$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/452D6C36BD1411EAA4875216C4F9AE02.roa File: 452D6C36BD1411EAA4875216C4F9AE02.roa (raw, json) Hash identifier: yGGkDxuoJ7+8gqf/0aTvyd850ZQHcY8118DqWsFirgg= Subject key identifier: BB:01:8E:EE:FA:E8:3B:44:6F:F8:7E:C1:A4:05:B8:30:AA:1D:A3:D2 Certificate issuer: /CN=A918EF4E/serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Certificate serial: 1A37 Authority key identifier: 8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/452D6C36BD1411EAA4875216C4F9AE02.roa Signing time: Tue 04 Mar 2025 16:53:55 +0000 ROA not before: Tue 04 Mar 2025 16:53:55 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 58411 IP address blocks: 103.210.232.0/24 maxlen: 24 103.210.233.0/24 maxlen: 24 103.210.234.0/24 maxlen: 24 103.210.235.0/24 maxlen: 24 160.20.52.0/24 maxlen: 24 160.20.53.0/24 maxlen: 24 160.20.54.0/24 maxlen: 24 160.20.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6711 (0x1a37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF4E, serialNumber=8CB92B12E6F986D313D53F3CAAB07EBE3255AEBA Validity Not Before: Mar 4 16:53:55 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c73023-7e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:93:b1:07:e7:f2:c5:0e:3f:c8:45:b1:98:64: 2d:90:e6:19:cf:b8:30:fc:ed:8a:f8:d1:72:92:17: da:2f:81:55:be:6d:2c:65:32:02:02:0d:74:66:00: 68:56:86:29:2e:31:8e:41:f3:90:e5:28:23:c8:b7: 70:9f:65:fd:b9:7d:d2:9d:5d:df:39:f1:18:79:db: c4:c8:87:33:27:43:c3:6a:6c:21:fa:73:49:96:72: d3:7d:f6:d4:c9:d4:32:f3:0c:c9:a1:1f:1e:1d:8f: 84:a7:aa:99:dc:f0:10:91:7a:14:8a:cb:53:56:d2: 41:13:bc:aa:3b:ae:b8:15:7b:7c:f8:ff:41:47:51: 5e:ac:b0:14:f2:fe:59:d3:49:b7:79:75:6f:38:e1: a0:56:22:41:39:56:7b:d9:86:69:00:ec:75:b3:fe: 09:c8:9e:4d:5d:57:13:3c:f2:dd:2a:6c:38:66:e3: 15:94:8c:54:f5:7a:f3:1d:cb:a4:f5:af:cd:4e:d0: c5:38:08:55:03:22:43:dc:ee:ca:c0:cc:da:26:0c: de:7f:e2:58:d2:af:dd:16:43:17:73:40:8d:4a:90: 61:8e:a9:09:ff:c1:0d:70:c8:4a:b8:1d:bb:93:b3: 0d:bf:21:0c:44:ca:4c:5a:bb:e5:80:a3:8a:c1:3d: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:01:8E:EE:FA:E8:3B:44:6F:F8:7E:C1:A4:05:B8:30:AA:1D:A3:D2 X509v3 Authority Key Identifier: keyid:8C:B9:2B:12:E6:F9:86:D3:13:D5:3F:3C:AA:B0:7E:BE:32:55:AE:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/jLkrEub5htMT1T88qrB-vjJVrro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLkrEub5htMT1T88qrB-vjJVrro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF4E/BF47BF8C413211E792A14E4AC4F9AE02/452D6C36BD1411EAA4875216C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.210.232.0/22 