$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13BB8E269AE411ECAE14410EC4F9AE02.roa File: 13BB8E269AE411ECAE14410EC4F9AE02.roa (raw, json) Hash identifier: pIj+w11UiEb2l3qJhlWxMsfSPfGRfeDzC/REvVe+iSQ= Subject key identifier: A0:45:66:00:95:52:60:1E:77:15:84:6E:0D:AF:C5:99:F0:04:1E:14 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B610 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13BB8E269AE411ECAE14410EC4F9AE02.roa Signing time: Thu 08 May 2025 16:15:27 +0000 ROA not before: Thu 08 May 2025 16:15:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141275 IP address blocks: 103.99.196.0/23 maxlen: 24 103.182.134.0/23 maxlen: 24 2400:df20::/32 maxlen: 32 2400:df20:1::/48 maxlen: 48 2400:df20:2::/48 maxlen: 48 2400:df20:3::/48 maxlen: 48 2400:df20:4::/48 maxlen: 48 2400:df20:5::/48 maxlen: 48 2400:df20:6::/48 maxlen: 48 2400:df20:7::/48 maxlen: 48 2400:df20:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 11:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46608 (0xb610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:15:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd89f-a77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:21:25:c4:87:0d:7f:ab:58:ca:16:32:a1:08: 9c:b9:e4:60:16:dc:b0:57:a9:ab:c0:42:3a:ca:04: 80:ed:0d:a1:04:87:6c:31:5c:15:47:ec:53:44:02: 7e:4c:ee:4e:ec:b5:d4:85:fa:0c:b5:db:8e:7e:83: 17:6c:65:0a:9d:3e:2c:c0:35:27:fc:01:8a:91:0f: 2e:99:64:25:a1:db:ed:56:b8:4d:f9:1b:d4:e2:bd: c1:11:47:3e:83:dc:a4:90:2b:72:4a:ed:f7:f1:01: b9:d0:ba:8a:fa:83:0f:89:c5:a3:6e:a7:6b:33:5c: 1a:5c:c5:c0:42:b7:65:5f:fc:50:9e:b7:87:cc:a7: e6:cb:f3:60:4d:44:18:f7:87:bd:13:67:25:27:07: 3a:d3:37:27:a5:00:47:8c:71:01:dc:4b:1f:cb:4f: d1:a7:e1:f5:92:f8:64:c2:1d:37:01:f7:33:e4:29: 2c:00:fb:08:a6:42:b5:a0:03:ad:86:7a:6d:01:a3: ad:b3:c3:3d:e5:80:97:85:e0:a7:b4:57:50:66:6e: fc:97:fd:05:7e:b0:b3:43:f9:7d:9f:4b:d5:3f:cc: 27:49:d4:80:c7:f5:b4:ef:18:56:72:d8:7b:bd:45: c6:5f:7f:06:09:25:a7:2c:23:94:bf:6b:79:ce:d1: 74:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:45:66:00:95:52:60:1E:77:15:84:6E:0D:AF:C5:99:F0:04:1E:14 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13BB8E269AE411ECAE14410EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.99.196.0/23 103.182.134.0/23 IPv6: 2400:df20::/32 Signature Algorithm: sha256WithRSAEncryption 5f:ad:12:f1:72:70:29:80:bc:0d:08:41:2f:cd:11:09:ba:12: d4:8d:11:46:d8:6e:98:b8:c9:cb:71:af:79:6a:b9:a6:7d:6a: 16:23:d7:3c:47:62:fe:e6:29:75:02:32:18:bc:71:63:89:a3: 40:83:d1:a7:43:0b:1e:dd:21:24:cd:df:e7:b5:63:38:9c:9a: de:89:f7:08:3c:ec:ba:d2:6e:ba:df:5c:94:19:5f:7e:29:bf: 7a:e9:3c:9f:26:6f:40:d2:cb:cf:86:f1:bf:bc:0b:1b:b2:72: 2b:6f:23:a8:5e:c4:28:59:bd:01:fe:3b:aa:72:94:9d:4e:d1: 33:f2:db:11:d8:3f:80:34:65:7c:91:90:87:2f:a9:1d:bf:9d: 59:95:13:6c:01:3d:a5:94:09:7a:95:a4:af:17:e7:9a:68:c5: 22:de:19:af:2d:43:80:d5:1c:64:f2:71:ba:ab:eb:e6:77:62: d7:17:24:d5:a0:80:4f:49:99:ac:c6:03:24:56:b2:67:f0:13: a4:d2:c5:73:90:70:3a:51:fa:27:7a:82:50:7c:e9:b7:29:f2: 3a:63:ae:c2:5f:cc:34:e6:2d:aa:cd:eb:80:f3:f1:7a:ef:69: 5d:8c:1a:cb:0b:ab:df:9a:5f:9f:61:c2:29:cc:fb:60:7a:58: a8:f4:0d:a0 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIDALYQMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTUyN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4OWYtYTc3ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMhJcSHDX+rWMoWMqEInLnkYBbcsFepq8BCOsoEgO0NoQSHbDFcFUfsU0QC fkzuTuy11IX6DLXbjn6DF2xlCp0+LMA1J/wBipEPLplkJaHb7Va4Tfkb1OK9wRFH PoPcpJArckrt9/EBudC6ivqDD4nFo26nazNcGlzFwEK3ZV/8UJ63h8yn5svzYE1E GPeHvRNnJScHOtM3J6UAR4xxAdxLH8tP0afh9ZL4ZMIdNwH3M+QpLAD7CKZCtaAD rYZ6bQGjrbPDPeWAl4Xgp7RXUGZu/Jf9BX6ws0P5fZ9L1T/MJ0nUgMf1tO8YVnLY e71Fxl9/BgklpywjlL9rec7RdM0CAwEAAaOCAqowggKmMB0GA1UdDgQWBBSgRWYA lVJgHncVhG4Nr8WZ8AQeFDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzEzQkI4RTI2 OUFFNDExRUNBRTE0NDEwRUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDQGCCsGAQUFBwEHAQH/ BCUwIzASBAIAATAMAwQBZ2PEAwQBZ7aGMA0EAgACMAcDBQAkAN8gMA0GCSqGSIb3 DQEBCwUAA4IBAQBfrRLxcnApgLwNCEEvzREJuhLUjRFG2G6YuMnLca95armmfWoW I9c8R2L+5il1AjIYvHFjiaNAg9GnQwse3SEkzd/ntWM4nJreifcIPOy60m6631yU GV9+Kb966TyfJm9A0svPhvG/vAsbsnIrbyOoXsQoWb0B/juqcpSdTtEz8tsR2D+A NGV8kZCHL6kdv51ZlRNsAT2llAl6laSvF+eaaMUi3hmvLUOA1Rxk8nG6q+vmd2LX FyTVoIBPSZmsxgMkVrJn8BOk0sVzkHA6UfoneoJQfOm3KfI6Y67CX8w05i2qzeuA 8/F672ldjBrLC6vfml+fYcIpzPtgelio9A2g -----END CERTIFICATE-----Generated at Thu May 15 23:33:51 2025 by rpki-client