$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/CF6343DE295D11F0B3C33614C4F9AE02.roa File: CF6343DE295D11F0B3C33614C4F9AE02.roa (raw, json) Hash identifier: GEOmMPHt+G2/MbW4UDY6/tPaY4MdJDx+hT+IJOD6OI0= Subject key identifier: B2:5C:77:9A:B7:31:59:BE:FD:10:95:C2:98:69:B2:EB:DF:AA:A1:3A Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Certificate serial: 048A Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/CF6343DE295D11F0B3C33614C4F9AE02.roa Signing time: Thu 05 Jun 2025 01:47:40 +0000 ROA not before: Thu 05 Jun 2025 01:47:40 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149026 IP address blocks: 203.32.7.0/24 maxlen: 24 203.32.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1162 (0x48a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Validity Not Before: Jun 5 01:47:40 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6840f73c-3c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:69:34:a1:d0:68:40:c5:ec:3d:ef:62:03:c9: 3d:e1:dd:62:9a:ea:33:3f:e0:a9:bb:9a:3f:62:c9: 27:4b:71:53:ae:b3:f3:3a:53:e5:a4:60:25:1e:d1: 73:5a:a8:e7:ba:36:29:2f:04:f0:1f:11:5a:5c:13: 67:17:d6:13:f3:5b:cb:5a:23:ac:d5:f6:1e:29:f1: d5:f6:05:4b:41:1b:51:f2:4c:bc:69:9a:2d:ed:5d: bd:b0:36:fa:5c:63:e1:23:37:d5:da:8a:81:31:dc: 72:7f:d5:2c:f6:d3:4b:12:58:1f:18:38:11:9a:be: 2c:f8:68:63:85:ae:2c:e7:a7:eb:55:c9:fa:cd:37: 2c:31:a3:fa:76:5c:fb:56:8c:ea:b2:e5:b5:de:f6: 8e:3b:52:e3:48:89:17:8d:b4:13:44:15:f7:15:ff: e8:5e:1c:49:2a:07:9a:74:a6:77:f4:7c:a9:e9:6e: ee:87:e2:fb:3f:b8:ef:fc:10:3c:cc:4e:38:8e:9f: 13:78:db:5a:b3:ee:88:51:c5:5d:ad:33:33:e9:2e: 7c:d0:b6:55:43:f2:22:e6:2f:5d:ca:7b:5b:06:47: a8:32:18:73:a9:f1:57:26:1a:6e:f4:a8:99:d3:f7: 63:af:51:3f:fb:21:fb:d5:6e:79:d7:a0:0e:bc:5f: c3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5C:77:9A:B7:31:59:BE:FD:10:95:C2:98:69:B2:EB:DF:AA:A1:3A X509v3 Authority Key Identifier: keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/CF6343DE295D11F0B3C33614C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.32.7.0/24 203.32.38.0/24 Signature Algorithm: sha256WithRSAEncryption 39:ab:5e:0a:1b:4d:7b:0b:b9:7a:2b:c4:a0:d3:34:d3:4f:bc: 16:c5:1d:06:ed:17:4b:63:66:53:14:9f:78:a2:20:5f:44:02: 67:bd:46:19:7a:31:c5:3c:2a:a6:f3:8d:1a:af:2b:4e:06:a8: 7a:67:5c:07:ee:4e:8c:2f:76:23:4a:49:b3:32:32:d1:b2:e9: ac:04:8e:ed:64:83:82:b2:6b:90:94:25:4a:2c:2b:6d:0f:f5: 5b:1a:a4:4d:8c:95:03:64:0f:64:28:73:46:a1:ac:33:bc:8a: 75:37:7e:c6:08:a8:de:64:12:fe:09:7c:6f:bb:c2:86:2a:e7: 44:8e:09:7a:af:e4:7c:89:11:e4:97:20:e5:87:dc:a9:c2:76: 4f:3e:4b:fc:bf:c5:03:70:be:7b:9f:a5:f9:45:b2:3a:64:91: 5e:2b:1f:53:c8:42:28:3a:00:74:3d:18:f0:4e:3c:7a:71:53: 8f:91:f3:60:9a:09:57:e6:a5:a9:5c:f6:c8:dd:f5:5f:27:67: 09:6a:5f:fe:b5:c7:8f:de:12:a4:52:ca:ed:50:03:5b:b8:ed: 23:32:39:9b:b5:28:67:74:86:e2:c5:e6:eb:09:2c:b4:2c:a8: dd:fc:91:97:65:8a:cd:c0:c2:7c:b4:69:05:3d:c7:98:93:fd: e0:aa:fd:15 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF RDk4NDY0OUQwHhcNMjUwNjA1MDE0NzQwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQwZjczYy0zYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA72k0odBoQMXsPe9iA8k94d1imuozP+Cpu5o/YsknS3FTrrPzOlPlpGAlHtFz WqjnujYpLwTwHxFaXBNnF9YT81vLWiOs1fYeKfHV9gVLQRtR8ky8aZot7V29sDb6 XGPhIzfV2oqBMdxyf9Us9tNLElgfGDgRmr4s+Ghjha4s56frVcn6zTcsMaP6dlz7 VozqsuW13vaOO1LjSIkXjbQTRBX3Ff/oXhxJKgeadKZ39Hyp6W7uh+L7P7jv/BA8 zE44jp8TeNtas+6IUcVdrTMz6S580LZVQ/Ii5i9dyntbBkeoMhhzqfFXJhpu9KiZ 0/djr1E/+yH71W5516AOvF/DuQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLJcd5q3 MVm+/RCVwphpsuvfqqE6MB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvQ0Y2MzQzREUy OTVEMTFGMEIzQzMzNjE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADLIAcDBADLICYwDQYJKoZIhvcNAQELBQADggEBADmrXgob TXsLuXorxKDTNNNPvBbFHQbtF0tjZlMUn3iiIF9EAme9Rhl6McU8KqbzjRqvK04G qHpnXAfuTowvdiNKSbMyMtGy6awEju1kg4Kya5CUJUosK20P9VsapE2MlQNkD2Qo c0ahrDO8inU3fsYIqN5kEv4JfG+7woYq50SOCXqv5HyJEeSXIOWH3KnCdk8+S/y/ xQNwvnufpflFsjpkkV4rH1PIQig6AHQ9GPBOPHpxU4+R82CaCVfmpalc9sjd9V8n ZwlqX/61x4/eEqRSyu1QA1u47SMyOZu1KGd0huLF5usJLLQsqN38kZdlis3Awny0 aQU9x5iT/eCq/RU= -----END CERTIFICATE-----Generated at Sun Jun 15 10:24:04 2025 by rpki-client