$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/E2B81154741B11EB83EC7A62C4F9AE02.roa File: E2B81154741B11EB83EC7A62C4F9AE02.roa (raw, json) Hash identifier: SfDbv1ydo+vznwdchu/VzafMX/NegNN92VChKBq/R3A= Subject key identifier: 6E:66:57:61:FD:0E:A0:37:93:46:A6:B0:00:B2:6C:90:F0:0F:A0:25 Certificate issuer: /CN=A913B6D5/serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73 Certificate serial: 0668 Authority key identifier: 5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/E2B81154741B11EB83EC7A62C4F9AE02.roa Signing time: Fri 28 Mar 2025 22:54:28 +0000 ROA not before: Fri 28 Mar 2025 22:54:28 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 132800 IP address blocks: 103.162.230.0/23 maxlen: 24 2001:df6:280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1640 (0x668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B6D5, serialNumber=5AC965E50CFEBB59147937DC34D81FD302B6BA73 Validity Not Before: Mar 28 22:54:28 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e728a4-df3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f7:26:4f:f6:da:19:d5:85:38:1f:25:77:e5: b9:25:88:e7:e4:8c:0b:ff:42:9d:37:5b:5f:ca:dd: a4:ab:99:7d:ed:bc:c7:c0:24:e6:a9:c5:56:0f:18: db:4d:9e:cf:da:e6:3c:60:ee:c1:cf:62:9b:13:86: 17:5b:e1:26:33:5b:73:29:a7:7f:42:0c:c3:c3:66: 4c:0b:3c:ba:8f:c9:c5:e9:a0:e5:3a:36:72:72:23: a5:ec:25:cd:0f:bb:55:25:15:ad:e1:e3:36:02:0d: e4:39:44:db:f4:83:f1:3f:e3:c6:33:57:79:c1:ea: 75:ae:a4:18:3a:fe:52:12:4f:fe:7d:5a:e3:e8:d7: 62:a3:fb:44:2f:d2:c4:5e:c3:5b:65:8a:e8:bb:95: 12:f1:31:47:62:72:62:91:4c:d8:bd:4d:ca:a4:35: df:7a:fe:7d:a5:5f:e7:b3:ae:c5:b8:38:68:35:17: c0:b8:f2:81:93:43:2a:de:3f:5e:f0:3d:ce:b1:79: a2:f2:83:e2:a1:af:67:f5:4e:7c:00:d8:2e:11:76: 87:76:1c:6b:b8:f4:b6:27:75:b7:4b:d0:b8:b9:89: 30:25:a5:08:4b:32:c7:14:38:7a:d0:f1:f6:ff:9f: e3:2a:78:bb:1e:49:a1:26:91:90:c5:87:99:c7:0c: 12:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:66:57:61:FD:0E:A0:37:93:46:A6:B0:00:B2:6C:90:F0:0F:A0:25 X509v3 Authority Key Identifier: keyid:5A:C9:65:E5:0C:FE:BB:59:14:79:37:DC:34:D8:1F:D3:02:B6:BA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/Wsll5Qz-u1kUeTfcNNgf0wK2unM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsll5Qz-u1kUeTfcNNgf0wK2unM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D5/BC4BFB76741A11EBB8974E62C4F9AE02/E2B81154741B11EB83EC7A62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.230.0/23 IPv6: 2001:df6:280::/48 Signature Algorithm: