$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27FC3CBA1F6911EC82CDB07AC4F9AE02.roa File: 27FC3CBA1F6911EC82CDB07AC4F9AE02.roa (raw, json) Hash identifier: fBDPkhPDVt8UcBTXNy0oeRUQjtYrXSD6zyNB80RE4DQ= Subject key identifier: 9F:BF:9F:13:30:68:D5:E8:81:4D:FB:F5:21:AF:55:32:94:00:AF:AC Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B722 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27FC3CBA1F6911EC82CDB07AC4F9AE02.roa Signing time: Thu 08 May 2025 16:19:36 +0000 ROA not before: Thu 08 May 2025 16:19:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 146860 IP address blocks: 103.168.202.0/23 maxlen: 24 2001:df1:4d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46882 (0xb722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:19:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd998-c622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:19:76:6b:ee:84:ef:77:0e:64:6c:f3:78:57: 5c:68:17:30:17:d4:f3:00:95:74:af:bd:90:b5:6e: 5c:bb:86:79:00:06:be:d8:13:78:f4:5c:a6:80:a9: a7:06:fb:c4:50:f8:99:e8:b0:75:45:30:97:33:4e: 23:2f:7f:6c:8b:48:33:c2:b7:22:71:0b:b5:36:4c: 30:55:b5:2d:b6:6d:d7:07:cf:3d:bf:8d:da:0a:49: eb:95:41:38:96:9e:d3:32:c1:0f:12:e5:24:71:54: 88:e8:37:b7:e0:44:67:2e:e4:ab:ee:4f:62:8f:b3: 67:8b:a6:6b:61:05:28:be:25:04:3b:e6:ce:41:74: 73:f3:34:2d:b9:43:a0:a2:53:66:d5:3b:ff:37:0b: de:c1:80:94:7e:fc:0f:78:26:33:55:3a:0a:1b:62: c5:38:b4:48:48:f3:1f:88:71:00:c7:b9:50:95:89: 42:e6:88:88:07:6b:95:09:d1:57:e0:c8:04:90:89: f8:15:23:35:71:92:41:36:e3:c2:7f:1d:d9:15:77: 3a:c2:61:e9:ce:5a:11:c6:33:80:d6:36:80:25:0b: ec:79:a7:b8:62:41:f0:57:7f:ca:54:d2:2f:9d:6c: 5c:94:c6:e0:a9:d2:9b:75:7c:73:63:c9:22:c8:82: fb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BF:9F:13:30:68:D5:E8:81:4D:FB:F5:21:AF:55:32:94:00:AF:AC X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/27FC3CBA1F6911EC82CDB07AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.168.202.0/23 IPv6: 2001:df1:4d40::/48 Signature Algorithm: sha256WithRSAEncryption 39:8d:2a:13:53:c4:94:9e:e5:88:54:47:4c:d3:08:2b:87:d5: 8c:7b:02:90:f2:20:7d:f8:94:4f:07:71:cd:0b:ce:40:ba:13: 39:4c:05:72:da:1b:62:99:1e:82:f7:1d:a4:b8:92:3b:05:38: 7b:eb:4e:d6:8f:21:79:69:06:64:81:8c:4c:db:8b:85:b0:99: d6:1e:42:60:10:ac:6e:5c:21:6d:db:7a:74:b2:81:fd:4e:b2: dc:7c:78:f5:f8:fa:7e:25:a4:36:2f:9f:2e:82:f7:4e:d4:ef: 9d:9c:c7:ce:2c:34:d2:39:bb:2c:55:6a:3f:c7:64:6b:29:d7: 71:eb:fe:75:89:23:b6:83:8d:42:2f:3f:aa:48:38:b3:b8:53: c4:8a:f0:05:6c:1b:a7:92:03:f2:9e:93:4b:b0:d3:86:d9:ab: 0e:fb:11:18:6d:a8:1c:c0:77:2a:47:0d:19:95:72:0b:9a:2d: 08:6d:4b:72:09:2b:2e:46:4f:63:df:d7:62:06:1c:f1:8b:3a: e9:9f:fb:e5:b3:8b:ff:84:9a:0d:52:7a:02:64:2a:6a:b3:34: fd:69:9c:4d:15:19:89:9d:34:e2:ae:ed:99:38:3e:15:4d:55: 86:c1:76:93:08:2f:e3:ee:28:37:cc:0e:98:3a:11:37:ad:20: 91:27:c8:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALciMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTkzNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5OTgtYzYyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANsZdmvuhO93DmRs83hXXGgXMBfU8wCVdK+9kLVuXLuGeQAGvtgTePRcpoCp pwb7xFD4meiwdUUwlzNOIy9/bItIM8K3InELtTZMMFW1LbZt1wfPPb+N2gpJ65VB OJae0zLBDxLlJHFUiOg3t+BEZy7kq+5PYo+zZ4uma2EFKL4lBDvmzkF0c/M0LblD oKJTZtU7/zcL3sGAlH78D3gmM1U6ChtixTi0SEjzH4hxAMe5UJWJQuaIiAdrlQnR V+DIBJCJ+BUjNXGSQTbjwn8d2RV3OsJh6c5aEcYzgNY2gCUL7HmnuGJB8Fd/ylTS L51sXJTG4KnSm3V8c2PJIsiC+2cCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBSfv58T MGjV6IFN+/Uhr1UylACvrDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI3RkMzQ0JB MUY2OTExRUM4MkNEQjA3QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ6jKMA8EAgACMAkDBwAgAQ3xTUAwDQYJKoZIhvcNAQEL BQADggEBADmNKhNTxJSe5YhUR0zTCCuH1Yx7ApDyIH34lE8Hcc0LzkC6EzlMBXLa G2KZHoL3HaS4kjsFOHvrTtaPIXlpBmSBjEzbi4WwmdYeQmAQrG5cIW3benSygf1O stx8ePX4+n4lpDYvny6C907U752cx84sNNI5uyxVaj/HZGsp13Hr/nWJI7aDjUIv P6pIOLO4U8SK8AVsG6eSA/Kek0uw04bZqw77ERhtqBzAdypHDRmVcguaLQhtS3IJ Ky5GT2Pf12IGHPGLOumf++Wzi/+Emg1SegJkKmqzNP1pnE0VGYmdNOKu7Zk4PhVN VYbBdpMIL+PuKDfMDpg6ETetIJEnyNc= -----END CERTIFICATE-----Generated at Tue May 13 06:40:51 2025 by rpki-client