$ rpki-client -vvf rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/681E9EECCAC111ECA0AC3E32C4F9AE02.roa File: 681E9EECCAC111ECA0AC3E32C4F9AE02.roa (raw, json) Hash identifier: yx0tgJAxnt6G+jTtg9/EBjHjIHPyHzwd9ZlOS5AoF1w= Subject key identifier: 4A:7B:4F:AD:81:48:5C:6F:31:5B:B6:02:87:69:2B:C0:D6:C2:7C:2B Certificate issuer: /CN=A9182B6F/serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580 Certificate serial: 0324 Authority key identifier: 79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/681E9EECCAC111ECA0AC3E32C4F9AE02.roa Signing time: Fri 09 May 2025 01:14:49 +0000 ROA not before: Fri 09 May 2025 01:14:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134242 IP address blocks: 103.111.16.0/22 maxlen: 22 103.111.16.0/24 maxlen: 24 103.111.17.0/24 maxlen: 24 103.111.18.0/24 maxlen: 24 103.111.19.0/24 maxlen: 24 2402:9340::/32 maxlen: 32 2402:9340:1000::/36 maxlen: 36 2402:9340:2000::/36 maxlen: 36 2402:9340:3000::/36 maxlen: 36 2402:9340:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182B6F, serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580 Validity Not Before: May 9 01:14:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681d5708-af57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:d2:3b:06:45:18:2e:82:a8:73:54:d6:6e: 53:ce:b2:e5:ed:62:62:75:36:e7:26:13:6e:ba:10: 06:30:8c:c0:0f:be:12:40:98:f5:35:e3:82:3c:73: b4:e1:37:91:2d:f2:f3:dc:fc:c1:1d:dc:41:3a:34: b9:2c:ff:a0:16:3c:ce:24:95:b4:7f:55:07:05:9b: ad:e9:f7:af:9d:c5:54:68:a3:38:49:b4:a1:cd:59: 51:a0:68:7d:ea:17:a7:62:55:84:8f:cc:9f:73:91: b5:a2:28:f7:cc:9e:ef:aa:87:27:92:b1:c9:7b:8e: 0c:3d:22:e9:01:e6:8a:18:a5:15:59:5b:96:4f:42: c6:8b:ef:ba:6c:32:9c:96:5a:2f:ff:b8:79:47:74: f5:29:c7:90:1f:45:74:94:97:3c:94:d1:29:b1:7d: f7:30:a2:74:b1:63:23:b8:2b:79:e5:bd:7a:33:19: f8:c2:bc:c0:3b:e3:aa:88:fa:39:6a:cc:31:57:e6: 1d:6c:69:f6:08:80:c8:bc:9f:c1:ef:7f:a1:fa:b2: de:fe:a2:c4:f8:87:3b:b7:34:fc:6f:06:eb:c6:c5: c7:59:b3:97:7a:cc:b7:95:97:db:d2:83:1a:63:c8: 19:7a:b6:bc:25:66:e6:86:9f:b5:54:61:22:cf:34: 0d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7B:4F:AD:81:48:5C:6F:31:5B:B6:02:87:69:2B:C0:D6:C2:7C:2B X509v3 Authority Key Identifier: keyid:79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/681E9EECCAC111ECA0AC3E32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.16.0/22 IPv6: 2402:9340::/32 Signature Algorithm: sha256WithRSAEncryption 