$ rpki-client -vvf rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/CCD6FD9AC92E11ED931E6469C4F9AE02.roa File: CCD6FD9AC92E11ED931E6469C4F9AE02.roa (raw, json) Hash identifier: ZnYmMUtT+u1669x0fGQAfdpMBiM/DgOuBzoEAwERP+Y= Subject key identifier: B1:6F:14:34:FD:9D:7A:F8:D1:41:B7:EE:14:CE:71:6C:8D:D3:C5:67 Certificate issuer: /CN=A918CEC7/serialNumber=41618AE13A41F999C5790428B716FCAE5424A891 Certificate serial: 01B6 Authority key identifier: 41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/CCD6FD9AC92E11ED931E6469C4F9AE02.roa Signing time: Tue 01 Jul 2025 03:39:38 +0000 ROA not before: Tue 01 Jul 2025 03:39:38 +0000 ROA not after: Thu 30 Oct 2025 00:00:00 +0000 asID: 142120 IP address blocks: 103.166.150.0/23 maxlen: 23 103.166.150.0/24 maxlen: 24 103.166.151.0/24 maxlen: 24 2001:df2:29c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CEC7, serialNumber=41618AE13A41F999C5790428B716FCAE5424A891 Validity Not Before: Jul 1 03:39:38 2025 GMT Not After : Oct 30 00:00:00 2025 GMT Subject: CN=6863587a-6a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:95:fb:38:1a:30:76:50:0c:8e:bc:28:66: 7d:85:6a:9c:8c:25:2e:0d:9e:e1:00:c6:07:a2:18: 3a:cc:a1:ec:e5:81:d3:85:ec:3c:bb:06:7c:93:5d: eb:28:6e:52:09:bc:e8:ef:de:52:18:c2:d8:24:44: 8e:68:69:4a:04:50:20:d8:eb:73:be:79:f6:fb:04: a8:e6:e1:54:3b:28:c7:63:bb:36:4c:cd:02:39:a5: 09:68:48:38:33:1d:bc:c1:5a:c7:89:47:b9:f8:f1: b0:2e:c9:96:6d:c1:00:6b:5e:72:47:13:a2:db:35: b8:69:c4:8b:5a:6e:91:66:7f:7b:ac:1c:35:b5:56: 6f:f1:a4:63:52:70:f8:c2:6d:d0:ed:21:a2:94:2f: 10:78:04:7d:aa:77:f7:72:bf:39:09:73:4e:71:03: 17:a2:d8:1b:0d:75:ac:94:d8:70:4c:75:26:f1:3d: 08:b8:d6:3a:41:b8:a2:4e:b4:c3:49:d8:18:6c:78: a7:ea:91:34:dd:c9:20:64:0c:d0:6f:e0:60:59:7d: 14:e1:58:8d:e8:a0:f6:27:4e:26:fb:54:44:cf:00: f0:65:36:8e:f2:1d:bc:80:02:2a:99:0f:20:4f:e7: c0:9c:93:f3:a7:27:c9:06:70:9e:40:92:ae:ee:8c: 6a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6F:14:34:FD:9D:7A:F8:D1:41:B7:EE:14:CE:71:6C:8D:D3:C5:67 X509v3 Authority Key Identifier: keyid:41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/CCD6FD9AC92E11ED931E6469C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.150.0/23 IPv6: 2001:df2:29c0::/48 Signature Algorithm: sha256WithRSAEncryption a9:ab:5b:9f:76:eb:68:07:93:4d:a8:2b:b0:14:d4:cc:59:f1: bb:df:a5:cb:1d:af:37:64:25:f4:96:64:ca:e7:75:06:41:88: 