$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CD505E0484811F08F517469C4F9AE02.roa File: 6CD505E0484811F08F517469C4F9AE02.roa (raw, json) Hash identifier: 63+I+1CdDz3rzzcBvvMP2J38CqgdAhQu9LxzGHvlZOE= Subject key identifier: 73:C5:75:F4:DA:7F:D2:33:3B:C0:F0:11:3E:FE:3B:07:35:22:0C:54 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BE0E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CD505E0484811F08F517469C4F9AE02.roa Signing time: Fri 13 Jun 2025 11:20:35 +0000 ROA not before: Fri 13 Jun 2025 11:20:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132931 IP address blocks: 45.65.36.0/24 maxlen: 24 45.65.37.0/24 maxlen: 24 45.65.38.0/24 maxlen: 24 45.65.39.0/24 maxlen: 24 45.119.128.0/22 maxlen: 24 103.52.52.0/22 maxlen: 24 103.59.184.0/24 maxlen: 24 103.59.185.0/24 maxlen: 24 2403:7b40:1::/48 maxlen: 48 2403:7b40:2::/48 maxlen: 48 2403:7b40:3::/48 maxlen: 48 2403:7b40:4::/48 maxlen: 48 2403:7b40:5::/48 maxlen: 48 2403:7b40:6::/48 maxlen: 48 2403:7b40:7::/48 maxlen: 48 2403:7b40:8::/48 maxlen: 48 2403:7b40:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48654 (0xbe0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 13 11:20:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=684c0983-4a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:df:b3:ec:e5:5d:ab:2e:a5:a7:6f:93:79:8d: e1:57:a0:11:fb:96:a7:a3:33:f1:cb:4b:58:94:69: 9d:03:f3:68:65:51:59:51:22:4c:a7:88:7d:fc:bb: 4e:13:c0:53:38:67:2e:a5:c9:fd:77:c5:ff:32:0a: b1:50:95:2a:a0:d6:14:a9:bd:9f:89:d9:73:42:e5: 97:26:3a:40:c7:42:cd:bd:0a:de:2d:9d:5c:ca:a5: 91:b3:2c:51:71:9d:9e:3f:8c:38:bc:e2:25:b1:40: bf:99:ab:a5:34:4a:79:85:1a:31:bc:ad:85:e4:e5: 50:1f:ee:7a:1e:62:90:5c:b4:65:a6:41:c2:7c:eb: e2:f3:98:75:ff:7c:79:85:49:29:f4:0e:bf:79:2a: d3:df:cf:4a:bf:8e:fb:19:59:8e:9f:56:d7:18:eb: e3:0c:ce:f6:18:5c:e0:5d:62:6d:9a:ee:f8:34:44: 3b:53:c0:21:8d:63:e7:fe:f2:44:33:47:cc:ba:9a: 4b:93:c6:0a:33:7d:db:20:a4:e4:77:b6:11:f2:89: 36:bf:48:c7:5f:2f:0e:fc:1b:b8:d6:d1:ab:a4:94: 24:7a:dc:e7:a9:6e:06:a4:5f:b8:0c:18:9a:38:06: df:67:aa:2a:70:47:0e:ed:e5:18:91:fd:28:79:e9: c5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C5:75:F4:DA:7F:D2:33:3B:C0:F0:11:3E:FE:3B:07:35:22:0C:54 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6CD505E0484811F08F517469C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.65.36.0/22 45.119.128.0/22 103.52.52.0/22 103.59.184.0/23 IPv6: 2403:7b40:1::-2403:7b40:9:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption af:47:63:a3:85:bf:5c:45:40:ff:57:4b:77:04:6e:3f:5d:b7: d1:4d:57:a1:46:da:d3:08:fb:0a:4b:dc:43:61:64:8f:44:a3: 07:4e:98:7a:99:e7:8c:68:09:8d:9e:11:fe:84:23:07:d5:62: a6:eb:e7:e5:fa:b5:03:ba:94:d2:9c:d0:6f:b7:89:f0:98:6e: a0:79:b2:b5:28:dd:08:bc:a5:56:5d:a6:f9:cf:31:c1:27:6c: 36:37:b8:1f:36:ae:cf:61:89:97:7a:eb:d7:56:42:9a:2b:67: 99:64:7d:e3:9b:d3:a3:09:b6:9b:77:ee:dc:00:d9:a0:3f:06: ea:b2:8f:1e:ee:b9:90:87:d0:1c:38:a0:b2:4b:5c:2a:d1:1f: dc:a4:3f:f6:e4:16:78:0a:c4:0e:6f:d8:c9:de:81:30:df:20: 0e:a1:c5:55:dc:82:c7:31:ac:22:d2:ee:05:41:5b:76:3c:80: 82:d2:49:74:58:2b:9f:aa:63:22:c8:a1:a9:f5:66:b2:69:9a: 20:f7:64:df:eb:b7:89:a9:0e:d6:d9:39:83:ad:ae:99:91:2b: 33:0f:a2:5d:b6:34:d8:6d:54:d7:aa:e8:98:b5:64:d5:e0:c5: 77:a3:c9:6c:d5:78:24:e4:bf:42:aa:16:9d:dd:99:8f:a4:16: de:b8:44:ea -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIDAL4OMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDYxMzExMjAzNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg0YzA5ODMtNGE3YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPHfs+zlXasupadvk3mN4VegEfuWp6Mz8ctLWJRpnQPzaGVRWVEiTKeIffy7 ThPAUzhnLqXJ/XfF/zIKsVCVKqDWFKm9n4nZc0LllyY6QMdCzb0K3i2dXMqlkbMs UXGdnj+MOLziJbFAv5mrpTRKeYUaMbytheTlUB/ueh5ikFy0ZaZBwnzr4vOYdf98 eYVJKfQOv3kq09/PSr+O+xlZjp9W1xjr4wzO9hhc4F1ibZru+DREO1PAIY1j5/7y RDNHzLqaS5PGCjN92yCk5He2EfKJNr9Ix18vDvwbuNbRq6SUJHrc56luBqRfuAwY mjgG32eqKnBHDu3lGJH9KHnpxRcCAwEAAaOCAsMwggK/MB0GA1UdDgQWBBRzxXX0 2n/SMzvA8BE+/jsHNSIMVDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZDRDUwNUUw NDg0ODExRjA4RjUxNzQ2OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sME0GCCsGAQUFBwEHAQH/ BD4wPDAeBAIAATAYAwQCLUEkAwQCLXeAAwQCZzQ0AwQBZzu4MBoEAgACMBQwEgMH ACQDe0AAAQMHASQDe0AACDANBgkqhkiG9w0BAQsFAAOCAQEAr0djo4W/XEVA/1dL dwRuP1230U1XoUba0wj7CkvcQ2Fkj0SjB06YepnnjGgJjZ4R/oQjB9Vipuvn5fq1 A7qU0pzQb7eJ8JhuoHmytSjdCLylVl2m+c8xwSdsNje4Hzauz2GJl3rr11ZCmitn mWR945vTowm2m3fu3ADZoD8G6rKPHu65kIfQHDigsktcKtEf3KQ/9uQWeArEDm/Y yd6BMN8gDqHFVdyCxzGsItLuBUFbdjyAgtJJdFgrn6pjIsihqfVmsmmaIPdk3+u3 iakO1tk5g62umZErMw+iXbY02G1U16romLVk1eDFd6PJbNV4JOS/QqoWnd2Zj6QW 3rhE6g== -----END CERTIFICATE-----Generated at Sun Jun 15 08:38:13 2025 by rpki-client