$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/46C5452E0DD711EF85707821C4F9AE02.roa File: 46C5452E0DD711EF85707821C4F9AE02.roa (raw, json) Hash identifier: /U7W3kIJcREb7MGP1Cl2Wpd73rbaNoFSjTUo68eX8m0= Subject key identifier: 0A:9B:AD:45:B8:3C:FF:8C:7F:F9:31:93:FC:E8:FD:C2:69:03:92:62 Certificate issuer: /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43 Certificate serial: 0BFD Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/46C5452E0DD711EF85707821C4F9AE02.roa Signing time: Thu 03 Jul 2025 04:13:14 +0000 ROA not before: Thu 03 Jul 2025 04:13:14 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 58504 IP address blocks: 103.28.84.0/22 maxlen: 22 103.28.84.0/24 maxlen: 24 103.28.85.0/24 maxlen: 24 103.28.86.0/24 maxlen: 24 103.28.87.0/24 maxlen: 24 150.107.204.0/22 maxlen: 22 150.107.204.0/24 maxlen: 24 150.107.205.0/24 maxlen: 24 150.107.206.0/24 maxlen: 24 150.107.207.0/24 maxlen: 24 2406:b700::/32 maxlen: 32 2406:b700::/48 maxlen: 48 2406:b700:2::/48 maxlen: 48 2406:b700:3::/48 maxlen: 48 2406:b700:4::/48 maxlen: 48 2406:b700:5::/48 maxlen: 48 2406:b700:6::/48 maxlen: 48 2406:b700:7::/48 maxlen: 48 2406:b700:8::/48 maxlen: 48 2406:b700:a::/48 maxlen: 48 2406:b700:b::/48 maxlen: 48 2406:b700:c::/48 maxlen: 48 2406:b700:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3069 (0xbfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43 Validity Not Before: Jul 3 04:13:14 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6866035a-335f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c2:3a:ab:b6:c4:cd:95:df:ae:20:8e:46:5c: 25:3e:91:b5:ec:86:77:10:dc:52:8c:9b:8a:f8:ba: 9c:28:bf:0b:4f:39:3a:fc:84:aa:1d:f0:a5:59:a0: b1:da:f1:fe:89:38:af:ae:62:76:07:28:67:43:72: ec:a8:9b:ad:21:b7:c5:2d:b6:63:21:cc:85:09:1f: ab:09:07:c4:fc:d6:66:4d:77:fe:c1:2c:06:9f:9e: 6a:75:69:c6:5a:bb:6a:53:ab:26:98:4b:af:51:81: e1:95:ec:cf:4a:1d:4a:3f:5b:d6:e2:ed:4f:ba:76: 17:84:f4:4e:a2:d4:c5:1c:41:4d:07:a3:f2:5d:9e: b2:6d:7f:0e:82:f9:68:3b:9c:58:d6:90:5a:ae:6d: c4:75:0c:69:9b:8a:7b:e7:4d:79:e1:d4:05:30:d3: bc:84:d6:1a:57:48:5c:60:50:37:c6:af:5b:7e:ad: ec:a7:df:b7:6c:f3:e3:1a:43:06:5f:5c:06:35:e2: d0:e2:b1:6b:ba:f1:c3:4e:1a:d6:c4:4e:fb:9e:5d: 89:bc:44:72:31:f0:fb:ce:69:d9:8d:e5:b9:64:69: 46:a0:44:81:bc:fb:56:4d:2a:99:0a:f7:8e:87:36: e7:e0:f9:68:95:7e:65:a5:d6:62:ca:38:7b:6d:34: d7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9B:AD:45:B8:3C:FF:8C:7F:F9:31:93:FC:E8:FD:C2:69:03:92:62 X509v3 Authority Key Identifier: keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/46C5452E0DD711EF85707821C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.28.84.0/22 