$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/BE7ACD44FEDF11EDB4C36F29C4F9AE02.roa File: BE7ACD44FEDF11EDB4C36F29C4F9AE02.roa (raw, json) Hash identifier: TcJPWywxYGP4zNwqCV3RMOeXIr2sCq4he29rvfSHcP0= Subject key identifier: 6B:4F:90:8A:BB:4D:F4:99:76:AE:E9:FF:54:D7:04:F5:74:36:04:B3 Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Certificate serial: 0186 Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/BE7ACD44FEDF11EDB4C36F29C4F9AE02.roa Signing time: Fri 09 May 2025 02:52:33 +0000 ROA not before: Fri 09 May 2025 02:52:33 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137259 IP address blocks: 103.31.222.0/23 maxlen: 24 2001:df2:50c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0 Validity Not Before: May 9 02:52:33 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681d6df1-f113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:6f:d7:1c:e3:7e:ea:0b:55:a4:47:f5:44: da:e4:65:74:03:f8:88:02:fd:a9:83:8d:f0:06:df: b3:7d:d6:a3:cf:c9:a3:d0:a0:2f:33:f0:8c:b1:83: ba:63:03:77:3c:9f:ed:9d:61:02:85:79:fc:dd:60: 61:59:56:8b:82:7a:b3:7c:e3:89:b3:90:f2:2d:50: fa:3b:b9:14:e3:ee:53:8c:a0:31:ad:f9:3d:29:78: 3d:32:97:3f:83:e3:c5:7b:46:8b:fc:5b:c3:96:c3: 35:9a:8e:5e:4e:e6:c3:72:a1:b5:14:3d:53:1a:ee: 0c:44:60:f9:10:b1:ba:d2:1e:ac:3c:e0:6d:ae:00: 57:31:0d:b1:0a:ef:46:c3:1a:ff:cc:8d:5c:4a:44: 67:84:00:45:37:f6:92:a2:b1:bb:21:b3:10:bf:bb: fb:81:b2:8a:14:65:14:b9:a5:3d:48:5c:2a:6d:ec: d0:6b:fc:a3:14:bb:b3:f1:74:f9:a5:7d:a7:e7:41: 5c:79:6e:ce:d3:de:b0:a8:f0:91:3f:c2:83:f0:19: fa:f6:bc:5c:76:8d:48:f9:60:ae:04:9c:5e:3d:bc: 58:48:8b:55:3f:9d:31:69:e6:3e:5c:e7:09:53:4d: a1:81:fe:b7:12:3a:d0:42:d8:f5:4d:ee:35:7b:ed: 40:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4F:90:8A:BB:4D:F4:99:76:AE:E9:FF:54:D7:04:F5:74:36:04:B3 X509v3 Authority Key Identifier: keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/BE7ACD44FEDF11EDB4C36F29C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.31.222.0/23 IPv6: 2001:df2:50c0::/48 Signature Algorithm: sha256WithRSAEncryption 64:da:8d:e6:78:37:c6:02:d5:6f:85:eb:e6:7b:72:b3:23:dc: 03:0d:45:63:b7:03:ec:ae:c2:37:31:7d:f9:f0:af:ef:39:89: ab:d2:49:87:ce:a9:89:5b:3f:2e:af:3d:81:a0:e7:3d:1b:bd: 5e:c4:b2:44:64:90:3f:f2:7d:20:1d:13:1c:73:f9:2d:a7:fd: 59:99:e3:ba:7b:b7:9a:16:89:8f:c1:3b:e3:2e:3c:7d:ce:cd: b5:e3:36:fc:b6:64:ae:ca:f7:d1:29:35:bb:06:e9:6b:be:a2: 38:40:c7:ca:11:7e:6b:6f:d3:ee:36:8c:51:4d:eb:3a:e4:e8: a0:ba:60:b3:d7:fb:e4:ce:55:6d:d0:7a:4c:1e:9c:fb:19:83: af:6f:68:0c:36:f8:53:4b:99:ec:27:98:c9:d1:0a:86:e3:0e: f3:23:a1:38:b3:7c:c1:e4:0d:ec:a1:ba:22:16:e3:3b:dd:87: 7c:e6:72:bd:ed:bc:42:60:2f:26:c9:3e:b2:2e:83:db:a9:fa: 10:2f:89:dc:23:75:aa:0a:4f:6a:94:30:e5:bb:cd:90:0b:69: cc:87:41:40:10:48:44:26:32:63:2d:03:33:4b:5d:49:53:45: dd:ce:95:35:06:82:65:34:8d:c0:d8:e3:6b:a3:32:98:92:ac: 72:74:77:0c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDQTIxMTAvBgNVBAUTKDM2Q0Y1Q0MwQTYwRTBCN0Q1NDYxMkExMkVCNUI5ODky ODQ2ODZEQjAwHhcNMjUwNTA5MDI1MjMzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFkNmRmMS1mMTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymhv1xzjfuoLVaRH9UTa5GV0A/iIAv2pg43wBt+zfdajz8mj0KAvM/CMsYO6 YwN3PJ/tnWEChXn83WBhWVaLgnqzfOOJs5DyLVD6O7kU4+5TjKAxrfk9KXg9Mpc/ g+PFe0aL/FvDlsM1mo5eTubDcqG1FD1TGu4MRGD5ELG60h6sPOBtrgBXMQ2xCu9G wxr/zI1cSkRnhABFN/aSorG7IbMQv7v7gbKKFGUUuaU9SFwqbezQa/yjFLuz8XT5 pX2n50FceW7O096wqPCRP8KD8Bn69rxcdo1I+WCuBJxePbxYSItVP50xaeY+XOcJ U02hgf63EjrQQtj1Te41e+1AcQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGtPkIq7 TfSZdq7p/1TXBPV0NgSzMB8GA1UdIwQYMBaAFDbPXMCmDgt9VGEqEutbmJKEaG2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNBMi8wMjgyN0NGOEU0 MzcxMUVEQTg2NTYzMUFDNEY5QUUwMi9Oczljd0tZT0MzMVVZU29TNjF1WWtvUm9i YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05zOWN3S1lPQzMxVVlTb1M2MXVZa29Sb2JiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0VDQTIvMDI4MjdDRjhFNDM3MTFFREE4NjU2MzFBQzRGOUFFMDIvQkU3QUNENDRG RURGMTFFREI0QzM2RjI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnH94wDwQCAAIwCQMHACABDfJQwDANBgkqhkiG9w0BAQsF AAOCAQEAZNqN5ng3xgLVb4Xr5ntysyPcAw1FY7cD7K7CNzF9+fCv7zmJq9JJh86p iVs/Lq89gaDnPRu9XsSyRGSQP/J9IB0THHP5Laf9WZnjunu3mhaJj8E74y48fc7N teM2/LZkrsr30Sk1uwbpa76iOEDHyhF+a2/T7jaMUU3rOuTooLpgs9f75M5VbdB6 TB6c+xmDr29oDDb4U0uZ7CeYydEKhuMO8yOhOLN8weQN7KG6IhbjO92HfOZyve28 QmAvJsk+si6D26n6EC+J3CN1qgpPapQw5bvNkAtpzIdBQBBIRCYyYy0DM0tdSVNF 3c6VNQaCZTSNwNjja6MymJKscnR3DA== -----END CERTIFICATE-----Generated at Tue May 13 05:55:46 2025 by rpki-client