$ rpki-client -vvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/4D6093C2EAD711ECBF99921CC4F9AE02.roa File: 4D6093C2EAD711ECBF99921CC4F9AE02.roa (raw, json) Hash identifier: gjKSDC6B7qsbe2sBo9HUqRMdIYdfTfIQbIhpB1zkpkQ= Subject key identifier: 1F:43:BC:C6:1D:2B:68:C3:8D:88:4D:BC:B7:A3:BA:04:9F:6C:C0:80 Certificate issuer: /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Certificate serial: 02F1 Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/4D6093C2EAD711ECBF99921CC4F9AE02.roa Signing time: Fri 25 Apr 2025 01:27:04 +0000 ROA not before: Fri 25 Apr 2025 01:27:04 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141767 IP address blocks: 103.186.196.0/23 maxlen: 24 2400:74e0::/32 maxlen: 32 2400:74e0::/47 maxlen: 48 2400:74e0:2::/48 maxlen: 48 2400:74e0:3::/48 maxlen: 48 2400:74e0:f::/48 maxlen: 48 2400:74e0:10::/47 maxlen: 47 2400:74e0:10::/48 maxlen: 48 2400:74e0:11::/48 maxlen: 48 2400:74e0:12::/47 maxlen: 48 2400:74e0:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E2CC, serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Validity Not Before: Apr 25 01:27:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680ae4e8-04f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:27:c7:7a:1c:6f:cb:08:cb:a1:2c:49:b4:9e: 82:10:21:c9:15:11:c1:db:10:23:1a:09:e2:67:05: c5:a0:47:a4:f4:49:fb:de:53:1f:e0:1c:84:00:e0: 33:d3:4c:ae:6d:1c:41:c5:b0:e1:b8:41:44:a5:9c: 18:8a:92:bb:5c:e8:bd:31:02:08:84:f2:ab:72:26: d4:2c:00:12:d1:47:32:44:59:26:61:5b:13:a2:f2: f0:03:9d:7f:e6:65:43:d3:31:20:89:cd:93:f6:23: a6:a5:22:73:31:35:03:f1:0e:e2:ca:de:d0:07:fb: 84:c2:08:2b:3b:32:8f:70:26:a8:8f:df:3b:87:70: f1:d8:af:81:b0:63:62:c7:67:d3:9a:8f:cd:d3:0a: cf:d8:8c:fd:01:87:2e:d3:56:93:1c:1b:9a:4f:68: 4d:36:26:2d:26:d3:51:07:74:01:87:a8:4e:df:4e: 60:94:f2:31:3a:cf:c2:65:10:1b:72:30:80:ae:e6: 1a:12:00:90:c8:58:65:33:68:30:f8:ca:88:2a:c0: 5a:6c:e7:aa:8e:75:0a:95:4c:da:be:31:46:de:63: 23:27:bd:e6:ce:ac:2d:a6:1d:08:c7:26:26:6f:33: f4:31:d7:97:bd:0c:93:f1:f8:3c:01:28:e8:7a:72: d1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:43:BC:C6:1D:2B:68:C3:8D:88:4D:BC:B7:A3:BA:04:9F:6C:C0:80 X509v3 Authority Key Identifier: keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/4D6093C2EAD711ECBF99921CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.186.196.0/23 IPv6: 2400:74e0::/32 Signature Algorithm: sha256WithRSAEncryption 85:70:6e:83:b0:cc:44:a4:2d:50:2b:42:31:c5:2a:bb:dc:15: 