$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/953250CAE90011EB8DE96E50C4F9AE02.roa File: 953250CAE90011EB8DE96E50C4F9AE02.roa (raw, json) Hash identifier: 1/sB6pu/nvBS4QJYppsZekVqlkIQlRDFcO4hqm31NTM= Subject key identifier: 27:87:92:F1:92:AE:28:FA:36:E2:F5:FB:08:AE:5C:D9:1B:06:EE:CE Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Certificate serial: 0B50 Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/953250CAE90011EB8DE96E50C4F9AE02.roa Signing time: Tue 10 Jun 2025 07:45:08 +0000 ROA not before: Tue 10 Jun 2025 07:45:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56307 IP address blocks: 103.227.20.0/22 maxlen: 24 139.5.172.0/22 maxlen: 24 202.129.148.0/22 maxlen: 24 202.129.152.0/21 maxlen: 24 203.22.104.0/23 maxlen: 24 2001:df1:3a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 19:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918919A, serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Validity Not Before: Jun 10 07:45:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6847e284-487d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:2d:20:82:c0:ba:92:95:5a:08:f9:fe:df: 9f:d6:58:8c:a5:28:6a:df:d1:e3:bf:8c:19:71:70: df:98:df:2d:04:16:b6:41:ad:b2:ee:ca:07:87:3c: 8a:d7:41:31:94:4f:3b:5d:0b:0f:6e:a8:ac:c1:39: e9:97:a6:8d:7a:7d:ff:f9:fc:8c:88:1d:04:a7:1e: 3e:b3:ed:5b:77:7c:e7:c7:8c:28:0f:09:1e:34:8c: 21:94:5c:14:d7:b8:1a:8b:32:32:63:35:db:c7:6d: 53:a9:35:7a:d4:fc:e9:82:f6:45:9c:b0:a0:6a:dd: f1:b3:5d:41:aa:f7:78:5f:bb:ce:e9:bd:e7:4d:29: b7:6b:95:81:3d:d7:59:48:5c:3a:e0:9b:ff:15:ca: 90:fd:d1:75:32:ca:7f:93:ac:ed:50:9f:89:bd:6a: ae:14:63:f0:e4:1c:b3:e0:56:0a:1a:19:46:9f:20: ee:bf:1b:07:01:a8:88:4c:f6:35:6b:21:6d:8b:40: 8a:0c:ff:9c:14:12:80:1b:09:2c:d6:c9:ef:5c:d1: cf:33:8d:13:67:c8:63:c6:39:13:69:2b:b7:a4:fe: 48:e9:bb:96:4e:f7:20:05:02:0b:03:13:5c:f8:dd: 16:06:22:11:69:0f:1f:69:91:30:2e:43:63:76:ce: d8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:87:92:F1:92:AE:28:FA:36:E2:F5:FB:08:AE:5C:D9:1B:06:EE:CE X509v3 Authority Key Identifier: keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/953250CAE90011EB8DE96E50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.227.20.0/22 139.5.172.0/22 202.129.148.0-202.129.159.255 203.22.104.0/23 IPv6: 2001:df1:3a00::/48 Signature Algorithm: sha256WithRSAEncryption 07:ac:82:7f:9e:00:29:d9:a2:a2:f2:6b:ba:60:77:a0:23:35: 