$ rpki-client -vvf rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/32D8FF34C99E11ED98E9BE5BC4F9AE02.roa File: 32D8FF34C99E11ED98E9BE5BC4F9AE02.roa (raw, json) Hash identifier: 75eZM/Pn5fV11WrvJUnUrFhvKQhEtrEs1POmskjBp6U= Subject key identifier: 80:4B:94:59:8F:2E:46:5B:2E:50:8E:44:E9:58:5B:E9:66:8B:6F:65 Certificate issuer: /CN=A9157031/serialNumber=50E50EDAF64A2C25B731239673D9070F61830279 Certificate serial: 03FC Authority key identifier: 50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/32D8FF34C99E11ED98E9BE5BC4F9AE02.roa Signing time: Thu 03 Jul 2025 01:04:26 +0000 ROA not before: Thu 03 Jul 2025 01:04:26 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149451 IP address blocks: 103.179.181.0/24 maxlen: 24 103.187.68.0/24 maxlen: 24 2001:df0:5240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1020 (0x3fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157031, serialNumber=50E50EDAF64A2C25B731239673D9070F61830279 Validity Not Before: Jul 3 01:04:26 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6865d719-e13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c8:90:73:6a:82:3f:d8:fa:33:fe:93:88:1c: e9:67:29:da:81:fe:ce:13:b3:84:1e:cb:56:59:51: a5:01:e1:6d:2b:19:a5:1f:3d:d3:24:a8:d9:93:bc: dd:0a:a8:c3:f4:13:90:4e:c2:3f:00:4c:37:d3:0b: 23:75:3d:c1:7c:dc:18:9c:5f:ce:95:cd:30:3f:de: 84:e6:03:44:ca:f7:4e:d9:03:78:75:ef:1a:a5:55: d6:d9:f8:b2:ff:b1:f0:ad:59:40:1e:b2:d0:31:43: cd:58:c3:99:38:7d:97:28:45:49:59:de:a4:38:60: 33:e0:6b:0f:ae:c0:a8:f9:85:41:25:08:16:7c:79: 86:6e:fb:ec:79:7a:0e:9d:f7:3a:0c:c4:1b:aa:dc: aa:e3:46:63:b7:0e:a1:86:2b:7c:e3:60:4c:28:8b: 16:e9:00:33:35:b2:23:b7:b7:d7:fa:73:f9:72:a7: 29:b3:e2:99:02:e7:fb:a3:16:b4:2e:2b:e6:ad:7d: ce:e7:27:90:ff:54:35:bc:c7:f8:56:4f:68:38:e9: 63:6e:8e:ae:eb:23:18:09:8e:5b:b2:c7:3f:81:0d: 91:61:ee:82:04:8b:2e:4e:33:0f:19:b5:8a:03:58: 05:29:29:65:34:76:42:c5:2d:d3:3f:61:6b:81:84: 5d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4B:94:59:8F:2E:46:5B:2E:50:8E:44:E9:58:5B:E9:66:8B:6F:65 X509v3 Authority Key Identifier: keyid:50:E5:0E:DA:F6:4A:2C:25:B7:31:23:96:73:D9:07:0F:61:83:02:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/UOUO2vZKLCW3MSOWc9kHD2GDAnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOUO2vZKLCW3MSOWc9kHD2GDAnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157031/7A004F787EC911EC84EC4418C4F9AE02/32D8FF34C99E11ED98E9BE5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.181.0/24 103.187.68.0/24 IPv6: 2001:df0:5240::/48 Signature Algorithm: