$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1F6F7DEC0A2911F0BAC6D172C4F9AE02.roa File: 1F6F7DEC0A2911F0BAC6D172C4F9AE02.roa (raw, json) Hash identifier: p9K5yinsf3N1f+7/bQFMHpklY85eblWpV/3CUTZHL2w= Subject key identifier: 43:E2:71:B7:97:14:3A:AC:4C:F7:A1:12:85:DF:6F:87:5D:FA:E9:6A Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B740 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1F6F7DEC0A2911F0BAC6D172C4F9AE02.roa Signing time: Thu 08 May 2025 16:20:03 +0000 ROA not before: Thu 08 May 2025 16:20:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 146908 IP address blocks: 103.167.102.0/24 maxlen: 24 103.167.103.0/24 maxlen: 24 103.173.194.0/24 maxlen: 24 103.173.195.0/24 maxlen: 24 103.184.126.0/23 maxlen: 24 2001:df1:16c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 13:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46912 (0xb740) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:20:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd9b3-36f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:95:d5:d7:90:50:17:ef:0b:fc:11:4a:8a:3a: 71:c1:55:62:e5:4e:0a:df:d8:71:4e:d9:93:b5:62: 17:22:9d:8d:1a:21:70:8f:30:de:67:ba:25:cc:b0: 7c:b4:b1:24:7d:39:d2:de:ad:dc:ec:0c:f8:66:b2: b5:16:8a:f6:43:56:0d:26:d5:3c:38:87:b9:5d:b0: 50:7b:df:15:d0:be:13:0d:d9:42:31:b8:2c:85:b8: cb:e6:3d:05:31:75:9a:0d:f3:e8:81:92:00:ba:dc: e7:98:e5:a6:b4:69:f6:06:26:cb:d3:fc:12:bd:21: bf:d1:72:84:02:81:7e:02:07:bf:60:2f:81:dc:b4: 65:5b:67:76:65:7b:c7:74:ff:4d:8e:9e:ff:8a:22: 33:02:d0:6f:de:96:13:b0:0a:7e:50:cf:96:07:c0: f0:33:e3:bc:fa:23:99:d1:21:75:fb:67:60:c3:43: 76:ce:7c:bb:c2:d9:bb:84:ef:df:df:65:93:04:ab: dd:2d:e7:50:d2:b8:54:2c:cb:38:6f:00:3d:71:30: a8:69:98:b1:8d:e2:19:44:e3:10:05:c9:79:5c:69: a0:cf:73:b8:b0:9a:b2:9e:35:74:b7:5c:85:c9:27: 7f:73:a2:88:bb:51:48:68:43:f5:4e:3c:de:4e:0d: d9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E2:71:B7:97:14:3A:AC:4C:F7:A1:12:85:DF:6F:87:5D:FA:E9:6A X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1F6F7DEC0A2911F0BAC6D172C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.167.102.0/23 103.173.194.0/23 103.184.126.0/23 IPv6: 2001:df1:16c0::/48 Signature Algorithm: sha256WithRSAEncryption 71:fa:e9:b7:b1:9d:04:c3:90:77:98:14:e1:be:52:a7:00:2d: ec:57:6e:72:b4:0b:df:30:05:58:19:ac:ea:ac:c1:28:aa:df: 56:29:8d:18:df:64:be:af:0b:c6:48:ef:3b:0a:3f:81:5b:13: b6:6f:a8:a4:56:ec:e3:96:af:cf:dd:6f:69:39:cf:db:c5:0c: c4:20:4b:f5:0d:81:14:2f:e2:3f:13:1f:b2:c7:05:2f:ca:ea: a0:33:ef:2a:2e:98:e3:ad:81:5d:33:b9:a1:14:a6:fa:a2:5b: f1:54:62:26:d2:5c:2d:ea:d0:0f:ea:42:1d:60:25:a3:5b:eb: f8:f0:86:36:a4:5c:7c:f8:f9:f9:f6:cb:34:2a:4a:a6:b6:7b: 41:52:db:1c:29:7d:f8:57:13:68:5c:4f:87:da:c1:ac:e1:13: d5:21:6a:c3:d5:4c:fb:a7:89:76:1c:f8:c9:66:07:09:fa:e4: 67:76:b1:52:56:19:03:df:bc:f5:a1:b8:80:79:f0:10:31:f2: eb:2a:75:13:7b:4f:69:b7:30:da:aa:4f:f8:07:47:24:3a:67: 39:49:da:08:73:c7:64:34:2c:c5:f6:28:fe:37:1e:eb:91:7a: a2:e5:fe:92:a1:fa:b4:6e:70:21:74:16:1e:2d:a1:28:93:bd: 3a:03:f3:76 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIDALdAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjAwM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5YjMtMzZmNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMuV1deQUBfvC/wRSoo6ccFVYuVOCt/YcU7Zk7ViFyKdjRohcI8w3me6Jcyw fLSxJH050t6t3OwM+GaytRaK9kNWDSbVPDiHuV2wUHvfFdC+Ew3ZQjG4LIW4y+Y9 BTF1mg3z6IGSALrc55jlprRp9gYmy9P8Er0hv9FyhAKBfgIHv2Avgdy0ZVtndmV7 x3T/TY6e/4oiMwLQb96WE7AKflDPlgfA8DPjvPojmdEhdftnYMNDds58u8LZu4Tv 399lkwSr3S3nUNK4VCzLOG8APXEwqGmYsY3iGUTjEAXJeVxpoM9zuLCasp41dLdc hcknf3OiiLtRSGhD9U483k4N2csCAwEAAaOCArIwggKuMB0GA1UdDgQWBBRD4nG3 lxQ6rEz3oRKF32+HXfrpajAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFGNkY3REVD MEEyOTExRjBCQUM2RDE3MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDwGCCsGAQUFBwEHAQH/ BC0wKzAYBAIAATASAwQBZ6dmAwQBZ63CAwQBZ7h+MA8EAgACMAkDBwAgAQ3xFsAw DQYJKoZIhvcNAQELBQADggEBAHH66bexnQTDkHeYFOG+UqcALexXbnK0C98wBVgZ rOqswSiq31YpjRjfZL6vC8ZI7zsKP4FbE7ZvqKRW7OOWr8/db2k5z9vFDMQgS/UN gRQv4j8TH7LHBS/K6qAz7youmOOtgV0zuaEUpvqiW/FUYibSXC3q0A/qQh1gJaNb 6/jwhjakXHz4+fn2yzQqSqa2e0FS2xwpffhXE2hcT4fawazhE9UhasPVTPuniXYc +MlmBwn65Gd2sVJWGQPfvPWhuIB58BAx8usqdRN7T2m3MNqqT/gHRyQ6ZzlJ2ghz x2Q0LMX2KP43HuuReqLl/pKh+rRucCF0Fh4toSiTvToD83Y= -----END CERTIFICATE-----Generated at Tue May 13 19:37:49 2025 by rpki-client