$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/6523917E508911F0A97F9A28C4F9AE02.roa File: 6523917E508911F0A97F9A28C4F9AE02.roa (raw, json) Hash identifier: K4wA0GoKvzqerl9jOReA1zKoYkvfC5BqWgsjQH9G7Wo= Subject key identifier: A9:6C:AF:01:08:BC:B9:E9:02:91:13:EE:F4:0F:6D:45:55:36:93:07 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0E0B Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/6523917E508911F0A97F9A28C4F9AE02.roa Signing time: Mon 23 Jun 2025 23:25:49 +0000 ROA not before: Mon 23 Jun 2025 23:25:49 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138624 IP address blocks: 103.134.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3595 (0xe0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Jun 23 23:25:49 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6859e27c-ff6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:a3:d8:c6:f2:e4:ab:81:76:7c:60:7b:63: d7:8a:f1:cf:66:13:a6:04:d4:43:49:f8:24:30:52: 7b:2f:1a:ba:c2:16:f3:9e:13:98:0d:e0:91:e2:d7: df:d7:da:e9:c6:e4:5a:c3:d9:8d:01:59:ae:89:51: 1a:e2:81:44:8d:4b:ff:fe:38:9a:c8:19:b0:60:60: 6d:7d:d4:79:80:bb:c3:f9:f0:17:c5:8b:ab:d4:0b: 7d:b6:18:92:93:3b:f6:5b:75:a9:dc:9b:f1:c1:21: 52:01:ea:2a:54:c0:25:6c:ce:bc:12:56:ba:c4:c6: 7e:84:d7:cf:53:63:7a:e9:59:83:56:57:d7:44:c1: f7:ef:b2:9a:08:0d:94:8e:82:18:26:6f:d2:69:07: 38:61:a6:cf:7e:5e:52:b3:75:d7:68:aa:62:b8:87: 60:f6:5c:da:21:e6:e5:1e:ac:34:b5:28:f3:5b:99: be:ba:d8:6c:e6:a1:64:11:53:22:a2:ab:87:e6:0c: 07:ae:5c:e2:83:5f:88:50:38:1a:ca:03:7b:2f:5c: 07:0e:da:04:22:d0:93:2f:48:9f:71:a4:f8:af:f0: 9d:00:9a:22:0d:2b:23:f1:51:f4:cd:0c:a7:56:35: 56:f3:89:75:94:1f:5f:a4:ee:0a:93:e2:17:f3:ea: 2e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6C:AF:01:08:BC:B9:E9:02:91:13:EE:F4:0F:6D:45:55:36:93:07 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/6523917E508911F0A97F9A28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.225.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:a6:0b:57:ef:aa:36:1f:02:00:bc:5c:80:dc:53:47:db:27: e1:1b:c0:80:32:04:51:f5:db:30:17:f6:75:5d:31:2e:53:a2: 24:07:0b:70:38:b9:0d:76:05:bb:59:d7:9e:6b:45:a6:e6:60: 34:82:ae:9c:1c:05:11:0f:b1:c7:46:e0:9a:c4:22:03:f1:0a: 15:20:10:3f:ef:0d:ce:33:41:5c:fb:2f:b8:1e:da:57:96:4b: 7a:41:d6:55:98:32:d2:9e:37:e9:7b:b9:98:73:d0:5b:55:9e: 18:02:ac:64:43:5b:d7:dc:12:df:cd:b2:2f:8e:db:88:c7:be: da:1d:01:22:ea:8d:ff:39:6c:7b:b8:1f:6e:70:62:ad:03:0b: 29:a8:e4:1e:75:c7:c3:3e:35:e4:c8:18:c8:06:9e:bc:cc:84: c4:85:70:ad:1d:e5:9e:d5:ce:09:0a:32:38:82:fc:39:ba:37: 46:95:a3:e8:c4:c9:14:ea:a0:19:bf:28:1d:27:bf:99:ce:84: f6:16:05:e8:c7:10:68:9c:59:b7:d4:fa:f5:90:d6:db:5d:d9: 0f:b3:19:65:78:da:7f:8c:0c:1d:a8:fa:17:a9:d0:d4:c5:aa: 2d:90:b8:00:5c:69:61:b2:63:25:bc:45:0b:35:c7:77:d3:43: 30:5f:0b:ab -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjUwNjIzMjMyNTQ5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODU5ZTI3Yy1mZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJqj2Mby5KuBdnxge2PXivHPZhOmBNRDSfgkMFJ7Lxq6whbznhOYDeCR4tff 19rpxuRaw9mNAVmuiVEa4oFEjUv//jiayBmwYGBtfdR5gLvD+fAXxYur1At9thiS kzv2W3Wp3JvxwSFSAeoqVMAlbM68Ela6xMZ+hNfPU2N66VmDVlfXRMH377KaCA2U joIYJm/SaQc4YabPfl5Ss3XXaKpiuIdg9lzaIeblHqw0tSjzW5m+uths5qFkEVMi oquH5gwHrlzig1+IUDgaygN7L1wHDtoEItCTL0ifcaT4r/CdAJoiDSsj8VH0zQyn VjVW84l1lB9fpO4Kk+IX8+ou8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFKlsrwEI vLnpApET7vQPbUVVNpMHMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY4QjEvN0Q1NEEwQ0FCNTg2MTFFOUFBNUY0RDY1QzRGOUFFMDIvNjUyMzkxN0U1 MDg5MTFGMEE5N0Y5QTI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnhuEwDQYJKoZIhvcNAQELBQADggEBAD2mC1fvqjYfAgC8 XIDcU0fbJ+EbwIAyBFH12zAX9nVdMS5ToiQHC3A4uQ12BbtZ155rRabmYDSCrpwc BREPscdG4JrEIgPxChUgED/vDc4zQVz7L7ge2leWS3pB1lWYMtKeN+l7uZhz0FtV nhgCrGRDW9fcEt/Nsi+O24jHvtodASLqjf85bHu4H25wYq0DCymo5B51x8M+NeTI GMgGnrzMhMSFcK0d5Z7VzgkKMjiC/Dm6N0aVo+jEyRTqoBm/KB0nv5nOhPYWBejH EGicWbfU+vWQ1ttd2Q+zGWV42n+MDB2o+hep0NTFqi2QuABcaWGyYyW8RQs1x3fT QzBfC6s= -----END CERTIFICATE-----Generated at Thu Jul 3 11:27:07 2025 by rpki-client