3d:cc:76:d7:c9:2c:18:cb:fc:01:2c:01:1c:bf:19:60:89:b9: 81:24:d5:34:b3:16:83:8b:7f:a9:e1:15:65:e4:18:3a:02:c0: 2e:b2:aa:bb:e4:21:46:70:91:fd:53:91:7f:12:1e:c6:ae:24: e6:99:06:a3:f3:93:ff:72:ec:8f:94:c2:06:55:60:1c:13:fe: 8e:11:aa:8a:d8:23:a9:ba:9e:f1:9c:26:94:6b:ee:c2:59:46: 53:e4:7d:55:ff:0c:80:64:c1:11:55:53:30:7c:3e:53:e2:28: 57:70:2c:25:52:c1:53:65:15:4c:c4:07:0b:22:f7:ff:96:56: bf:04:6e:33:d2:6d:4c:06:64:50:95:4c:b1:c8:4a:21:d5:c4: d5:33:51:d0:f5:c8:4e:ea:39:d9:fc:cb:43:db:4a:97:3e:e0: 96:9b:9e:92:c8:e2:61:7f:5b:aa:71:76:0b:52:5a:3e:5f:07: 85:a7:b1:38:aa:6a:70:88:e0:51:56:3d:45:97:e5:a3:8c:ef: b5:5f:94:76:4e:c9:ff:59:80:0f:c3:88:45:77:60:66:d7:ce: 6b:d4:13:0e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENFQzcxMTAvBgNVBAUTKDQxNjE4QUUxM0E0MUY5OTlDNTc5MDQyOEI3MTZGQ0FF NTQyNEE4OTEwHhcNMjUwNzAxMDMzOTM4WhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzNTg3YS02YTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0iV+zgaMHZQDI68KGZ9hWqcjCUuDZ7hAMYHohg6zKHs5YHThew8uwZ8k13r KG5SCbzo795SGMLYJESOaGlKBFAg2Otzvnn2+wSo5uFUOyjHY7s2TM0COaUJaEg4 Mx28wVrHiUe5+PGwLsmWbcEAa15yRxOi2zW4acSLWm6RZn97rBw1tVZv8aRjUnD4 wm3Q7SGilC8QeAR9qnf3cr85CXNOcQMXotgbDXWslNhwTHUm8T0IuNY6QbiiTrTD SdgYbHin6pE03ckgZAzQb+BgWX0U4ViN6KD2J04m+1REzwDwZTaO8h28gAIqmQ8g T+fAnJPzpyfJBnCeQJKu7oxqLQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLFvFDT9 nXr40UG37hTOcWyN08VnMB8GA1UdIwQYMBaAFEFhiuE6QfmZxXkEKLcW/K5UJKiR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0VDNy85QkI0RUFCNEM4 N0IxMUVEQTYxMzJBNDBDNEY5QUUwMi9RV0dLNFRwQi1abkZlUVFvdHhiOHJsUWtx SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FXR0s0VHBCLVpuRmVRUW90eGI4cmxRa3FKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OENFQzcvOUJCNEVBQjRDODdCMTFFREE2MTMyQTQwQzRGOUFFMDIvQ0NENkZEOUFD OTJFMTFFRDkzMUU2NDY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnppYwDwQCAAIwCQMHACABDfIpwDANBgkqhkiG9w0BAQsF AAOCAQEAqatbn3braAeTTagrsBTUzFnxu9+lyx2vN2Ql9JZkyud1BkGIPcx218ks GMv8ASwBHL8ZYIm5gSTVNLMWg4t/qeEVZeQYOgLALrKqu+QhRnCR/VORfxIexq4k 5pkGo/OT/3Lsj5TCBlVgHBP+jhGqitgjqbqe8ZwmlGvuwllGU+R9Vf8MgGTBEVVT MHw+U+IoV3AsJVLBU2UVTMQHCyL3/5ZWvwRuM9JtTAZkUJVMschKIdXE1TNR0PXI Tuo52fzLQ9tKlz7glpueksjiYX9bqnF2C1JaPl8HhaexOKpqcIjgUVY9RZflo4zv tV+Udk7J/1mAD8OIRXdgZtfOa9QTDg== -----END CERTIFICATE-----Generated at Thu Jul 3 07:20:48 2025 by rpki-client