$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FCA0FB6DD3B11EFB01F476AC4F9AE02.roa File: 1FCA0FB6DD3B11EFB01F476AC4F9AE02.roa (raw, json) Hash identifier: VhfsB1WHUc56RhvMqC+7igvwx4LYBNw7Xd8eDLWqVAI= Subject key identifier: 53:F0:9D:67:9F:BE:81:97:54:FE:89:7D:35:82:64:64:FB:36:41:12 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B38D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FCA0FB6DD3B11EFB01F476AC4F9AE02.roa Signing time: Thu 08 May 2025 16:05:35 +0000 ROA not before: Thu 08 May 2025 16:05:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135821 IP address blocks: 45.114.68.0/23 maxlen: 24 45.114.70.0/23 maxlen: 23 45.114.70.0/24 maxlen: 24 45.114.71.0/24 maxlen: 24 103.54.28.0/23 maxlen: 24 103.54.30.0/23 maxlen: 24 103.172.230.0/23 maxlen: 24 103.179.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45965 (0xb38d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:05:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd64f-7d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:1b:db:21:af:4a:ae:19:13:0d:eb:49:da: 13:4b:8f:7b:c4:ef:82:57:87:52:31:a7:ec:3b:92: e3:fa:cd:02:5c:dc:43:9e:8e:0f:79:93:5b:28:f5: ad:8a:dc:64:c9:69:c1:bb:ca:46:55:04:f8:73:69: 83:10:79:d6:63:2b:d3:9a:d2:2c:54:76:a4:39:f3: 74:9b:0c:bf:5a:72:51:c2:4e:8e:59:3e:42:b7:0c: 5f:11:3e:7d:8c:6c:d6:fc:33:d0:8f:33:09:d6:50: 4a:be:f3:9b:b4:8f:9a:51:e5:74:6e:37:93:47:fa: ba:aa:ea:29:1a:5c:12:cc:90:24:e9:be:97:c8:ac: 7c:2b:76:5c:63:42:1c:8c:5e:55:5f:14:8e:93:f4: e4:ab:7e:dd:cd:3d:db:94:33:93:e5:26:c1:49:71: 96:e3:3e:0a:d2:3a:65:90:07:be:4c:86:98:6d:94: ab:15:9c:e9:a6:f8:b3:57:8a:d7:ef:38:26:5e:a4: 3e:52:27:b5:d7:22:38:ee:54:98:ae:81:53:2a:6d: c3:3e:ea:64:19:7e:95:54:f4:d2:de:0a:b5:97:95: 54:7c:37:f5:dc:8d:84:41:8c:df:8c:01:e3:1d:3b: ce:f6:8b:7f:f0:db:b2:eb:48:45:cd:d8:b9:e7:7b: 89:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F0:9D:67:9F:BE:81:97:54:FE:89:7D:35:82:64:64:FB:36:41:12 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FCA0FB6DD3B11EFB01F476AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.68.0/22 103.54.28.0/22 103.172.230.0/23 103.179.22.0/23 Signature Algorithm: sha256WithRSAEncryption 91:35:7a:60:5e:72:b3:80:ac:cb:61:4b:74:2c:ee:da:c9:3a: 20:44:65:cc:be:ba:29:61:82:7a:f9:1b:a7:05:b8:c3:ae:5a: 3d:3d:c8:8a:e4:25:7c:2a:32:aa:57:43:ba:6c:9a:bd:2b:6c: 16:5b:83:74:5a:fc:34:7d:2f:08:f6:0e:c0:36:af:b1:75:1d: 99:cd:52:b6:a5:aa:6b:f9:bd:0e:e4:53:fe:3f:38:54:5a:89: f7:07:29:3e:13:b7:88:8a:74:7e:e5:96:89:02:dd:8e:b6:11: df:be:2c:98:52:a4:63:b0:75:13:f8:70:57:04:dc:4d:bd:d1: 2f:c3:ee:b4:13:88:9c:46:29:a8:30:c9:3d:b5:2f:e2:65:6c: e8:8f:06:2b:a7:85:97:f7:71:e3:be:90:73:e7:c7:cc:fb:8e: 4d:8f:e5:cb:a2:31:7b:cf:40:41:fa:f7:eb:52:46:24:92:55: af:44:2d:c7:ad:25:84:43:9d:bd:56:7f:80:3d:36:4c:88:1d: e1:8b:76:2a:9e:6f:ff:d0:53:d8:de:f0:a1:5b:04:08:6b:55: 57:39:57:1b:ed:c0:ab:19:42:67:13:0d:e4:90:04:b0:3e:8b: ab:77:e4:84:25:88:20:31:c5:35:65:de:b9:7d:0f:bd:83:31: e5:bb:c9:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDALONMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDUzNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q2NGYtN2QzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRrG9shr0quGRMN60naE0uPe8TvgleHUjGn7DuS4/rNAlzcQ56OD3mTWyj1 rYrcZMlpwbvKRlUE+HNpgxB51mMr05rSLFR2pDnzdJsMv1pyUcJOjlk+QrcMXxE+ fYxs1vwz0I8zCdZQSr7zm7SPmlHldG43k0f6uqrqKRpcEsyQJOm+l8isfCt2XGNC HIxeVV8UjpP05Kt+3c0925Qzk+UmwUlxluM+CtI6ZZAHvkyGmG2UqxWc6ab4s1eK 1+84Jl6kPlIntdciOO5UmK6BUyptwz7qZBl+lVT00t4KtZeVVHw39dyNhEGM34wB 4x07zvaLf/DbsutIRc3Yued7iWMCAwEAAaOCAqcwggKjMB0GA1UdDgQWBBRT8J1n n76Bl1T+iX01gmRk+zZBEjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFGQ0EwRkI2 REQzQjExRUZCMDFGNDc2QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDEGCCsGAQUFBwEHAQH/ BCIwIDAeBAIAATAYAwQCLXJEAwQCZzYcAwQBZ6zmAwQBZ7MWMA0GCSqGSIb3DQEB CwUAA4IBAQCRNXpgXnKzgKzLYUt0LO7ayTogRGXMvropYYJ6+RunBbjDrlo9PciK 5CV8KjKqV0O6bJq9K2wWW4N0Wvw0fS8I9g7ANq+xdR2ZzVK2papr+b0O5FP+PzhU Won3Byk+E7eIinR+5ZaJAt2OthHfviyYUqRjsHUT+HBXBNxNvdEvw+60E4icRimo MMk9tS/iZWzojwYrp4WX93HjvpBz58fM+45Nj+XLojF7z0BB+vfrUkYkklWvRC3H rSWEQ529Vn+APTZMiB3hi3Yqnm//0FPY3vChWwQIa1VXOVcb7cCrGUJnEw3kkASw Pourd+SEJYggMcU1Zd65fQ+9gzHlu8mV -----END CERTIFICATE-----Generated at Tue May 13 01:58:14 2025 by rpki-client