$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/074BDC5EB3F311ECBCB2F130C4F9AE02.roa File: 074BDC5EB3F311ECBCB2F130C4F9AE02.roa (raw, json) Hash identifier: MCI4mYlsN3htHJopgiOyaN+aXPdnlgXFhSoY/tyyHHo= Subject key identifier: 80:20:14:41:92:16:2B:B5:BF:3B:15:24:6C:27:DB:E4:1E:22:68:6F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B418 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/074BDC5EB3F311ECBCB2F130C4F9AE02.roa Signing time: Thu 08 May 2025 16:07:44 +0000 ROA not before: Thu 08 May 2025 16:07:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136659 IP address blocks: 103.122.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46104 (0xb418) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:07:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd6d0-422a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:8e:d9:36:11:c0:2a:17:b5:ca:70:cb:aa: 12:19:e0:45:47:37:96:70:67:95:5d:fe:76:fe:fd: e4:2d:9b:f4:ca:20:12:2c:a1:db:0f:10:68:07:4c: ad:fb:96:4a:5c:73:be:ed:c9:1a:95:22:57:16:d5: 5b:be:44:2d:91:ac:45:72:c2:67:f1:4b:52:22:2c: f2:7a:5f:ba:ef:d9:22:49:55:d3:e1:d2:f0:bc:cb: d1:4b:0e:5e:ff:23:86:07:68:0f:7a:e5:0a:e3:d8: 80:b9:5e:d8:ed:71:b3:4f:e8:e8:64:ee:55:4b:95: 1a:30:81:87:36:04:45:f3:18:4d:3f:8b:15:0f:3b: b0:4a:cb:a7:f4:e2:09:d7:89:ff:cc:e3:39:c3:8d: 22:14:31:ea:47:fb:8a:4c:ae:ed:5c:4f:f7:88:6e: 9f:fe:a9:95:68:92:e0:85:88:25:16:d7:e9:bd:bb: 3c:ac:9a:94:ba:7c:79:25:78:33:3d:63:cf:03:82: 4c:7e:70:cd:50:4d:26:80:8c:ad:bb:b9:11:d9:6b: c1:9c:4f:7c:c1:9e:fc:e7:d9:b2:78:f5:3b:66:59: 88:ce:8e:a6:2a:2d:1b:f6:c1:eb:f4:76:71:0f:a5: 2c:79:2b:8f:93:f1:f8:3b:c3:fa:ee:5d:cd:9e:7c: b1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:20:14:41:92:16:2B:B5:BF:3B:15:24:6C:27:DB:E4:1E:22:68:6F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/074BDC5EB3F311ECBCB2F130C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.128.0/22 Signature Algorithm: sha256WithRSAEncryption 07:bd:68:f2:f0:8b:7b:4d:00:0a:24:5f:90:38:fe:fc:49:6e: 5c:55:80:f2:9d:88:77:44:f3:24:bf:60:4e:e4:80:36:51:dc: 8a:b9:f1:c2:e7:f0:11:ec:e1:b0:5d:a6:08:6d:20:a6:a9:77: 40:35:8e:83:44:df:73:fa:bc:2a:32:38:48:fd:86:99:ee:fc: 6a:cd:af:1a:2a:48:b7:ca:10:d1:db:b4:fd:28:98:8f:37:40: 5c:4a:7e:f3:75:55:6d:85:28:2f:ad:c0:41:e5:d5:06:4d:e5: 5b:f3:a8:f3:6e:20:db:1e:19:d1:66:66:da:0a:e6:fe:0d:86: 27:42:ec:5b:16:41:0c:0d:7c:78:30:f8:d9:c1:3b:4b:4e:78: c7:a3:e0:81:73:30:24:d2:96:41:5a:c7:30:90:c6:c3:ce:ec: a5:28:7e:73:27:cb:a7:88:3d:c5:ed:d6:ab:fd:10:2d:29:4f: 39:1d:a5:76:70:f4:7f:f9:16:c5:55:be:ae:f0:af:35:aa:43: e0:0f:94:de:24:00:77:ee:cb:f4:b0:cb:3f:af:ae:56:70:d2: fb:d6:db:0e:a0:2b:19:9d:c0:69:fa:88:75:a0:3f:d0:dd:4e: 80:a6:3a:44:0e:c3:4f:7a:06:4c:94:7f:42:18:e3:04:a0:0a: e0:2a:a8:22 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALQYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDc0NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q2ZDAtNDIyYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANP9jtk2EcAqF7XKcMuqEhngRUc3lnBnlV3+dv795C2b9MogEiyh2w8QaAdM rfuWSlxzvu3JGpUiVxbVW75ELZGsRXLCZ/FLUiIs8npfuu/ZIklV0+HS8LzL0UsO Xv8jhgdoD3rlCuPYgLle2O1xs0/o6GTuVUuVGjCBhzYERfMYTT+LFQ87sErLp/Ti CdeJ/8zjOcONIhQx6kf7ikyu7VxP94hun/6plWiS4IWIJRbX6b27PKyalLp8eSV4 Mz1jzwOCTH5wzVBNJoCMrbu5EdlrwZxPfMGe/OfZsnj1O2ZZiM6OpiotG/bB6/R2 cQ+lLHkrj5Px+DvD+u5dzZ58sUkCAwEAAaOCApUwggKRMB0GA1UdDgQWBBSAIBRB khYrtb87FSRsJ9vkHiJobzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA3NEJEQzVF QjNGMzExRUNCQ0IyRjEzMEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ3qAMA0GCSqGSIb3DQEBCwUAA4IBAQAHvWjy8It7TQAK JF+QOP78SW5cVYDynYh3RPMkv2BO5IA2UdyKufHC5/AR7OGwXaYIbSCmqXdANY6D RN9z+rwqMjhI/YaZ7vxqza8aKki3yhDR27T9KJiPN0BcSn7zdVVthSgvrcBB5dUG TeVb86jzbiDbHhnRZmbaCub+DYYnQuxbFkEMDXx4MPjZwTtLTnjHo+CBczAk0pZB WscwkMbDzuylKH5zJ8uniD3F7dar/RAtKU85HaV2cPR/+RbFVb6u8K81qkPgD5Te JAB37sv0sMs/r65WcNL71tsOoCsZncBp+oh1oD/Q3U6ApjpEDsNPegZMlH9CGOME oArgKqgi -----END CERTIFICATE-----Generated at Tue May 13 00:47:44 2025 by rpki-client