$ rpki-client -vvf rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/AB6EF82E29BC11F09DD00E61C4F9AE02.roa File: AB6EF82E29BC11F09DD00E61C4F9AE02.roa (raw, json) Hash identifier: 1jJkOHpbFqLU6pLY6mTAFBdhrTjIN6aPx3N6rDr9+Zg= Subject key identifier: C7:7D:3D:8F:47:5B:07:B6:F3:1A:83:97:D0:B7:D9:85:9C:36:03:9F Certificate issuer: /CN=A916E323/serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1 Certificate serial: 017D Authority key identifier: C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/AB6EF82E29BC11F09DD00E61C4F9AE02.roa Signing time: Mon 05 May 2025 14:24:36 +0000 ROA not before: Mon 05 May 2025 14:24:36 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 23470 IP address blocks: 103.193.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E323, serialNumber=C161E985961FD957E667EF2E8CAA7737FA9285D1 Validity Not Before: May 5 14:24:36 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6818ca23-d97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c6:7f:08:51:3a:a1:2f:f2:ca:d2:2f:0a:38: af:4e:76:56:c6:16:2f:43:0c:a9:b2:da:81:88:1f: 19:a3:71:da:7b:78:49:e3:bb:ac:9b:36:53:af:b1: 10:36:1b:d0:90:68:8d:74:ea:b3:d8:59:74:a7:7e: 09:1a:80:84:44:24:e8:c2:ce:94:b7:69:29:e1:1a: 2f:c6:d2:7f:a2:35:f4:99:d2:78:65:9e:9b:27:4d: 0d:d2:9d:7b:19:15:03:23:00:92:35:08:ab:85:3b: 60:a7:6d:7d:ad:e8:f8:77:c2:6c:f7:30:82:91:b8: a6:95:51:1f:43:4e:66:18:3e:e9:ad:a0:9f:81:6a: f4:5f:e4:81:81:d8:9f:85:4c:1c:c0:04:ad:14:a7: 76:5c:bc:a5:84:f9:4f:e0:74:12:27:81:05:bf:11: b3:03:50:c3:54:75:0a:90:ab:9f:4b:99:77:e1:db: 44:4b:e9:5d:f2:3d:ee:fd:31:33:b7:81:b6:b0:e3: 38:73:e9:d8:af:87:24:6c:9c:46:e4:c6:8d:24:aa: 94:f4:03:08:59:2f:97:0e:20:8a:0f:9b:97:e2:07: d6:b3:d8:5d:ee:6f:a9:7b:7c:a7:33:42:22:1f:75: b2:89:90:fc:08:2a:42:3f:4e:36:f3:59:0c:50:f7: 68:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7D:3D:8F:47:5B:07:B6:F3:1A:83:97:D0:B7:D9:85:9C:36:03:9F X509v3 Authority Key Identifier: keyid:C1:61:E9:85:96:1F:D9:57:E6:67:EF:2E:8C:AA:77:37:FA:92:85:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/wWHphZYf2VfmZ-8ujKp3N_qShdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wWHphZYf2VfmZ-8ujKp3N_qShdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E323/E7FC2F1EEFEE11ED977B1A64C4F9AE02/AB6EF82E29BC11F09DD00E61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.193.72.0/24 Signature Algorithm: sha256WithRSAEncryption 91:a5:ff:30:43:ae:ba:38:5e:ef:ef:fd:60:70:ee:25:4c:a5: 57:47:3c:23:e0:5e:84:37:0b:77:39:d5:82:6b:79:2a:fd:8f: ad:07:27:b3:74:35:27:fd:56:05:8e:b6:43:e0:46:03:03:ca: 82:1e:87:df:21:9e:5d:10:1a:8c:44:6d:42:0f:89:66:51:8c: 0c:2b:c0:78:09:2b:7e:8f:a5:45:3a:cb:38:ee:f4:7c:66:42: 7e:5c:2c:b7:98:53:9e:cd:85:77:5b:8a:50:69:93:42:26:c7: 99:ad:14:7e:57:77:01:95:a0:7a:00:ad:2a:f0:ba:88:5f:d1: 97:bf:b5:47:1f:25:32:39:34:b3:dd:0e:d6:81:5e:a0:6e:de: c9:e2:7b:bf:c0:71:c8:08:39:2d:25:8c:4d:44:62:e0:c1:64: 08:01:79:bf:61:48:e3:0f:9f:92:89:03:93:4e:9f:53:90:20: c1:21:58:09:bc:94:13:17:35:c6:68:07:31:9a:01:27:2d:79: 14:72:2c:91:46:ff:0b:b6:13:a9:66:4d:f8:50:3f:2f:40:b1: 6e:03:e1:5e:e3:c2:7e:1a:2b:fe:fc:99:d1:f4:1f:94:27:d3: 46:d8:1a:fb:5b:18:c8:c8:9b:e2:8a:a3:d7:aa:1b:8d:57:5e: 60:92:00:1d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzMjMxMTAvBgNVBAUTKEMxNjFFOTg1OTYxRkQ5NTdFNjY3RUYyRThDQUE3NzM3 RkE5Mjg1RDEwHhcNMjUwNTA1MTQyNDM2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE4Y2EyMy1kOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08Z/CFE6oS/yytIvCjivTnZWxhYvQwypstqBiB8Zo3Hae3hJ47usmzZTr7EQ NhvQkGiNdOqz2Fl0p34JGoCERCTows6Ut2kp4RovxtJ/ojX0mdJ4ZZ6bJ00N0p17 GRUDIwCSNQirhTtgp219rej4d8Js9zCCkbimlVEfQ05mGD7praCfgWr0X+SBgdif hUwcwAStFKd2XLylhPlP4HQSJ4EFvxGzA1DDVHUKkKufS5l34dtES+ld8j3u/TEz t4G2sOM4c+nYr4ckbJxG5MaNJKqU9AMIWS+XDiCKD5uX4gfWs9hd7m+pe3ynM0Ii H3WyiZD8CCpCP04281kMUPdoEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMd9PY9H Wwe28xqDl9C32YWcNgOfMB8GA1UdIwQYMBaAFMFh6YWWH9lX5mfvLoyqdzf6koXR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTMyMy9FN0ZDMkYxRUVG RUUxMUVEOTc3QjFBNjRDNEY5QUUwMi93V0hwaFpZZjJWZm1aLTh1aktwM05fcVNo ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dXSHBoWllmMlZmbVotOHVqS3AzTl9xU2hkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkUzMjMvRTdGQzJGMUVFRkVFMTFFRDk3N0IxQTY0QzRGOUFFMDIvQUI2RUY4MkUy OUJDMTFGMDlERDAwRTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnwUgwDQYJKoZIhvcNAQELBQADggEBAJGl/zBDrro4Xu/v /WBw7iVMpVdHPCPgXoQ3C3c51YJreSr9j60HJ7N0NSf9VgWOtkPgRgMDyoIeh98h nl0QGoxEbUIPiWZRjAwrwHgJK36PpUU6yzju9HxmQn5cLLeYU57NhXdbilBpk0Im x5mtFH5XdwGVoHoArSrwuohf0Ze/tUcfJTI5NLPdDtaBXqBu3snie7/AccgIOS0l jE1EYuDBZAgBeb9hSOMPn5KJA5NOn1OQIMEhWAm8lBMXNcZoBzGaAScteRRyLJFG /wu2E6lmTfhQPy9AsW4D4V7jwn4aK/78mdH0H5Qn00bYGvtbGMjIm+KKo9eqG41X XmCSAB0= -----END CERTIFICATE-----Generated at Wed May 14 15:10:24 2025 by rpki-client