150.107.204.0/22 IPv6: 2406:b700::/32 Signature Algorithm: sha256WithRSAEncryption 86:58:91:32:1d:d2:28:b0:0f:cd:4c:0d:83:11:14:55:03:aa: fd:44:4b:80:5a:5a:ce:59:d2:a0:b2:1b:13:8c:08:5a:68:24: 77:ee:d6:79:51:65:37:41:c0:4e:ae:49:64:4b:6e:b8:5c:42: 3e:5d:82:99:91:2d:d4:4c:4d:5a:58:03:24:54:6f:fb:c5:40: d0:81:c6:2a:ec:f9:eb:6e:10:e9:81:b7:d1:1d:01:76:98:7f: c4:65:8e:23:8e:10:1f:fb:80:1d:aa:ac:e7:52:cd:cc:32:cc: e5:88:69:b4:63:87:42:df:8e:71:0f:1b:8b:18:5f:35:e8:01: 07:8d:dc:c4:ca:b7:c8:81:e0:a1:de:9c:d3:74:c6:13:3c:2e: e9:9d:df:3c:9f:82:20:ce:5f:02:4b:56:8a:ff:c9:ba:61:fc: 22:bc:63:29:c9:d5:ba:21:7f:11:38:41:bc:09:a7:75:9e:bd: 5f:75:17:c2:bf:07:93:4e:85:5a:fa:c3:ba:0b:06:c0:da:86: 96:bc:f0:99:e5:fd:31:e8:54:0f:01:d5:14:25:40:1a:cc:b2: b0:0e:80:85:f5:88:e5:01:d9:49:40:68:ae:ed:3d:a0:4e:6d: ce:d4:7e:5e:1a:fc:ed:f4:8e:33:89:54:f5:4e:1c:3c:8d:c9: a1:6a:23:f7 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICC/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwMUUxMTAvBgNVBAUTKDUwREUxQzYwNzMzRUEyQjhCNzZFODQwMzYwOTE4RTFG MjVDNDZFNDMwHhcNMjUwNzAzMDQxMzE0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY2MDM1YS0zMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsI6q7bEzZXfriCORlwlPpG17IZ3ENxSjJuK+LqcKL8LTzk6/ISqHfClWaCx 2vH+iTivrmJ2ByhnQ3LsqJutIbfFLbZjIcyFCR+rCQfE/NZmTXf+wSwGn55qdWnG WrtqU6smmEuvUYHhlezPSh1KP1vW4u1PunYXhPROotTFHEFNB6PyXZ6ybX8Ogvlo O5xY1pBarm3EdQxpm4p750154dQFMNO8hNYaV0hcYFA3xq9bfq3sp9+3bPPjGkMG X1wGNeLQ4rFruvHDThrWxE77nl2JvERyMfD7zmnZjeW5ZGlGoESBvPtWTSqZCveO hzbn4PlolX5lpdZiyjh7bTTX2QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAqbrUW4 PP+Mf/kxk/zo/cJpA5JiMB8GA1UdIwQYMBaAFFDeHGBzPqK4t26EA2CRjh8lxG5D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAxRS83ODVEN0VEMjFD MDgxMUVBODU3NkIxNTFDNEY5QUUwMi9VTjRjWUhNLW9yaTNib1FEWUpHT0h5WEVi a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VONGNZSE0tb3JpM2JvUURZSkdPSHlYRWJrTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjcwMUUvNzg1RDdFRDIxQzA4MTFFQTg1NzZCMTUxQzRGOUFFMDIvNDZDNTQ1MkUw REQ3MTFFRjg1NzA3ODIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnHFQDBAKWa8wwDQQCAAIwBwMFACQGtwAwDQYJKoZIhvcN AQELBQADggEBAIZYkTId0iiwD81MDYMRFFUDqv1ES4BaWs5Z0qCyGxOMCFpoJHfu 1nlRZTdBwE6uSWRLbrhcQj5dgpmRLdRMTVpYAyRUb/vFQNCBxirs+etuEOmBt9Ed AXaYf8RljiOOEB/7gB2qrOdSzcwyzOWIabRjh0LfjnEPG4sYXzXoAQeN3MTKt8iB 4KHenNN0xhM8Lumd3zyfgiDOXwJLVor/ybph/CK8YynJ1bohfxE4QbwJp3WevV91 F8K/B5NOhVr6w7oLBsDahpa88Jnl/THoVA8B1RQlQBrMsrAOgIX1iOUB2UlAaK7t PaBObc7Ufl4a/O30jjOJVPVOHDyNyaFqI/c= -----END CERTIFICATE-----Generated at Sat Jul 5 06:20:23 2025 by rpki-client