$ rpki-client -vvf rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/AA456842107211F09A9E631FC4F9AE02.roa File: AA456842107211F09A9E631FC4F9AE02.roa (raw, json) Hash identifier: BO96CEY+h3kyCGROfLPYwk1rs1fVmSzj2xY5TwnQPlM= Subject key identifier: DA:FC:16:9C:53:29:35:1C:B4:D5:1E:0F:B5:0F:17:99:2B:D8:29:01 Certificate issuer: /CN=A918E28E/serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31 Certificate serial: 15 Authority key identifier: 5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/AA456842107211F09A9E631FC4F9AE02.roa Signing time: Thu 03 Apr 2025 10:01:52 +0000 ROA not before: Thu 03 Apr 2025 10:01:52 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131581 IP address blocks: 103.234.194.0/24 maxlen: 24 202.52.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E28E, serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31 Validity Not Before: Apr 3 10:01:52 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67ee5c8f-aa20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e7:00:d3:12:1a:63:87:73:a8:34:96:1b:7f: 90:71:19:ca:1b:07:1b:1b:6f:47:d7:f2:37:da:46: 26:1d:6a:3e:58:b3:26:e8:b4:8b:14:53:36:36:df: 57:ba:e1:8d:41:f5:f6:8f:8f:99:43:82:15:d7:04: 95:ae:9e:60:ab:90:67:9e:62:3e:e9:94:b0:bb:44: 44:71:bf:2e:39:bb:38:42:16:89:2e:e2:35:2e:4d: 5a:72:01:71:09:b6:8b:d7:23:ad:e7:ba:97:95:9b: a5:18:76:f6:1f:fa:06:0d:f4:ac:c6:d9:6d:8c:9d: 78:0b:5d:ee:f5:7e:aa:4f:20:fc:5c:ae:9b:14:10: 21:31:42:c5:de:a7:54:1a:93:f3:01:b5:b6:e8:73: 6c:9a:15:14:c1:ff:89:79:fa:fa:53:b7:21:fc:aa: 84:47:b8:e5:81:55:8e:ee:f1:9c:d4:70:79:85:38: 71:1d:62:57:57:8c:95:7e:5e:a9:25:7e:41:a6:c1: ba:bf:6c:bc:5b:05:78:cd:bb:16:5b:22:f7:58:1f: ff:bd:96:0c:52:08:4b:5c:7b:c2:a6:bf:e3:3c:8f: 5c:22:14:b0:12:aa:15:95:c0:8f:d3:f4:ba:29:f6: 49:24:63:ef:ee:4f:04:43:2e:55:8b:44:03:f6:ec: bc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FC:16:9C:53:29:35:1C:B4:D5:1E:0F:B5:0F:17:99:2B:D8:29:01 X509v3 Authority Key Identifier: keyid:5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/AA456842107211F09A9E631FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.234.194.0/24 202.52.158.0/24 Signature Algorithm: sha256WithRSAEncryption 09:f4:af:95:62:f5:fe:09:f3:3d:00:e8:4b:c5:33:3b:3f:89: 87:e9:62:ea:92:82:0a:d2:ce:0b:68:66:e8:1d:c5:1b:1e:f6: 44:3a:9c:df:85:4d:ef:d9:a3:1e:ef:40:13:bd:8c:51:1b:c3: c5:7b:0f:4a:38:56:8a:05:8e:ef:28:52:27:3c:c4:bf:62:1d: 70:4b:89:24:ea:26:0a:2d:92:85:b3:81:9b:a8:3e:ea:12:fe: b4:6b:57:49:81:25:4f:92:51:e1:4f:28:76:2e:09:82:4e:74: 7c:b2:0d:9c:82:72:26:82:79:ac:30:29:57:24:e6:0c:85:56: ac:97:75:ba:4a:1a:d6:eb:b5:1f:4e:fa:be:2e:d1:24:7f:00: 23:08:63:b6:83:0f:95:b3:11:6f:27:3e:bd:95:b4:cd:58:94: 2c:25:24:3f:dd:24:80:af:d0:9f:c7:f8:76:44:2b:a2:a4:c0: 2e:8e:1f:d2:f4:31:c9:0d:ea:48:5e:93:df:c0:40:47:6f:da: c7:7c:f2:26:12:0c:a8:b6:c0:3d:a7:b0:7f:7a:2a:f4:96:9f: c6:15:9e:bb:a8:2d:c0:87:4d:02:ac:01:4c:85:ec:e3:8a:e2: 61:bf:78:b8:57:e5:c9:2e:1d:c0:70:23:8c:ef:5b:4f:5e:ec: 10:d7:4c:a7 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTI4RTExMC8GA1UEBRMoNUZDMUI2MzhDQ0NERkY5OUQ2NDQ1NjU1MjlDODA3MDg2 ODY4OUIzMTAeFw0yNTA0MDMxMDAxNTJaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZWU1YzhmLWFhMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC75wDTEhpjh3OoNJYbf5BxGcobBxsbb0fX8jfaRiYdaj5YsybotIsUUzY231e6 4Y1B9faPj5lDghXXBJWunmCrkGeeYj7plLC7RERxvy45uzhCFoku4jUuTVpyAXEJ tovXI63nupeVm6UYdvYf+gYN9KzG2W2MnXgLXe71fqpPIPxcrpsUECExQsXep1Qa k/MBtbboc2yaFRTB/4l5+vpTtyH8qoRHuOWBVY7u8ZzUcHmFOHEdYldXjJV+Xqkl fkGmwbq/bLxbBXjNuxZbIvdYH/+9lgxSCEtce8Kmv+M8j1wiFLASqhWVwI/T9Lop 9kkkY+/uTwRDLlWLRAP27LyLAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQU2vwWnFMp NRy01R4PtQ8XmSvYKQEwHwYDVR0jBBgwFoAUX8G2OMzN/5nWRFZVKcgHCGhomzEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMjhFL0NEQTNBNzFFRjU5 QjExRUZBNEY1NzEyOEM0RjlBRTAyL1g4RzJPTXpOXzVuV1JGWlZLY2dIQ0dob216 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWDhHMk9Nek5fNW5XUkZaVktjZ0hDR2hvbXpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTI4RS9DREEzQTcxRUY1OUIxMUVGQTRGNTcxMjhDNEY5QUUwMi9BQTQ1Njg0MjEw NzIxMUYwOUE5RTYzMUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAGfqwgMEAMo0njANBgkqhkiG9w0BAQsFAAOCAQEACfSvlWL1 /gnzPQDoS8UzOz+Jh+li6pKCCtLOC2hm6B3FGx72RDqc34VN79mjHu9AE72MURvD xXsPSjhWigWO7yhSJzzEv2IdcEuJJOomCi2ShbOBm6g+6hL+tGtXSYElT5JR4U8o di4Jgk50fLINnIJyJoJ5rDApVyTmDIVWrJd1ukoa1uu1H076vi7RJH8AIwhjtoMP lbMRbyc+vZW0zViULCUkP90kgK/Qn8f4dkQroqTALo4f0vQxyQ3qSF6T38BAR2/a x3zyJhIMqLbAPaewf3oq9JafxhWeu6gtwIdNAqwBTIXs44riYb94uFflyS4dwHAj jO9bT17sENdMpw== -----END CERTIFICATE-----Generated at Sat Apr 26 14:13:07 2025 by rpki-client