$ rpki-client -vvf rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa File: 4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa (raw, json) Hash identifier: znEQ3H8kz5gMTgiuQBm1Os8IAbZ7HFh10xdYO2lt09c= Subject key identifier: 52:82:14:94:10:4A:30:C4:AE:EC:E7:37:1D:7E:DF:B6:68:68:EF:6A Certificate issuer: /CN=A918E319/serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A Certificate serial: 194E Authority key identifier: 6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa Signing time: Thu 24 Apr 2025 16:44:42 +0000 ROA not before: Thu 24 Apr 2025 16:44:42 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 135523 IP address blocks: 103.70.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6478 (0x194e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E319, serialNumber=6CFD56A77EAD9E159BCB18EB6DE862735091B54A Validity Not Before: Apr 24 16:44:42 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=680a6a7a-0c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fa:16:55:94:ac:cf:2b:f7:3f:0b:03:46:64: 61:23:a4:e5:5b:e4:a5:14:de:17:5c:e9:b5:9d:55: ae:97:dc:c3:70:77:22:cf:54:f1:56:3e:2a:9e:31: 78:0b:6e:2c:a6:c1:e2:60:29:37:9b:81:82:ae:60: 04:0e:70:c4:9a:58:8a:35:ae:ae:bb:a7:89:ae:46: b3:37:a0:b2:b0:f2:38:5f:16:51:1c:4a:7a:69:4b: d2:5f:fc:4e:fe:75:58:06:27:69:13:fa:12:ee:36: 95:17:6c:da:86:89:1b:0f:72:64:c7:e6:e2:53:5b: 1d:e2:89:3f:ce:85:6a:02:26:ae:5f:a5:66:9f:f2: d2:db:29:b8:0c:e7:81:f6:e3:d0:26:ef:a2:4e:34: fa:b0:f4:56:f1:36:ad:9d:5c:18:28:40:f4:fd:c1: c1:4c:48:1a:cb:20:00:09:8c:15:33:9e:0a:9c:3e: 54:51:83:86:01:36:c2:85:da:58:6b:1b:fb:dc:93: b0:66:ee:e1:45:7f:df:f6:73:8a:e0:e1:92:7f:fd: 67:68:cc:51:4f:90:89:73:2c:37:a1:0c:c6:d1:a7: d5:dc:26:00:01:fd:0b:c5:78:8e:ad:ba:d4:b4:ba: 2a:ae:26:93:48:f5:09:2d:93:fb:0e:b4:87:7d:15: 0b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:82:14:94:10:4A:30:C4:AE:EC:E7:37:1D:7E:DF:B6:68:68:EF:6A X509v3 Authority Key Identifier: keyid:6C:FD:56:A7:7E:AD:9E:15:9B:CB:18:EB:6D:E8:62:73:50:91:B5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/bP1Wp36tnhWbyxjrbehic1CRtUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bP1Wp36tnhWbyxjrbehic1CRtUo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E319/868DD6568C2611E7BC06C44EC4F9AE02/4DFB5FE4B79211EFA70E7C4CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.70.251.0/24 Signature Algorithm: sha256WithRSAEncryption 90:2c:4e:0d:a4:ec:5d:64:04:96:79:c3:8e:6c:5c:b0:57:42: 30:9b:db:94:9a:2b:d8:9f:ed:18:a1:7a:93:de:15:8b:01:d2: f9:1b:7b:15:95:0d:15:df:42:8b:c2:66:c5:dd:10:73:f1:ab: 20:be:fc:99:f4:9c:e0:9b:97:75:d3:8c:87:ff:fe:24:3b:64: 3b:ac:eb:82:02:fb:42:2e:83:f9:1b:f2:f7:57:a1:a5:bd:75: 9d:93:1c:84:24:39:0a:41:dc:fd:bd:15:73:f2:87:6f:8d:dc: 6d:d3:2d:28:05:cd:3c:ec:0e:47:70:58:3d:ec:35:89:ba:96: ed:09:e6:cb:59:54:d7:2f:12:32:b5:54:81:0a:9c:9a:b3:3b: 9a:5e:2d:12:ff:df:19:49:a5:08:e8:0b:5e:c4:d2:19:9d:a6: 46:bd:1c:fd:a4:a5:7e:29:e8:89:3c:ee:30:24:80:ef:bc:f8: b6:38:d1:d8:a4:ed:90:eb:c5:1e:5e:6b:70:93:0e:3f:37:fd: 3b:85:5f:73:30:5f:f7:b6:0e:c7:cf:cb:76:e9:1a:5c:e7:80: eb:da:bc:db:ec:fd:1b:7d:d5:23:f9:31:0c:a6:bb:d1:7d:34: a6:3b:19:88:74:4e:87:cd:f8:a6:78:07:89:8a:09:4c:44:3b: 6b:df:41:bc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMTkxMTAvBgNVBAUTKDZDRkQ1NkE3N0VBRDlFMTU5QkNCMThFQjZERTg2Mjcz NTA5MUI1NEEwHhcNMjUwNDI0MTY0NDQyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhNmE3YS0wYzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0voWVZSszyv3PwsDRmRhI6TlW+SlFN4XXOm1nVWul9zDcHciz1TxVj4qnjF4 C24spsHiYCk3m4GCrmAEDnDEmliKNa6uu6eJrkazN6CysPI4XxZRHEp6aUvSX/xO /nVYBidpE/oS7jaVF2zahokbD3Jkx+biU1sd4ok/zoVqAiauX6Vmn/LS2ym4DOeB 9uPQJu+iTjT6sPRW8TatnVwYKED0/cHBTEgayyAACYwVM54KnD5UUYOGATbChdpY axv73JOwZu7hRX/f9nOK4OGSf/1naMxRT5CJcyw3oQzG0afV3CYAAf0LxXiOrbrU tLoqriaTSPUJLZP7DrSHfRULcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFKCFJQQ SjDEruznNx1+37ZoaO9qMB8GA1UdIwQYMBaAFGz9Vqd+rZ4Vm8sY623oYnNQkbVK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMxOS84NjhERDY1NjhD MjYxMUU3QkMwNkM0NEVDNEY5QUUwMi9iUDFXcDM2dG5oV2J5eGpyYmVoaWMxQ1J0 VW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JQMVdwMzZ0bmhXYnl4anJiZWhpYzFDUnRVby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEUzMTkvODY4REQ2NTY4QzI2MTFFN0JDMDZDNDRFQzRGOUFFMDIvNERGQjVGRTRC NzkyMTFFRkE3MEU3QzRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnRvswDQYJKoZIhvcNAQELBQADggEBAJAsTg2k7F1kBJZ5 w45sXLBXQjCb25SaK9if7RihepPeFYsB0vkbexWVDRXfQovCZsXdEHPxqyC+/Jn0 nOCbl3XTjIf//iQ7ZDus64IC+0Iug/kb8vdXoaW9dZ2THIQkOQpB3P29FXPyh2+N 3G3TLSgFzTzsDkdwWD3sNYm6lu0J5stZVNcvEjK1VIEKnJqzO5peLRL/3xlJpQjo C17E0hmdpka9HP2kpX4p6Ik87jAkgO+8+LY40dik7ZDrxR5ea3CTDj83/TuFX3Mw X/e2DsfPy3bpGlzngOvavNvs/Rt91SP5MQymu9F9NKY7GYh0TofN+KZ4B4mKCUxE O2vfQbw= -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:29 2025 by rpki-client