$ rpki-client -vvf rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/7FB6349E967111ED94CA8D6AC4F9AE02.roa File: 7FB6349E967111ED94CA8D6AC4F9AE02.roa (raw, json) Hash identifier: mnijhx9DILhp0Nx/nOSf9QNtyjN28pmYv0fUVMQBN3Y= Subject key identifier: 65:5F:B2:48:CE:C3:D1:D2:84:08:BB:14:35:B5:6C:B3:55:07:36:8B Certificate issuer: /CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D Certificate serial: 01B3 Authority key identifier: C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/7FB6349E967111ED94CA8D6AC4F9AE02.roa Signing time: Thu 01 May 2025 02:39:07 +0000 ROA not before: Thu 01 May 2025 02:39:07 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 56262 IP address blocks: 103.3.80.0/22 maxlen: 22 103.3.80.0/24 maxlen: 24 103.3.81.0/24 maxlen: 24 103.3.82.0/24 maxlen: 24 103.3.83.0/24 maxlen: 24 182.255.40.0/22 maxlen: 22 182.255.40.0/24 maxlen: 24 182.255.41.0/24 maxlen: 24 182.255.42.0/24 maxlen: 24 182.255.43.0/24 maxlen: 24 2400:9d00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919941E, serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D Validity Not Before: May 1 02:39:07 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6812decb-0691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:17:64:d6:f9:98:dc:a0:04:35:e7:c9:17:e6: 4e:83:5c:0f:90:8c:ec:36:0d:02:31:07:12:24:a9: 59:b3:17:2c:07:eb:ad:75:c0:ee:5f:12:ff:a5:6a: 85:43:74:54:d8:2e:0f:a6:7e:7d:6b:d6:9f:eb:11: bf:0d:ea:66:e9:0f:d1:0c:5d:64:d0:79:76:ad:35: cc:35:2a:9f:bf:86:6a:b8:83:20:a1:7a:c2:33:f6: 8a:51:c3:39:c8:1f:b1:45:6c:b4:98:69:39:72:c5: 0d:8a:0a:87:13:3c:dd:b8:98:8b:fc:89:07:f4:c8: 1f:1d:7b:90:a8:7f:9e:29:0a:fb:33:a5:8e:1b:db: 20:43:9b:99:b1:96:8c:6f:95:22:eb:38:36:ea:40: a6:89:e4:6e:ec:32:bb:cd:16:10:49:0f:18:7d:93: 5a:a7:05:74:23:4a:1b:f4:6e:fd:e1:23:95:4b:23: af:05:59:83:b1:a5:06:92:f4:df:51:3a:48:83:07: 2b:47:28:9e:a0:59:63:64:b4:47:80:6d:cb:95:8f: 44:5d:88:be:5d:57:29:66:5f:8a:e2:91:c0:65:21: 81:fc:4f:13:fc:18:df:15:43:22:00:e2:b7:4a:d9: 8f:e7:ef:f3:39:d1:f4:3d:97:cd:74:07:1c:8f:29: d1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5F:B2:48:CE:C3:D1:D2:84:08:BB:14:35:B5:6C:B3:55:07:36:8B X509v3 Authority Key Identifier: keyid:C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/7FB6349E967111ED94CA8D6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.3.80.0/22 182.255.40.0/22 IPv6: 2400:9d00::/32 Signature Algorithm: sha256WithRSAEncryption 