$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/5A2DDDF2368F11EAB3D4CE7FC4F9AE02.roa File: 5A2DDDF2368F11EAB3D4CE7FC4F9AE02.roa (raw, json) Hash identifier: ov3AFeAQ+l+MAzwFBnkdWpwbra6uizG/Kj/0yMGpMI8= Subject key identifier: DF:C5:87:C1:38:11:86:BA:F0:62:6E:A5:2D:3C:D5:B2:1E:68:02:DB Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0B03 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/5A2DDDF2368F11EAB3D4CE7FC4F9AE02.roa Signing time: Wed 08 Jan 2025 19:08:49 +0000 ROA not before: Wed 08 Jan 2025 19:08:49 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 138557 IP address blocks: 103.132.216.0/22 maxlen: 22 103.132.216.0/23 maxlen: 23 103.132.216.0/24 maxlen: 24 103.132.217.0/24 maxlen: 24 103.132.218.0/23 maxlen: 23 103.132.218.0/24 maxlen: 24 103.132.219.0/24 maxlen: 24 2404:4040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2819 (0xb03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Jan 8 19:08:49 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=677ecd40-6b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ae:80:a6:e6:f3:21:c5:7c:d1:ca:33:81:b9: 57:bf:ca:56:f8:3e:60:67:21:d1:f0:18:95:15:1e: 28:01:fd:a3:8c:73:d5:33:7b:47:b6:fc:bf:5f:a0: 93:35:eb:3d:4c:60:c3:8c:16:65:91:cc:24:c6:93: ca:41:eb:be:ac:90:ea:28:b9:50:b6:7d:87:e3:11: cf:e8:c5:21:4d:00:b9:85:72:cd:01:f3:7c:82:92: 68:76:4c:9d:4a:73:b1:a3:34:d5:79:0e:2f:68:63: c1:c9:d7:1a:83:c1:13:49:d8:a7:40:38:57:ea:dc: 33:b0:ea:33:ea:82:36:77:d4:57:86:a6:22:3c:07: 60:4f:59:ea:64:5a:b7:82:c4:d5:72:0c:42:f0:12: 67:03:22:17:30:ce:9a:0c:d0:1b:7a:0c:3a:58:ee: 52:7a:09:fa:2e:ec:c4:77:74:52:4d:7f:73:c2:ad: 13:22:0c:d7:58:05:51:1d:5b:b6:fe:cd:a7:cc:4e: a3:16:8d:a2:44:f1:3b:24:60:06:b8:41:af:dd:7d: 77:f5:b1:5c:86:b4:b0:39:6e:05:41:27:e2:4c:02: 6f:fa:12:3d:f8:c2:85:55:31:ec:9b:98:f1:f0:4e: 7e:08:ad:c0:96:8c:e3:23:8f:7a:e0:c6:88:94:49: ee:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C5:87:C1:38:11:86:BA:F0:62:6E:A5:2D:3C:D5:B2:1E:68:02:DB X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/5A2DDDF2368F11EAB3D4CE7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.216.0/22 IPv6: 2404:4040::/32 Signature Algorithm: sha256WithRSAEncryption 28:19:f0:71:d6:e8:36:7d:a5:97:fc:2e:1a:8c:7c:e5:c6:2a: 31:32:27:7e:25:2d:54:38:69:ee:46:41:41:a0:87:e2:e5:4c: 41:b8:e4:e4:40:0f:04:8f:94:cd:4a:22:bc:83:ea:ce:8e:e6: de:30:a3:9f:9a:27:7f:57:f5:b4:1b:50:10:30:ba:f2:30:f6: d2:10:dd:92:fa:15:ac:1f:8f:72:18:c5:a2:15:f9:60:8d:8a: 2f:95:5f:49:1a:57:0b:c4:c7:2d:0b:a0:23:b0:2a:db:5e:3a: d3:4f:0d:b1:f8:97:64:82:65:71:53:57:c6:62:1c:25:55:e3: d2:17:45:c9:33:7f:21:9d:58:72:10:52:04:60:40:98:87:56: cf:b3:2a:ff:a3:63:a8:d6:e8:9d:99:1c:6b:cf:87:62:0c:7e: 03:e9:f6:3e:6c:7d:e2:42:e7:91:da:a4:62:45:5e:c4:52:30: 7c:23:e4:86:46:7e:62:cf:7d:e3:a6:4b:67:ad:32:b7:b4:b1: ad:5f:7f:24:86:98:f7:26:d3:a8:a1:45:0f:91:97:cd:02:69: a3:5c:f2:70:71:ea:40:34:75:69:c1:42:29:d9:19:a0:4b:f1: 72:27:d8:78:f1:c3:ef:27:ae:61:e1:3a:10:45:0e:71:74:8d: 50:bc:84:ec -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjUwMTA4MTkwODQ5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdlY2Q0MC02YjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0q6ApubzIcV80cozgblXv8pW+D5gZyHR8BiVFR4oAf2jjHPVM3tHtvy/X6CT Nes9TGDDjBZlkcwkxpPKQeu+rJDqKLlQtn2H4xHP6MUhTQC5hXLNAfN8gpJodkyd SnOxozTVeQ4vaGPBydcag8ETSdinQDhX6twzsOoz6oI2d9RXhqYiPAdgT1nqZFq3 gsTVcgxC8BJnAyIXMM6aDNAbegw6WO5Segn6LuzEd3RSTX9zwq0TIgzXWAVRHVu2 /s2nzE6jFo2iRPE7JGAGuEGv3X139bFchrSwOW4FQSfiTAJv+hI9+MKFVTHsm5jx 8E5+CK3AlozjI4964MaIlEnuiQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFN/Fh8E4 EYa68GJupS081bIeaALbMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkYyMkQvMkFBRkNDRUUzNjhFMTFFQTkyQTQ5RTdEQzRGOUFFMDIvNUEyRERERjIz NjhGMTFFQUIzRDRDRTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnhNgwDQQCAAIwBwMFACQEQEAwDQYJKoZIhvcNAQELBQAD ggEBACgZ8HHW6DZ9pZf8LhqMfOXGKjEyJ34lLVQ4ae5GQUGgh+LlTEG45ORADwSP lM1KIryD6s6O5t4wo5+aJ39X9bQbUBAwuvIw9tIQ3ZL6Fawfj3IYxaIV+WCNii+V X0kaVwvExy0LoCOwKtteOtNPDbH4l2SCZXFTV8ZiHCVV49IXRckzfyGdWHIQUgRg QJiHVs+zKv+jY6jW6J2ZHGvPh2IMfgPp9j5sfeJC55HapGJFXsRSMHwj5IZGfmLP feOmS2etMre0sa1ffySGmPcm06ihRQ+Rl80CaaNc8nBx6kA0dWnBQinZGaBL8XIn 2Hjxw+8nrmHhOhBFDnF0jVC8hOw= -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:55 2025 by rpki-client