$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/82FF48B4AB3C11EC9D6C1668C4F9AE02.roa File: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (raw, json) Hash identifier: rWvQOGaQUF4KDCbeAOUg2IDrYzmM2mMdECYdn3UKK/I= Subject key identifier: 82:C5:08:B6:2D:65:B5:0A:2D:13:75:08:BE:6E:F9:C0:A4:88:FA:2E Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Certificate serial: 0367 Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/82FF48B4AB3C11EC9D6C1668C4F9AE02.roa Signing time: Fri 25 Apr 2025 00:56:08 +0000 ROA not before: Fri 25 Apr 2025 00:56:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136451 IP address blocks: 103.184.136.0/24 maxlen: 24 2001:df0:9140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871 (0x367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A Validity Not Before: Apr 25 00:56:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680adda8-7ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f6:41:c2:04:19:b7:0b:4c:47:b5:4b:12:e0: 86:1b:d4:38:14:ec:b5:56:23:e8:20:b1:bf:2e:fb: 54:a9:53:d9:4e:d7:c3:b7:ae:33:18:1e:4b:c9:f3: 9b:68:79:6a:e1:f8:c0:df:1a:33:ed:84:7b:39:97: 36:66:a2:2f:a9:3c:2d:98:cf:40:a5:83:c2:fc:36: a8:82:11:2b:5b:e7:c5:2d:81:10:57:4c:60:87:32: 6a:d4:fd:6d:b0:d5:96:bd:cb:8f:49:7e:ef:1c:4b: b9:d2:9b:5d:4c:f5:ef:fe:79:fe:4a:8d:cb:f6:3f: 06:21:38:09:cc:5f:b1:50:44:4d:7b:2e:b6:b3:01: 89:66:5d:e2:a5:fa:7d:f1:91:2e:ed:15:25:d0:b7: 19:18:c6:be:f6:cf:d4:df:ba:50:c3:ab:dc:bd:7c: ba:4b:82:9a:26:c6:14:3f:a1:60:21:a0:7a:f7:2a: 9f:db:80:64:84:c6:11:f3:20:8d:d8:af:d5:5c:2f: 77:01:0a:36:f2:40:c1:4a:e6:61:1c:46:a2:07:82: fa:52:06:a5:72:89:f3:55:3b:e3:82:29:70:40:a7: cc:5c:21:7f:5b:0c:0b:0d:dd:c1:32:14:17:7c:65: c4:9f:69:82:d3:4b:af:cf:13:43:63:25:ec:ab:f6: 67:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C5:08:B6:2D:65:B5:0A:2D:13:75:08:BE:6E:F9:C0:A4:88:FA:2E X509v3 Authority Key Identifier: keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/82FF48B4AB3C11EC9D6C1668C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.184.136.0/24 IPv6: 2001:df0:9140::/48 Signature Algorithm: sha256WithRSAEncryption 29:21:23:e2:6c:0a:0b:01:9c:0c:85:f4:48:59:e1:85:9e:a0: 52:54:1d:e8:f3:be:52:8d:09:41:82:05:87:36:f6:bf:12:03: e4:99:fe:4b:a3:c0:3b:3f:e9:8e:22:0f:9c:9f:9c:e8:bf:d3: 8c:86:9e:7d:3c:e9:53:de:61:90:b0:23:fb:74:bb:59:ed:37: 9e:13:47:9f:a6:16:f0:ae:53:9e:00:9b:bc:d2:c3:fa:8c:7e: 26:66:db:fc:55:b5:36:48:ea:5d:3e:2b:cf:80:30:20:3f:d6: ec:43:3a:29:b1:45:80:4e:5d:ed:d4:e3:53:e2:52:a6:5c:04: 8d:03:07:52:67:50:97:27:e4:2a:b1:6d:c0:7a:5f:f8:5d:91: 70:4e:cf:ad:01:f2:c1:bc:9c:c5:aa:6a:c0:39:0a:32:a8:6c: a9:b1:93:76:d3:d8:3e:f8:a9:bd:58:75:0b:7d:e8:82:f0:a8: 7c:19:94:0f:f3:d9:9b:b4:b5:04:4b:b8:cc:c6:6d:4d:d7:6c: d9:09:58:8f:40:66:6e:bf:1c:fe:bc:86:8e:42:d0:c2:af:fc: 34:08:4e:94:d2:60:ac:d9:a9:c0:8c:39:e1:8b:e6:50:56:d2: 53:bc:c5:10:79:63:36:40:2b:60:df:7d:96:59:e6:00:4b:b4: 90:ee:bd:c6 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG NTczOEY5MEEwHhcNMjUwNDI1MDA1NjA4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhZGRhOC03ZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7fZBwgQZtwtMR7VLEuCGG9Q4FOy1ViPoILG/LvtUqVPZTtfDt64zGB5LyfOb aHlq4fjA3xoz7YR7OZc2ZqIvqTwtmM9ApYPC/DaoghErW+fFLYEQV0xghzJq1P1t sNWWvcuPSX7vHEu50ptdTPXv/nn+So3L9j8GITgJzF+xUERNey62swGJZl3ipfp9 8ZEu7RUl0LcZGMa+9s/U37pQw6vcvXy6S4KaJsYUP6FgIaB69yqf24BkhMYR8yCN 2K/VXC93AQo28kDBSuZhHEaiB4L6UgalconzVTvjgilwQKfMXCF/WwwLDd3BMhQX fGXEn2mC00uvzxNDYyXsq/ZnwQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFILFCLYt ZbUKLRN1CL5u+cCkiPouMB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkRDN0MvNkFFNzYxNTJBQjM4MTFFQzhCREI4QzNDQzRGOUFFMDIvODJGRjQ4QjRB QjNDMTFFQzlENkMxNjY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnuIgwDwQCAAIwCQMHACABDfCRQDANBgkqhkiG9w0BAQsF AAOCAQEAKSEj4mwKCwGcDIX0SFnhhZ6gUlQd6PO+Uo0JQYIFhzb2vxID5Jn+S6PA Oz/pjiIPnJ+c6L/TjIaefTzpU95hkLAj+3S7We03nhNHn6YW8K5TngCbvNLD+ox+ Jmbb/FW1NkjqXT4rz4AwID/W7EM6KbFFgE5d7dTjU+JSplwEjQMHUmdQlyfkKrFt wHpf+F2RcE7PrQHywbycxapqwDkKMqhsqbGTdtPYPvipvVh1C33ogvCofBmUD/PZ m7S1BEu4zMZtTdds2QlYj0Bmbr8c/ryGjkLQwq/8NAhOlNJgrNmpwIw54YvmUFbS U7zFEHljNkArYN99llnmAEu0kO69xg== -----END CERTIFICATE-----Generated at Sat Apr 26 07:41:14 2025 by rpki-client