$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DE89E7E1B8511F082F5350BC4F9AE02.roa File: 0DE89E7E1B8511F082F5350BC4F9AE02.roa (raw, json) Hash identifier: Km9nSEB6XxzbAfSWSVHpSd49LtUmIOqFHmepAakemm8= Subject key identifier: ED:AF:4E:AC:E6:38:BD:DA:B2:AC:7F:78:FE:F3:20:9D:4F:12:6E:45 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B8D9 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DE89E7E1B8511F082F5350BC4F9AE02.roa Signing time: Thu 08 May 2025 16:26:12 +0000 ROA not before: Thu 08 May 2025 16:26:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150794 IP address blocks: 103.98.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 13:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47321 (0xb8d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:26:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdb24-5245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:71:e3:87:0f:00:fc:47:aa:41:2e:a6:43:6d: c1:c6:a3:3d:4e:73:49:2c:ac:9a:2a:1a:f5:ea:8a: 56:3e:c7:4c:52:ef:dd:1f:8c:a1:91:7a:e8:cb:79: 4d:0b:9f:a9:68:0c:e2:66:9b:69:f3:99:0f:fc:6e: a8:03:7e:5a:44:1f:44:2b:79:64:83:4b:bf:f5:7c: 3f:c9:b2:7b:f1:0d:2c:34:1e:fe:c3:95:77:75:c4: 21:10:7c:a1:ee:82:5d:b5:c8:c3:b7:35:3d:e6:51: ba:92:27:98:56:8b:3f:16:9f:2a:1e:f8:42:a4:24: 0a:26:0a:78:4f:23:29:47:c6:d1:ba:d9:c2:49:6b: 70:cb:5b:a0:0c:2a:4e:93:5c:71:5f:ab:81:58:89: 5c:f7:b5:99:f6:c8:d8:b3:83:b6:79:cf:89:8f:8a: 1e:d8:6c:12:14:79:bf:db:0e:57:27:0f:f7:74:5c: 5c:34:f7:a2:a8:27:30:fa:ed:78:70:1b:9f:8a:b5: ea:59:42:01:ec:70:e8:0a:6a:fc:07:11:fb:ab:f3: ec:d1:a4:b7:fe:a8:37:0a:7c:16:a7:fc:e8:0b:b5: 57:d5:94:d1:43:e0:b2:a8:0a:de:75:28:1d:ce:60: 48:fe:81:e5:ee:f3:82:26:7b:36:64:0b:93:20:05: 15:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AF:4E:AC:E6:38:BD:DA:B2:AC:7F:78:FE:F3:20:9D:4F:12:6E:45 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DE89E7E1B8511F082F5350BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.98.193.0/24 Signature Algorithm: sha256WithRSAEncryption 90:d0:31:26:b3:14:51:4a:61:13:84:85:14:6f:3e:4a:be:99: 99:1e:26:00:9f:9f:e0:bb:28:1d:74:0c:da:a1:33:67:7c:82: c1:ec:a0:b0:88:c5:e6:d5:06:c9:f1:c4:80:13:6b:d7:4b:8c: 66:67:e6:93:c1:d9:87:af:e0:2d:7e:a5:38:35:41:d2:7c:7a: be:1a:15:6b:02:14:4f:0e:fb:75:8a:cb:75:a5:d5:7d:93:37: ee:26:53:d1:a3:c9:ba:7c:5b:fa:f0:b7:4d:c8:e6:14:f2:d6: 45:b2:8c:db:10:87:ae:60:56:73:c6:c3:01:aa:af:73:63:9e: d2:2d:7d:9e:1c:4c:82:2a:be:60:1d:09:df:ca:7c:bc:c3:00: c0:1a:48:fe:04:bd:68:08:1d:c6:93:c6:07:20:97:ce:8c:09: cc:e7:c2:c8:1f:62:cc:af:66:08:6a:27:a3:38:e7:30:b1:51: 6e:c7:1a:7d:34:07:db:95:34:cd:96:f2:7c:1f:ec:e4:b9:18: e1:8d:1f:39:38:25:da:a6:ef:57:c3:14:8e:25:4e:85:a6:83: 1d:22:6c:55:c7:d5:39:cb:1b:c3:1a:4e:37:41:a0:c8:8b:fc: 8b:b1:17:55:a6:20:3f:28:3a:f6:52:c4:c1:aa:e3:67:25:39: d2:9c:4e:29 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALjZMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjYxMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiMjQtNTI0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdx44cPAPxHqkEupkNtwcajPU5zSSysmioa9eqKVj7HTFLv3R+MoZF66Mt5 TQufqWgM4mabafOZD/xuqAN+WkQfRCt5ZINLv/V8P8mye/ENLDQe/sOVd3XEIRB8 oe6CXbXIw7c1PeZRupInmFaLPxafKh74QqQkCiYKeE8jKUfG0brZwklrcMtboAwq TpNccV+rgViJXPe1mfbI2LODtnnPiY+KHthsEhR5v9sOVycP93RcXDT3oqgnMPrt eHAbn4q16llCAexw6Apq/AcR+6vz7NGkt/6oNwp8Fqf86Au1V9WU0UPgsqgK3nUo Hc5gSP6B5e7zgiZ7NmQLkyAFFVECAwEAAaOCApUwggKRMB0GA1UdDgQWBBTtr06s 5ji92rKsf3j+8yCdTxJuRTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBERTg5RTdF MUI4NTExRjA4MkY1MzUwQkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ2LBMA0GCSqGSIb3DQEBCwUAA4IBAQCQ0DEmsxRRSmET hIUUbz5KvpmZHiYAn5/guygddAzaoTNnfILB7KCwiMXm1QbJ8cSAE2vXS4xmZ+aT wdmHr+AtfqU4NUHSfHq+GhVrAhRPDvt1ist1pdV9kzfuJlPRo8m6fFv68LdNyOYU 8tZFsozbEIeuYFZzxsMBqq9zY57SLX2eHEyCKr5gHQnfyny8wwDAGkj+BL1oCB3G k8YHIJfOjAnM58LIH2LMr2YIaiejOOcwsVFuxxp9NAfblTTNlvJ8H+zkuRjhjR85 OCXapu9XwxSOJU6FpoMdImxVx9U5yxvDGk43QaDIi/yLsRdVpiA/KDr2UsTBquNn JTnSnE4p -----END CERTIFICATE-----Generated at Wed May 14 03:48:22 2025 by rpki-client