$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2219B3D249F611ED86C3FE46C4F9AE02.roa File: 2219B3D249F611ED86C3FE46C4F9AE02.roa (raw, json) Hash identifier: OIthPFGCjuTUKE0hyof8qlRlo/bENUOJJnOwysU5hms= Subject key identifier: 82:00:18:86:63:0F:F1:0F:99:94:F9:AF:E7:B8:AC:BE:A5:3B:00:98 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B632 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2219B3D249F611ED86C3FE46C4F9AE02.roa Signing time: Thu 08 May 2025 16:15:55 +0000 ROA not before: Thu 08 May 2025 16:15:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141321 IP address blocks: 103.157.222.0/23 maxlen: 24 103.187.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46642 (0xb632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:15:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd8bb-63e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6d:58:0e:1b:85:3f:b9:18:4f:a2:8d:d2:d6: 81:54:27:65:9d:64:19:33:89:0f:98:f8:25:c5:95: a6:77:5e:35:b5:c4:6e:80:d8:cf:58:02:8a:ff:fe: 3d:7c:11:23:81:dc:6a:16:c3:26:7f:f0:96:15:14: 56:35:77:7c:c9:9a:dd:bc:42:d8:0b:d5:ae:1b:96: f2:40:6d:05:ac:66:07:ef:e7:b4:40:73:4f:35:aa: 21:d3:b7:0d:a9:39:14:53:49:a9:03:3c:81:f7:c7: 66:9b:29:a4:5b:45:fd:01:05:d3:01:5b:cc:b3:2e: ac:18:d1:a4:5f:f5:85:48:1c:32:2c:1e:af:f8:e0: 0b:9e:ac:67:fe:7c:ca:d6:24:2b:02:22:09:79:8c: be:d3:84:45:b2:a5:43:c9:65:40:78:7f:7d:af:e4: d0:1f:4d:f1:40:1c:4f:0f:cc:4a:99:cc:3e:b8:c5: ce:3d:3b:ad:1c:dd:2f:bc:de:33:73:2a:34:14:de: b9:af:e9:47:63:3a:1e:39:d7:2a:11:b0:a4:97:a3: e2:29:d1:87:20:45:9e:0f:16:6d:a2:02:ec:e6:57: 9f:16:bd:26:ce:af:bc:c9:01:30:2e:89:28:28:3a: 34:94:8c:d9:23:38:5b:e9:3d:bc:07:c6:c5:4a:ef: 16:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:00:18:86:63:0F:F1:0F:99:94:F9:AF:E7:B8:AC:BE:A5:3B:00:98 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2219B3D249F611ED86C3FE46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.157.222.0/23 103.187.64.0/23 Signature Algorithm: sha256WithRSAEncryption b6:49:ac:ed:e8:23:55:ff:76:c5:11:e4:bd:3d:3a:9b:66:cb: d7:68:1c:8c:ff:b7:3e:9b:ad:90:4a:70:ec:f6:de:4b:ca:86: 24:f8:e5:6f:d2:5f:03:5e:42:38:d5:20:13:4f:29:5c:c8:71: 11:d0:5b:ed:92:84:44:25:f9:d8:0c:79:2c:ae:bc:b8:31:92: 0d:d4:59:54:2d:df:85:8f:d3:ec:b4:c3:5a:d4:26:b4:5f:24: 85:f3:75:3c:43:0e:a5:36:49:05:d7:6c:29:fb:3f:af:dc:40: 63:df:7a:b7:a1:b3:ed:e6:45:97:57:53:4a:fb:0c:20:13:75: bf:fa:92:2f:82:6a:a9:c7:03:73:fe:1f:eb:24:8e:5d:3b:00: bf:17:67:96:2b:09:55:7d:06:bc:0b:fa:1a:72:b4:ba:2f:56: b8:63:89:a9:a3:69:34:d6:b3:9f:cf:3d:4b:64:a3:0c:58:ea: 2e:22:42:3a:43:32:75:aa:01:5b:92:13:f7:87:56:74:98:19: a1:fc:e8:b5:06:48:0b:89:22:bb:57:2e:0c:cb:46:fc:d7:4b: e9:42:db:2b:41:0c:cc:d9:c7:b6:9c:4f:7c:a8:70:c6:c0:7d: c7:ed:46:ff:23:c3:18:f5:fa:69:33:25:91:f6:79:99:e8:b4: 89:4f:5b:47 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALYyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTU1NVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q4YmItNjNlNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANVtWA4bhT+5GE+ijdLWgVQnZZ1kGTOJD5j4JcWVpndeNbXEboDYz1gCiv/+ PXwRI4HcahbDJn/wlhUUVjV3fMma3bxC2AvVrhuW8kBtBaxmB+/ntEBzTzWqIdO3 Dak5FFNJqQM8gffHZpsppFtF/QEF0wFbzLMurBjRpF/1hUgcMiwer/jgC56sZ/58 ytYkKwIiCXmMvtOERbKlQ8llQHh/fa/k0B9N8UAcTw/MSpnMPrjFzj07rRzdL7ze M3MqNBTeua/pR2M6HjnXKhGwpJej4inRhyBFng8WbaIC7OZXnxa9Js6vvMkBMC6J KCg6NJSM2SM4W+k9vAfGxUrvFs0CAwEAAaOCApswggKXMB0GA1UdDgQWBBSCABiG Yw/xD5mU+a/nuKy+pTsAmDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIyMTlCM0Qy NDlGNjExRUQ4NkMzRkU0NkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQBZ53eAwQBZ7tAMA0GCSqGSIb3DQEBCwUAA4IBAQC2Sazt 6CNV/3bFEeS9PTqbZsvXaByM/7c+m62QSnDs9t5LyoYk+OVv0l8DXkI41SATTylc yHER0FvtkoREJfnYDHksrry4MZIN1FlULd+Fj9PstMNa1Ca0XySF83U8Qw6lNkkF 12wp+z+v3EBj33q3obPt5kWXV1NK+wwgE3W/+pIvgmqpxwNz/h/rJI5dOwC/F2eW KwlVfQa8C/oacrS6L1a4Y4mpo2k01rOfzz1LZKMMWOouIkI6QzJ1qgFbkhP3h1Z0 mBmh/Oi1BkgLiSK7Vy4My0b810vpQtsrQQzM2ce2nE98qHDGwH3H7Ub/I8MY9fpp MyWR9nmZ6LSJT1tH -----END CERTIFICATE-----Generated at Thu May 15 00:45:08 2025 by rpki-client