$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19F094C2D96511EFB9E12B2CC4F9AE02.roa File: 19F094C2D96511EFB9E12B2CC4F9AE02.roa (raw, json) Hash identifier: 4IfOLdOVAGtHKzTOCreWLMgsYuK9dcYdf7gtgm9DHro= Subject key identifier: E3:19:DF:B0:94:91:B2:CC:FF:81:86:80:23:51:8D:66:95:E3:A0:9B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B995 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19F094C2D96511EFB9E12B2CC4F9AE02.roa Signing time: Thu 08 May 2025 16:28:59 +0000 ROA not before: Thu 08 May 2025 16:28:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153228 IP address blocks: 103.181.108.0/24 maxlen: 24 103.181.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 09:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47509 (0xb995) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:28:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdbcb-bd91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:f2:8b:a6:81:ca:55:c2:8d:e3:f5:7d:48: 0a:08:65:50:66:7d:73:60:ee:76:53:d1:53:91:b9: e1:ea:47:5e:d1:3f:e2:c2:50:d9:5b:d9:66:9b:6c: 14:6f:e7:e1:4c:55:48:30:39:9e:38:e7:c1:76:b2: 77:fb:27:b3:10:1b:92:76:54:12:05:96:20:6e:85: 45:87:5b:62:17:4e:2c:12:14:d7:66:09:67:66:d6: b6:ea:50:d2:82:e6:7a:91:7f:d0:d4:53:3a:3c:71: 62:a0:0f:9c:1f:e0:27:07:27:d2:0f:91:c0:10:e1: 82:c4:3c:6a:13:a9:d0:b0:ce:ce:69:da:e2:5b:e6: af:8a:92:bb:f0:a3:db:16:92:e1:c3:36:c9:f9:c4: c6:50:7a:c0:28:90:fa:a6:d9:80:d2:6b:2f:2e:21: 2e:fd:e3:b7:7e:fc:fc:55:28:8d:07:ef:b3:14:bd: d0:d0:d4:3f:55:57:a3:c4:cc:5b:68:cf:b9:41:11: 2f:dc:e9:3d:3e:d8:14:30:5b:9a:b9:a6:d9:01:c0: 4f:d9:31:03:51:0c:28:72:20:9f:06:ee:4d:50:14: c3:14:ba:4d:03:56:a9:b7:77:58:c2:1a:28:86:93: bc:a0:0d:b8:5b:55:ff:34:96:24:bc:5a:48:47:eb: ad:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:19:DF:B0:94:91:B2:CC:FF:81:86:80:23:51:8D:66:95:E3:A0:9B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/19F094C2D96511EFB9E12B2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.181.108.0/23 Signature Algorithm: sha256WithRSAEncryption 16:52:5e:f6:67:62:af:72:d4:31:ba:2d:99:63:d4:53:24:73: b6:0d:05:01:6a:f2:73:41:4d:11:48:5c:f3:c5:9f:73:4e:d3: 27:32:84:42:2e:3f:81:32:b1:3f:fd:35:42:c2:c9:d2:1c:65: 3c:48:15:88:a9:9e:69:79:28:37:e2:87:68:55:ec:b4:8a:ef: 48:ea:8e:53:9a:10:18:0c:bb:da:79:d7:43:4d:3e:43:2d:81: 42:35:39:10:c4:56:60:3a:33:32:3b:4d:2d:da:18:af:f1:e9: 12:83:88:37:0d:7a:eb:3e:7b:70:05:43:5e:92:06:88:08:29: 6c:f3:87:4a:39:7d:4d:d6:3a:01:7f:96:80:3f:e3:23:9c:01: 5e:36:31:2d:64:98:0d:99:a0:84:1b:df:02:78:17:c2:07:27: 25:8d:09:a4:53:e8:71:6c:b2:71:bc:32:5c:06:27:1a:11:7b: b2:37:c5:0f:10:15:6c:f2:2c:4e:6f:50:7f:4d:8d:0d:93:0d: 91:ac:b4:14:32:2a:a3:51:81:29:d6:38:c3:e3:7a:01:2d:55: 53:a0:c1:d1:fe:48:36:b3:75:2d:37:b7:0d:ad:94:5e:3a:d3: 60:52:1e:f7:4d:c8:fb:19:c0:db:82:1f:0f:52:eb:be:b2:a6: 59:23:54:c8 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALmVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2Mjg1OVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiY2ItYmQ5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMF68oumgcpVwo3j9X1ICghlUGZ9c2DudlPRU5G54epHXtE/4sJQ2VvZZpts FG/n4UxVSDA5njjnwXayd/snsxAbknZUEgWWIG6FRYdbYhdOLBIU12YJZ2bWtupQ 0oLmepF/0NRTOjxxYqAPnB/gJwcn0g+RwBDhgsQ8ahOp0LDOzmna4lvmr4qSu/Cj 2xaS4cM2yfnExlB6wCiQ+qbZgNJrLy4hLv3jt378/FUojQfvsxS90NDUP1VXo8TM W2jPuUERL9zpPT7YFDBbmrmm2QHAT9kxA1EMKHIgnwbuTVAUwxS6TQNWqbd3WMIa KIaTvKANuFtV/zSWJLxaSEfrrWcCAwEAAaOCApUwggKRMB0GA1UdDgQWBBTjGd+w lJGyzP+BhoAjUY1mleOgmzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE5RjA5NEMy RDk2NTExRUZCOUUxMkIyQ0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ7VsMA0GCSqGSIb3DQEBCwUAA4IBAQAWUl72Z2KvctQx ui2ZY9RTJHO2DQUBavJzQU0RSFzzxZ9zTtMnMoRCLj+BMrE//TVCwsnSHGU8SBWI qZ5peSg34odoVey0iu9I6o5TmhAYDLvaeddDTT5DLYFCNTkQxFZgOjMyO00t2hiv 8ekSg4g3DXrrPntwBUNekgaICCls84dKOX1N1joBf5aAP+MjnAFeNjEtZJgNmaCE G98CeBfCBycljQmkU+hxbLJxvDJcBicaEXuyN8UPEBVs8ixOb1B/TY0Nkw2RrLQU MiqjUYEp1jjD43oBLVVToMHR/kg2s3UtN7cNrZReOtNgUh73Tcj7GcDbgh8PUuu+ sqZZI1TI -----END CERTIFICATE-----Generated at Mon May 12 01:31:12 2025 by rpki-client