$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/02B576C20D3211EC9DBEBA45C4F9AE02.roa File: 02B576C20D3211EC9DBEBA45C4F9AE02.roa (raw, json) Hash identifier: 8kgolYnloP3MZVEwxFAhffhgZAYcK7yq92bkNkod+ZM= Subject key identifier: C7:71:95:CD:A1:80:DF:96:9A:0C:82:D2:2F:57:7D:74:F2:BC:6B:16 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B72F Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/02B576C20D3211EC9DBEBA45C4F9AE02.roa Signing time: Thu 08 May 2025 16:19:48 +0000 ROA not before: Thu 08 May 2025 16:19:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 146881 IP address blocks: 103.158.18.0/24 maxlen: 24 103.171.135.0/24 maxlen: 24 2001:df2:9f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46895 (0xb72f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:19:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd9a3-ea5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:a0:4f:14:e8:2c:03:dd:a3:88:65:e5:5b: 5b:6e:42:d0:94:6c:b7:bf:0c:d7:53:9b:15:a7:4a: 0f:35:da:f1:2e:70:73:b6:18:27:cb:18:58:98:c7: 4e:a7:eb:fc:6b:d0:02:ee:8b:26:43:76:c2:03:e5: d2:77:36:3d:c7:ff:dd:39:78:b0:80:cd:de:76:2c: 0a:d8:49:f7:59:75:3b:a4:de:18:47:8b:0d:28:be: 35:8a:d0:85:86:0b:4d:72:69:2f:ff:cf:82:c2:9b: b5:31:97:a2:0a:75:e3:7c:1c:25:2c:93:ab:62:2e: 5e:44:3c:6e:d6:f7:3e:ce:ec:f1:92:aa:41:c8:0b: 2b:01:ae:70:cd:d1:68:e0:63:7e:2f:ec:b5:f8:e1: 9b:eb:32:09:f6:28:23:9a:39:56:70:a4:0e:6e:e5: 16:f4:71:8b:da:14:15:f3:b5:2e:63:7c:62:7f:d2: bd:11:b3:ff:c6:41:12:e6:23:9b:3d:42:ef:4d:0a: 4e:0e:67:e5:b0:fd:96:a0:ee:94:8e:13:63:00:10: 96:9e:9d:2b:cb:df:b2:91:ab:60:0e:0e:3e:8d:2f: 09:d0:14:b6:e0:56:42:36:03:74:4d:4d:a8:5e:ed: 02:0d:df:bf:7e:9e:dc:a2:69:e5:bb:4f:18:1e:88: 06:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:71:95:CD:A1:80:DF:96:9A:0C:82:D2:2F:57:7D:74:F2:BC:6B:16 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/02B576C20D3211EC9DBEBA45C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.158.18.0/24 103.171.135.0/24 IPv6: 2001:df2:9f40::/48 Signature Algorithm: sha256WithRSAEncryption 17:50:38:72:1c:1a:6e:02:b6:2c:61:33:af:f4:c2:66:87:17: 5f:40:a3:bf:f2:75:eb:85:35:4f:46:d4:fa:50:3f:74:bc:38: 55:22:ef:8d:ae:58:89:42:da:af:70:33:dd:28:97:fc:85:4e: cd:84:34:54:76:27:56:39:fe:8e:57:f4:ae:49:93:4f:c7:5a: 5b:56:7e:c0:e2:05:39:bb:5b:5b:9d:dc:38:c4:98:e8:e8:91: 5d:06:76:b3:bb:31:2f:e8:82:e0:4a:cd:03:29:01:1e:80:cc: 5b:a0:f5:61:7f:be:67:ee:22:4b:3a:12:1b:c4:4d:22:5d:bd: 19:aa:9a:85:28:af:45:d2:27:80:da:6c:7a:e7:28:97:c7:15: 64:ad:54:e9:0c:dc:1a:62:30:11:31:fb:a8:2b:9a:3d:50:2c: 8f:45:a2:ca:ee:53:0e:61:3c:78:1e:df:f6:d6:3b:07:47:8c: 67:51:8a:32:ad:22:39:3f:ed:87:13:6e:6c:ed:7c:6d:6b:4b: c2:1c:83:15:3c:69:c8:04:9e:2f:ce:28:f9:6c:c6:c8:29:86: 03:95:91:9f:d6:25:fc:cf:98:08:9d:ab:8b:b3:01:30:8d:96: eb:42:2a:cd:f5:a2:37:1b:4a:ea:e2:83:c2:15:b8:45:11:f0: 1a:0a:2a:8a -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIDALcvMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTk0OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5YTMtZWE1ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqIoE8U6CwD3aOIZeVbW25C0JRst78M11ObFadKDzXa8S5wc7YYJ8sYWJjH Tqfr/GvQAu6LJkN2wgPl0nc2Pcf/3Tl4sIDN3nYsCthJ91l1O6TeGEeLDSi+NYrQ hYYLTXJpL//PgsKbtTGXogp143wcJSyTq2IuXkQ8btb3Ps7s8ZKqQcgLKwGucM3R aOBjfi/stfjhm+syCfYoI5o5VnCkDm7lFvRxi9oUFfO1LmN8Yn/SvRGz/8ZBEuYj mz1C700KTg5n5bD9lqDulI4TYwAQlp6dK8vfspGrYA4OPo0vCdAUtuBWQjYDdE1N qF7tAg3fv36e3KJp5btPGB6IBhUCAwEAAaOCAqwwggKoMB0GA1UdDgQWBBTHcZXN oYDflpoMgtIvV3108rxrFjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzAyQjU3NkMy MEQzMjExRUM5REJFQkE0NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDYGCCsGAQUFBwEHAQH/ BCcwJTASBAIAATAMAwQAZ54SAwQAZ6uHMA8EAgACMAkDBwAgAQ3yn0AwDQYJKoZI hvcNAQELBQADggEBABdQOHIcGm4CtixhM6/0wmaHF19Ao7/ydeuFNU9G1PpQP3S8 OFUi742uWIlC2q9wM90ol/yFTs2ENFR2J1Y5/o5X9K5Jk0/HWltWfsDiBTm7W1ud 3DjEmOjokV0GdrO7MS/oguBKzQMpAR6AzFug9WF/vmfuIks6EhvETSJdvRmqmoUo r0XSJ4DabHrnKJfHFWStVOkM3BpiMBEx+6grmj1QLI9FosruUw5hPHge3/bWOwdH jGdRijKtIjk/7YcTbmztfG1rS8IcgxU8acgEni/OKPlsxsgphgOVkZ/WJfzPmAid q4uzATCNlutCKs31ojcbSurig8IVuEUR8BoKKoo= -----END CERTIFICATE-----Generated at Tue May 13 00:22:06 2025 by rpki-client