160.20.52.0/22 Signature Algorithm: sha256WithRSAEncryption 74:74:61:03:3f:40:6b:ef:cd:6c:94:82:ce:19:a8:8a:76:58: f1:b6:9a:ef:20:a4:83:eb:22:62:5e:cf:db:1c:18:b5:dd:15: 13:e6:aa:d2:d6:5b:1d:ed:31:c5:ec:a4:1e:ba:6f:83:7d:5d: ac:18:f9:5d:62:15:33:74:72:5a:44:86:00:43:84:62:06:c1: 2b:5a:0a:e3:f7:b4:45:16:d7:6d:59:cf:92:c6:55:c3:d7:db: d0:66:10:fd:c9:5d:61:56:bc:59:16:7e:14:79:54:8c:9d:43: 7f:d6:7e:ef:85:b0:fd:26:3d:17:bd:ad:92:53:42:c9:6d:21: 56:02:0d:63:11:65:fb:c8:97:84:35:df:c7:ba:aa:d9:4f:cb: 99:cf:da:61:cc:50:a9:15:52:76:ed:80:65:66:03:5a:86:34: 52:50:4d:71:03:0f:cd:3d:a1:f5:57:19:25:1f:ad:14:6e:c2: d7:79:d9:e1:8e:25:b1:35:ba:fc:f3:87:8e:ba:b0:e0:d1:be: 76:1c:e0:86:02:4a:63:39:5f:a4:41:78:6c:a1:a9:f9:f3:e9: 1e:f9:fb:c0:ff:76:6a:a5:54:54:6f:01:4c:ca:16:af:3f:ed: e5:ca:b0:ef:98:c4:39:fe:29:80:96:59:36:22:ea:df:30:24: 5e:0a:a3:bd -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICGjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNEUxMTAvBgNVBAUTKDhDQjkyQjEyRTZGOTg2RDMxM0Q1M0YzQ0FBQjA3RUJF MzI1NUFFQkEwHhcNMjUwMzA0MTY1MzU1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3MzAyMy03ZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5OxB+fyxQ4/yEWxmGQtkOYZz7gw/O2K+NFykhfaL4FVvm0sZTICAg10ZgBo VoYpLjGOQfOQ5SgjyLdwn2X9uX3SnV3fOfEYedvEyIczJ0PDamwh+nNJlnLTffbU ydQy8wzJoR8eHY+Ep6qZ3PAQkXoUistTVtJBE7yqO664FXt8+P9BR1FerLAU8v5Z 00m3eXVvOOGgViJBOVZ72YZpAOx1s/4JyJ5NXVcTPPLdKmw4ZuMVlIxU9XrzHcuk 9a/NTtDFOAhVAyJD3O7KwMzaJgzef+JY0q/dFkMXc0CNSpBhjqkJ/8ENcMhKuB27 k7MNvyEMRMpMWrvlgKOKwT36fwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLsBju76 6DtEb/h+waQFuDCqHaPSMB8GA1UdIwQYMBaAFIy5KxLm+YbTE9U/PKqwfr4yVa66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY0RS9CRjQ3QkY4QzQx MzIxMUU3OTJBMTRFNEFDNEY5QUUwMi9qTGtyRXViNWh0TVQxVDg4cXJCLXZqSlZy cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pMa3JFdWI1aHRNVDFUODhxckItdmpKVnJyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVGNEUvQkY0N0JGOEM0MTMyMTFFNzkyQTE0RTRBQzRGOUFFMDIvNDUyRDZDMzZC RDE0MTFFQUE0ODc1MjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn0ugDBAKgFDQwDQYJKoZIhvcNAQELBQADggEBAHR0YQM/ QGvvzWyUgs4ZqIp2WPG2mu8gpIPrImJez9scGLXdFRPmqtLWWx3tMcXspB66b4N9 XawY+V1iFTN0clpEhgBDhGIGwStaCuP3tEUW121Zz5LGVcPX29BmEP3JXWFWvFkW fhR5VIydQ3/Wfu+FsP0mPRe9rZJTQsltIVYCDWMRZfvIl4Q138e6qtlPy5nP2mHM UKkVUnbtgGVmA1qGNFJQTXEDD809ofVXGSUfrRRuwtd52eGOJbE1uvzzh466sODR vnYc4IYCSmM5X6RBeGyhqfnz6R75+8D/dmqlVFRvAUzKFq8/7eXKsO+YxDn+KYCW WTYi6t8wJF4Ko70= -----END CERTIFICATE-----Generated at Sat May 17 05:55:08 2025 by rpki-client