$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/DBB5A81E77D611E98792C466C4F9AE02.roa File: DBB5A81E77D611E98792C466C4F9AE02.roa (raw, json) Hash identifier: l1aL436ui+DSs7MhbbXkGIT5+J+EKVHo8IJU3TtL4kk= Subject key identifier: CF:51:B0:38:3B:8A:06:32:27:A7:5B:F6:1A:D9:2F:98:68:7F:A5:7A Certificate issuer: /CN=A918BFB8/serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Certificate serial: 0F05 Authority key identifier: 4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/DBB5A81E77D611E98792C466C4F9AE02.roa Signing time: Tue 22 Apr 2025 17:45:54 +0000 ROA not before: Tue 22 Apr 2025 17:45:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59340 IP address blocks: 103.229.44.0/22 maxlen: 24 203.190.32.0/22 maxlen: 24 2400:d980::/32 maxlen: 36 2400:d980::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3845 (0xf05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BFB8, serialNumber=4A44E0121BE8948BF7BC49CB03A63817A5BAD186 Validity Not Before: Apr 22 17:45:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6807d5d2-103e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:96:42:6a:ff:12:c1:2a:5e:84:db:66:c6: eb:6f:09:fb:10:09:9e:09:3f:48:a5:c4:fc:4f:05: a8:a0:0a:ee:96:43:b2:1c:bd:62:43:78:f6:d9:0e: bb:b1:e5:a8:85:4f:82:8d:d0:29:0f:e8:05:df:0f: 28:e6:db:4b:2c:68:69:47:d2:c1:36:69:75:13:25: e6:ca:24:5c:3f:6d:06:fa:15:38:53:3e:6f:79:f0: 17:8f:27:c3:a2:92:41:ec:9c:94:90:55:d6:2f:f2: f9:9c:84:65:3c:c9:9e:72:16:e2:44:9b:f2:fc:db: fe:7b:48:40:da:16:40:2f:a2:f4:80:d9:4c:bb:90: 43:75:97:5e:6d:51:9b:77:ef:ed:37:62:0b:a1:59: 6f:5b:2d:2d:ed:02:99:0a:c1:74:44:5e:b7:58:d1: 1e:40:95:02:80:67:11:04:b0:ab:56:6c:8f:2c:8b: c7:a0:8d:50:9c:13:47:da:35:b0:78:26:ec:a7:a6: 17:4c:1b:b1:e6:4a:61:ec:53:dc:91:0b:b8:5a:7c: 54:1b:58:d8:0c:52:46:2e:a5:cb:20:a3:70:3b:08: 1b:56:7a:52:a4:a8:a2:55:fe:d7:1a:4a:9f:99:2c: bd:0f:dc:ec:ab:1b:75:e4:64:31:3e:be:5d:af:44: 22:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:51:B0:38:3B:8A:06:32:27:A7:5B:F6:1A:D9:2F:98:68:7F:A5:7A X509v3 Authority Key Identifier: keyid:4A:44:E0:12:1B:E8:94:8B:F7:BC:49:CB:03:A6:38:17:A5:BA:D1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/SkTgEhvolIv3vEnLA6Y4F6W60YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkTgEhvolIv3vEnLA6Y4F6W60YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFB8/AB95B5A877D511E9ABC63A65C4F9AE02/DBB5A81E77D611E98792C466C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.44.0/22 203.190.32.0/22 IPv6: 2400:d980::/32 