17:33:a3:b8:54:3a:a6:29:dd:22:d4:01:7c:b0:b0:45:75:42: cf:0f:d2:fb:77:72:00:56:bc:bb:43:e3:5b:bb:63:2e:fa:1d: 0d:bd:1f:46:8d:c2:20:28:dc:ab:fe:05:e8:86:a3:5d:4f:48: 09:3e:d0:e4:e6:d4:8a:4e:41:2d:7c:2f:30:ed:e2:03:f8:5d: 26:fb:e2:c1:be:08:b0:ea:e3:b4:ad:f5:42:3a:e4:4f:c6:2e: ed:bd:50:cb:10:1d:a0:9b:76:6a:67:ac:14:5a:8b:eb:0b:df: af:c3:7a:96:74:43:df:af:c5:63:a6:23:bf:3f:db:12:fe:12: ee:d3:44:fc:45:48:a4:55:bb:cb:af:c3:f8:fb:cf:0a:bb:62: 4f:1d:0a:c3:bb:ae:16:20:dc:3a:78:1d:bc:5e:a7:cc:9d:92: 65:48:8d:5c:50:99:c9:bc:f5:b8:f5:ee:4c:2b:2e:6d:31:89: b8:01:b3:53:cc:ea:fd:aa:4c:9b:04:3b:e4:61:7e:65:d9:4e: 76:01:5f:3b:87:79:b3:3a:f3:3f:aa:e8:1f:eb:7c:91:5c:05: 1b:5d:3e:bc:cf:fa:bd:60:c3:ca:d3:25:41:da:a2:d9:ad:4d: c1:36:5c:0b:ed:38:2c:4b:77:29:53:31:46:cb:1a:9a:3e:9f: a7:a2:0b:b6 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk0MUUxMTAvBgNVBAUTKEMxMzc2NEEwQTYzQTc3NjdGM0E0NzVEN0E4MUFFOERG MThBRkUwOEQwHhcNMjUwNTAxMDIzOTA3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyZGVjYi0wNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthdk1vmY3KAENefJF+ZOg1wPkIzsNg0CMQcSJKlZsxcsB+utdcDuXxL/pWqF Q3RU2C4Ppn59a9af6xG/Depm6Q/RDF1k0Hl2rTXMNSqfv4ZquIMgoXrCM/aKUcM5 yB+xRWy0mGk5csUNigqHEzzduJiL/IkH9MgfHXuQqH+eKQr7M6WOG9sgQ5uZsZaM b5Ui6zg26kCmieRu7DK7zRYQSQ8YfZNapwV0I0ob9G794SOVSyOvBVmDsaUGkvTf UTpIgwcrRyieoFljZLRHgG3LlY9EXYi+XVcpZl+K4pHAZSGB/E8T/BjfFUMiAOK3 StmP5+/zOdH0PZfNdAccjynR5QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFGVfskjO w9HShAi7FDW1bLNVBzaLMB8GA1UdIwQYMBaAFME3ZKCmOndn86R116ga6N8Yr+CN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTQxRS9FRjFGQUQxODk2 NkUxMUVEQjBFQ0MwNjlDNEY5QUUwMi93VGRrb0tZNmQyZnpwSFhYcUJybzN4aXY0 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUZGtvS1k2ZDJmenBIWFhxQnJvM3hpdjRJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTk0MUUvRUYxRkFEMTg5NjZFMTFFREIwRUNDMDY5QzRGOUFFMDIvN0ZCNjM0OUU5 NjcxMTFFRDk0Q0E4RDZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJnA1ADBAK2/ygwDQQCAAIwBwMFACQAnQAwDQYJKoZIhvcN AQELBQADggEBABczo7hUOqYp3SLUAXywsEV1Qs8P0vt3cgBWvLtD41u7Yy76HQ29 H0aNwiAo3Kv+BeiGo11PSAk+0OTm1IpOQS18LzDt4gP4XSb74sG+CLDq47St9UI6 5E/GLu29UMsQHaCbdmpnrBRai+sL36/DepZ0Q9+vxWOmI78/2xL+Eu7TRPxFSKRV u8uvw/j7zwq7Yk8dCsO7rhYg3Dp4Hbxep8ydkmVIjVxQmcm89bj17kwrLm0xibgB s1PM6v2qTJsEO+RhfmXZTnYBXzuHebM68z+q6B/rfJFcBRtdPrzP+r1gw8rTJUHa otmtTcE2XAvtOCxLdylTMUbLGpo+n6eiC7Y= -----END CERTIFICATE-----Generated at Mon May 12 15:57:09 2025 by rpki-client