$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/7BBC1DD2040611EF909F6C3EC4F9AE02.roa File: 7BBC1DD2040611EF909F6C3EC4F9AE02.roa (raw, json) Hash identifier: PO0AZ1fTp3S5+kMx+XcNpi0qfLQExWGMHCA4bw3dxVs= Subject key identifier: CA:1F:34:9B:D1:41:FA:5B:CD:3C:9F:0C:B1:66:ED:BF:A6:74:74:01 Certificate issuer: /CN=A918FD04/serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF Certificate serial: 0886 Authority key identifier: C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/7BBC1DD2040611EF909F6C3EC4F9AE02.roa Signing time: Thu 08 May 2025 19:03:39 +0000 ROA not before: Thu 08 May 2025 19:03:39 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 137514 IP address blocks: 103.111.90.0/23 maxlen: 23 103.111.90.0/24 maxlen: 24 103.111.91.0/24 maxlen: 24 2402:99c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2182 (0x886) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD04, serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF Validity Not Before: May 8 19:03:39 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=681d000a-949c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:7a:9a:15:77:f9:ca:8f:ec:90:ee:6b:fe: 92:ab:71:6e:2d:55:ff:00:03:a1:96:81:e3:40:aa: 20:af:e0:c5:96:84:1f:4d:bb:d0:9e:8e:d4:3c:88: b6:53:9a:c2:4b:f3:5a:a5:a8:91:f4:94:bc:0f:09: 49:04:e1:60:7d:30:9a:e3:3f:7e:8a:d3:c5:6d:a0: f7:40:e5:ee:9c:81:83:51:df:db:a0:ad:d7:4d:2f: d6:3b:3e:7b:36:67:a2:f7:4e:d9:e4:fe:86:eb:73: e1:e9:23:34:c8:f5:1c:6c:33:15:1c:ca:3a:17:50: d7:bf:aa:d4:52:d8:99:63:95:3f:a1:2f:0c:c1:82: 02:4d:41:a5:7e:d2:12:4e:e1:56:6a:63:1a:38:2f: 25:fd:ef:9a:1c:ce:b0:38:c4:af:68:4b:ec:55:75: f0:3a:32:b1:98:e4:b4:d6:3b:7f:55:0c:99:88:f1: a4:cf:30:70:bc:c6:46:74:1e:b8:30:5d:73:db:cf: 93:fc:94:0c:f3:38:b9:62:0e:b2:6b:a2:c5:3a:52: 57:43:48:9f:f8:a2:cf:cc:1e:7d:d3:e8:32:cc:9d: 50:99:f4:3b:e1:f1:2d:08:df:f3:7e:98:7d:57:51: d5:3d:9e:ae:33:78:65:da:d5:56:87:05:01:fc:dd: ae:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1F:34:9B:D1:41:FA:5B:CD:3C:9F:0C:B1:66:ED:BF:A6:74:74:01 X509v3 Authority Key Identifier: keyid:C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/7BBC1DD2040611EF909F6C3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.90.0/23 IPv6: 2402:99c0::/32 Signature Algorithm: sha256WithRSAEncryption 80:8d:3d:93:85:81:83:4e:46:13:10:27:f5:a3:2e:d1:b5:90: a7:e9:d0:88:63:5b:5e:aa:f3:a4:c8:7b:9c:3d:53:b0:16:df: 0f:c3:ec:45:99:46:e8:dd:59:5c:3d:a2:5c:f9:f5:1b:88:1c: 0f:8c:f9:92:33:4f:c5:60:ad:54:73:87:73:2c:60:68:93:b3: b1:69:c2:21:5f:c3:dd:f5:6f:5f:1f:7c:39:14:62:2a:bb:a9: 3b:26:34:2a:ea:bd:02:e8:d6:31:70:9a:af:0a:6f:59:09:21: 3c:7d:8f:f1:be:a6:c1:6d:4c:77:25:f5:8a:0c:a8:cf:72:f4: 87:c4:63:94:d9:90:df:11:03:e2:ee:17:33:ee:04:ae:d8:d6: 82:c2:e6:a9:4d:7c:61:83:6f:47:56:78:19:ba:23:5a:1a:a8: 26:42:ca:74:b1:2b:47:8a:03:a5:b5:22:ae:2f:3f:b5:76:75: ed:b0:04:63:a4:bd:b3:68:c1:59:ab:0c:e8:cc:e4:39:e8:1a: f9:77:f2:0f:f9:11:4b:8c:f5:42:c7:7a:e2:f3:31:57:5a:36: e3:90:b2:84:cb:06:bd:9f:b6:79:57:e3:3f:97:d9:a7:2d:54: e5:26:a7:29:c2:de:2f:91:66:40:e2:8d:8a:4f:b5:a0:d6:a5: c5:18:13:e7 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEMDQxMTAvBgNVBAUTKEM0QTRDMzU0MzU4RkQ0ODIzRjZFQzUzMTMyNzY3NDg1 NEM4NkM2REYwHhcNMjUwNTA4MTkwMzM5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODFkMDAwYS05NDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuZ6mhV3+cqP7JDua/6Sq3FuLVX/AAOhloHjQKogr+DFloQfTbvQno7UPIi2 U5rCS/NapaiR9JS8DwlJBOFgfTCa4z9+itPFbaD3QOXunIGDUd/boK3XTS/WOz57 Nmei907Z5P6G63Ph6SM0yPUcbDMVHMo6F1DXv6rUUtiZY5U/oS8MwYICTUGlftIS TuFWamMaOC8l/e+aHM6wOMSvaEvsVXXwOjKxmOS01jt/VQyZiPGkzzBwvMZGdB64 MF1z28+T/JQM8zi5Yg6ya6LFOlJXQ0if+KLPzB590+gyzJ1QmfQ74fEtCN/zfph9 V1HVPZ6uM3hl2tVWhwUB/N2uIQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFMofNJvR QfpbzTyfDLFm7b+mdHQBMB8GA1UdIwQYMBaAFMSkw1Q1j9SCP27FMTJ2dIVMhsbf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQwNC8wQUJCRjQ3MjBE RjIxMUVBOEVFODkxM0JDNEY5QUUwMi94S1REVkRXUDFJSV9ic1V4TW5aMGhVeUd4 dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLVERWRFdQMUlJX2JzVXhNblowaFV5R3h0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZEMDQvMEFCQkY0NzIwREYyMTFFQThFRTg5MTNCQzRGOUFFMDIvN0JCQzFERDIw NDA2MTFFRjkwOUY2QzNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnb1owDQQCAAIwBwMFACQCmcAwDQYJKoZIhvcNAQELBQAD ggEBAICNPZOFgYNORhMQJ/WjLtG1kKfp0IhjW16q86TIe5w9U7AW3w/D7EWZRujd WVw9olz59RuIHA+M+ZIzT8VgrVRzh3MsYGiTs7FpwiFfw931b18ffDkUYiq7qTsm NCrqvQLo1jFwmq8Kb1kJITx9j/G+psFtTHcl9YoMqM9y9IfEY5TZkN8RA+LuFzPu BK7Y1oLC5qlNfGGDb0dWeBm6I1oaqCZCynSxK0eKA6W1Iq4vP7V2de2wBGOkvbNo wVmrDOjM5DnoGvl38g/5EUuM9ULHeuLzMVdaNuOQsoTLBr2ftnlX4z+X2actVOUm pynC3i+RZkDijYpPtaDWpcUYE+c= -----END CERTIFICATE-----Generated at Sun Jun 15 08:48:01 2025 by rpki-client