11:99:68:1b:43:a8:5b:49:f8:0f:b1:15:43:6d:df:58:95:87: 02:33:a7:2f:2e:14:77:0c:9a:7f:9b:f6:30:5f:3d:fc:61:44: 06:98:90:d9:84:e0:53:15:ee:1b:a3:ca:52:4f:7b:48:ef:59: 1f:33:b7:e0:89:29:d1:2c:a6:61:55:16:44:08:fc:71:d4:ed: 3c:d2:df:15:8d:db:ac:a2:83:00:ca:e9:ff:34:b3:9c:a7:2b: db:84:65:19:4b:cb:c9:e2:35:99:bc:0b:99:c4:e4:f6:ef:46: 49:fd:3c:6a:e7:90:65:f0:e3:2f:1f:1a:ba:ae:07:29:18:01: f0:de:e1:8f:ec:bc:c7:a6:e3:a6:3f:be:21:3a:91:23:a6:33: 1c:81:cf:d0:94:1a:b4:bc:da:b9:11:8f:a0:83:c0:72:ee:16: b9:72:73:ed:75:42:95:64:fb:2d:d9:2d:0a:55:d3:70:27:78: a8:95:02:fb:be:b9:ba:15:a1:dc:e9:d2:6d:52:3e:45:3e:a4: f6:27:83:a1:ba:1d:e4:79:8a:4b:4f:4d:84:43:93:eb:47:78: 21:c1:f0:43:e2:bc:e3:dc:c9:27:f4:d3:d4:79:a4:cc:7a:91: 47:47:0c:7a -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxOUExMTAvBgNVBAUTKDJFNUJDQkM2NjFBRkYxRkVENThCMEZGNEI1ODNEQ0Y1 RUMxQTM3NEEwHhcNMjUwNjEwMDc0NTA4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ3ZTI4NC00ODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4ItIILAupKVWgj5/t+f1liMpShq39Hjv4wZcXDfmN8tBBa2Qa2y7soHhzyK 10ExlE87XQsPbqiswTnpl6aNen3/+fyMiB0Epx4+s+1bd3znx4woDwkeNIwhlFwU 17gaizIyYzXbx21TqTV61PzpgvZFnLCgat3xs11Bqvd4X7vO6b3nTSm3a5WBPddZ SFw64Jv/FcqQ/dF1Msp/k6ztUJ+JvWquFGPw5Byz4FYKGhlGnyDuvxsHAaiITPY1 ayFti0CKDP+cFBKAGwks1snvXNHPM40TZ8hjxjkTaSu3pP5I6buWTvcgBQILAxNc +N0WBiIRaQ8faZEwLkNjds7YTQIDAQABo4ICwDCCArwwHQYDVR0OBBYEFCeHkvGS rij6NuL1+wiuXNkbBu7OMB8GA1UdIwQYMBaAFC5by8Zhr/H+1YsP9LWD3PXsGjdK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTE5QS8wNDkwOTA5QTQz MUIxMUVBQjAxOTc3MkNDNEY5QUUwMi9MbHZMeG1HdjhmN1Zpd18wdFlQYzlld2FO MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsdkx4bUd2OGY3Vml3XzB0WVBjOWV3YU4wby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODkxOUEvMDQ5MDkwOUE0MzFCMTFFQUIwMTk3NzJDQzRGOUFFMDIvOTUzMjUwQ0FF OTAwMTFFQjhERTk2RTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E OzA5MCYEAgABMCADBAJn4xQDBAKLBawwDAMEAsqBlAMEBcqBgAMEAcsWaDAPBAIA AjAJAwcAIAEN8ToAMA0GCSqGSIb3DQEBCwUAA4IBAQAHrIJ/ngAp2aKi8mu6YHeg IzURmWgbQ6hbSfgPsRVDbd9YlYcCM6cvLhR3DJp/m/YwXz38YUQGmJDZhOBTFe4b o8pST3tI71kfM7fgiSnRLKZhVRZECPxx1O080t8VjdusooMAyun/NLOcpyvbhGUZ S8vJ4jWZvAuZxOT270ZJ/Txq55Bl8OMvHxq6rgcpGAHw3uGP7LzHpuOmP74hOpEj pjMcgc/QlBq0vNq5EY+gg8By7ha5cnPtdUKVZPst2S0KVdNwJ3iolQL7vrm6FaHc 6dJtUj5FPqT2J4Ohuh3keYpLT02EQ5PrR3ghwfBD4rzj3Mkn9NPUeaTMepFHRwx6 -----END CERTIFICATE-----Generated at Fri Jun 20 18:13:28 2025 by rpki-client