$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa File: 2884888A717011E99BA2FB3DC4F9AE02.roa (raw, json) Hash identifier: vyuDgVud8VeU+L1s3GBCpzmY/+n8YurORFgDE2x/P9Y= Subject key identifier: A2:82:13:91:40:37:52:8D:EE:2C:BB:0F:5E:DB:51:7D:14:C7:F9:CA Certificate issuer: /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Certificate serial: 1027 Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa Signing time: Sat 04 Jan 2025 17:25:38 +0000 ROA not before: Sat 04 Jan 2025 17:25:38 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 0 IP address blocks: 103.116.193.0/24 maxlen: 24 103.116.194.0/24 maxlen: 24 2001:df3:1300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4135 (0x1027) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Validity Not Before: Jan 4 17:25:38 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67796f12-6d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0f:e6:8c:ac:88:ee:ab:96:70:08:1d:1f:70: 62:a8:ba:90:55:c2:9a:23:a2:61:79:93:84:5d:51: cd:49:cf:96:f5:8c:8c:2d:bc:56:85:c8:aa:ae:fa: 30:3d:8d:9d:83:bf:fe:69:99:cd:0f:39:30:ec:da: dd:22:10:c6:e8:b2:b2:a5:83:1c:7a:81:0c:6a:eb: f6:44:bf:24:7b:cb:d2:9f:1a:fd:f6:7f:13:7a:0c: a9:6e:80:6d:46:d6:4f:47:bd:31:2d:68:dc:a3:6b: 76:7e:bf:71:2b:7a:f6:42:8c:d3:4f:27:4c:a4:fe: 94:f5:21:13:fb:86:b8:e3:12:eb:36:3c:f4:42:41: 38:4f:e4:70:d2:63:0e:2c:4c:8a:5b:0e:a4:35:fb: 76:46:f5:b8:ec:9b:63:ce:aa:4e:fd:a4:79:17:52: 0e:bc:27:e1:3b:ea:84:db:62:c8:69:1b:2b:f8:2b: 42:60:45:79:97:35:b7:37:4f:6d:4f:09:a4:87:9d: 3d:ab:bb:93:22:37:69:4b:b5:3e:08:82:aa:28:02: 03:99:9f:2e:76:57:ea:64:3f:f4:e0:03:0e:85:2b: 90:62:17:67:41:cb:84:f5:c4:d3:65:bb:4f:5d:f6: 1c:ef:e3:fb:1c:4a:f9:52:02:35:43:29:a6:f4:2f: 96:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:82:13:91:40:37:52:8D:EE:2C:BB:0F:5E:DB:51:7D:14:C7:F9:CA X509v3 Authority Key Identifier: keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.116.193.0-103.116.194.255 IPv6: 2001:df3:1300::/48 Signature Algorithm: sha256WithRSAEncryption 74:94:ce:6d:73:b5:74:b5:5a:da:32:82:3e:4f:26:d2:26:ec: a7:c5:e3:5e:b4:b1:91:10:e6:6a:25:55:71:dc:0a:c4:ac:58: 1b:96:f1:25:83:e2:1b:ee:20:8d:1b:ae:ad:e6:e0:c9:37:34: 33:48:9c:c7:cc:83:6f:fb:25:58:6d:ec:1c:69:a6:58:37:ec: e7:73:ad:96:85:90:a5:ec:b0:a2:71:c0:05:43:6e:c0:7d:b9: 54:79:50:79:d5:fe:08:1b:8a:77:28:b2:a4:8a:7b:5c:82:8d: 4d:c0:7a:3d:2d:c9:81:f1:ba:f0:ed:3c:84:56:8b:53:0e:98: 8c:67:f0:39:d5:f5:47:dc:d5:d1:e0:3e:53:72:88:e7:7f:1b: fc:72:4b:b2:e3:51:17:42:d0:b6:4d:d2:02:c2:bf:fb:f8:47: 6e:2c:74:90:ab:3b:70:56:83:0a:41:70:09:ed:47:0c:3e:dd: 40:7a:0c:9d:be:bd:cf:ba:0a:fe:74:a6:88:68:a2:dd:bd:ac: e2:ef:ca:ff:36:d8:c9:71:f3:3b:8c:9d:cd:0e:1e:3c:87:cf: 8d:6e:1f:12:38:01:21:9b:a1:96:d0:52:8c:e3:b1:cb:e4:2e: ee:71:da:55:13:5b:46:7a:5d:c6:7a:f0:41:46:63:43:b2:3e: 29:24:fe:be -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgICECcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzQTkxMTAvBgNVBAUTKDE5Njg0MjNFRDZEMjQ5NTg4MEE1NkE2REIwMkJDNjcy OThDNUU2ODYwHhcNMjUwMTA0MTcyNTM4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc5NmYxMi02ZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArw/mjKyI7quWcAgdH3BiqLqQVcKaI6JheZOEXVHNSc+W9YyMLbxWhciqrvow PY2dg7/+aZnNDzkw7NrdIhDG6LKypYMceoEMauv2RL8ke8vSnxr99n8TegypboBt RtZPR70xLWjco2t2fr9xK3r2QozTTydMpP6U9SET+4a44xLrNjz0QkE4T+Rw0mMO LEyKWw6kNft2RvW47JtjzqpO/aR5F1IOvCfhO+qE22LIaRsr+CtCYEV5lzW3N09t Twmkh509q7uTIjdpS7U+CIKqKAIDmZ8udlfqZD/04AMOhSuQYhdnQcuE9cTTZbtP XfYc7+P7HEr5UgI1Qymm9C+WgwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFKKCE5FA N1KN7iy7D17bUX0Ux/nKMB8GA1UdIwQYMBaAFBloQj7W0klYgKVqbbArxnKYxeaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDNBOS9CQjdGRkI4RTNB OTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NWaUFwV3B0c0N2R2NwakY1 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dXaENQdGJTU1ZpQXBXcHRzQ3ZHY3BqRjVvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQzQTkvQkI3RkZCOEUzQTkyMTFFOUI1MkRDRjUzQzRGOUFFMDIvMjg4NDg4OEE3 MTcwMTFFOTlCQTJGQjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOAYIKwYBBQUHAQcBAf8E KTAnMBQEAgABMA4wDAMEAGd0wQMEAGd0wjAPBAIAAjAJAwcAIAEN8xMAMA0GCSqG SIb3DQEBCwUAA4IBAQB0lM5tc7V0tVraMoI+TybSJuynxeNetLGREOZqJVVx3ArE rFgblvElg+Ib7iCNG66t5uDJNzQzSJzHzINv+yVYbewcaaZYN+znc62WhZCl7LCi ccAFQ27AfblUeVB51f4IG4p3KLKkintcgo1NwHo9LcmB8brw7TyEVotTDpiMZ/A5 1fVH3NXR4D5Tcojnfxv8ckuy41EXQtC2TdICwr/7+EduLHSQqztwVoMKQXAJ7UcM Pt1Aegydvr3Pugr+dKaIaKLdvazi78r/NtjJcfM7jJ3NDh48h8+Nbh8SOAEhm6GW 0FKM47HL5C7ucdpVE1tGel3GevBBRmNDsj4pJP6+ -----END CERTIFICATE-----Generated at Sat Apr 26 08:19:47 2025 by rpki-client