$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A8EF2B58A89A11EFA52A9970C4F9AE02.roa File: A8EF2B58A89A11EFA52A9970C4F9AE02.roa (raw, json) Hash identifier: 0yuiUuTSODKUKXLNsgQCShKjboLS3TAY6lYLYOs9OQU= Subject key identifier: F3:9A:0F:E5:02:06:07:18:0B:D2:24:02:B2:C1:54:70:99:D0:89:BB Certificate issuer: /CN=A919EC2D/serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F Certificate serial: 5B Authority key identifier: 30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A8EF2B58A89A11EFA52A9970C4F9AE02.roa Signing time: Mon 05 May 2025 02:39:18 +0000 ROA not before: Mon 05 May 2025 02:39:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136969 IP address blocks: 103.188.92.0/23 maxlen: 23 103.188.92.0/24 maxlen: 24 103.188.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EC2D, serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F Validity Not Before: May 5 02:39:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681824d6-4a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:e3:5e:37:ad:71:0b:00:0c:34:a0:f1:f6: 46:e2:49:14:9b:b1:11:1c:64:2c:9e:16:fb:ff:ca: b7:62:d8:18:65:24:e6:a9:e0:0e:8a:8c:e3:79:07: 9d:7c:52:56:28:b4:57:7a:1c:25:32:b5:c0:15:67: f7:5a:49:fe:e7:36:cd:29:8b:45:7a:1e:72:27:4c: ce:06:7e:9a:d6:23:b5:31:96:42:cb:8d:66:39:93: 6e:6b:91:f5:c4:e4:f7:7f:fd:6f:ad:9d:09:ef:a8: ad:09:bc:9e:60:69:4b:54:86:c2:b6:e1:be:47:4d: 2d:ef:5a:f7:48:59:ad:e9:07:7e:35:90:67:2e:76: 47:b9:4d:58:80:ce:b0:51:00:37:4e:4a:f5:79:af: df:94:4b:9e:90:5f:d0:53:bd:c5:91:d5:00:72:05: 36:c5:a5:4d:be:d7:4d:1c:93:98:73:4a:39:bd:60: e9:86:b1:b1:9c:2f:b8:c6:c1:a8:6e:4f:64:ee:bb: 8d:dc:26:cb:24:a9:4a:0a:53:06:bd:bd:94:01:d5: 79:22:14:3e:1e:fc:5a:8a:7f:a6:20:b6:b1:46:d6: 50:dc:a1:a1:a6:d0:8b:58:45:cc:0c:a9:85:b0:76: 03:be:27:83:90:6c:0a:ab:81:4e:01:c2:e4:fc:73: 37:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9A:0F:E5:02:06:07:18:0B:D2:24:02:B2:C1:54:70:99:D0:89:BB X509v3 Authority Key Identifier: keyid:30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A8EF2B58A89A11EFA52A9970C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.188.92.0/23 Signature Algorithm: sha256WithRSAEncryption 93:fa:53:82:17:e8:1f:5e:42:52:2f:d5:61:7b:e2:b9:eb:fa: da:4c:30:38:a7:f6:13:5a:fe:a3:6b:29:82:0a:79:d0:96:e9: 43:59:a9:e7:be:5a:c9:e9:39:78:60:33:fd:06:4d:c3:f9:85: a2:c4:ba:7a:64:2f:8a:66:f5:4e:94:51:77:d1:53:a1:c4:a3: 84:9a:bd:2b:a3:43:7c:85:11:e0:97:7a:2d:93:ec:e4:a9:8c: 72:e7:10:5a:f1:75:b0:37:2d:55:64:e2:07:31:a6:71:0d:ca: 98:c9:a3:02:df:d7:a2:e6:dc:35:3b:12:73:2d:b2:00:0f:71: 5f:52:c5:10:a2:49:21:b2:fd:43:07:9e:5b:50:6d:b1:3c:2c: 1e:64:26:b6:79:f4:eb:f3:1c:99:36:15:7c:70:ff:1f:c1:21: 99:6f:fd:19:99:7e:92:8d:f8:25:01:20:dd:89:fd:be:d5:d8: 63:69:2c:59:15:63:1f:43:2f:e8:00:2e:fb:44:f9:f2:ec:3b: 8d:f5:83:85:89:d1:d1:e3:5d:66:d7:6c:c3:3f:0c:06:99:36: cb:4e:69:da:40:86:ab:6b:72:b3:77:2c:13:eb:ea:c9:82:ce: 19:9a:5d:e2:e6:ae:91:79:be:75:0c:5a:9c:e9:70:c5:01:8e: f8:73:4f:15 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RUMyRDExMC8GA1UEBRMoMzA0RDY0RTNGMTA1MTI5N0U0QjYyQUM3REUzNDgwRjQ3 QTI5QUUwRjAeFw0yNTA1MDUwMjM5MThaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MTgyNGQ2LTRhMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjmONeN61xCwAMNKDx9kbiSRSbsREcZCyeFvv/yrdi2BhlJOap4A6KjON5B518 UlYotFd6HCUytcAVZ/daSf7nNs0pi0V6HnInTM4GfprWI7UxlkLLjWY5k25rkfXE 5Pd//W+tnQnvqK0JvJ5gaUtUhsK24b5HTS3vWvdIWa3pB341kGcudke5TViAzrBR ADdOSvV5r9+US56QX9BTvcWR1QByBTbFpU2+100ck5hzSjm9YOmGsbGcL7jGwahu T2Tuu43cJsskqUoKUwa9vZQB1XkiFD4e/FqKf6YgtrFG1lDcoaGm0ItYRcwMqYWw dgO+J4OQbAqrgU4BwuT8czftAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU85oP5QIG BxgL0iQCssFUcJnQibswHwYDVR0jBBgwFoAUME1k4/EFEpfktirH3jSA9Hoprg8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFQzJELzgyQjcyNUU4QkNF MzExRUQ4NDlGOTMzMUM0RjlBRTAyL01FMWs0X0VGRXBma3RpckgzalNBOUhvcHJn OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTUUxazRfRUZFcGZrdGlySDNqU0E5SG9wcmc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUMyRC84MkI3MjVFOEJDRTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9BOEVGMkI1OEE4 OUExMUVGQTUyQTk5NzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWe8XDANBgkqhkiG9w0BAQsFAAOCAQEAk/pTghfoH15CUi/V YXviuev62kwwOKf2E1r+o2spggp50JbpQ1mp575ayek5eGAz/QZNw/mFosS6emQv imb1TpRRd9FTocSjhJq9K6NDfIUR4Jd6LZPs5KmMcucQWvF1sDctVWTiBzGmcQ3K mMmjAt/XoubcNTsScy2yAA9xX1LFEKJJIbL9QweeW1BtsTwsHmQmtnn06/McmTYV fHD/H8EhmW/9GZl+ko34JQEg3Yn9vtXYY2ksWRVjH0Mv6AAu+0T58uw7jfWDhYnR 0eNdZtdswz8MBpk2y05p2kCGq2tys3csE+vqyYLOGZpd4uaukXm+dQxanOlwxQGO +HNPFQ== -----END CERTIFICATE-----Generated at Sun May 11 10:40:06 2025 by rpki-client