$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/953250CAE90011EB8DE96E50C4F9AE02.roa File: 953250CAE90011EB8DE96E50C4F9AE02.roa (raw, json) Hash identifier: 46yF6MRBN6+Pq3PWInREyeKO5zRVUKewEJc/Tyvbx3I= Subject key identifier: 7D:23:CD:57:01:74:A5:3C:87:68:37:94:EE:82:32:3B:3D:21:C0:D6 Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Certificate serial: 0B3F Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/953250CAE90011EB8DE96E50C4F9AE02.roa Signing time: Thu 08 May 2025 19:55:02 +0000 ROA not before: Thu 08 May 2025 19:55:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56307 IP address blocks: 103.227.20.0/22 maxlen: 24 139.5.172.0/22 maxlen: 24 203.22.104.0/23 maxlen: 24 2001:df1:3a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2879 (0xb3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Validity Not Before: May 8 19:55:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681d0c16-3d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:ab:5c:03:59:46:17:c8:02:44:4a:c8:df: 44:fb:07:35:2b:3a:60:a0:a4:3c:3a:02:ac:8b:ac: 7f:84:ff:50:14:81:8c:ef:5b:66:dd:ce:43:a1:73: db:8b:06:d1:5c:62:cc:f4:d7:b1:d7:3a:58:f3:d6: 09:e2:24:8b:a1:3d:5a:35:a7:6b:4e:07:45:19:21: 8f:9f:9f:ec:d7:5f:66:aa:82:7a:54:0c:60:dd:ec: b2:ba:b3:3f:72:92:f1:e5:ef:c8:02:be:60:e7:eb: 5e:80:1b:7c:86:be:cf:42:d3:c8:a6:fd:54:5d:3a: 62:4a:ae:41:43:9f:51:97:e0:82:1d:40:13:cc:ef: 86:b0:b5:c7:e6:3c:5a:7d:f1:48:31:f3:0f:eb:23: 21:75:dd:c4:7f:56:fa:e3:47:09:de:4d:da:8c:1b: cb:8f:85:c8:cf:93:2d:72:5e:5e:35:2a:f9:a1:ca: e8:1e:c2:81:af:bd:da:fc:3d:af:93:ab:66:f6:e9: 4f:b0:c5:c7:61:4b:e8:25:80:86:98:05:c9:dd:4b: 0d:87:a0:22:cd:21:ed:f4:45:be:c7:83:c1:bc:fb: 6f:b9:e8:18:28:de:8e:32:39:aa:14:02:b4:37:62: a4:42:e7:34:34:f0:65:58:83:33:5f:af:11:63:36: b2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:23:CD:57:01:74:A5:3C:87:68:37:94:EE:82:32:3B:3D:21:C0:D6 X509v3 Authority Key Identifier: keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/953250CAE90011EB8DE96E50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.227.20.0/22 139.5.172.0/22 203.22.104.0/23 IPv6: 2001:df1:3a00::/48 Signature Algorithm: sha256WithRSAEncryption 35:13:25:35:42:f4:70:aa:d2:98:0e:be:26:d9:ca:db:ab:4a: 8e:52:98:e9:d7:c2:3b:92:a9:32:19:da:49:43:4d:af:b8:7a: 97:c9:9c:19:ab:76:a1:85:0e:9f:29:db:2a:dd:3d:37:04:8a: 1b:1b:0c:0d:93:cb:95:e9:c2:91:bb:31:19:63:9a:d5:57:6e: 65:82:06:40:f7:d5:89:d8:85:81:cf:f9:7a:b5:2c:64:15:e8: 34:06:dc:73:d0:93:a5:9c:3c:af:99:2c:c7:fa:27:29:23:00: 02:d7:f0:0b:f7:0e:09:81:12:3c:24:a4:37:31:7d:9e:1c:7e: a9:fe:9f:2c:d7:43:05:b0:b5:a1:56:c2:5c:79:e4:c5:5d:10: 2e:c2:7b:3a:a5:a3:0f:17:76:53:07:9a:12:00:70:2f:c5:27: 86:53:6e:9c:89:82:e7:11:d7:db:32:42:93:f5:76:a3:9c:74: 1c:77:ed:83:1e:b2:a7:87:ad:82:7a:a1:f3:ef:a3:01:44:85: 03:7d:12:04:ce:c4:ba:f6:77:ab:11:c2:37:7e:17:40:0a:50: 82:a8:8f:2f:ce:44:d0:f5:4b:e1:01:4d:a5:2c:7c:ad:fa:14: 41:42:db:35:8c:5d:6d:d6:46:99:4d:70:16:95:5e:e0:4f:8f: f4:d1:85:e1 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICCz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxOUExMTAvBgNVBAUTKDJFNUJDQkM2NjFBRkYxRkVENThCMEZGNEI1ODNEQ0Y1 RUMxQTM3NEEwHhcNMjUwNTA4MTk1NTAyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFkMGMxNi0zZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiKrXANZRhfIAkRKyN9E+wc1KzpgoKQ8OgKsi6x/hP9QFIGM71tm3c5DoXPb iwbRXGLM9Nex1zpY89YJ4iSLoT1aNadrTgdFGSGPn5/s119mqoJ6VAxg3eyyurM/ cpLx5e/IAr5g5+tegBt8hr7PQtPIpv1UXTpiSq5BQ59Rl+CCHUATzO+GsLXH5jxa ffFIMfMP6yMhdd3Ef1b640cJ3k3ajBvLj4XIz5Mtcl5eNSr5ocroHsKBr73a/D2v k6tm9ulPsMXHYUvoJYCGmAXJ3UsNh6AizSHt9EW+x4PBvPtvuegYKN6OMjmqFAK0 N2KkQuc0NPBlWIMzX68RYzay1wIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFH0jzVcB dKU8h2g3lO6CMjs9IcDWMB8GA1UdIwQYMBaAFC5by8Zhr/H+1YsP9LWD3PXsGjdK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTE5QS8wNDkwOTA5QTQz MUIxMUVBQjAxOTc3MkNDNEY5QUUwMi9MbHZMeG1HdjhmN1Zpd18wdFlQYzlld2FO MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsdkx4bUd2OGY3Vml3XzB0WVBjOWV3YU4wby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODkxOUEvMDQ5MDkwOUE0MzFCMTFFQUIwMTk3NzJDQzRGOUFFMDIvOTUzMjUwQ0FF OTAwMTFFQjhERTk2RTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAJn4xQDBAKLBawDBAHLFmgwDwQCAAIwCQMHACABDfE6ADAN BgkqhkiG9w0BAQsFAAOCAQEANRMlNUL0cKrSmA6+JtnK26tKjlKY6dfCO5KpMhna SUNNr7h6l8mcGat2oYUOnynbKt09NwSKGxsMDZPLlenCkbsxGWOa1VduZYIGQPfV idiFgc/5erUsZBXoNAbcc9CTpZw8r5ksx/onKSMAAtfwC/cOCYESPCSkNzF9nhx+ qf6fLNdDBbC1oVbCXHnkxV0QLsJ7OqWjDxd2UweaEgBwL8UnhlNunImC5xHX2zJC k/V2o5x0HHftgx6yp4etgnqh8++jAUSFA30SBM7EuvZ3qxHCN34XQApQgqiPL85E 0PVL4QFNpSx8rfoUQULbNYxdbdZGmU1wFpVe4E+P9NGF4Q== -----END CERTIFICATE-----Generated at Fri May 16 14:31:34 2025 by rpki-client