$ rpki-client -vvf rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/500ACD668F7311EF9A3C6933C4F9AE02.roa File: 500ACD668F7311EF9A3C6933C4F9AE02.roa (raw, json) Hash identifier: VIgdVzi8gWFo+DLBgza5aP4IxE2OBvQtkB1gTHVVzIY= Subject key identifier: 5C:FF:D0:75:BE:E4:74:40:A0:03:7C:82:C7:04:BE:4C:12:3A:D0:50 Certificate issuer: /CN=A915FCB7/serialNumber=F371AFDB402A3B5C351DACA6B2CE0F4A4D1A8380 Certificate serial: 7B Authority key identifier: F3:71:AF:DB:40:2A:3B:5C:35:1D:AC:A6:B2:CE:0F:4A:4D:1A:83:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83Gv20AqO1w1Haymss4PSk0ag4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/500ACD668F7311EF9A3C6933C4F9AE02.roa Signing time: Sat 07 Jun 2025 06:36:42 +0000 ROA not before: Sat 07 Jun 2025 06:36:42 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142118 IP address blocks: 103.166.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.crl rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83Gv20AqO1w1Haymss4PSk0ag4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FCB7, serialNumber=F371AFDB402A3B5C351DACA6B2CE0F4A4D1A8380 Validity Not Before: Jun 7 06:36:42 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6843ddfa-9538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:81:9d:e3:dc:b5:0b:8c:fb:4b:e1:35:1d:5f: e4:55:a6:fa:1b:61:85:65:c9:ee:99:97:1a:d7:98: 2f:47:c7:72:f1:90:78:5f:cf:a9:c8:6b:15:75:8b: d1:35:2a:cb:c6:0f:7c:b3:87:da:2b:31:6f:62:2f: 5b:73:88:2d:cc:da:b4:f6:1b:1b:85:e7:dc:2c:31: 37:d2:de:c9:83:79:98:23:2e:d5:86:ca:ff:73:c1: 54:ec:99:59:17:bd:d6:a6:0e:2e:23:05:88:df:d2: 70:6f:d9:16:e7:11:bc:6b:00:29:11:e4:dc:6b:f5: 96:ad:e3:47:49:90:a5:39:d9:a9:aa:13:7a:3b:2d: b0:d5:d2:91:cc:84:56:8c:86:ab:19:2a:7e:c1:3d: 58:50:b7:e9:ab:bb:d0:4f:b4:c6:b7:8a:ab:9d:57: b3:fb:cf:fb:fa:86:b3:2a:82:79:86:18:88:30:ff: 15:9f:20:c7:dc:13:e7:6c:b3:4d:2a:03:99:6a:e7: 06:3e:de:ae:f0:89:4c:1f:37:9c:6c:7b:9b:7b:3c: 2b:bb:0a:07:a8:4c:dd:93:e9:13:aa:c2:f2:4e:57: 4c:49:56:4c:a1:cc:63:a8:68:f1:2f:d3:0c:17:31: 39:ad:4b:67:c9:90:5f:6b:33:56:b5:54:f2:da:61: 8b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FF:D0:75:BE:E4:74:40:A0:03:7C:82:C7:04:BE:4C:12:3A:D0:50 X509v3 Authority Key Identifier: keyid:F3:71:AF:DB:40:2A:3B:5C:35:1D:AC:A6:B2:CE:0F:4A:4D:1A:83:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/83Gv20AqO1w1Haymss4PSk0ag4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83Gv20AqO1w1Haymss4PSk0ag4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FCB7/6F4B32168F7211EFB75B1030C4F9AE02/500ACD668F7311EF9A3C6933C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.128.0/23 