$ rpki-client -vvf rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/6E2937E456EB11EA9025542FC4F9AE02.roa File: 6E2937E456EB11EA9025542FC4F9AE02.roa (raw, json) Hash identifier: VEiVACuoAH55v33Ux5UO5cLk1TfJhkMWYIwJCgym6L0= Subject key identifier: 25:BA:B9:7C:6D:CF:B1:0C:78:B6:92:6B:FF:D0:19:12:2A:9B:9D:8A Certificate issuer: /CN=A918AF08/serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Certificate serial: 0CAA Authority key identifier: 7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/6E2937E456EB11EA9025542FC4F9AE02.roa Signing time: Sat 28 Jun 2025 18:31:53 +0000 ROA not before: Sat 28 Jun 2025 18:31:53 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38566 IP address blocks: 103.66.128.0/22 maxlen: 23 103.66.128.0/23 maxlen: 24 103.233.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AF08, serialNumber=7EE0C6A28B759F72D5DC9A5895038BBAB94A8614 Validity Not Before: Jun 28 18:31:53 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68603518-3ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a0:87:a9:5f:92:c9:bb:10:a0:4b:2f:a8:bd: 34:8f:8f:b1:43:5b:81:b1:b1:b1:e4:56:78:a9:76: 22:82:a4:b7:02:ef:a7:3e:41:0f:9d:10:42:40:e1: 1e:1c:43:a2:bc:4e:4a:22:2a:59:37:70:94:14:fd: cd:c6:5a:0f:1a:b0:19:5c:68:b1:77:87:71:c4:13: 87:48:bc:0d:03:15:1a:be:93:86:82:29:f8:6a:a5: 17:b9:ec:5c:5d:f8:e5:ad:0d:38:4d:64:0c:f8:a9: ee:c0:f1:3c:fd:21:7b:55:6e:e3:3e:70:ce:e8:5b: 37:79:4e:fb:04:55:7b:5f:11:0c:64:df:75:ca:e6: 2b:b4:37:72:dd:ed:7e:a5:41:d9:fa:bd:19:15:17: b2:e6:86:bc:bc:a8:bd:33:c7:b4:a9:94:8a:d5:5a: 27:ca:63:d3:1d:55:fd:1c:6c:f8:42:14:4c:a8:9b: 6c:72:b0:ae:55:bc:0b:ae:3a:48:41:e1:f3:76:65: 07:ce:fd:1e:c2:87:fc:66:1e:61:1e:f3:1f:25:46: a6:c7:ed:22:66:c5:fb:0d:5f:35:da:eb:29:67:7a: b7:3f:73:f0:0f:32:5a:2b:f6:74:4a:cd:96:12:0a: 4b:af:91:0f:37:cf:fb:2c:19:89:b7:18:5c:01:7b: 06:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BA:B9:7C:6D:CF:B1:0C:78:B6:92:6B:FF:D0:19:12:2A:9B:9D:8A X509v3 Authority Key Identifier: keyid:7E:E0:C6:A2:8B:75:9F:72:D5:DC:9A:58:95:03:8B:BA:B9:4A:86:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/fuDGoot1n3LV3JpYlQOLurlKhhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuDGoot1n3LV3JpYlQOLurlKhhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AF08/B0F5376CFAC011E994D92065C4F9AE02/6E2937E456EB11EA9025542FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.128.0/22 103.233.200.0/22 Signature Algorithm: sha256WithRSAEncryption 