$ rpki-client -vvf rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/C296778C95CB11EFA3BE9873C4F9AE02.roa File: C296778C95CB11EFA3BE9873C4F9AE02.roa (raw, json) Hash identifier: YFnVZs2sNdDdcoL6mfOS9gOjX930yi4DDrGYTFUTspw= Subject key identifier: 6A:82:7E:B0:C9:8E:3A:03:AC:83:F6:81:7F:34:AB:5C:C0:34:AB:D9 Certificate issuer: /CN=A9182794/serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7 Certificate serial: 7E Authority key identifier: 61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/C296778C95CB11EFA3BE9873C4F9AE02.roa Signing time: Thu 19 Jun 2025 06:47:29 +0000 ROA not before: Thu 19 Jun 2025 06:47:29 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 18206 IP address blocks: 203.10.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182794, serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7 Validity Not Before: Jun 19 06:47:29 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6853b281-848e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:b8:4b:50:17:83:a5:2e:f3:aa:11:f7:b3: f6:12:94:3a:96:7c:42:10:57:f2:e8:76:71:58:91: 36:07:de:7f:e9:6d:e2:89:c3:a5:12:cb:b6:3b:9c: 9f:65:7c:b3:db:a3:04:a6:68:41:55:d1:7a:34:01: 63:fa:99:0d:45:c7:84:e1:7e:44:64:36:be:74:67: b3:2a:ea:94:10:ae:ca:f6:24:73:30:ec:a0:ba:4d: 91:ae:ec:26:0f:e9:e6:74:72:a9:48:3a:c1:5d:e3: 49:a1:7b:1e:53:76:14:e6:0f:ed:85:04:84:6f:b1: 21:77:93:0d:b2:ff:ab:03:21:c8:ac:b6:78:6b:50: 71:13:09:42:73:2e:25:3a:56:e8:11:2d:73:39:35: 7d:ed:4e:fc:14:2d:55:72:ab:39:c5:eb:af:81:22: 63:fd:6e:9b:9f:ea:b5:7c:0e:56:96:c1:99:8b:a5: a7:77:f9:5d:91:1e:f3:82:5a:65:cd:5f:e0:96:c5: 71:90:79:fa:89:4c:48:5c:9b:01:b9:31:33:cf:1d: af:d2:08:94:81:6f:77:27:87:fa:ec:6c:9a:78:28: 1f:e9:4d:be:60:4b:52:f0:39:c9:f3:1d:22:ef:ef: e2:3b:5e:f8:18:c9:fc:21:bd:de:80:d9:83:1e:cf: 07:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:82:7E:B0:C9:8E:3A:03:AC:83:F6:81:7F:34:AB:5C:C0:34:AB:D9 X509v3 Authority Key Identifier: keyid:61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/C296778C95CB11EFA3BE9873C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.10.16.0/21 Signature Algorithm: sha256WithRSAEncryption 02:ad:54:27:72:27:49:07:f0:bd:49:08:5a:4d:be:10:a5:17: 44:2f:be:81:5e:b7:31:23:2c:19:6d:a6:ba:c0:79:a1:b6:ce: 3e:03:e6:b8:a9:8c:ad:02:14:5a:ba:d3:7d:b3:16:82:9c:62: ef:97:f6:7a:9f:db:f8:32:8c:b8:66:d7:13:f0:54:fe:39:01: f0:8b:8a:6c:c7:88:09:34:aa:9d:f2:44:19:fe:a0:5a:fa:50: 29:3e:c8:a1:d6:19:5c:28:3a:e4:3f:cc:64:cb:d9:36:9c:f4: be:de:79:45:c3:05:38:71:2c:2a:26:e0:1a:cc:e0:ec:2c:31: de:87:f8:6c:21:7a:2e:ce:5f:e8:60:26:12:93:80:56:c1:66: 34:22:c6:ce:c4:2a:3e:66:ea:d8:a5:95:23:10:a3:83:6f:48: 7f:d4:c3:1e:56:20:ba:b8:bd:67:bb:3b:8e:11:9f:93:95:27: 96:ba:cb:c6:88:0e:dd:06:eb:7d:f2:18:bd:83:b7:d0:b7:53: 6d:da:a0:7b:e2:ab:32:e8:32:de:fa:da:fe:6f:5f:fd:e2:12: cc:4d:88:fb:3f:84:b3:09:c0:40:cb:a6:28:fe:c1:3f:e7:82: 7c:8b:e9:b2:97:94:81:fa:32:ee:ae:25:53:f9:54:d8:6d:0d: 1b:d9:5b:a3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Mjc5NDExMC8GA1UEBRMoNjEzRUNCRTAzRUJENzVCMEM5RTVFOTYxMTRGNjU3Q0U1 ODk1QjFGNzAeFw0yNTA2MTkwNjQ3MjlaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NTNiMjgxLTg0OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6bbhLUBeDpS7zqhH3s/YSlDqWfEIQV/LodnFYkTYH3n/pbeKJw6USy7Y7nJ9l fLPbowSmaEFV0Xo0AWP6mQ1Fx4ThfkRkNr50Z7Mq6pQQrsr2JHMw7KC6TZGu7CYP 6eZ0cqlIOsFd40mhex5TdhTmD+2FBIRvsSF3kw2y/6sDIcistnhrUHETCUJzLiU6 VugRLXM5NX3tTvwULVVyqznF66+BImP9bpuf6rV8DlaWwZmLpad3+V2RHvOCWmXN X+CWxXGQefqJTEhcmwG5MTPPHa/SCJSBb3cnh/rsbJp4KB/pTb5gS1LwOcnzHSLv 7+I7XvgYyfwhvd6A2YMezwf1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUaoJ+sMmO OgOsg/aBfzSrXMA0q9kwHwYDVR0jBBgwFoAUYT7L4D69dbDJ5elhFPZXzliVsfcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyNzk0LzczREI3N0QwOTVC RTExRUY4NEE4MjM4MUM0RjlBRTAyL1lUN0w0RDY5ZGJESjVlbGhGUFpYemxpVnNm Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVQ3TDRENjlkYkRKNWVsaEZQWlh6bGlWc2ZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjc5NC83M0RCNzdEMDk1QkUxMUVGODRBODIzODFDNEY5QUUwMi9DMjk2Nzc4Qzk1 Q0IxMUVGQTNCRTk4NzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA8sKEDANBgkqhkiG9w0BAQsFAAOCAQEAAq1UJ3InSQfwvUkI Wk2+EKUXRC++gV63MSMsGW2musB5obbOPgPmuKmMrQIUWrrTfbMWgpxi75f2ep/b +DKMuGbXE/BU/jkB8IuKbMeICTSqnfJEGf6gWvpQKT7IodYZXCg65D/MZMvZNpz0 vt55RcMFOHEsKibgGszg7Cwx3of4bCF6Ls5f6GAmEpOAVsFmNCLGzsQqPmbq2KWV IxCjg29If9TDHlYguri9Z7s7jhGfk5UnlrrLxogO3QbrffIYvYO30LdTbdqge+Kr Mugy3vra/m9f/eISzE2I+z+EswnAQMumKP7BP+eCfIvpspeUgfoy7q4lU/lU2G0N G9lbow== -----END CERTIFICATE-----Generated at Thu Jul 3 10:12:01 2025 by rpki-client