$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/92BBD4741F2F11F082D2AB82C4F9AE02.roa File: 92BBD4741F2F11F082D2AB82C4F9AE02.roa (raw, json) Hash identifier: YV/B6jqKt8I2g2TebPLm9+0AgyH5G6psFP7Pfncdwmw= Subject key identifier: CB:BB:75:01:7E:12:28:96:1C:72:E9:54:2F:90:82:D7:83:9C:EB:D6 Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Certificate serial: 352B Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/92BBD4741F2F11F082D2AB82C4F9AE02.roa Signing time: Tue 22 Apr 2025 04:09:23 +0000 ROA not before: Tue 22 Apr 2025 04:09:23 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 45845 IP address blocks: 103.235.196.0/22 maxlen: 24 103.250.135.0/24 maxlen: 24 202.51.66.0/24 maxlen: 24 202.51.70.0/24 maxlen: 24 2405:6600::/32 maxlen: 32 2405:6600:201::/48 maxlen: 48 2405:6600:600::/48 maxlen: 48 2405:6600:701::/48 maxlen: 48 2405:6600:702::/48 maxlen: 48 2405:6600:703::/48 maxlen: 48 2405:6600:709::/48 maxlen: 48 2405:6600:c00::/48 maxlen: 48 2405:6600:c43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13611 (0x352b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Validity Not Before: Apr 22 04:09:23 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=68071673-a0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:66:09:cd:44:d1:bf:3c:53:28:b8:53:8d:93: 11:af:58:23:1d:ce:be:3e:83:75:4e:25:9a:a1:d1: 8f:b5:34:3b:7a:a2:4a:84:d2:a5:58:61:ee:11:bd: df:00:c7:fd:f1:9d:74:c6:29:01:09:aa:68:a5:58: 30:41:10:8a:64:56:cd:f5:44:91:c7:2f:99:58:f4: f4:f8:b7:da:a8:ba:0b:3b:fd:ec:ac:5a:17:1f:f6: 5d:7a:11:2d:f0:e6:2f:09:5a:86:18:e0:47:c7:6e: 35:65:60:c2:9a:27:09:4e:78:15:45:58:ff:58:bc: fd:c8:50:00:7c:e0:6a:22:18:ac:94:d2:c3:8c:83: 44:4c:c0:d1:d0:11:e0:3f:22:15:b7:43:0e:0a:f0: f0:67:a4:b7:18:fb:f4:9c:f7:47:12:a6:f5:3b:91: 7b:35:45:a4:33:59:d7:73:e6:b3:93:6a:42:40:4e: 6d:01:93:78:11:15:8c:c5:91:4c:25:5b:29:ee:c8: de:36:68:22:f6:04:5c:a4:64:f0:78:4e:89:1d:4a: 31:98:d8:7b:2b:65:f9:8d:de:9f:5b:1e:09:6b:3d: a7:f9:92:8f:f1:af:f7:67:27:71:fb:06:29:26:c8: 0c:20:2e:6e:67:41:c0:ab:39:48:10:3e:fc:2f:87: 06:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BB:75:01:7E:12:28:96:1C:72:E9:54:2F:90:82:D7:83:9C:EB:D6 X509v3 Authority Key Identifier: keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/92BBD4741F2F11F082D2AB82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.235.196.0/22 103.250.135.0/24 202.51.66.0/24 202.51.70.0/24 IPv6: 2405:6600::/32 Signature Algorithm: sha256WithRSAEncryption 52:7b:f0:30:f5:43:35:24:4a:dd:cc:32:f4:68:c2:cb:0b:fc: f9:84:20:73:d3:89:cb:cb:3e:51:2c:66:2e:00:09:da:58:aa: d9:78:8f:76:94:ff:d9:be:39:39:f0:24:e2:5f:fd:a7:ba:b9: fb:8e:81:8d:25:f0:6d:e2:8e:39:d7:21:24:d0:e0:68:3b:5e: 78:86:3c:a7:d7:bd:00:31:b7:15:cd:fd:95:c6:ae:54:00:95: 58:1a:c4:18:f4:d0:fb:66:17:17:7a:e7:d7:bf:f6:53:45:d6: 68:b1:7f:9d:ef:64:50:08:14:94:07:46:7a:9e:9b:51:97:ae: 05:78:40:fb:56:a6:e2:f4:b4:45:3b:ac:d4:4e:b9:7a:da:32: fe:7d:6e:6b:9c:89:e6:25:a7:ac:94:86:b7:b9:32:95:43:a5: 9f:82:5f:2a:ee:51:f6:5a:03:a7:c0:ab:e7:ec:fb:7f:e1:eb: 1f:47:4e:d7:70:ab:6c:f6:ac:73:7c:1d:ae:d8:90:bf:8b:ea: 7e:3e:8b:51:17:2f:dc:b2:f2:48:ec:97:73:4c:80:81:86:f0: 02:75:b1:c2:61:79:0b:87:e6:ca:d8:3f:ce:a7:5b:58:37:ed: 38:7e:5d:41:37:19:f5:f3:ab:51:38:ff:9b:40:dd:fb:32:e6: d9:ca:84:7a -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICNSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG MkYxN0YzRkYwHhcNMjUwNDIyMDQwOTIzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA3MTY3My1hMGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGYJzUTRvzxTKLhTjZMRr1gjHc6+PoN1TiWaodGPtTQ7eqJKhNKlWGHuEb3f AMf98Z10xikBCapopVgwQRCKZFbN9USRxy+ZWPT0+LfaqLoLO/3srFoXH/ZdehEt 8OYvCVqGGOBHx241ZWDCmicJTngVRVj/WLz9yFAAfOBqIhislNLDjINETMDR0BHg PyIVt0MOCvDwZ6S3GPv0nPdHEqb1O5F7NUWkM1nXc+azk2pCQE5tAZN4ERWMxZFM JVsp7sjeNmgi9gRcpGTweE6JHUoxmNh7K2X5jd6fWx4Jaz2n+ZKP8a/3Zydx+wYp JsgMIC5uZ0HAqzlIED78L4cGNQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFMu7dQF+ EiiWHHLpVC+QgteDnOvWMB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY1NTAvOEI5QkQyMDIxRDg1MTFFMkI0MTIzMERDMDhCMDJDRDIvOTJCQkQ0NzQx RjJGMTFGMDgyRDJBQjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAJn68QDBABn+ocDBADKM0IDBADKM0YwDQQCAAIwBwMFACQF ZgAwDQYJKoZIhvcNAQELBQADggEBAFJ78DD1QzUkSt3MMvRowssL/PmEIHPTicvL PlEsZi4ACdpYqtl4j3aU/9m+OTnwJOJf/ae6ufuOgY0l8G3ijjnXISTQ4Gg7XniG PKfXvQAxtxXN/ZXGrlQAlVgaxBj00PtmFxd659e/9lNF1mixf53vZFAIFJQHRnqe m1GXrgV4QPtWpuL0tEU7rNROuXraMv59bmucieYlp6yUhre5MpVDpZ+CXyruUfZa A6fAq+fs+3/h6x9HTtdwq2z2rHN8Ha7YkL+L6n4+i1EXL9yy8kjsl3NMgIGG8AJ1 scJheQuH5srYP86nW1g37Th+XUE3GfXzq1E4/5tA3fsy5tnKhHo= -----END CERTIFICATE-----Generated at Tue Apr 29 19:20:54 2025 by rpki-client