84:33:af:6c:e9:68:c0:d3:4c:b3:ee:ca:9d:a0:54:ce:36:21: 10:4a:2a:a7:33:04:df:22:25:8d:3e:de:73:56:28:1d:ec:af: ee:2e:f3:2e:bc:8f:56:1d:e1:67:68:8c:75:56:ff:2b:0b:1e: 97:93:a8:e5:20:74:11:d7:b3:03:05:57:4e:97:09:76:3f:da: 99:f8:54:60:26:76:1c:0e:84:0b:65:3c:26:27:d0:d1:d3:fd: 73:32:d9:cb:64:15:a7:ca:c7:e2:dc:5a:db:6a:96:d0:83:1e: 7c:05:8e:e6:6d:e3:e9:13:4d:e5:2b:e0:0b:fb:0f:8f:4e:be: 5b:47:48:4f:9d:1b:95:fc:71:cb:bb:3f:64:2a:9b:97:58:1b: 0f:62:7d:d5:0f:1a:40:51:2c:71:30:35:d0:11:88:66:09:a4: f8:62:fa:36:98:c2:b9:8f:6b:be:d3:77:36:a1:73:81:6a:19: d9:95:9a:d7:2e:fd:86:0a:50:b5:ff:c1:c2:af:97:4e:d1:a2: 71:a7:e5:ae:69:35:b6:85:9a:12:52:3a:58:3c:39:7d:c6:7f: 83:d3:ce:c8:79:15:c4:92:65:e6:94:c7:48:dc:2c:d7:69:20: 25:72:01:b2 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUyQ0MxMTAvBgNVBAUTKEVDNDYxOUEzNDc4QUQzQkQxNkFCNTY2OERERDMzMTFF NEQyREIyMkYwHhcNMjUwNDI1MDEyNzA0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhZTRlOC0wNGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCfHehxvywjLoSxJtJ6CECHJFRHB2xAjGgniZwXFoEek9En73lMf4ByEAOAz 00yubRxBxbDhuEFEpZwYipK7XOi9MQIIhPKrcibULAAS0UcyRFkmYVsTovLwA51/ 5mVD0zEgic2T9iOmpSJzMTUD8Q7iyt7QB/uEwggrOzKPcCaoj987h3Dx2K+BsGNi x2fTmo/N0wrP2Iz9AYcu01aTHBuaT2hNNiYtJtNRB3QBh6hO305glPIxOs/CZRAb cjCAruYaEgCQyFhlM2gw+MqIKsBabOeqjnUKlUzavjFG3mMjJ73mzqwtph0IxyYm bzP0MdeXvQyT8fg8ASjoenLR4wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFB9DvMYd K2jDjYhNvLejugSfbMCAMB8GA1UdIwQYMBaAFOxGGaNHitO9FqtWaN3TMR5NLbIv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTJDQy9BRjY3NjVGQ0U1 ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3MFdxMVpvM2RNeEhrMHRz aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFWVpvMGVLMDcwV3ExWm8zZE14SGswdHNpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUUyQ0MvQUY2NzY1RkNFNTgwMTFFQzlCOUQyQjYyQzRGOUFFMDIvNEQ2MDkzQzJF QUQ3MTFFQ0JGOTk5MjFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnusQwDQQCAAIwBwMFACQAdOAwDQYJKoZIhvcNAQELBQAD ggEBAIVwboOwzESkLVArQjHFKrvcFYQzr2zpaMDTTLPuyp2gVM42IRBKKqczBN8i JY0+3nNWKB3sr+4u8y68j1Yd4WdojHVW/ysLHpeTqOUgdBHXswMFV06XCXY/2pn4 VGAmdhwOhAtlPCYn0NHT/XMy2ctkFafKx+LcWttqltCDHnwFjuZt4+kTTeUr4Av7 D49OvltHSE+dG5X8ccu7P2Qqm5dYGw9ifdUPGkBRLHEwNdARiGYJpPhi+jaYwrmP a77Tdzahc4FqGdmVmtcu/YYKULX/wcKvl07RonGn5a5pNbaFmhJSOlg8OX3Gf4PT zsh5FcSSZeaUx0jcLNdpICVyAbI= -----END CERTIFICATE-----Generated at Sat Apr 26 08:04:52 2025 by rpki-client