sha256WithRSAEncryption 4e:36:21:01:28:09:07:47:cb:64:ad:e8:55:ec:d3:94:e3:0d: bb:41:92:a0:77:24:52:58:4c:53:2e:8d:6f:1b:cf:b0:da:45: a1:55:66:7c:2e:f8:32:e9:29:31:0e:ab:21:0f:0f:fe:9d:2f: 12:0c:97:d2:db:02:95:c9:9f:41:1f:ce:f9:9b:4f:13:1a:e4: cd:bd:3e:43:8e:d9:0f:0d:80:7e:2a:f5:d6:22:92:c4:55:cb: 1b:2e:60:a0:3d:ac:e9:ae:0f:89:61:3e:7b:87:14:6c:43:c1: 24:bf:6b:88:d1:65:56:7e:02:3f:ea:60:b0:cc:e3:10:ce:a3: 3a:50:7a:68:1e:40:46:42:21:3b:59:ea:49:90:55:7e:ef:12: a1:ef:0a:f0:4c:42:cb:81:07:48:dd:7d:b5:68:4d:a2:d4:5c: 5d:f3:55:23:07:6a:20:cf:69:ff:73:12:ce:8e:3d:41:1e:54: 0a:52:9c:5d:60:37:74:b0:a3:65:03:b3:42:5b:ec:05:1a:60: 83:f0:b4:5e:28:43:b6:52:8a:47:78:ef:66:5f:1c:6d:a5:85: 09:d4:eb:22:ef:9b:65:db:9a:21:1e:85:73:7d:7b:e5:4c:54: 7f:05:8e:d5:9d:38:17:77:c3:7b:ee:7a:e2:07:06:55:8c:d4: 0b:24:b8:7b -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICA/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTcwMzExMTAvBgNVBAUTKDUwRTUwRURBRjY0QTJDMjVCNzMxMjM5NjczRDkwNzBG NjE4MzAyNzkwHhcNMjUwNzAzMDEwNDI2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1ZDcxOS1lMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysiQc2qCP9j6M/6TiBzpZynagf7OE7OEHstWWVGlAeFtKxmlHz3TJKjZk7zd CqjD9BOQTsI/AEw30wsjdT3BfNwYnF/Olc0wP96E5gNEyvdO2QN4de8apVXW2fiy /7HwrVlAHrLQMUPNWMOZOH2XKEVJWd6kOGAz4GsPrsCo+YVBJQgWfHmGbvvseXoO nfc6DMQbqtyq40Zjtw6hhit842BMKIsW6QAzNbIjt7fX+nP5cqcps+KZAuf7oxa0 LivmrX3O5yeQ/1Q1vMf4Vk9oOOljbo6u6yMYCY5bssc/gQ2RYe6CBIsuTjMPGbWK A1gFKSllNHZCxS3TP2FrgYRdfwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFIBLlFmP LkZbLlCOROlYW+lmi29lMB8GA1UdIwQYMBaAFFDlDtr2SiwltzEjlnPZBw9hgwJ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzAzMS83QTAwNEY3ODdF QzkxMUVDODRFQzQ0MThDNEY5QUUwMi9VT1VPMnZaS0xDVzNNU09XYzlrSEQyR0RB bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPVU8ydlpLTENXM01TT1djOWtIRDJHREFuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTcwMzEvN0EwMDRGNzg3RUM5MTFFQzg0RUM0NDE4QzRGOUFFMDIvMzJEOEZGMzRD OTlFMTFFRDk4RTlCRTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBABns7UDBABnu0QwDwQCAAIwCQMHACABDfBSQDANBgkqhkiG 9w0BAQsFAAOCAQEATjYhASgJB0fLZK3oVezTlOMNu0GSoHckUlhMUy6NbxvPsNpF oVVmfC74MukpMQ6rIQ8P/p0vEgyX0tsClcmfQR/O+ZtPExrkzb0+Q47ZDw2Afir1 1iKSxFXLGy5goD2s6a4PiWE+e4cUbEPBJL9riNFlVn4CP+pgsMzjEM6jOlB6aB5A RkIhO1nqSZBVfu8Soe8K8ExCy4EHSN19tWhNotRcXfNVIwdqIM9p/3MSzo49QR5U ClKcXWA3dLCjZQOzQlvsBRpgg/C0XihDtlKKR3jvZl8cbaWFCdTrIu+bZduaIR6F c3175UxUfwWO1Z04F3fDe+564gcGVYzUCyS4ew== -----END CERTIFICATE-----Generated at Thu Jul 3 02:27:39 2025 by rpki-client