$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/035B7902F5B211EFBAC44847C4F9AE02.roa File: 035B7902F5B211EFBAC44847C4F9AE02.roa (raw, json) Hash identifier: VaFTflr60GISxa2HK/RMVECYSUOmQmjpzIx9YSOfAhA= Subject key identifier: E7:B5:1B:A9:D9:0C:3C:03:0A:94:0C:75:6E:4B:11:2D:6F:F8:E9:21 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BF24 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/035B7902F5B211EFBAC44847C4F9AE02.roa Signing time: Mon 30 Jun 2025 10:09:07 +0000 ROA not before: Mon 30 Jun 2025 10:09:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133007 IP address blocks: 103.119.196.0/24 maxlen: 24 103.119.198.0/24 maxlen: 24 103.155.210.0/23 maxlen: 24 103.159.239.0/24 maxlen: 24 103.170.148.0/24 maxlen: 24 103.177.84.0/24 maxlen: 24 103.183.90.0/23 maxlen: 24 103.187.248.0/23 maxlen: 24 103.190.12.0/23 maxlen: 24 103.252.168.0/22 maxlen: 24 163.227.38.0/23 maxlen: 24 2001:df5:7ac0::/48 maxlen: 48 2402:81c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48932 (0xbf24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 30 10:09:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68626243-52d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d1:af:27:15:d5:c3:b5:62:80:3f:6f:c0:0d: 41:31:4b:2e:85:48:b2:78:cf:9c:28:f2:6c:b6:c4: 8f:f6:b4:9c:fa:a9:e7:5d:33:83:30:c8:91:40:2a: d5:0f:ce:6a:51:ac:3e:13:59:72:21:44:54:4a:bf: 2c:d7:44:18:19:5b:bc:89:2a:e8:c0:bd:52:23:2f: b4:e6:33:d1:54:fa:6b:80:00:db:86:c9:71:4f:72: 32:bd:6f:a8:41:83:f4:7c:8c:28:25:4a:2b:f5:4b: 87:2f:ba:b9:88:11:f9:89:0f:0e:02:5c:1c:af:66: 79:43:1d:d6:5a:e6:18:0f:21:3e:87:eb:9e:ff:6f: 64:c0:7c:b2:22:bd:c9:57:c3:fa:77:08:c3:5d:b2: f1:d0:b6:9b:bb:46:22:73:1c:6e:47:84:a1:c3:d2: b4:06:4c:e2:b8:74:64:bb:7f:36:99:22:17:21:03: ce:b7:39:a0:09:5b:ff:4e:c1:35:c2:d4:17:49:cb: b0:90:67:57:40:d0:ce:44:42:a0:e1:41:9b:95:65: dd:a1:10:87:15:7a:7f:c2:63:09:87:e7:d2:0a:58: a4:53:d5:c8:ec:21:5f:47:b5:c5:3e:aa:e5:48:82: 5c:08:f4:ad:9a:13:66:27:a1:fc:88:6e:7b:3d:f3: d1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B5:1B:A9:D9:0C:3C:03:0A:94:0C:75:6E:4B:11:2D:6F:F8:E9:21 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/035B7902F5B211EFBAC44847C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.196.0/24 103.119.198.0/24 103.155.210.0/23 103.159.239.0/24 103.170.148.0/24 103.177.84.0/24 103.183.90.0/23 