Signature Algorithm: sha256WithRSAEncryption b4:0a:c3:f3:ed:d2:36:3b:61:55:9e:d2:db:96:4a:0f:0a:2d: 0e:5b:9e:bb:97:8c:40:12:ab:77:68:e8:2f:42:78:ad:7a:6d: 11:cc:aa:b3:ee:a5:a1:78:a1:3f:f7:a3:8e:eb:c9:8a:fc:df: cb:ef:74:29:ec:2a:85:b6:cf:63:76:8e:6c:c8:52:2c:af:83: 61:a6:74:bc:51:10:2b:89:af:8c:6f:49:37:e8:77:6d:60:ee: 7a:e0:de:19:8e:3f:49:19:53:8a:85:38:f4:de:55:35:f0:22: 73:b9:a0:b4:b6:8d:20:9c:81:50:f8:83:c6:e0:a5:4b:64:4f: 96:74:ec:23:72:4d:25:62:15:d7:26:c1:77:98:6f:18:d7:74: 66:2f:54:d5:17:b4:6e:4e:be:ed:69:89:b5:72:12:34:82:e3: 9c:63:df:1c:ee:ec:85:64:8f:2a:55:fe:d7:38:b4:e8:0d:c8: 9e:82:cb:07:c2:a2:89:f5:d8:33:2e:48:bb:66:38:3f:7f:28: a1:39:19:2a:99:29:b1:c3:e8:38:6c:9b:f9:82:03:f9:00:45: 10:fc:bb:b9:5c:bf:6b:ec:96:c8:2f:21:2e:6c:a0:d0:a6:74: 24:98:23:4c:83:e1:d8:3b:50:f7:ad:73:60:72:da:e4:b2:fd: ea:cf:7e:5b -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGQjgxMTAvBgNVBAUTKDRBNDRFMDEyMUJFODk0OEJGN0JDNDlDQjAzQTYzODE3 QTVCQUQxODYwHhcNMjUwNDIyMTc0NTU0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA3ZDVkMi0xMDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUGWQmr/EsEqXoTbZsbrbwn7EAmeCT9IpcT8TwWooArulkOyHL1iQ3j22Q67 seWohU+CjdApD+gF3w8o5ttLLGhpR9LBNml1EyXmyiRcP20G+hU4Uz5vefAXjyfD opJB7JyUkFXWL/L5nIRlPMmechbiRJvy/Nv+e0hA2hZAL6L0gNlMu5BDdZdebVGb d+/tN2ILoVlvWy0t7QKZCsF0RF63WNEeQJUCgGcRBLCrVmyPLIvHoI1QnBNH2jWw eCbsp6YXTBux5kph7FPckQu4WnxUG1jYDFJGLqXLIKNwOwgbVnpSpKiiVf7XGkqf mSy9D9zsqxt15GQxPr5dr0QiMwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFM9RsDg7 igYyJ6db9hrZL5hof6V6MB8GA1UdIwQYMBaAFEpE4BIb6JSL97xJywOmOBelutGG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkZCOC9BQjk1QjVBODc3 RDUxMUU5QUJDNjNBNjVDNEY5QUUwMi9Ta1RnRWh2b2xJdjN2RW5MQTZZNEY2VzYw WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NrVGdFaHZvbEl2M3ZFbkxBNlk0RjZXNjBZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEJGQjgvQUI5NUI1QTg3N0Q1MTFFOUFCQzYzQTY1QzRGOUFFMDIvREJCNUE4MUU3 N0Q2MTFFOTg3OTJDNDY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn5SwDBALLviAwDQQCAAIwBwMFACQA2YAwDQYJKoZIhvcN AQELBQADggEBALQKw/Pt0jY7YVWe0tuWSg8KLQ5bnruXjEASq3do6C9CeK16bRHM qrPupaF4oT/3o47ryYr838vvdCnsKoW2z2N2jmzIUiyvg2GmdLxRECuJr4xvSTfo d21g7nrg3hmOP0kZU4qFOPTeVTXwInO5oLS2jSCcgVD4g8bgpUtkT5Z07CNyTSVi FdcmwXeYbxjXdGYvVNUXtG5Ovu1pibVyEjSC45xj3xzu7IVkjypV/tc4tOgNyJ6C ywfCoon12DMuSLtmOD9/KKE5GSqZKbHD6Dhsm/mCA/kARRD8u7lcv2vslsgvIS5s oNCmdCSYI0yD4dg7UPetc2By2uSy/erPfls= -----END CERTIFICATE-----Generated at Sat Apr 26 12:56:31 2025 by rpki-client