$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01F0F9CEFE2E11EE9DEE6523C4F9AE02.roa File: 01F0F9CEFE2E11EE9DEE6523C4F9AE02.roa (raw, json) Hash identifier: P5jjb32IkkUfzuyfYNQbZW92kAoTiFMQyZN/at4+lwE= Subject key identifier: AE:F8:57:9D:EF:B1:BD:98:03:3A:10:84:BE:5D:4A:12:D4:FF:79:29 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B567 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01F0F9CEFE2E11EE9DEE6523C4F9AE02.roa Signing time: Thu 08 May 2025 16:12:51 +0000 ROA not before: Thu 08 May 2025 16:12:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139195 IP address blocks: 103.42.72.0/22 maxlen: 24 103.105.224.0/22 maxlen: 24 103.171.58.0/23 maxlen: 24 103.189.216.0/24 maxlen: 24 103.189.217.0/24 maxlen: 24 113.30.144.0/24 maxlen: 24 113.30.145.0/24 maxlen: 24 113.30.147.0/24 maxlen: 24 119.161.96.0/22 maxlen: 24 2001:df6:4900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 09:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46439 (0xb567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:12:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd803-9959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:63:4f:23:db:84:a0:05:59:a0:f4:3d:53: 78:76:5a:a5:ab:f2:f6:81:67:af:1d:d4:26:8b:ea: 77:63:83:e2:39:b1:12:6d:a5:c7:9a:32:0d:aa:c4: 18:51:de:8b:31:1f:9f:11:67:42:85:9c:fa:01:ec: d9:a4:f2:f9:01:25:f0:2f:ca:7b:8f:8e:9c:67:17: 00:82:bc:21:94:ae:5e:33:78:cd:9e:9a:03:3e:b6: b0:7c:86:41:13:4d:4e:39:ed:74:6f:1a:e7:5e:db: f0:57:9f:57:21:a2:59:00:2e:3f:df:89:f9:90:5b: f9:b8:f8:2d:c4:92:13:3b:b2:d2:07:3b:be:9e:3d: 8e:a8:3f:9e:cb:b4:18:48:7a:07:23:c2:29:88:93: d5:66:b0:be:ac:49:90:6e:77:3a:ef:54:61:0a:37: 9d:fb:0b:1a:4f:4c:a7:7b:51:15:28:d7:83:f1:1c: 1e:2e:95:ef:e5:4f:86:9a:d8:3f:ad:5f:b3:dd:0f: 96:59:bf:ca:ea:42:6d:fe:e0:b4:6f:c1:9a:3a:a5: 4b:cc:25:b3:e9:cc:6e:83:9d:c0:c9:01:80:75:20: c0:47:91:31:9e:de:ce:af:6c:08:bd:cc:0c:f3:97: 25:93:03:f4:0c:25:02:78:23:5a:c9:ab:fa:76:d5: c6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F8:57:9D:EF:B1:BD:98:03:3A:10:84:BE:5D:4A:12:D4:FF:79:29 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/01F0F9CEFE2E11EE9DEE6523C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.42.72.0/22 103.105.224.0/22 103.171.58.0/23 103.189.216.0/23 113.30.144.0/23 113.30.147.0/24 119.161.96.0/22 IPv6: 2001:df6:4900::/48 Signature Algorithm: sha256WithRSAEncryption a6:71:05:b8:88:9b:5f:0d:ae:dd:a4:d4:66:76:d8:89:09:44: 58:51:a2:81:92:a7:97:30:9b:a4:bd:5a:c0:fd:2e:40:8a:2a: a9:19:f6:75:fd:e5:f5:62:91:9d:ee:47:35:14:da:41:14:99: 34:f4:75:58:08:f2:a1:2b:fc:47:e7:64:99:18:70:d2:b4:ad: 71:a2:9a:c8:4e:30:9f:bf:9e:d1:42:42:82:5d:f3:a0:93:15: 38:d4:84:dc:60:9f:7e:39:ce:9e:73:70:51:60:8c:68:3c:e1: ae:0c:94:51:b4:b5:95:97:78:74:32:95:8c:b0:7d:98:66:f3: f3:13:c5:ca:65:99:f7:af:64:d9:ce:30:bc:93:ea:d3:99:3a: b8:bb:4f:31:17:9a:12:ca:22:39:c7:58:fe:4e:37:e6:6f:78: 04:70:50:78:92:f2:73:51:08:6c:8e:76:b4:9d:0e:cc:f1:67: 7f:31:ed:8a:8b:aa:28:72:10:85:2f:df:d7:d5:9b:57:7a:ad: 96:34:21:a4:83:78:19:e5:7e:e6:7e:4f:aa:d7:af:da:e4:e2: b7:55:a5:e6:55:4f:42:34:9b:7b:0e:ed:35:1e:29:74:85:e9: 8f:80:20:72:c3:b4:76:68:74:71:5a:13:e4:a9:da:bc:af:37: f3:18:3a:c3 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIDALVnMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTI1MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4MDMtOTk1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6OY08j24SgBVmg9D1TeHZapavy9oFnrx3UJovqd2OD4jmxEm2lx5oyDarE GFHeizEfnxFnQoWc+gHs2aTy+QEl8C/Ke4+OnGcXAIK8IZSuXjN4zZ6aAz62sHyG QRNNTjntdG8a517b8FefVyGiWQAuP9+J+ZBb+bj4LcSSEzuy0gc7vp49jqg/nsu0 GEh6ByPCKYiT1WawvqxJkG53Ou9UYQo3nfsLGk9Mp3tRFSjXg/EcHi6V7+VPhprY P61fs90Pllm/yupCbf7gtG/BmjqlS8wls+nMboOdwMkBgHUgwEeRMZ7ezq9sCL3M DPOXJZMD9AwlAngjWsmr+nbVxpECAwEAAaOCAsowggLGMB0GA1UdDgQWBBSu+Fed 77G9mAM6EIS+XUoS1P95KTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzAxRjBGOUNF RkUyRTExRUU5REVFNjUyM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFQGCCsGAQUFBwEHAQH/ BEUwQzAwBAIAATAqAwQCZypIAwQCZ2ngAwQBZ6s6AwQBZ73YAwQBcR6QAwQAcR6T AwQCd6FgMA8EAgACMAkDBwAgAQ32SQAwDQYJKoZIhvcNAQELBQADggEBAKZxBbiI m18Nrt2k1GZ22IkJRFhRooGSp5cwm6S9WsD9LkCKKqkZ9nX95fVikZ3uRzUU2kEU mTT0dVgI8qEr/EfnZJkYcNK0rXGimshOMJ+/ntFCQoJd86CTFTjUhNxgn345zp5z cFFgjGg84a4MlFG0tZWXeHQylYywfZhm8/MTxcplmfevZNnOMLyT6tOZOri7TzEX mhLKIjnHWP5ON+ZveARwUHiS8nNRCGyOdrSdDszxZ38x7YqLqihyEIUv39fVm1d6 rZY0IaSDeBnlfuZ+T6rXr9rk4rdVpeZVT0I0m3sO7TUeKXSF6Y+AIHLDtHZodHFa E+Sp2ryvN/MYOsM= -----END CERTIFICATE-----Generated at Mon May 12 04:05:47 2025 by rpki-client