103.187.248.0/23 103.190.12.0/23 103.252.168.0/22 163.227.38.0/23 IPv6: 2001:df5:7ac0::/48 2402:81c0::/32 Signature Algorithm: sha256WithRSAEncryption af:f0:83:4d:9b:21:3c:94:98:6a:d7:97:78:bc:42:ae:f0:ad: 74:d9:29:d5:e5:a3:cf:8f:c3:b2:52:b6:85:c0:92:78:f3:01: 62:8d:3e:e4:91:08:2f:33:f8:49:50:3b:7b:67:ef:65:5e:b8: d6:dd:e9:4a:12:00:3a:ab:6c:16:11:99:86:48:7a:8e:1b:02: ab:99:f6:4a:90:dd:f7:e7:2e:23:2f:6c:3f:85:14:97:7b:59: 14:dd:45:98:fd:85:3e:42:c4:49:f4:18:c8:71:da:8a:2a:0f: 5f:62:d7:94:52:da:82:8e:d0:87:96:b3:04:16:4c:98:1f:7a: 4c:aa:72:5e:08:c0:06:02:df:18:f2:ed:d8:6b:3d:08:eb:bc: ff:19:bd:2f:59:f2:52:d5:98:7c:2b:77:4f:fd:72:be:c4:7c: e8:e1:69:15:80:0d:c0:54:ce:5f:9c:f7:5b:86:25:bb:7a:b9: da:12:05:08:6e:21:ca:8e:03:fa:c5:80:8d:06:6d:a1:f4:6f: 28:07:76:b3:07:a1:f1:60:ce:04:32:15:75:9c:3f:f7:84:e4: 84:14:23:8f:55:06:25:2d:8c:3a:22:a5:69:6c:32:bf:04:80: 6d:c7:1d:27:97:79:78:05:d4:b6:f7:66:fe:f4:bb:39:39:c0: 66:0b:42:c3 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIDAL8kMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDYzMDEwMDkwN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjg2MjYyNDMtNTJkMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMnRrycV1cO1YoA/b8ANQTFLLoVIsnjPnCjybLbEj/a0nPqp510zgzDIkUAq 1Q/OalGsPhNZciFEVEq/LNdEGBlbvIkq6MC9UiMvtOYz0VT6a4AA24bJcU9yMr1v qEGD9HyMKCVKK/VLhy+6uYgR+YkPDgJcHK9meUMd1lrmGA8hPofrnv9vZMB8siK9 yVfD+ncIw12y8dC2m7tGInMcbkeEocPStAZM4rh0ZLt/NpkiFyEDzrc5oAlb/07B NcLUF0nLsJBnV0DQzkRCoOFBm5Vl3aEQhxV6f8JjCYfn0gpYpFPVyOwhX0e1xT6q 5UiCXAj0rZoTZieh/Ihuez3z0SsCAwEAAaOCAukwggLlMB0GA1UdDgQWBBTntRup 2Qw8AwqUDHVuSxEtb/jpITAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzAzNUI3OTAy RjVCMjExRUZCQUM0NDg0N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMHMGCCsGAQUFBwEHAQH/ BGQwYjBIBAIAATBCAwQAZ3fEAwQAZ3fGAwQBZ5vSAwQAZ5/vAwQAZ6qUAwQAZ7FU AwQBZ7daAwQBZ7v4AwQBZ74MAwQCZ/yoAwQBo+MmMBYEAgACMBADBwAgAQ31esAD BQAkAoHAMA0GCSqGSIb3DQEBCwUAA4IBAQCv8INNmyE8lJhq15d4vEKu8K102SnV 5aPPj8OyUraFwJJ48wFijT7kkQgvM/hJUDt7Z+9lXrjW3elKEgA6q2wWEZmGSHqO GwKrmfZKkN335y4jL2w/hRSXe1kU3UWY/YU+QsRJ9BjIcdqKKg9fYteUUtqCjtCH lrMEFkyYH3pMqnJeCMAGAt8Y8u3Yaz0I67z/Gb0vWfJS1Zh8K3dP/XK+xHzo4WkV gA3AVM5fnPdbhiW7ernaEgUIbiHKjgP6xYCNBm2h9G8oB3azB6HxYM4EMhV1nD/3 hOSEFCOPVQYlLYw6IqVpbDK/BIBtxx0nl3l4BdS292b+9Ls5OcBmC0LD -----END CERTIFICATE-----Generated at Thu Jul 3 06:11:12 2025 by rpki-client