$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/C98E616802E511EF8ED1355CC4F9AE02.roa File: C98E616802E511EF8ED1355CC4F9AE02.roa (raw, json) Hash identifier: gcadtXqsvUpMiAzq36zy8qMAKjIAq2N8zE6RS42bGR0= Subject key identifier: B0:F1:87:93:EF:23:06:4B:79:68:46:FF:66:C2:C1:4A:67:F8:18:A8 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 09F0 Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/C98E616802E511EF8ED1355CC4F9AE02.roa Signing time: Sun 06 Apr 2025 19:59:55 +0000 ROA not before: Sun 06 Apr 2025 19:59:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152479 IP address blocks: 103.150.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2544 (0x9f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: Apr 6 19:59:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f2dd3b-f7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5e:ca:3d:98:71:36:79:87:70:a3:d0:c4:b5: 2d:09:f4:9c:84:74:d9:ee:26:36:9b:c8:41:ec:c6: cc:70:c6:29:cb:f1:a2:15:d4:80:dc:4c:f6:54:b1: e7:67:f3:48:38:7e:9c:da:c3:c7:49:9c:c1:8d:02: f5:ae:07:05:fd:2e:8f:2c:4d:12:b6:08:72:f5:82: db:8d:e6:a8:eb:8b:22:cb:77:38:68:57:1a:9c:61: 0c:6f:17:f1:4d:58:91:c2:35:b1:54:42:fe:d2:3b: 2a:f4:57:9c:90:e3:44:5b:26:46:38:3a:71:37:cd: c1:c7:7f:24:a2:78:16:ed:aa:4c:2f:8b:a2:69:d9: 8e:3a:f8:93:5c:a1:7e:75:90:22:75:32:3a:41:aa: df:36:16:a3:f5:0d:5e:22:0b:c7:92:64:b3:50:b6: a2:de:83:b0:ac:23:7e:42:15:74:9a:d9:64:7d:dd: 2d:15:84:5d:60:35:07:45:4c:cf:0a:8f:8b:ad:c3: 05:bb:4e:dd:ab:fb:7d:bf:6e:71:ac:46:37:77:b0: 6e:f1:cb:1d:ce:81:68:59:24:2d:e2:06:0d:99:98: cc:c9:aa:e6:72:cf:84:b3:f5:6d:2f:0c:fa:2f:91: 7c:87:37:66:f7:42:d2:38:66:eb:e3:76:af:a0:36: 89:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F1:87:93:EF:23:06:4B:79:68:46:FF:66:C2:C1:4A:67:F8:18:A8 X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/C98E616802E511EF8ED1355CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.19.0/24 Signature Algorithm: sha256WithRSAEncryption 30:25:14:9e:c6:f7:56:8a:2e:2d:e9:0c:63:0b:49:67:9b:48: 8e:a6:ad:e1:0a:a1:5a:0e:f5:c5:35:e6:3f:53:c1:6c:e4:19: e5:49:db:93:99:56:77:5d:8d:2c:d9:a5:87:fe:4d:aa:2a:c6: a8:f3:03:46:c2:48:9b:34:85:52:37:d9:d7:16:05:2e:c4:62: 3d:73:8d:b4:af:26:b4:13:44:63:ce:ea:5e:97:a0:27:94:5b: 10:03:a5:f9:63:2e:3d:b2:a2:ae:99:6c:f9:b0:77:00:13:b5: 3b:ed:38:fa:8b:59:0e:f8:1c:aa:35:2e:75:f8:cc:5f:6b:70: ce:d1:c0:5d:70:6d:02:c4:d9:29:84:fd:03:21:80:93:83:62: d9:13:15:ad:16:ea:36:c5:50:4a:96:49:5b:05:4b:ad:ab:d3: 45:44:66:29:ab:38:7a:75:d1:cf:9a:2e:ec:a2:98:6a:23:0f: 70:f9:45:40:9f:8a:16:6e:21:93:03:e8:74:23:62:9b:84:e3: a6:e7:72:e2:9a:3e:be:8e:5c:05:56:2d:7c:c7:8a:6d:cb:17: 42:90:9c:ab:42:0a:81:b5:a2:77:22:90:21:4d:62:e3:54:d6: ff:f3:6f:37:1d:30:da:0d:9a:dd:b7:a4:30:d1:6e:69:d8:9e: 50:33:10:fb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjUwNDA2MTk1OTU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YyZGQzYi1mN2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6l7KPZhxNnmHcKPQxLUtCfSchHTZ7iY2m8hB7MbMcMYpy/GiFdSA3Ez2VLHn Z/NIOH6c2sPHSZzBjQL1rgcF/S6PLE0Stghy9YLbjeao64siy3c4aFcanGEMbxfx TViRwjWxVEL+0jsq9FeckONEWyZGODpxN83Bx38kongW7apML4uiadmOOviTXKF+ dZAidTI6QarfNhaj9Q1eIgvHkmSzULai3oOwrCN+QhV0mtlkfd0tFYRdYDUHRUzP Co+LrcMFu07dq/t9v25xrEY3d7Bu8csdzoFoWSQt4gYNmZjMyarmcs+Es/VtLwz6 L5F8hzdm90LSOGbr43avoDaJEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLDxh5Pv IwZLeWhG/2bCwUpn+BioMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEJERUIvRkE1Q0Y0MkM3NUJDMTFFQUEzRTNBMDZBQzRGOUFFMDIvQzk4RTYxNjgw MkU1MTFFRjhFRDEzNTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnlhMwDQYJKoZIhvcNAQELBQADggEBADAlFJ7G91aKLi3p DGMLSWebSI6mreEKoVoO9cU15j9TwWzkGeVJ25OZVnddjSzZpYf+TaoqxqjzA0bC SJs0hVI32dcWBS7EYj1zjbSvJrQTRGPO6l6XoCeUWxADpfljLj2yoq6ZbPmwdwAT tTvtOPqLWQ74HKo1LnX4zF9rcM7RwF1wbQLE2SmE/QMhgJODYtkTFa0W6jbFUEqW SVsFS62r00VEZimrOHp10c+aLuyimGojD3D5RUCfihZuIZMD6HQjYpuE46bncuKa Pr6OXAVWLXzHim3LF0KQnKtCCoG1oncikCFNYuNU1v/zbzcdMNoNmt23pDDRbmnY nlAzEPs= -----END CERTIFICATE-----Generated at Sat Apr 26 08:29:14 2025 by rpki-client