$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/218CF3401F9411F083A54B70C4F9AE02.roa File: 218CF3401F9411F083A54B70C4F9AE02.roa (raw, json) Hash identifier: cemPgjS0vXzFUuNuxP49I9qr6l6Q8nACi0kNMGdPhuw= Subject key identifier: AB:94:AF:8C:E7:8E:3B:79:B4:AF:51:C2:B5:33:5F:D2:E4:9E:25:52 Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0F43 Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/218CF3401F9411F083A54B70C4F9AE02.roa Signing time: Wed 04 Jun 2025 18:00:14 +0000 ROA not before: Wed 04 Jun 2025 18:00:14 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 398704 IP address blocks: 103.232.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3907 (0xf43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Jun 4 18:00:14 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684089ae-d794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:5d:d4:09:95:da:2b:5f:26:23:b0:b7:fd: 48:47:c4:4d:52:b5:dd:a2:69:67:ba:2a:3f:15:6d: f4:93:53:a5:c1:cd:0a:88:98:f2:9c:9d:02:49:27: 07:95:7a:15:bf:b4:e6:89:6d:4d:4f:c7:cd:9c:5a: 09:dc:35:85:e5:5b:a1:61:bc:86:57:85:75:dd:d8: 54:cf:2b:62:3e:36:ff:8b:30:51:76:c6:a0:63:c6: 27:f1:b0:b2:94:56:fc:24:ae:38:de:53:40:7d:60: 90:d8:d1:c5:70:d7:19:35:fb:6b:de:5d:b9:13:7c: fa:df:fb:c8:fd:c2:15:6d:33:70:51:0c:24:32:c5: e1:ce:7b:11:a3:5a:f6:5a:15:01:f2:81:6e:6c:06: 80:0a:66:53:78:c8:8d:62:70:f4:c0:45:cb:4b:ba: 0c:13:15:c4:10:8c:db:28:2b:cf:d7:c5:59:ba:14: c9:aa:ff:ee:9d:e0:e4:f9:3a:00:c4:d3:4b:42:bc: 20:61:48:1f:10:8d:52:4e:07:b8:43:e6:26:ad:4a: 6c:f1:c1:ae:30:45:88:6f:44:b2:86:7d:ac:36:09: 3d:c6:69:65:ae:4c:fc:b3:2a:63:cf:1b:2f:0b:c0: a7:3d:23:16:e0:06:09:7c:c3:7a:a1:7c:4d:a2:c8: aa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:94:AF:8C:E7:8E:3B:79:B4:AF:51:C2:B5:33:5F:D2:E4:9E:25:52 X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/218CF3401F9411F083A54B70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.232.214.0/23 Signature Algorithm: sha256WithRSAEncryption 40:ae:43:32:bd:da:70:d4:f6:86:c3:ce:62:93:9f:18:5f:5b: a3:de:18:a9:d6:bd:6f:71:db:fc:dc:42:66:8c:43:49:29:54: 50:0d:57:19:0e:19:bd:15:15:db:0f:3d:27:5d:03:bb:74:e2: 71:3b:2a:22:a7:e9:d0:f5:0a:4d:99:c1:ef:6a:e2:d6:11:7a: a3:8c:60:ad:fd:22:76:93:21:27:a1:5a:8e:1b:c4:09:5d:d9: d7:c3:b6:40:fd:76:41:38:3f:34:06:2b:df:51:c6:bd:37:b0: 1b:1a:bc:14:b0:96:b8:5c:07:09:16:3f:d2:49:31:b4:5e:7f: 47:b5:d7:85:8d:52:a4:e7:84:a0:bc:b3:1f:0a:62:ec:32:b1: 20:b4:f3:b6:3c:70:17:b1:7d:43:56:af:b5:3c:80:fa:6b:fe: db:0a:43:a4:09:5a:07:7f:54:10:ec:0a:fa:98:39:c9:32:01: b6:8e:f4:5b:2c:34:e9:f0:4b:61:da:de:ff:88:5c:22:0d:8e: 63:55:ef:cc:c6:52:98:60:ef:c1:c0:da:7f:b3:d1:15:7c:fa: fb:3e:77:e1:e2:ce:ac:ff:cf:79:21:98:93:88:aa:e4:7c:b2: 56:d5:21:2a:38:d0:24:e5:45:e6:8b:d9:fe:fc:04:1e:6d:13: 42:67:2b:2c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjUwNjA0MTgwMDE0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQwODlhZS1kNzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVxd1AmV2itfJiOwt/1IR8RNUrXdomlnuio/FW30k1Olwc0KiJjynJ0CSScH lXoVv7TmiW1NT8fNnFoJ3DWF5VuhYbyGV4V13dhUzytiPjb/izBRdsagY8Yn8bCy lFb8JK443lNAfWCQ2NHFcNcZNftr3l25E3z63/vI/cIVbTNwUQwkMsXhznsRo1r2 WhUB8oFubAaACmZTeMiNYnD0wEXLS7oMExXEEIzbKCvP18VZuhTJqv/uneDk+ToA xNNLQrwgYUgfEI1STge4Q+YmrUps8cGuMEWIb0Syhn2sNgk9xmllrkz8sypjzxsv C8CnPSMW4AYJfMN6oXxNosiqTQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKuUr4zn jjt5tK9RwrUzX9LkniVSMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZCRkYvRTQyQkVBQzI5M0YwMTFFOUJDMENGRjcxQzRGOUFFMDIvMjE4Q0YzNDAx Rjk0MTFGMDgzQTU0QjcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn6NYwDQYJKoZIhvcNAQELBQADggEBAECuQzK92nDU9obD zmKTnxhfW6PeGKnWvW9x2/zcQmaMQ0kpVFANVxkOGb0VFdsPPSddA7t04nE7KiKn 6dD1Ck2Zwe9q4tYReqOMYK39InaTISehWo4bxAld2dfDtkD9dkE4PzQGK99Rxr03 sBsavBSwlrhcBwkWP9JJMbRef0e114WNUqTnhKC8sx8KYuwysSC087Y8cBexfUNW r7U8gPpr/tsKQ6QJWgd/VBDsCvqYOckyAbaO9FssNOnwS2Ha3v+IXCINjmNV78zG Uphg78HA2n+z0RV8+vs+d+Hizqz/z3khmJOIquR8slbVISo40CTlReaL2f78BB5t E0JnKyw= -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:16 2025 by rpki-client