Signature Algorithm: sha256WithRSAEncryption 62:78:a3:25:0b:b6:8c:6e:ca:d7:81:03:08:c6:32:7c:a5:f2: cc:8c:d5:75:a2:b6:59:2f:45:3d:50:b9:31:6b:81:b4:fc:01: 4f:c4:f9:94:99:a6:b6:78:af:27:8f:37:fc:c1:8c:50:e3:69: e9:09:47:5b:d1:de:cb:43:6b:be:18:e8:ac:6a:61:b4:7f:a5: 8b:fd:fb:34:19:97:a9:19:fc:49:43:da:dd:a8:a3:ed:bb:91: 73:1f:7c:d2:5a:34:6f:f1:b5:75:f9:55:6e:6e:10:9c:56:93: b8:60:c4:f2:68:93:9e:7f:7d:e4:b8:0f:72:7f:0c:c5:04:99: 64:f0:b8:0c:83:c1:a0:40:78:22:1a:31:53:8f:52:1f:5f:03: 7f:29:5c:8f:1d:89:25:95:21:72:29:b7:97:6d:1e:68:88:ad: 12:e1:54:e9:d3:33:10:29:1a:a2:18:a2:f3:59:6d:68:48:28: 2b:1d:c2:a1:4b:9f:73:40:6c:1f:f7:42:ee:0c:ab:e3:22:96: a2:c0:1d:29:f2:f5:5a:86:1a:a4:10:07:5f:fa:ce:57:0b:6c: 92:3e:a8:51:77:a3:ca:aa:d0:10:46:84:c8:9f:de:1e:7d:c9: 03:9f:51:c2:e0:40:35:07:81:dd:06:39:58:73:51:aa:3d:66: cf:c0:a7:88 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkNCNzExMC8GA1UEBRMoRjM3MUFGREI0MDJBM0I1QzM1MURBQ0E2QjJDRTBGNEE0 RDFBODM4MDAeFw0yNTA2MDcwNjM2NDJaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NDNkZGZhLTk1MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcgZ3j3LULjPtL4TUdX+RVpvobYYVlye6ZlxrXmC9Hx3LxkHhfz6nIaxV1i9E1 KsvGD3yzh9orMW9iL1tziC3M2rT2GxuF59wsMTfS3smDeZgjLtWGyv9zwVTsmVkX vdamDi4jBYjf0nBv2RbnEbxrACkR5Nxr9Zat40dJkKU52amqE3o7LbDV0pHMhFaM hqsZKn7BPVhQt+mru9BPtMa3iqudV7P7z/v6hrMqgnmGGIgw/xWfIMfcE+dss00q A5lq5wY+3q7wiUwfN5xse5t7PCu7CgeoTN2T6ROqwvJOV0xJVkyhzGOoaPEv0wwX MTmtS2fJkF9rM1a1VPLaYYuRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUXP/Qdb7k dECgA3yCxwS+TBI60FAwHwYDVR0jBBgwFoAU83Gv20AqO1w1Haymss4PSk0ag4Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGQ0I3LzZGNEIzMjE2OEY3 MjExRUZCNzVCMTAzMEM0RjlBRTAyLzgzR3YyMEFxTzF3MUhheW1zczRQU2swYWc0 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODNHdjIwQXFPMXcxSGF5bXNzNFBTazBhZzRBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkNCNy82RjRCMzIxNjhGNzIxMUVGQjc1QjEwMzBDNEY5QUUwMi81MDBBQ0Q2NjhG NzMxMUVGOUEzQzY5MzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWemgDANBgkqhkiG9w0BAQsFAAOCAQEAYnijJQu2jG7K14ED CMYyfKXyzIzVdaK2WS9FPVC5MWuBtPwBT8T5lJmmtnivJ483/MGMUONp6QlHW9He y0NrvhjorGphtH+li/37NBmXqRn8SUPa3aij7buRcx980lo0b/G1dflVbm4QnFaT uGDE8miTnn995LgPcn8MxQSZZPC4DIPBoEB4IhoxU49SH18Dfylcjx2JJZUhcim3 l20eaIitEuFU6dMzECkaohii81ltaEgoKx3CoUufc0BsH/dC7gyr4yKWosAdKfL1 WoYapBAHX/rOVwtskj6oUXejyqrQEEaEyJ/eHn3JA59RwuBANQeB3QY5WHNRqj1m z8CniA== -----END CERTIFICATE-----Generated at Thu Jul 3 11:41:43 2025 by rpki-client