$ rpki-client -vvf rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/62C86698F80A11EFA400AC2FC4F9AE02.roa File: 62C86698F80A11EFA400AC2FC4F9AE02.roa (raw, json) Hash identifier: UFgylA3DVYfccb8XdgcDubKXiQ2Mtm89Z4YEW6R99s0= Subject key identifier: 1D:C3:DA:C3:37:E4:E9:A9:75:E8:B5:DB:E9:4D:52:08:A3:70:C6:E0 Certificate issuer: /CN=A918A498/serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7 Certificate serial: 02 Authority key identifier: 1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/62C86698F80A11EFA400AC2FC4F9AE02.roa Signing time: Mon 03 Mar 2025 08:34:56 +0000 ROA not before: Mon 03 Mar 2025 08:34:56 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 137198 IP address blocks: 103.104.179.0/24 maxlen: 24 2001:df3:5700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A498, serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7 Validity Not Before: Mar 3 08:34:56 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67c569b0-fbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:be:27:bf:8d:03:c8:d0:a7:63:99:8b:4d:dc: a0:ec:e9:87:64:55:ec:e1:cb:61:2f:ae:98:01:7b: 8c:fd:7a:35:a2:01:89:a7:81:df:58:f3:95:f9:aa: 86:77:0c:16:01:73:ed:f9:87:b5:69:8e:e2:40:f7: 3c:af:f8:3e:83:8c:97:ca:f2:00:9a:85:33:6f:b4: 11:cf:c3:56:95:95:26:42:0d:be:23:f5:40:e3:6f: 2d:cb:79:d1:dc:dd:24:7d:e6:a7:1e:4c:9a:f6:22: b2:ba:b1:3c:ed:6d:f6:79:84:b8:4a:5e:b5:09:38: 79:06:f3:7c:59:c9:46:85:13:98:b2:cd:a9:9c:2b: 81:a5:20:7b:a6:b5:f9:10:0e:2e:be:c3:ef:e0:fe: d7:1e:25:f3:82:a0:07:42:45:94:4a:19:32:1e:0b: f8:e7:f9:ad:45:40:10:bb:69:97:6b:12:cb:1d:82: 99:47:69:13:e4:74:59:87:cd:74:5e:36:0f:1d:b4: 40:f4:cd:17:5f:6a:35:f0:77:21:54:19:76:6c:ec: a9:89:20:25:d0:c9:91:33:81:7b:5c:a0:b0:0e:8a: 09:bc:30:fb:92:af:16:b3:94:a0:59:83:87:f1:16: 7d:6f:4a:e7:42:61:d1:85:3c:58:b1:80:0d:30:b9: 24:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C3:DA:C3:37:E4:E9:A9:75:E8:B5:DB:E9:4D:52:08:A3:70:C6:E0 X509v3 Authority Key Identifier: keyid:1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/62C86698F80A11EFA400AC2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.104.179.0/24 IPv6: 2001:df3:5700::/48 Signature Algorithm: sha256WithRSAEncryption 05:ed:d4:ae:33:9c:65:8c:cf:73:47:9c:b0:34:fa:e9:4d:9e: 10:a3:05:2e:bc:8d:65:6e:8d:05:c3:c1:d0:85:e4:39:a4:93: da:db:2b:56:54:02:f4:62:db:1d:99:d4:17:a2:59:28:1c:4b: c9:8f:16:f2:c5:df:66:84:13:ea:6c:63:54:6c:96:f7:94:da: b0:7f:33:e4:ec:40:3b:33:a1:43:4b:6f:87:ce:91:7e:ec:01: 73:63:dc:1e:63:d9:e4:e0:ce:cd:ae:02:fb:08:0d:08:a2:89: bd:88:c4:1c:88:5a:e8:39:1d:66:d0:3d:76:37:0b:be:4e:c2: 70:13:81:02:18:6d:8d:93:17:0e:95:6b:ae:48:82:64:b3:01: ca:17:60:64:bb:81:ad:a2:05:ee:c4:4c:4e:7d:89:ff:e0:d0: d2:06:d3:33:ed:63:4e:00:f5:27:bc:86:2e:fc:e7:c3:4b:bc: 3e:17:ca:ad:76:f1:b9:59:03:e1:e6:c4:62:2e:a4:48:36:d0: bc:f6:68:77:4c:8d:e9:d9:d3:02:f3:fd:25:28:60:23:b1:29: 21:40:08:52:11:e5:48:93:ca:97:19:d1:72:2b:d8:28:de:c1: 84:b7:41:34:5f:8d:a3:08:d9:28:a9:97:21:9f:80:b9:a1:13: 83:de:8d:63 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTQ5ODExMC8GA1UEBRMoMUNERTEyNDRDQkJCOTY1NDJFNkM4QjA5QTNEQUMxQzFC NDQzNjhENzAeFw0yNTAzMDMwODM0NTZaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzU2OWIwLWZiYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNvie/jQPI0KdjmYtN3KDs6YdkVezhy2EvrpgBe4z9ejWiAYmngd9Y85X5qoZ3 DBYBc+35h7VpjuJA9zyv+D6DjJfK8gCahTNvtBHPw1aVlSZCDb4j9UDjby3LedHc 3SR95qceTJr2IrK6sTztbfZ5hLhKXrUJOHkG83xZyUaFE5iyzamcK4GlIHumtfkQ Di6+w+/g/tceJfOCoAdCRZRKGTIeC/jn+a1FQBC7aZdrEssdgplHaRPkdFmHzXRe Ng8dtED0zRdfajXwdyFUGXZs7KmJICXQyZEzgXtcoLAOigm8MPuSrxazlKBZg4fx Fn1vSudCYdGFPFixgA0wuSS5AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUHcPawzfk 6al16LXb6U1SCKNwxuAwHwYDVR0jBBgwFoAUHN4SRMu7llQubIsJo9rBwbRDaNcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBNDk4L0QyREVEMzQ2Rjgw OTExRUZBNTI4MUIxNkM0RjlBRTAyL0hONFNSTXU3bGxRdWJJc0pvOXJCd2JSRGFO Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSE40U1JNdTdsbFF1YklzSm85ckJ3YlJEYU5jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTQ5OC9EMkRFRDM0NkY4MDkxMUVGQTUyODFCMTZDNEY5QUUwMi82MkM4NjY5OEY4 MEExMUVGQTQwMEFDMkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAGdoszAPBAIAAjAJAwcAIAEN81cAMA0GCSqGSIb3DQEBCwUA A4IBAQAF7dSuM5xljM9zR5ywNPrpTZ4QowUuvI1lbo0Fw8HQheQ5pJPa2ytWVAL0 YtsdmdQXolkoHEvJjxbyxd9mhBPqbGNUbJb3lNqwfzPk7EA7M6FDS2+HzpF+7AFz Y9weY9nk4M7NrgL7CA0Ioom9iMQciFroOR1m0D12Nwu+TsJwE4ECGG2NkxcOlWuu SIJkswHKF2Bku4GtogXuxExOfYn/4NDSBtMz7WNOAPUnvIYu/OfDS7w+F8qtdvG5 WQPh5sRiLqRINtC89mh3TI3p2dMC8/0lKGAjsSkhQAhSEeVIk8qXGdFyK9go3sGE t0E0X42jCNkoqZchn4C5oROD3o1j -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:38 2025 by rpki-client