$ rpki-client -vvf rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/CFC4BC00EB2911ED882B8A32C4F9AE02.roa File: CFC4BC00EB2911ED882B8A32C4F9AE02.roa (raw, json) Hash identifier: KHyj1otfkf2S5YApB/OtC5OI1QkNCQ8X27Eo+XCQipE= Subject key identifier: E6:75:3F:17:F6:80:0F:E6:22:D7:DE:E4:E6:FE:C1:A0:10:D5:12:68 Certificate issuer: /CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Certificate serial: 0178 Authority key identifier: 20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/CFC4BC00EB2911ED882B8A32C4F9AE02.roa Signing time: Sat 19 Apr 2025 03:28:47 +0000 ROA not before: Sat 19 Apr 2025 03:28:47 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 151196 IP address blocks: 103.162.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919794D, serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Validity Not Before: Apr 19 03:28:47 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6803186f-1a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:30:66:32:af:35:a9:47:fa:d8:41:ba:ba: 50:4f:35:4e:30:37:15:02:ae:4f:fb:d5:c7:21:c5: 21:e0:16:c7:f8:dd:84:a8:5e:04:b8:96:80:c9:74: b7:94:b7:31:93:c6:ed:13:ff:bf:e4:82:54:b4:10: ce:ad:ea:f7:b0:2f:ff:72:48:bb:fb:21:b3:06:24: 9b:31:c6:f4:96:54:13:53:12:6b:81:52:6d:87:e5: 3c:63:36:59:64:dc:9c:7f:fd:ac:6d:b5:69:97:ec: da:04:b1:b3:92:8f:18:c6:1b:1d:41:f1:ac:6b:99: ff:d4:75:05:ef:94:18:1f:69:b6:b7:73:30:01:a8: 25:c0:59:52:d5:0d:7a:ed:81:2a:d3:70:89:11:79: 28:51:62:08:69:6d:37:78:a0:a6:c8:b0:48:c5:e6: 1e:71:ca:a4:b1:cb:a7:17:80:c7:22:92:09:34:c4: c3:ab:a0:0f:c2:58:76:d1:1b:d7:0f:37:ac:c6:d9: cc:4e:63:57:82:11:70:3e:f5:bb:15:0b:56:07:1f: f5:3b:ec:8b:23:5a:58:e8:60:65:6c:f3:b2:84:ef: e4:b1:fc:62:ed:b4:2d:d1:2e:00:1a:0f:a1:97:f0: 24:7a:0c:26:b0:e2:4e:97:1e:b1:c9:f4:ac:64:67: 36:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:75:3F:17:F6:80:0F:E6:22:D7:DE:E4:E6:FE:C1:A0:10:D5:12:68 X509v3 Authority Key Identifier: keyid:20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/CFC4BC00EB2911ED882B8A32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.38.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:44:95:f3:c3:ab:ba:4c:8b:9c:8c:20:bd:e1:e9:79:27:de: f8:88:a3:93:67:bf:c0:c3:48:e1:91:92:85:9b:45:51:e5:19: 6d:e8:7e:e9:76:58:c4:34:c6:20:b9:20:6a:e6:c1:0c:96:d4: 9b:4b:ec:98:f8:91:5d:08:23:e1:5b:8b:ed:27:64:28:bb:f7: 5d:6b:95:a8:b9:de:ac:95:e7:b7:a6:e6:87:6f:c6:f1:08:ad: 83:8e:3f:00:a6:76:9d:ce:28:5c:d0:12:65:fe:36:d7:e2:52: f3:f5:1c:60:ea:b0:2d:29:5d:c1:95:17:2d:1c:b8:b4:b3:18: c1:4a:a5:f2:67:00:f3:72:1d:5b:96:25:7a:39:63:da:87:ac: d3:8e:ec:9b:2a:60:0e:6b:aa:08:f5:a4:a9:e0:0c:ef:01:a8: bd:3c:ff:a5:34:02:19:9e:53:9e:56:98:81:2b:f8:f2:1e:55: 7a:03:68:b7:ab:9e:37:cc:81:a9:5f:ad:4b:19:66:ba:ab:bd: 2e:79:ca:70:64:f2:96:71:90:c2:52:5b:b6:25:05:f1:18:3f: 8b:f4:22:a0:b2:fc:d8:5d:d5:ae:24:00:b7:a3:d6:87:49:54: b5:0a:98:00:78:68:84:ec:9b:3b:68:cf:90:20:96:07:5d:59: 8d:a5:a7:27 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc5NEQxMTAvBgNVBAUTKDIwQzAxQjA1MkMxNTgzRTM2ODdDREVDQkZDMTNFOTk0 MTAxQUQ0MkYwHhcNMjUwNDE5MDMyODQ3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAzMTg2Zi0xYTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH8wZjKvNalH+thBurpQTzVOMDcVAq5P+9XHIcUh4BbH+N2EqF4EuJaAyXS3 lLcxk8btE/+/5IJUtBDOrer3sC//cki7+yGzBiSbMcb0llQTUxJrgVJth+U8YzZZ ZNycf/2sbbVpl+zaBLGzko8YxhsdQfGsa5n/1HUF75QYH2m2t3MwAaglwFlS1Q16 7YEq03CJEXkoUWIIaW03eKCmyLBIxeYeccqkscunF4DHIpIJNMTDq6APwlh20RvX DzesxtnMTmNXghFwPvW7FQtWBx/1O+yLI1pY6GBlbPOyhO/ksfxi7bQt0S4AGg+h l/AkegwmsOJOlx6xyfSsZGc2xQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOZ1Pxf2 gA/mItfe5Ob+waAQ1RJoMB8GA1UdIwQYMBaAFCDAGwUsFYPjaHzey/wT6ZQQGtQv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Nzk0RC9DMkNDRTFEQ0U0 MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3VmctTm9mTjdMX0JQcGxCQWEx QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNQWJCU3dWZy1Ob2ZON0xfQlBwbEJBYTFDOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTc5NEQvQzJDQ0UxRENFNDI0MTFFRDlBRDU5MzVGQzRGOUFFMDIvQ0ZDNEJDMDBF QjI5MTFFRDg4MkI4QTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnoiYwDQYJKoZIhvcNAQELBQADggEBAExElfPDq7pMi5yM IL3h6Xkn3viIo5Nnv8DDSOGRkoWbRVHlGW3oful2WMQ0xiC5IGrmwQyW1JtL7Jj4 kV0II+Fbi+0nZCi7911rlai53qyV57em5odvxvEIrYOOPwCmdp3OKFzQEmX+Ntfi UvP1HGDqsC0pXcGVFy0cuLSzGMFKpfJnAPNyHVuWJXo5Y9qHrNOO7JsqYA5rqgj1 pKngDO8BqL08/6U0AhmeU55WmIEr+PIeVXoDaLernjfMgalfrUsZZrqrvS55ynBk 8pZxkMJSW7YlBfEYP4v0IqCy/Nhd1a4kALej1odJVLUKmAB4aITsmztoz5Aglgdd WY2lpyc= -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:48 2025 by rpki-client