$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0091708C0D4E11EC8DDD243AC4F9AE02.roa File: 0091708C0D4E11EC8DDD243AC4F9AE02.roa (raw, json) Hash identifier: oEnId80KtIy6f1yd42bBnb54dNAx86tFbAlCNLkwnzI= Subject key identifier: CC:7A:B7:45:81:DC:35:2C:3A:C0:C1:35:06:08:79:B1:A4:A7:89:55 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B358 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0091708C0D4E11EC8DDD243AC4F9AE02.roa Signing time: Thu 08 May 2025 16:04:47 +0000 ROA not before: Thu 08 May 2025 16:04:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135750 IP address blocks: 103.127.140.0/22 maxlen: 24 103.208.56.0/22 maxlen: 24 103.208.60.0/22 maxlen: 24 103.208.104.0/22 maxlen: 24 103.208.108.0/22 maxlen: 24 103.208.144.0/22 maxlen: 24 103.208.156.0/22 maxlen: 24 103.208.172.0/22 maxlen: 24 103.208.236.0/22 maxlen: 24 103.208.240.0/22 maxlen: 24 103.210.80.0/22 maxlen: 24 103.210.88.0/22 maxlen: 24 103.210.92.0/22 maxlen: 24 103.210.100.0/22 maxlen: 24 2406:cec0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45912 (0xb358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:04:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd61e-062f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:61:ea:0f:99:32:f3:1a:47:d9:2c:11:21: cc:09:f1:0c:71:f8:ff:4e:2f:e7:5a:98:f2:cb:90: 63:b9:15:2c:5d:e9:67:37:e9:e1:88:ad:8f:bc:bd: 5c:34:c4:29:1c:1d:ed:b9:49:d5:31:7f:4c:bf:63: cf:c4:92:52:38:d1:b5:7f:7b:ad:73:0c:eb:fe:55: d3:fb:49:99:08:ad:95:3a:40:13:32:d0:c6:e9:10: f2:e5:bc:3e:e1:01:91:ed:d1:32:58:06:2f:14:77: 4e:a9:50:4f:8b:d6:ab:8e:3a:00:ba:d9:84:4f:91: d6:a6:fb:40:c7:8d:09:fd:1e:29:d8:b3:f0:6f:6c: 33:ed:de:3a:8d:7b:31:af:ab:74:15:da:c4:fd:3a: f0:de:02:20:5d:6a:97:20:70:d1:fa:1e:ef:16:1a: bf:5a:7f:3a:1b:e0:85:96:d4:3d:82:55:be:c1:33: 7e:07:f2:b6:ab:7b:ec:b4:e5:95:31:93:f0:2f:0e: ce:91:65:2e:9d:e6:c0:06:a8:86:4f:9e:a2:37:2a: f4:de:79:37:c5:f0:84:a7:6e:92:6e:97:c5:fb:4e: e5:3e:37:2b:c4:3d:4b:c4:4e:09:6d:6b:3a:5c:a1: 94:0c:1e:71:91:93:61:86:53:34:e0:2a:52:02:f8: 49:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7A:B7:45:81:DC:35:2C:3A:C0:C1:35:06:08:79:B1:A4:A7:89:55 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0091708C0D4E11EC8DDD243AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.140.0/22 103.208.56.0/21 103.208.104.0/21 103.208.144.0/22 103.208.156.0/22 103.208.172.0/22 103.208.236.0-103.208.243.255 103.210.80.0/22 103.210.88.0/21 103.210.100.0/22 IPv6: 2406:cec0::/32 Signature Algorithm: sha256WithRSAEncryption 0b:c6:58:ef:7b:44:ea:07:65:a0:80:62:ee:a3:f7:28:bd:83: 4f:93:c7:a4:c4:27:72:5c:bb:9b:43:27:b8:42:b2:11:91:34: 3d:77:1b:36:29:46:42:fc:82:5c:c3:55:d9:75:d4:cd:20:85: 92:33:f1:5b:f4:7e:5e:b1:a5:bf:04:32:e2:2b:9f:80:d8:f7: 1d:e8:6f:d2:d6:14:d4:7e:f0:c6:19:21:47:2f:ff:43:9d:fe: 38:be:48:08:5e:90:a9:31:11:8a:aa:8b:4b:37:cc:77:4e:8f: ee:53:0d:9b:50:4a:04:47:af:04:22:81:b1:43:80:98:06:ed: 56:9b:24:7a:5f:47:78:23:78:4b:7f:15:ca:24:08:46:c3:b7: e4:99:1c:1e:5e:c5:1c:71:7a:28:8d:ef:f2:1b:df:29:05:2f: 04:a9:a8:ea:90:2e:6a:e5:69:7d:6f:4b:5b:b4:8d:ee:0d:05: c9:e1:a1:ee:cc:2b:a1:46:c1:99:08:fc:f1:57:ab:13:4c:56: 62:e8:19:1c:04:d5:cd:b3:fa:af:cd:f5:30:df:b5:23:4a:05: c1:de:a3:34:d3:aa:34:0a:b9:db:4c:51:46:20:ad:78:06:d1: 44:42:a9:7e:bc:db:55:0a:b2:e9:21:ef:78:32:d3:06:67:9d: 2a:49:87:d7 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIDALNYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDQ0N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q2MWUtMDYyZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANHTYeoPmTLzGkfZLBEhzAnxDHH4/04v51qY8suQY7kVLF3pZzfp4Yitj7y9 XDTEKRwd7blJ1TF/TL9jz8SSUjjRtX97rXMM6/5V0/tJmQitlTpAEzLQxukQ8uW8 PuEBke3RMlgGLxR3TqlQT4vWq446ALrZhE+R1qb7QMeNCf0eKdiz8G9sM+3eOo17 Ma+rdBXaxP068N4CIF1qlyBw0foe7xYav1p/OhvghZbUPYJVvsEzfgfytqt77LTl lTGT8C8OzpFlLp3mwAaohk+eojcq9N55N8XwhKdukm6XxftO5T43K8Q9S8ROCW1r OlyhlAwecZGTYYZTNOAqUgL4Se8CAwEAAaOCAuIwggLeMB0GA1UdDgQWBBTMerdF gdw1LDrAwTUGCHmxpKeJVTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzAwOTE3MDhD MEQ0RTExRUM4REREMjQzQUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMGwGCCsGAQUFBwEHAQH/ BF0wWzBKBAIAATBEAwQCZ3+MAwQDZ9A4AwQDZ9BoAwQCZ9CQAwQCZ9CcAwQCZ9Cs MAwDBAJn0OwDBAJn0PADBAJn0lADBANn0lgDBAJn0mQwDQQCAAIwBwMFACQGzsAw DQYJKoZIhvcNAQELBQADggEBAAvGWO97ROoHZaCAYu6j9yi9g0+Tx6TEJ3Jcu5tD J7hCshGRND13GzYpRkL8glzDVdl11M0ghZIz8Vv0fl6xpb8EMuIrn4DY9x3ob9LW FNR+8MYZIUcv/0Od/ji+SAhekKkxEYqqi0s3zHdOj+5TDZtQSgRHrwQigbFDgJgG 7VabJHpfR3gjeEt/FcokCEbDt+SZHB5exRxxeiiN7/Ib3ykFLwSpqOqQLmrlaX1v S1u0je4NBcnhoe7MK6FGwZkI/PFXqxNMVmLoGRwE1c2z+q/N9TDftSNKBcHeozTT qjQKudtMUUYgrXgG0URCqX6821UKsukh73gy0wZnnSpJh9c= -----END CERTIFICATE-----Generated at Mon May 12 20:57:07 2025 by rpki-client