$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18588EF4358E11ECAA10EF80C4F9AE02.roa File: 18588EF4358E11ECAA10EF80C4F9AE02.roa (raw, json) Hash identifier: Xw+DGK86DvRgLzJM8zql1JWdl3erWo4XrpLWPxSFWyI= Subject key identifier: 1E:48:FF:B3:4C:26:21:3E:90:43:FC:76:FF:B9:E2:73:3D:AC:7A:9F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B735 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18588EF4358E11ECAA10EF80C4F9AE02.roa Signing time: Thu 08 May 2025 16:19:53 +0000 ROA not before: Thu 08 May 2025 16:19:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 146894 IP address blocks: 103.173.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46901 (0xb735) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:19:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd9a9-6373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9d:20:f3:ab:b4:6d:51:48:de:9a:f8:13:de: 16:70:7b:b6:c6:e9:ce:a8:44:73:0d:8a:a0:aa:b3: 8f:05:34:39:b3:49:30:a8:b7:9b:83:be:2d:8b:ba: 4e:1a:39:ed:2d:42:3c:9b:5e:d0:8d:95:4d:f8:cc: a9:60:6b:ed:c5:68:56:63:22:71:f6:51:44:e0:0a: 4f:e6:6b:e8:4c:a8:5d:d6:47:a1:33:da:fd:a9:4a: 06:8a:01:6d:34:fe:f7:d1:24:e9:af:e7:d0:79:ad: cb:ee:b1:a1:59:e1:82:b8:f6:c6:62:da:8c:d7:f6: 0a:22:37:dc:67:12:9e:1e:f7:f5:99:d6:3e:65:3e: 87:11:67:f7:36:83:5b:99:86:9c:30:a8:1b:e7:56: 8b:64:ed:28:f2:09:6d:8b:15:75:43:67:e8:80:65: fa:ce:16:c0:aa:58:38:a8:e5:a4:93:54:b4:bf:30: 6f:dc:f4:9f:55:5a:45:aa:be:00:06:20:45:a3:ff: ca:8d:9d:f8:80:43:ed:e7:7a:76:42:52:0d:bb:90: b7:b8:04:0a:50:e0:8e:95:99:d6:c4:d5:06:92:01: 1f:ad:b7:76:0c:65:31:ff:d2:5b:c4:1b:3f:97:0b: 1e:d7:b4:9e:a5:08:a9:2b:ee:c2:75:28:31:03:49: f0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:48:FF:B3:4C:26:21:3E:90:43:FC:76:FF:B9:E2:73:3D:AC:7A:9F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/18588EF4358E11ECAA10EF80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.42.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:43:16:4d:e7:1e:9f:d8:4b:03:50:3a:bf:c9:5a:cc:82:af: d3:ea:6b:4e:ab:21:5a:ed:8f:66:fb:22:72:2f:4e:ea:58:15: 3e:61:9d:b3:80:d3:83:6b:8f:27:c3:75:f6:e3:67:a6:7a:b2: a0:06:11:41:6c:38:b2:8f:66:3c:eb:15:5c:01:52:b7:95:9a: 76:4e:71:2a:18:4f:8a:66:c4:bb:7d:d2:28:65:15:43:d2:01: 3c:c7:f0:5a:bb:76:3c:0e:59:b9:cb:ef:30:a1:ac:dd:21:7d: 33:d5:41:4f:88:47:80:3f:d2:59:33:e3:3f:38:7f:cb:a3:c4: b0:af:06:e5:6f:be:12:c0:3b:c5:73:11:6c:92:5c:9b:ae:fe: a9:a5:a5:0c:92:17:c9:cc:f3:1f:b2:de:74:16:15:5f:5e:b7: ff:4c:17:09:5d:82:29:2a:39:d1:2a:82:40:19:8a:a0:80:ec: 29:6c:9a:ec:04:38:c1:b2:40:16:cd:b3:76:a4:00:ca:92:49: b8:f8:64:94:d6:99:6c:75:86:12:09:3d:0f:8b:84:34:b5:0a: 7b:fe:e6:70:f2:73:bc:d9:b0:fe:26:4d:50:3a:23:a3:86:97: 06:ee:19:9b:c6:7f:80:21:26:f0:d6:96:8b:1f:04:ec:4c:2f: f1:06:3c:5b -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALc1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTk1M1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5YTktNjM3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOdIPOrtG1RSN6a+BPeFnB7tsbpzqhEcw2KoKqzjwU0ObNJMKi3m4O+LYu6 Tho57S1CPJte0I2VTfjMqWBr7cVoVmMicfZRROAKT+Zr6EyoXdZHoTPa/alKBooB bTT+99Ek6a/n0Hmty+6xoVnhgrj2xmLajNf2CiI33GcSnh739ZnWPmU+hxFn9zaD W5mGnDCoG+dWi2TtKPIJbYsVdUNn6IBl+s4WwKpYOKjlpJNUtL8wb9z0n1VaRaq+ AAYgRaP/yo2d+IBD7ed6dkJSDbuQt7gEClDgjpWZ1sTVBpIBH623dgxlMf/SW8Qb P5cLHte0nqUIqSvuwnUoMQNJ8GkCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQeSP+z TCYhPpBD/Hb/ueJzPax6nzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE4NTg4RUY0 MzU4RTExRUNBQTEwRUY4MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ60qMA0GCSqGSIb3DQEBCwUAA4IBAQBMQxZN5x6f2EsD UDq/yVrMgq/T6mtOqyFa7Y9m+yJyL07qWBU+YZ2zgNODa48nw3X242emerKgBhFB bDiyj2Y86xVcAVK3lZp2TnEqGE+KZsS7fdIoZRVD0gE8x/Bau3Y8Dlm5y+8woazd IX0z1UFPiEeAP9JZM+M/OH/Lo8Swrwblb74SwDvFcxFsklybrv6ppaUMkhfJzPMf st50FhVfXrf/TBcJXYIpKjnRKoJAGYqggOwpbJrsBDjBskAWzbN2pADKkkm4+GSU 1plsdYYSCT0Pi4Q0tQp7/uZw8nO82bD+Jk1QOiOjhpcG7hmbxn+AISbw1paLHwTs TC/xBjxb -----END CERTIFICATE-----Generated at Wed May 14 19:56:31 2025 by rpki-client