99:b5:1e:4a:60:07:6e:ca:19:af:1e:ad:a1:20:7d:93:6c:01: b5:96:91:3c:4b:86:2e:ef:00:12:4d:98:ee:5f:03:05:46:01: 30:37:53:3b:93:29:c9:e2:46:49:dd:1a:c8:c7:9a:a9:e1:cc: d8:e6:f5:b2:6e:68:cc:f1:dc:04:8e:08:1a:89:0c:d1:57:be: 65:25:4c:aa:64:94:00:6a:3e:2a:62:03:e5:f5:ac:84:0a:fe: e6:37:04:72:38:6c:35:0e:c4:ad:40:66:b0:6f:b7:78:72:b8: 8b:eb:d2:cc:ce:45:2c:ad:29:7b:da:83:21:e8:38:f9:21:0d: 00:65:81:ad:df:78:b7:04:ae:f4:d9:20:23:9b:c5:ce:83:3e: 16:e7:e7:7e:33:2b:c2:c7:25:08:93:50:3b:66:3d:6d:3c:8b: 74:a7:d7:0e:ec:4b:40:b7:6c:7b:1c:77:c1:72:66:14:d1:4a: 35:d8:41:e9:82:4a:0e:66:e6:dd:10:d9:41:c1:f6:ec:e0:3b: dd:c2:c9:e9:33:75:86:ba:03:ee:b3:2b:d6:b3:a1:6d:1f:19: 5c:c5:8e:80:7c:42:c0:35:48:ac:27:8d:b4:e1:54:f3:2f:64: 6c:9c:d5:84:8e:4e:29:5d:20:ca:9a:14:06:91:c0:84:56:27: 66:8b:c7:5f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJCNkYxMTAvBgNVBAUTKDc5NkE0NENGMUI3MEY0QTlGOUU2QTVGRkIwMDlCQjc4 NjBGMzU1ODAwHhcNMjUwNTA5MDExNDQ4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFkNTcwOC1hZjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyzSOwZFGC6CqHNU1m5TzrLl7WJidTbnJhNuuhAGMIzAD74SQJj1NeOCPHO0 4TeRLfLz3PzBHdxBOjS5LP+gFjzOJJW0f1UHBZut6fevncVUaKM4SbShzVlRoGh9 6henYlWEj8yfc5G1oij3zJ7vqocnkrHJe44MPSLpAeaKGKUVWVuWT0LGi++6bDKc llov/7h5R3T1KceQH0V0lJc8lNEpsX33MKJ0sWMjuCt55b16Mxn4wrzAO+OqiPo5 aswxV+YdbGn2CIDIvJ/B73+h+rLe/qLE+Ic7tzT8bwbrxsXHWbOXesy3lZfb0oMa Y8gZera8JWbmhp+1VGEizzQN9wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEp7T62B SFxvMVu2AodpK8DWwnwrMB8GA1UdIwQYMBaAFHlqRM8bcPSp+eal/7AJu3hg81WA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkI2Ri9GN0Y5NDc2RUM4 QjAxMUVDQTg4NDc5NDlDNEY5QUUwMi9lV3BFenh0dzlLbjU1cVhfc0FtN2VHRHpW WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VXcEV6eHR3OUtuNTVxWF9zQW03ZUdEelZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODJCNkYvRjdGOTQ3NkVDOEIwMTFFQ0E4ODQ3OTQ5QzRGOUFFMDIvNjgxRTlFRUND QUMxMTFFQ0EwQUMzRTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnbxAwDQQCAAIwBwMFACQCk0AwDQYJKoZIhvcNAQELBQAD ggEBAJm1HkpgB27KGa8eraEgfZNsAbWWkTxLhi7vABJNmO5fAwVGATA3UzuTKcni RkndGsjHmqnhzNjm9bJuaMzx3ASOCBqJDNFXvmUlTKpklABqPipiA+X1rIQK/uY3 BHI4bDUOxK1AZrBvt3hyuIvr0szORSytKXvagyHoOPkhDQBlga3feLcErvTZICOb xc6DPhbn534zK8LHJQiTUDtmPW08i3Sn1w7sS0C3bHscd8FyZhTRSjXYQemCSg5m 5t0Q2UHB9uzgO93CyekzdYa6A+6zK9azoW0fGVzFjoB8QsA1SKwnjbThVPMvZGyc 1YSOTildIMqaFAaRwIRWJ2aLx18= -----END CERTIFICATE-----Generated at Wed May 14 16:10:09 2025 by rpki-client