$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08C677FEA0EB11EB8FF0995BC4F9AE02.roa File: 08C677FEA0EB11EB8FF0995BC4F9AE02.roa (raw, json) Hash identifier: YRh6z+UQk9XwDoDsJlaG7ka1lBNswMmaJnJWv7AcX+o= Subject key identifier: C3:D3:75:C5:65:BF:58:47:99:16:BF:7D:32:BA:CF:4E:13:B7:F8:AB Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B532 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08C677FEA0EB11EB8FF0995BC4F9AE02.roa Signing time: Thu 08 May 2025 16:12:02 +0000 ROA not before: Thu 08 May 2025 16:12:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138727 IP address blocks: 103.138.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46386 (0xb532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:12:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd7d1-3d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e5:3d:1f:e5:77:fd:33:45:8f:97:89:4e:77: ec:91:2b:a5:02:10:7d:c2:c2:59:34:ad:31:66:6e: 04:ad:10:2d:cc:1e:93:e0:77:1b:d0:1c:e1:fe:f3: 8a:ba:29:4a:e6:4a:30:c6:dd:89:15:40:f7:42:33: 1b:10:7a:b3:b4:87:e1:b0:bb:84:6f:54:26:f7:8b: 42:90:73:2c:2a:33:33:3f:87:a9:36:38:f0:08:bd: 4b:38:d3:44:df:32:c3:25:d6:10:b3:b8:22:24:65: aa:47:1d:0d:67:78:1b:3d:e4:1b:1a:f9:0c:23:75: 8c:09:68:da:c1:a5:82:21:78:78:7f:bd:2b:7d:c0: 26:65:fe:3e:fb:8a:41:c8:67:12:a5:97:8b:7e:7e: e9:0a:36:d9:6c:7c:3b:0b:d7:6e:ab:eb:bb:1b:f9: 18:6d:5c:c9:85:30:2c:c9:b0:ea:cf:ed:0b:30:e0: ef:59:c0:c2:50:71:6a:80:ea:fe:21:52:30:cf:1a: ad:5f:3c:57:76:cf:08:ce:fe:82:6d:c3:10:c5:3e: 00:ed:e3:fa:1c:fd:f3:ff:8c:f0:3f:e0:15:e0:32: 01:a9:bf:ad:dd:dc:9a:5f:5e:f7:7d:4e:95:34:6a: b4:21:a0:eb:01:4e:c0:ec:84:66:e3:a3:65:f0:7b: dc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D3:75:C5:65:BF:58:47:99:16:BF:7D:32:BA:CF:4E:13:B7:F8:AB X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08C677FEA0EB11EB8FF0995BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.196.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:b1:f2:79:9f:dd:17:3f:b9:a3:f3:fc:99:bd:10:4f:1a:78: f7:ce:1c:58:48:f9:2e:ac:25:0c:2c:f8:79:0b:0c:56:27:d3: 54:66:d2:26:e0:d0:2c:91:b8:3b:93:e7:0d:c2:d4:ad:38:02: d1:2f:d7:7e:cd:25:54:31:3c:8d:5c:7d:26:2e:7b:ca:24:22: 96:e9:e2:ef:fc:4b:47:42:0e:eb:f5:ee:40:5b:04:18:14:e4: d2:bb:3f:2a:31:17:5b:16:59:78:bd:d5:6a:27:5f:97:a8:39: c9:e3:7a:ac:11:7e:ff:81:71:c0:bc:dc:55:73:c5:20:f1:ef: bc:a1:a0:3a:93:75:74:d1:15:ea:c2:d3:a3:a5:3a:b0:ed:0f: fd:5c:44:f3:8f:da:12:11:2f:c7:0f:7a:bf:32:90:39:e5:c0: 6f:c9:ed:b2:4b:f6:e5:01:29:d4:0a:ce:21:8a:1a:ec:65:ef: 9a:44:17:3d:8e:fe:19:96:02:d0:0b:81:86:65:f8:f2:e8:7d: e9:df:1a:1c:53:b4:13:c3:74:4e:1b:6a:b4:84:4e:8c:ac:a4: ab:9a:d6:c8:2d:bc:51:26:40:64:36:5e:82:a1:c9:66:83:d4: 77:6d:fc:21:4e:d4:2a:91:83:0b:f5:59:f4:75:0d:4e:db:de: 66:7c:30:50 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALUyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTIwMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3ZDEtM2QwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKvlPR/ld/0zRY+XiU537JErpQIQfcLCWTStMWZuBK0QLcwek+B3G9Ac4f7z iropSuZKMMbdiRVA90IzGxB6s7SH4bC7hG9UJveLQpBzLCozMz+HqTY48Ai9SzjT RN8ywyXWELO4IiRlqkcdDWd4Gz3kGxr5DCN1jAlo2sGlgiF4eH+9K33AJmX+PvuK QchnEqWXi35+6Qo22Wx8OwvXbqvruxv5GG1cyYUwLMmw6s/tCzDg71nAwlBxaoDq /iFSMM8arV88V3bPCM7+gm3DEMU+AO3j+hz98/+M8D/gFeAyAam/rd3cml9e931O lTRqtCGg6wFOwOyEZuOjZfB73F0CAwEAAaOCApUwggKRMB0GA1UdDgQWBBTD03XF Zb9YR5kWv30yus9OE7f4qzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA4QzY3N0ZF QTBFQjExRUI4RkYwOTk1QkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ4rEMA0GCSqGSIb3DQEBCwUAA4IBAQAOsfJ5n90XP7mj 8/yZvRBPGnj3zhxYSPkurCUMLPh5CwxWJ9NUZtIm4NAskbg7k+cNwtStOALRL9d+ zSVUMTyNXH0mLnvKJCKW6eLv/EtHQg7r9e5AWwQYFOTSuz8qMRdbFll4vdVqJ1+X qDnJ43qsEX7/gXHAvNxVc8Ug8e+8oaA6k3V00RXqwtOjpTqw7Q/9XETzj9oSES/H D3q/MpA55cBvye2yS/blASnUCs4hihrsZe+aRBc9jv4ZlgLQC4GGZfjy6H3p3xoc U7QTw3ROG2q0hE6MrKSrmtbILbxRJkBkNl6Coclmg9R3bfwhTtQqkYML9Vn0dQ1O 295mfDBQ -----END CERTIFICATE-----Generated at Tue May 13 00:06:00 2025 by rpki-client