$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/7E8D9A52895411E6B3538424C4F9AE02.roa File: 7E8D9A52895411E6B3538424C4F9AE02.roa (raw, json) Hash identifier: SuDRS4jGJE9zSZ58w86iX8uePQ9m/GiWmqEd/5+TkEE= Subject key identifier: 8C:92:52:02:EB:16:65:98:36:4F:F4:F5:92:F7:A8:1E:A1:B9:F9:B8 Certificate issuer: /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Certificate serial: 1E18 Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/7E8D9A52895411E6B3538424C4F9AE02.roa Signing time: Fri 06 Jun 2025 16:35:07 +0000 ROA not before: Fri 06 Jun 2025 16:35:07 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135524 IP address blocks: 103.221.252.0/22 maxlen: 22 103.221.252.0/23 maxlen: 23 103.221.252.0/24 maxlen: 24 103.221.253.0/24 maxlen: 24 103.221.254.0/23 maxlen: 23 103.221.254.0/24 maxlen: 24 103.221.255.0/24 maxlen: 24 2405:ac80::/32 maxlen: 36 2405:ac80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7704 (0x1e18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB3F, serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Validity Not Before: Jun 6 16:35:07 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=684318bb-5d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:26:e8:d3:5e:77:9d:5b:82:e2:b5:32:e6:af: ec:d8:7a:32:77:17:51:3b:d2:76:10:81:bf:5a:11: 6e:3a:f6:88:c2:0e:ee:b0:e8:72:cf:d4:33:0d:0c: 4a:64:6f:86:5e:d2:66:c7:25:6c:a4:ec:0e:bb:8f: ca:5c:8b:d7:a5:da:46:cf:af:48:24:24:7c:88:34: f3:b5:e5:4a:87:ca:22:2e:82:47:8f:6b:a1:d2:de: 47:f0:21:88:fe:27:a8:f3:4f:08:2a:91:21:0f:08: 34:1f:4e:1e:e8:5f:a1:65:dc:c6:78:e4:05:92:0a: 2a:f6:44:1e:65:ac:1a:d6:ba:4e:e2:23:31:30:29: 23:f6:20:e6:61:dc:25:b4:af:19:18:e2:53:16:c5: e6:46:0f:bc:d0:11:52:37:a1:70:dc:10:b7:d2:1f: fb:8b:00:4c:38:f0:67:45:79:2b:06:f1:c6:6c:39: a2:1d:97:98:4f:05:7b:e2:10:ef:80:79:6b:0e:76: fc:a9:2f:de:5a:10:d5:ca:69:95:b0:f6:3c:97:9b: be:33:d3:2b:7d:35:e5:a8:fa:68:db:17:27:42:3d: bc:6c:8d:a8:d9:ea:b6:1d:97:68:4c:3e:0d:ce:4b: 6d:7d:b4:30:b1:ee:75:f3:73:9a:8a:b2:88:8d:70: 6b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:92:52:02:EB:16:65:98:36:4F:F4:F5:92:F7:A8:1E:A1:B9:F9:B8 X509v3 Authority Key Identifier: keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/7E8D9A52895411E6B3538424C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.221.252.0/22 IPv6: 2405:ac80::/32 Signature Algorithm: sha256WithRSAEncryption 8b:75:90:5b:d1:a2:3f:3e:64:d1:cf:fa:31:c7:39:9b:74:bd: 62:bc:bd:e8:bc:30:7c:1a:35:36:36:a1:9e:d2:15:51:3d:a3: 0f:a4:e6:e1:32:1f:c2:ee:e8:f3:7e:aa:ae:82:19:a2:b0:f9: 8c:22:19:4a:f5:9b:84:a1:69:54:10:6c:9d:d9:7c:17:01:88: 64:cb:5a:bb:f9:a5:42:49:ab:bd:23:86:b2:f8:38:1b:79:81: 4d:f8:ea:40:2f:d8:d2:6b:0a:51:2e:d2:98:0c:c8:7d:1f:a1: 8e:34:23:35:b1:c8:4b:f1:b1:48:55:f0:25:ad:c8:74:5e:46: 35:d1:f5:78:74:67:09:9f:cd:70:ff:d4:9c:db:da:12:c5:43: 68:29:c7:d6:0f:36:3d:85:1a:5f:e8:04:aa:a2:f8:6f:f3:eb: da:bd:eb:23:bb:c7:86:1d:3f:fc:33:ee:94:15:6c:84:8b:dc: 20:37:4f:a7:70:13:43:2a:f9:38:37:b8:bc:33:f6:8b:fc:4a: 78:d4:a3:4d:a9:09:e4:51:7a:50:3e:91:52:8a:09:7a:54:a1: 45:b4:2d:3e:1a:d0:d7:2b:06:42:68:3b:24:35:d7:45:c1:3c: ec:43:a5:6c:fb:bb:7d:c9:01:eb:a2:d7:53:ad:e6:64:ef:97: 10:62:10:3f -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICHhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCM0YxMTAvBgNVBAUTKDFBQjFERThFQzg5MUFGQTJENEUxQzkxQUY1NTgzNDkw QkZCQkMyMDkwHhcNMjUwNjA2MTYzNTA3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQzMThiYi01ZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCbo0153nVuC4rUy5q/s2HoydxdRO9J2EIG/WhFuOvaIwg7usOhyz9QzDQxK ZG+GXtJmxyVspOwOu4/KXIvXpdpGz69IJCR8iDTzteVKh8oiLoJHj2uh0t5H8CGI /ieo808IKpEhDwg0H04e6F+hZdzGeOQFkgoq9kQeZawa1rpO4iMxMCkj9iDmYdwl tK8ZGOJTFsXmRg+80BFSN6Fw3BC30h/7iwBMOPBnRXkrBvHGbDmiHZeYTwV74hDv gHlrDnb8qS/eWhDVymmVsPY8l5u+M9MrfTXlqPpo2xcnQj28bI2o2eq2HZdoTD4N zkttfbQwse5183OairKIjXBruwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIySUgLr FmWYNk/09ZL3qB6hufm4MB8GA1UdIwQYMBaAFBqx3o7Ika+i1OHJGvVYNJC/u8IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REIzRi9EMzkxMDEzNDg5 NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2TFU0Y2thOVZnMGtMLTd3 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dySGVqc2lScjZMVTRja2E5Vmcwa0wtN3dnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkRCM0YvRDM5MTAxMzQ4OTUzMTFFNjhBODU0OTIzQzRGOUFFMDIvN0U4RDlBNTI4 OTU0MTFFNkIzNTM4NDI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJn3fwwDQQCAAIwBwMFACQFrIAwDQYJKoZIhvcNAQELBQAD ggEBAIt1kFvRoj8+ZNHP+jHHOZt0vWK8vei8MHwaNTY2oZ7SFVE9ow+k5uEyH8Lu 6PN+qq6CGaKw+YwiGUr1m4ShaVQQbJ3ZfBcBiGTLWrv5pUJJq70jhrL4OBt5gU34 6kAv2NJrClEu0pgMyH0foY40IzWxyEvxsUhV8CWtyHReRjXR9Xh0ZwmfzXD/1Jzb 2hLFQ2gpx9YPNj2FGl/oBKqi+G/z69q96yO7x4YdP/wz7pQVbISL3CA3T6dwE0Mq +Tg3uLwz9ov8SnjUo02pCeRRelA+kVKKCXpUoUW0LT4a0NcrBkJoOyQ110XBPOxD pWz7u33JAeui11Ot5mTvlxBiED8= -----END CERTIFICATE-----Generated at Wed Jun 18 16:36:51 2025 by rpki-client