$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06694A9CB3F311ECBCB2F130C4F9AE02.roa File: 06694A9CB3F311ECBCB2F130C4F9AE02.roa (raw, json) Hash identifier: +GyU2himCeJUAmphvdTsCQnmsPmVYWpB6eqvWi2q0Fk= Subject key identifier: 34:64:60:8B:3D:87:8E:4B:B7:F9:F6:27:D7:88:C9:DB:0F:06:A8:A0 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B2D6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06694A9CB3F311ECBCB2F130C4F9AE02.roa Signing time: Thu 08 May 2025 16:02:44 +0000 ROA not before: Thu 08 May 2025 16:02:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134939 IP address blocks: 103.185.108.0/23 maxlen: 24 2400:69a0::/32 maxlen: 40 2400:69a0::/41 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 07:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45782 (0xb2d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:02:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd5a3-b52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:b3:06:33:30:3b:a5:51:cc:1f:1e:08:4e: 16:ed:7a:b8:ba:bf:b4:e4:5a:df:f5:e0:59:5b:99: f4:38:93:49:07:fe:16:8e:36:af:db:11:2d:5a:a9: 89:1d:8c:5e:48:45:a7:6b:c7:93:b2:58:e4:35:62: 8f:f5:67:5d:be:7f:aa:09:3c:d8:13:bb:ed:b6:05: 4a:4a:bc:42:8d:39:db:14:39:e5:d3:21:12:b4:a5: 38:2b:90:ca:c9:13:65:95:a7:3d:0a:c9:fd:72:7f: 58:c3:22:b1:02:77:76:9a:84:f3:0a:5f:60:82:41: 9a:67:df:dc:51:7c:10:14:cb:2b:c2:f1:fb:c4:8d: a9:fc:00:93:80:0f:33:4c:82:ed:b4:ab:34:42:58: 98:64:b8:a1:f1:a3:be:9f:e5:a0:73:36:79:78:ee: a4:70:82:5c:fb:e1:8d:02:5f:7c:4f:e3:69:b7:3c: 03:33:4b:c2:94:f4:41:4f:5c:5e:39:af:b5:7e:f0: ac:bb:8e:2f:f2:90:ee:d4:d4:3a:a6:53:82:7b:dc: dc:7b:38:fe:66:8e:79:d1:8f:56:c0:2b:85:aa:ad: c1:07:55:0f:33:6b:eb:71:c0:60:94:cc:50:fc:49: 2d:08:30:b3:e8:85:85:a9:70:a9:f6:2c:6d:d1:b1: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:64:60:8B:3D:87:8E:4B:B7:F9:F6:27:D7:88:C9:DB:0F:06:A8:A0 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/06694A9CB3F311ECBCB2F130C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.185.108.0/23 IPv6: 2400:69a0::/32 Signature Algorithm: sha256WithRSAEncryption 97:78:a6:1c:15:90:5c:17:2f:c6:7f:b1:bf:3f:1e:d1:5d:d0: b0:9f:dc:63:4d:c1:06:db:fd:fe:5f:d3:67:be:ea:d7:42:34: 3b:de:28:25:ad:3d:f9:52:da:67:09:df:34:ef:54:1e:20:2f: ba:56:1f:6f:73:d5:0b:69:05:33:05:db:1e:20:89:4b:4c:ad: 26:84:0f:d9:88:00:cc:b2:d2:bb:19:de:54:60:22:bd:f8:e0: 68:6c:9a:25:cd:fc:ef:74:73:61:93:4e:f4:94:c5:73:f4:5c: 44:1f:ac:aa:16:f2:31:48:21:dc:e0:2f:b6:3f:35:18:cf:44: 28:5c:f7:73:8f:0d:c0:03:f0:f4:29:8e:99:d5:da:58:72:b5: e8:74:55:6e:3c:f1:ef:8a:8f:b2:84:fc:9d:a2:45:54:ff:4f: fd:14:f0:c2:0b:f1:13:ab:61:30:44:57:25:1b:37:a2:4a:7f: 03:79:5f:90:34:a5:c0:db:d1:35:25:49:e0:4b:c4:d3:83:05: 58:f6:58:40:4d:76:1e:fb:85:f7:3c:29:96:13:0f:78:dc:6d: 10:a3:06:a2:d3:4c:e4:64:54:fa:20:53:32:c7:4d:6b:18:bf: 7e:cc:63:4e:51:cc:bb:60:74:8c:b5:db:6a:a3:f4:66:2d:4d: 1d:38:86:04 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDALLWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDI0M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q1YTMtYjUyYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHnswYzMDulUcwfHghOFu16uLq/tORa3/XgWVuZ9DiTSQf+Fo42r9sRLVqp iR2MXkhFp2vHk7JY5DVij/VnXb5/qgk82BO77bYFSkq8Qo052xQ55dMhErSlOCuQ yskTZZWnPQrJ/XJ/WMMisQJ3dpqE8wpfYIJBmmff3FF8EBTLK8Lx+8SNqfwAk4AP M0yC7bSrNEJYmGS4ofGjvp/loHM2eXjupHCCXPvhjQJffE/jabc8AzNLwpT0QU9c XjmvtX7wrLuOL/KQ7tTUOqZTgnvc3Hs4/maOedGPVsArhaqtwQdVDzNr63HAYJTM UPxJLQgws+iFhalwqfYsbdGxAYECAwEAAaOCAqQwggKgMB0GA1UdDgQWBBQ0ZGCL PYeOS7f59ifXiMnbDwaooDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA2Njk0QTlD QjNGMzExRUNCQ0IyRjEzMEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQBZ7lsMA0EAgACMAcDBQAkAGmgMA0GCSqGSIb3DQEBCwUA A4IBAQCXeKYcFZBcFy/Gf7G/Px7RXdCwn9xjTcEG2/3+X9NnvurXQjQ73iglrT35 UtpnCd8071QeIC+6Vh9vc9ULaQUzBdseIIlLTK0mhA/ZiADMstK7Gd5UYCK9+OBo bJolzfzvdHNhk070lMVz9FxEH6yqFvIxSCHc4C+2PzUYz0QoXPdzjw3AA/D0KY6Z 1dpYcrXodFVuPPHvio+yhPydokVU/0/9FPDCC/ETq2EwRFclGzeiSn8DeV+QNKXA 29E1JUngS8TTgwVY9lhATXYe+4X3PCmWEw943G0Qowai00zkZFT6IFMyx01rGL9+ zGNOUcy7YHSMtdtqo/RmLU0dOIYE -----END CERTIFICATE-----Generated at Wed May 14 10:30:14 2025 by rpki-client