$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/5D5FEDE0D3AE11EB908D6529C4F9AE02.roa File: 5D5FEDE0D3AE11EB908D6529C4F9AE02.roa (raw, json) Hash identifier: 1n0gDL6bGzAnn9xKGXqg42AcMaFYnb+E6TJXe2riXIQ= Subject key identifier: 2D:BE:C2:DF:0D:02:33:07:8A:33:DE:BA:15:EC:42:8A:F6:E6:AC:EC Certificate issuer: /CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A Certificate serial: 11B9 Authority key identifier: A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/5D5FEDE0D3AE11EB908D6529C4F9AE02.roa Signing time: Thu 10 Apr 2025 17:25:47 +0000 ROA not before: Thu 10 Apr 2025 17:25:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135273 IP address blocks: 103.211.244.0/22 maxlen: 24 146.196.90.0/24 maxlen: 24 146.196.91.0/24 maxlen: 24 2404:a340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4537 (0x11b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646, serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A Validity Not Before: Apr 10 17:25:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f7ff1a-2f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:12:14:1e:ca:87:c3:11:85:9f:0d:ef:2f:32: 18:59:bb:6d:90:3b:6f:19:0f:ea:99:55:97:45:52: 1f:a9:b5:8f:21:a8:e0:d5:fb:b0:1d:99:d1:68:3d: 09:27:71:ff:7f:6f:70:e0:ed:0f:2d:dd:65:c8:0e: 18:5f:0e:01:6f:a5:74:6f:7e:d1:d3:2b:47:5c:7c: c9:e7:61:12:68:23:5a:2d:bc:63:db:95:7a:1a:2d: 27:f4:c7:e7:de:7e:77:6b:e1:32:1c:67:24:3e:8a: 08:75:c0:d8:2a:c3:cd:52:bf:1a:a9:9e:78:3c:96: a0:bc:bc:a7:9b:fa:7e:6a:b0:72:b1:da:97:10:8d: 6d:19:ad:61:62:a2:73:b9:7c:dd:84:a7:2d:03:3e: 3c:11:9f:cc:c6:07:6b:c9:6c:16:e0:ff:49:9d:7b: 28:64:3b:6b:7f:cd:ca:23:8b:7b:8c:5f:e0:2e:c2: 38:fb:9c:e9:c3:ff:32:f8:34:70:61:02:de:c6:29: 43:1e:3a:df:6c:5e:90:26:37:fc:4b:77:9a:46:a2: 0f:c9:b6:9b:11:eb:bc:8e:7e:05:b5:65:6d:92:16: 74:cf:04:56:76:bc:5d:f8:4b:38:40:e3:47:4b:0c: 8c:41:bc:ca:e3:05:57:f1:09:5b:48:09:df:34:0e: 94:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BE:C2:DF:0D:02:33:07:8A:33:DE:BA:15:EC:42:8A:F6:E6:AC:EC X509v3 Authority Key Identifier: keyid:A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/5D5FEDE0D3AE11EB908D6529C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.211.244.0/22 146.196.90.0/23 IPv6: 2404:a340::/32 Signature Algorithm: sha256WithRSAEncryption c6:82:c3:88:0a:52:eb:af:c5:9d:7e:48:67:a3:f3:95:93:98: be:8b:18:30:c2:f5:5d:61:a3:71:28:5e:da:a9:ef:b9:95:47: 45:18:53:e0:2a:5b:e3:ae:06:d9:59:af:b7:45:62:f5:8c:f8: 53:eb:e2:8c:6e:0c:01:01:97:42:dc:73:28:95:0d:f4:09:a9: ca:29:d5:96:d3:61:cf:cb:41:ce:fb:fe:8f:e3:36:9c:8c:d2: a7:01:25:83:8e:26:96:39:95:ee:99:55:a5:a6:d6:f4:b2:06: ee:f6:3f:e4:c4:39:65:07:10:ca:30:c5:9f:f7:cb:fd:8d:ed: ce:09:d2:11:b2:ed:ba:0c:07:70:60:ec:b9:65:b3:33:d0:be: 3e:41:05:bb:d6:9d:6c:98:44:05:c9:e7:85:f8:9f:c9:33:84: 3b:f2:ba:ed:de:4e:98:22:fd:ca:15:d0:f4:96:bf:50:37:6e: 2d:1e:68:1b:b0:a4:af:75:16:37:6b:26:e4:9b:f4:bf:aa:d0: ec:25:50:a7:48:de:b6:55:9c:00:12:26:19:fa:eb:ad:6e:10: ad:a6:65:2e:37:23:1c:b6:d9:74:01:dd:0b:59:5d:0a:41:14: 36:ff:3f:5f:72:f6:96:b8:1d:a7:f9:39:98:d8:5d:e7:9f:dd: 33:90:ca:40 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICEbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKEExN0M4ODdFRTk1QTc0QjNENzM4QzE1QzcwOEZFQ0ZE NkJCOEM2NkEwHhcNMjUwNDEwMTcyNTQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y3ZmYxYS0yZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmhIUHsqHwxGFnw3vLzIYWbttkDtvGQ/qmVWXRVIfqbWPIajg1fuwHZnRaD0J J3H/f29w4O0PLd1lyA4YXw4Bb6V0b37R0ytHXHzJ52ESaCNaLbxj25V6Gi0n9Mfn 3n53a+EyHGckPooIdcDYKsPNUr8aqZ54PJagvLynm/p+arBysdqXEI1tGa1hYqJz uXzdhKctAz48EZ/MxgdryWwW4P9JnXsoZDtrf83KI4t7jF/gLsI4+5zpw/8y+DRw YQLexilDHjrfbF6QJjf8S3eaRqIPybabEeu8jn4FtWVtkhZ0zwRWdrxd+Es4QONH SwyMQbzK4wVX8QlbSAnfNA6UhQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFC2+wt8N AjMHijPeuhXsQor25qzsMB8GA1UdIwQYMBaAFKF8iH7pWnSz1zjBXHCP7P1ruMZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9EOTJERDAzOEY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9vWHlJZnVsYWRMUFhPTUZjY0lfc19XdTR4 bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29YeUlmdWxhZExQWE9NRmNjSV9zX1d1NHhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY2NDYvRDkyREQwMzhGNDhFMTFFOEIxNEEzNDFFQzRGOUFFMDIvNUQ1RkVERTBE M0FFMTFFQjkwOEQ2NTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn0/QDBAGSxFowDQQCAAIwBwMFACQEo0AwDQYJKoZIhvcN AQELBQADggEBAMaCw4gKUuuvxZ1+SGej85WTmL6LGDDC9V1ho3EoXtqp77mVR0UY U+AqW+OuBtlZr7dFYvWM+FPr4oxuDAEBl0LccyiVDfQJqcop1ZbTYc/LQc77/o/j NpyM0qcBJYOOJpY5le6ZVaWm1vSyBu72P+TEOWUHEMowxZ/3y/2N7c4J0hGy7boM B3Bg7LllszPQvj5BBbvWnWyYRAXJ54X4n8kzhDvyuu3eTpgi/coV0PSWv1A3bi0e aBuwpK91FjdrJuSb9L+q0OwlUKdI3rZVnAASJhn6661uEK2mZS43Ixy22XQB3QtZ XQpBFDb/P19y9pa4Haf5OZjYXeef3TOQykA= -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:46 2025 by rpki-client