sha256WithRSAEncryption 78:86:1a:ea:b4:5f:db:fa:48:c1:83:b3:7c:79:b0:81:6c:32: 9d:ec:c9:70:3a:9e:51:de:5f:fb:16:91:f9:06:76:72:ed:09: fe:76:ca:d4:30:dc:8f:17:e3:44:ad:29:52:55:30:fa:45:e1: 87:98:dd:21:e8:7a:a3:75:61:94:06:08:84:06:de:46:8c:9f: 32:46:4e:66:fa:0a:47:d6:da:67:34:54:89:50:38:67:7e:4f: 33:db:71:94:69:19:8a:05:a1:15:e8:76:33:e5:b3:3c:a0:ba: ac:14:1a:11:5a:d7:0f:d4:71:80:40:d8:08:39:80:49:a4:f8: 7d:5d:3a:96:af:2d:cf:44:8f:bb:8f:90:5f:23:52:4c:fa:4b: 5f:ce:3a:1f:5d:2c:72:80:f4:51:72:98:76:ea:67:d0:4d:cd: 8b:3e:bf:26:b0:8d:6d:fc:18:66:73:4c:4a:a5:57:29:d4:f7: e4:18:a0:04:02:7f:e2:f7:c5:75:95:d5:3e:12:c4:ae:2c:f2: 19:2e:8e:bb:9a:58:41:0b:8c:0f:8e:a5:d7:99:dc:71:11:2e: bf:6b:49:de:e0:aa:e0:dc:09:51:b5:a8:15:d6:6c:54:18:b2: 93:6f:e5:cc:db:b3:fd:a9:10:84:91:77:a7:1b:8b:5d:58:20: 64:18:e0:07 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I2RDUxMTAvBgNVBAUTKDVBQzk2NUU1MENGRUJCNTkxNDc5MzdEQzM0RDgxRkQz MDJCNkJBNzMwHhcNMjUwMzI4MjI1NDI4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U3MjhhNC1kZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfcmT/baGdWFOB8ld+W5JYjn5IwL/0KdN1tfyt2kq5l97bzHwCTmqcVWDxjb TZ7P2uY8YO7Bz2KbE4YXW+EmM1tzKad/QgzDw2ZMCzy6j8nF6aDlOjZyciOl7CXN D7tVJRWt4eM2Ag3kOUTb9IPxP+PGM1d5wep1rqQYOv5SEk/+fVrj6Ndio/tEL9LE XsNbZYrou5US8TFHYnJikUzYvU3KpDXfev59pV/ns67FuDhoNRfAuPKBk0Mq3j9e 8D3OsXmi8oPioa9n9U58ANguEXaHdhxruPS2J3W3S9C4uYkwJaUISzLHFDh60PH2 /5/jKni7HkmhJpGQxYeZxwwSywIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFG5mV2H9 DqA3k0amsACybJDwD6AlMB8GA1UdIwQYMBaAFFrJZeUM/rtZFHk33DTYH9MCtrpz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjZENS9CQzRCRkI3Njc0 MUExMUVCQjg5NzRFNjJDNEY5QUUwMi9Xc2xsNVF6LXUxa1VlVGZjTk5nZjB3SzJ1 bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzbGw1UXotdTFrVWVUZmNOTmdmMHdLMnVuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0I2RDUvQkM0QkZCNzY3NDFBMTFFQkI4OTc0RTYyQzRGOUFFMDIvRTJCODExNTQ3 NDFCMTFFQjgzRUM3QTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnouYwDwQCAAIwCQMHACABDfYCgDANBgkqhkiG9w0BAQsF AAOCAQEAeIYa6rRf2/pIwYOzfHmwgWwynezJcDqeUd5f+xaR+QZ2cu0J/nbK1DDc jxfjRK0pUlUw+kXhh5jdIeh6o3VhlAYIhAbeRoyfMkZOZvoKR9baZzRUiVA4Z35P M9txlGkZigWhFeh2M+WzPKC6rBQaEVrXD9RxgEDYCDmASaT4fV06lq8tz0SPu4+Q XyNSTPpLX846H10scoD0UXKYdupn0E3Niz6/JrCNbfwYZnNMSqVXKdT35BigBAJ/ 4vfFdZXVPhLErizyGS6Ou5pYQQuMD46l15nccREuv2tJ3uCq4NwJUbWoFdZsVBiy k2/lzNuz/akQhJF3pxuLXVggZBjgBw== -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:28 2025 by rpki-client