$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/DDEC8C2A39AA11E9B0166376C4F9AE02.roa File: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (raw, json) Hash identifier: P8zT0PniKGyPQKuaO/6cEK/Iz5vptBwIg6UXjylLbdY= Subject key identifier: 19:7E:F0:53:A7:46:44:03:36:FB:5B:DD:7E:69:A4:4C:3D:0F:A4:AA Certificate issuer: /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Certificate serial: 1054 Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/DDEC8C2A39AA11E9B0166376C4F9AE02.roa Signing time: Mon 02 Jun 2025 17:39:00 +0000 ROA not before: Mon 02 Jun 2025 17:39:00 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132816 IP address blocks: 103.25.200.0/22 maxlen: 22 150.107.152.0/22 maxlen: 22 2400:c980::/40 maxlen: 40 2400:c980::/48 maxlen: 48 2400:c980:1::/48 maxlen: 48 2400:c980:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4180 (0x1054) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F31A7, serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Validity Not Before: Jun 2 17:39:00 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683de1b4-b02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:17:b1:a2:99:47:63:74:95:56:fc:87:37:c5: 5e:20:2d:c1:51:f9:28:d4:b4:e6:fb:68:74:db:1b: 4f:ab:8f:69:f9:56:9f:51:b3:a6:38:be:62:d2:db: 55:fd:22:cb:a0:d5:f9:22:ce:8c:01:22:b8:02:71: 54:a3:68:33:0c:5f:9d:b2:a6:a2:90:81:a9:01:ff: 7b:bd:bf:a8:be:a8:d6:cf:56:87:b5:96:44:6f:07: a5:11:c2:0d:08:04:4b:40:1c:14:1e:b4:ed:3d:8d: 1a:65:e9:7a:16:84:df:b3:ef:d1:f9:cb:8c:0e:e4: b1:7a:75:03:12:5f:2a:77:5d:7d:0a:8b:2a:7e:19: 4c:54:0d:e4:73:f7:c6:ef:09:e7:d3:fa:03:14:c4: 3a:b5:ac:6a:aa:5e:f6:c1:db:6d:7c:41:59:54:1b: 09:84:29:2d:62:2d:c5:bf:e1:19:06:b7:ff:ce:2f: 6a:f9:d4:2c:24:57:39:7e:0f:77:2d:df:25:0a:c9: 6f:9b:1d:ad:41:ee:a2:a4:ce:26:33:3a:02:fa:00: fe:bd:2f:16:dc:1e:9c:e5:20:0b:2a:e1:c3:56:ec: 95:0e:b7:44:c6:9e:8e:ba:18:ab:f1:82:73:c8:95: f7:1a:2b:d7:85:58:27:96:77:e3:52:1e:b4:63:f4: e9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7E:F0:53:A7:46:44:03:36:FB:5B:DD:7E:69:A4:4C:3D:0F:A4:AA X509v3 Authority Key Identifier: keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/DDEC8C2A39AA11E9B0166376C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.25.200.0/22 150.107.152.0/22 IPv6: 2400:c980::/40 Signature Algorithm: sha256WithRSAEncryption 7e:cf:b5:e8:d4:98:f3:ea:85:18:35:6c:33:71:9e:9c:48:f3: ee:92:cc:fe:3e:7e:94:49:43:9d:7c:df:62:91:78:c2:4c:25: 06:d6:d4:f1:55:84:00:1e:93:a1:e9:7d:2c:ac:6b:fc:23:63: 28:73:8b:ef:51:7b:a4:57:f3:31:8e:b2:7d:27:95:60:21:df: 20:97:97:8d:fd:87:b9:87:3c:cb:da:f8:e1:b5:6b:9f:93:37: 29:8e:1b:64:8a:d0:a6:16:29:66:93:65:8b:0c:81:ba:5f:1b: 95:aa:b1:d3:b2:d8:97:59:a3:9a:1a:34:d4:19:5f:37:2b:f6: d0:3a:e9:67:bf:0b:3d:a3:7d:c4:95:1e:08:f7:29:f0:45:81: 27:63:1b:bc:97:b3:7c:ff:2a:22:d6:79:88:de:12:5a:19:ec: 91:12:b9:19:74:07:6c:f6:b8:51:57:50:0d:5f:3f:6f:af:ef: 3e:61:5f:c9:32:e5:b8:c7:51:e9:b6:4c:32:93:84:f4:9c:10: b8:de:0a:56:00:72:41:95:a4:b0:db:a0:8a:66:87:47:57:ed: f3:4f:90:30:43:d8:29:d2:2c:86:75:68:c3:01:3f:dc:71:ae: bb:ae:8a:95:24:b0:c4:3b:ca:c6:ed:57:94:8a:0e:7e:1d:8b: 76:b4:28:fc -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICEFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMxQTcxMTAvBgNVBAUTKDZBQzc3OTc0REZFNDUwODA3MzVDREI5MDY2QTdFMjQ2 OTYwNDkyQjcwHhcNMjUwNjAyMTczOTAwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNkZTFiNC1iMDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BexoplHY3SVVvyHN8VeIC3BUfko1LTm+2h02xtPq49p+VafUbOmOL5i0ttV /SLLoNX5Is6MASK4AnFUo2gzDF+dsqaikIGpAf97vb+ovqjWz1aHtZZEbwelEcIN CARLQBwUHrTtPY0aZel6FoTfs+/R+cuMDuSxenUDEl8qd119CosqfhlMVA3kc/fG 7wnn0/oDFMQ6taxqql72wdttfEFZVBsJhCktYi3Fv+EZBrf/zi9q+dQsJFc5fg93 Ld8lCslvmx2tQe6ipM4mMzoC+gD+vS8W3B6c5SALKuHDVuyVDrdExp6Ouhir8YJz yJX3GivXhVgnlnfjUh60Y/Tp+QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFBl+8FOn RkQDNvtb3X5ppEw9D6SqMB8GA1UdIwQYMBaAFGrHeXTf5FCAc1zbkGan4kaWBJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzFBNy83QjBCNjc4NDM5 QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJQnpYTnVRWnFmaVJwWUVr cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzZDVkTl9rVUlCelhOdVFacWZpUnBZRWtyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjMxQTcvN0IwQjY3ODQzOUFBMTFFOThBOEU1Mjc2QzRGOUFFMDIvRERFQzhDMkEz OUFBMTFFOUIwMTY2Mzc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMBIEAgABMAwDBAJnGcgDBAKWa5gwDgQCAAIwCAMGACQAyYAAMA0GCSqGSIb3 DQEBCwUAA4IBAQB+z7Xo1Jjz6oUYNWwzcZ6cSPPuksz+Pn6USUOdfN9ikXjCTCUG 1tTxVYQAHpOh6X0srGv8I2Moc4vvUXukV/MxjrJ9J5VgId8gl5eN/Ye5hzzL2vjh tWufkzcpjhtkitCmFilmk2WLDIG6XxuVqrHTstiXWaOaGjTUGV83K/bQOulnvws9 o33ElR4I9ynwRYEnYxu8l7N8/yoi1nmI3hJaGeyRErkZdAds9rhRV1ANXz9vr+8+ YV/JMuW4x1Hptkwyk4T0nBC43gpWAHJBlaSw26CKZodHV+3zT5AwQ9gp0iyGdWjD AT/cca67roqVJLDEO8rG7VeUig5+HYt2tCj8 -----END CERTIFICATE-----Generated at Sun Jun 15 10:06:49 2025 by rpki-client