51:21:b3:20:33:d9:65:ad:4f:cf:09:95:84:25:fa:9e:1e:e0: 30:ac:d4:9f:05:47:e8:2a:31:0a:a2:c5:1f:96:80:77:33:43: 49:63:a7:e2:22:32:89:dd:8d:a5:af:c0:d0:4f:c1:ae:60:1e: 94:d6:87:cf:17:6d:31:59:3d:7d:2f:df:31:91:89:76:b2:e2: 6e:8f:76:da:c0:8a:df:71:f9:c2:55:9a:7d:e4:a9:4c:d3:28: 78:d7:88:ae:97:ef:73:9f:e5:5b:bb:10:26:fa:70:e5:eb:91: a7:8c:93:2b:b0:1a:7e:09:3a:6d:51:75:a0:22:14:62:17:53: 8e:82:ae:bf:0a:d7:c7:e6:ea:b5:d3:33:97:80:e5:98:c9:37: 08:82:c6:c7:e6:da:4f:dd:4f:d1:89:37:a2:20:28:04:2d:85: 55:01:3b:39:ce:fe:d7:75:cd:4c:13:67:58:aa:3b:89:4a:18: 16:d2:95:fa:21:32:13:a9:38:86:52:5f:5f:86:73:1d:bd:f4: 7c:36:9b:56:1e:34:7a:bc:95:52:b8:da:7a:e7:f2:0c:95:9b: 0b:ed:c3:77:a8:48:69:18:33:14:7c:e7:1b:39:58:61:a1:53: 4a:d2:85:c8:bd:ac:b4:46:8c:a0:f7:5d:6a:64:d6:86:47:45: 68:52:0c:a2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFGMDgxMTAvBgNVBAUTKDdFRTBDNkEyOEI3NTlGNzJENURDOUE1ODk1MDM4QkJB Qjk0QTg2MTQwHhcNMjUwNjI4MTgzMTUzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYwMzUxOC0zYWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqCHqV+SybsQoEsvqL00j4+xQ1uBsbGx5FZ4qXYigqS3Au+nPkEPnRBCQOEe HEOivE5KIipZN3CUFP3NxloPGrAZXGixd4dxxBOHSLwNAxUavpOGgin4aqUXuexc XfjlrQ04TWQM+KnuwPE8/SF7VW7jPnDO6Fs3eU77BFV7XxEMZN91yuYrtDdy3e1+ pUHZ+r0ZFRey5oa8vKi9M8e0qZSK1VonymPTHVX9HGz4QhRMqJtscrCuVbwLrjpI QeHzdmUHzv0ewof8Zh5hHvMfJUamx+0iZsX7DV812uspZ3q3P3PwDzJaK/Z0Ss2W EgpLr5EPN8/7LBmJtxhcAXsGswIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCW6uXxt z7EMeLaSa//QGRIqm52KMB8GA1UdIwQYMBaAFH7gxqKLdZ9y1dyaWJUDi7q5SoYU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUYwOC9CMEY1Mzc2Q0ZB QzAxMUU5OTREOTIwNjVDNEY5QUUwMi9mdURHb290MW4zTFYzSnBZbFFPTHVybEto aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1REdvb3QxbjNMVjNKcFlsUU9MdXJsS2hoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEFGMDgvQjBGNTM3NkNGQUMwMTFFOTk0RDkyMDY1QzRGOUFFMDIvNkUyOTM3RTQ1 NkVCMTFFQTkwMjU1NDJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnQoADBAJn6cgwDQYJKoZIhvcNAQELBQADggEBAFEhsyAz 2WWtT88JlYQl+p4e4DCs1J8FR+gqMQqixR+WgHczQ0ljp+IiMondjaWvwNBPwa5g HpTWh88XbTFZPX0v3zGRiXay4m6PdtrAit9x+cJVmn3kqUzTKHjXiK6X73Of5Vu7 ECb6cOXrkaeMkyuwGn4JOm1RdaAiFGIXU46Crr8K18fm6rXTM5eA5ZjJNwiCxsfm 2k/dT9GJN6IgKAQthVUBOznO/td1zUwTZ1iqO4lKGBbSlfohMhOpOIZSX1+Gcx29 9Hw2m1YeNHq8lVK42nrn8gyVmwvtw3eoSGkYMxR85xs5WGGhU0rShci9rLRGjKD3 XWpk1oZHRWhSDKI= -----END CERTIFICATE-----Generated at Fri Jul 4 22:48:04 2025 by rpki-client