q7zEi1wv9s6K9KmUOYSSUGjfVF7YIxUJGjdXATftgeJIcXmcoISDHMtO4e6m +SXKojpZd5iJgUGe1mkbyqFr1wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFJPVjVAn zL8hcBPI5astb46/r91OMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEZDMkMvQjA0RTkxOUNDNTMzMTFFQzk2REYzMTBGQzRGOUFFMDIvNkUzMjAyOEFE NDg1MTFFRjgyMzlENTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAIr8ZgDBAIr8iwDBAJnJfgwDQYJKoZIhvcNAQELBQADggEB ABe+dpij1iJWN7zSKLUPSFf1S4ZIXoxDT+t+K2nukmy55otdlGfGlUyl/JpDyzId dqZ5+74v4YRznkkM0RJJ4v5nuWiUJsHn1DgqYjwDr+Ao9SZcn7FqeO41ZniPYZtn BL07LT+okRXTvrnCytt+7EqV6JDb5RkUTvPy4pPPcaTdTO4QF/wGQrHGKpYP5OSY zALWowkgP6xsAWCBx4a5vbM8SfjjlM6Az5aQ+6iX/V4/mDxTLg60KgrJgtP2zWt5 /PY03gXdoZsle8GtUg7yAt3Wv4lZ82XZ1LO7PTU+yRaU/6vcGpfCQd1czZ1FxpNN SKT9hIS9GDeRek30vzwPq54= -----END CERTIFICATE-----Generated at Thu May 15 15:31:08 2025 by rpki-client