$ rpki-client -vvf rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/499DE3FC1C1611EB8BD35065C4F9AE02.roa File: 499DE3FC1C1611EB8BD35065C4F9AE02.roa (raw, json) Hash identifier: QnFh/0YdNLZr/ZfMn+21+lOUTuFHow1/2U5v+xOLivo= Subject key identifier: 99:F5:90:82:AE:8F:38:D9:A0:8C:AC:12:D9:D4:9A:78:91:DC:68:C2 Certificate issuer: /CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE Certificate serial: 075F Authority key identifier: 3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/499DE3FC1C1611EB8BD35065C4F9AE02.roa Signing time: Sat 26 Apr 2025 21:30:54 +0000 ROA not before: Sat 26 Apr 2025 21:30:54 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 135090 IP address blocks: 103.189.115.0/24 maxlen: 24 103.209.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1887 (0x75f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AF8E, serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE Validity Not Before: Apr 26 21:30:54 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=680d508d-579e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:48:c1:a8:5d:34:8e:31:70:af:c0:de:34:1a: 15:47:08:bb:34:71:81:01:d8:12:20:d0:e0:07:86: d6:56:a0:89:99:3b:13:8b:7d:ec:a2:37:d6:02:5d: 11:2d:f4:1b:bc:1b:97:01:5b:d8:0f:fe:8d:92:bd: 66:df:06:b0:56:7b:1d:7a:87:0c:c3:50:97:06:74: 43:b5:95:ef:73:ea:17:99:45:4e:ac:42:cf:58:bd: 10:f9:86:89:75:08:a8:7b:ea:90:b2:c8:f5:e7:69: d4:89:07:f4:14:48:4f:0a:32:56:82:70:4b:79:1a: 8a:80:98:71:dc:ed:3f:11:2f:39:89:f9:c0:db:a2: cf:be:c0:51:e1:1b:da:e5:50:db:8b:8b:c5:a2:aa: b2:6f:31:ea:92:a2:8d:51:28:70:ec:01:1a:64:d6: 13:71:61:00:c0:79:35:d1:20:2c:24:be:da:1e:04: fe:66:5c:79:c2:ba:f1:08:f3:bc:ea:5f:23:3c:cd: 20:12:a0:6f:41:ef:bf:a0:43:48:28:92:4f:98:43: fd:09:2c:8c:1d:07:44:ee:01:b0:43:d2:92:3e:9a: b8:02:81:dd:96:e5:cd:bc:86:00:f1:63:fa:65:5f: 12:bf:c1:c5:f8:2c:cd:cc:11:0b:32:3b:8f:94:09: 03:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F5:90:82:AE:8F:38:D9:A0:8C:AC:12:D9:D4:9A:78:91:DC:68:C2 X509v3 Authority Key Identifier: keyid:3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/499DE3FC1C1611EB8BD35065C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.115.0/24 103.209.11.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:d8:2b:89:46:7b:61:af:4c:b8:7a:9f:f6:a9:af:28:d8:6f: e1:05:38:67:b5:4f:03:90:0a:5a:37:7e:0a:14:49:91:2c:75: 0c:55:e4:6f:0f:b7:15:5b:0d:43:d6:a9:3e:5d:27:fa:40:db: 1f:9d:7c:78:b1:f4:74:ae:2a:f0:dd:fa:90:d7:26:71:38:a7: 12:37:7b:67:42:f6:ec:88:0b:00:0b:de:9a:59:da:a1:13:9f: 27:19:74:70:01:07:62:92:a4:ed:36:63:7f:db:34:87:26:df: 91:34:1a:cf:76:44:09:fa:c5:50:09:72:54:03:98:89:c6:99: 14:b6:5b:69:1e:6b:79:f5:34:d0:fe:b2:fb:a6:b0:aa:db:5f: 80:48:0f:f2:4d:c5:6c:b5:14:ff:e2:62:65:27:f2:01:4c:b6: 85:85:a8:e1:58:04:63:3a:1c:34:dd:2a:b7:74:10:a6:83:9f: b7:bb:91:ca:6d:25:c2:cf:67:59:b8:62:77:78:65:7d:68:e9: 68:f7:57:3a:27:75:95:7f:52:df:35:f1:68:43:1a:0b:7a:af: 00:95:b7:6f:d6:e5:d1:5f:7b:b0:10:d4:31:35:b4:af:f1:2b: ae:fb:15:0e:f5:1b:d1:ad:24:0f:b7:27:34:df:27:60:d4:3c: 0a:6b:c4:3c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFGOEUxMTAvBgNVBAUTKDNEQzVEMjk0M0VENEFDRkE5MjZCNzc2NzZBOThCRUM4 QjNDOTc5QUUwHhcNMjUwNDI2MjEzMDU0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODBkNTA4ZC01NzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskjBqF00jjFwr8DeNBoVRwi7NHGBAdgSINDgB4bWVqCJmTsTi33sojfWAl0R LfQbvBuXAVvYD/6Nkr1m3wawVnsdeocMw1CXBnRDtZXvc+oXmUVOrELPWL0Q+YaJ dQioe+qQssj152nUiQf0FEhPCjJWgnBLeRqKgJhx3O0/ES85ifnA26LPvsBR4Rva 5VDbi4vFoqqybzHqkqKNUShw7AEaZNYTcWEAwHk10SAsJL7aHgT+Zlx5wrrxCPO8 6l8jPM0gEqBvQe+/oENIKJJPmEP9CSyMHQdE7gGwQ9KSPpq4AoHdluXNvIYA8WP6 ZV8Sv8HF+CzNzBELMjuPlAkDEwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJn1kIKu jzjZoIysEtnUmniR3GjCMB8GA1UdIwQYMBaAFD3F0pQ+1Kz6kmt3Z2qYvsizyXmu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUY4RS9EOTRBNzU5NDFD MTQxMUVCQjAzNkRDNjNDNEY5QUUwMi9QY1hTbEQ3VXJQcVNhM2RuYXBpLXlMUEpl YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BjWFNsRDdVclBxU2EzZG5hcGkteUxQSmVhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkFGOEUvRDk0QTc1OTQxQzE0MTFFQkIwMzZEQzYzQzRGOUFFMDIvNDk5REUzRkMx QzE2MTFFQjhCRDM1MDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnvXMDBABn0QswDQYJKoZIhvcNAQELBQADggEBAGrYK4lG e2GvTLh6n/apryjYb+EFOGe1TwOQClo3fgoUSZEsdQxV5G8PtxVbDUPWqT5dJ/pA 2x+dfHix9HSuKvDd+pDXJnE4pxI3e2dC9uyICwAL3ppZ2qETnycZdHABB2KSpO02 Y3/bNIcm35E0Gs92RAn6xVAJclQDmInGmRS2W2kea3n1NND+svumsKrbX4BID/JN xWy1FP/iYmUn8gFMtoWFqOFYBGM6HDTdKrd0EKaDn7e7kcptJcLPZ1m4Ynd4ZX1o 6Wj3VzondZV/Ut818WhDGgt6rwCVt2/W5dFfe7AQ1DE1tK/xK677FQ71G9GtJA+3 JzTfJ2DUPAprxDw= -----END CERTIFICATE-----Generated at Sat May 17 00:08:56 2025 by rpki-client