$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28609DF6C7E011EDA4FAEE47C4F9AE02.roa File: 28609DF6C7E011EDA4FAEE47C4F9AE02.roa (raw, json) Hash identifier: vwbqPL53889s+tAJA7MzymOfw/NdYHLrxe/j4ejka5U= Subject key identifier: 21:F4:E0:74:FA:00:54:6D:71:D9:29:B0:67:EF:8C:C7:3F:D4:E0:6D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B898 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28609DF6C7E011EDA4FAEE47C4F9AE02.roa Signing time: Thu 08 May 2025 16:25:11 +0000 ROA not before: Thu 08 May 2025 16:25:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150585 IP address blocks: 103.57.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47256 (0xb898) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:25:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdae6-4f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:a4:02:d5:00:2c:5c:b4:3c:61:e6:72:7c: 2b:60:0a:c5:28:20:c4:ef:e9:fb:1f:a8:7f:38:96: 24:d3:27:ca:03:51:b1:24:3b:be:aa:bc:d0:11:81: b5:5b:4d:50:f5:3f:aa:3b:05:0a:d0:86:71:59:44: 06:4b:15:f2:80:eb:2c:ff:5e:85:77:92:cf:90:77: d1:ca:5e:8d:77:a1:0e:e7:e6:2b:00:30:9c:af:cc: 8b:3c:c3:57:59:f8:c6:9b:d1:c6:2f:4d:a7:38:fd: a9:34:0d:1a:17:ab:ed:20:93:a2:46:3a:3c:72:48: bd:74:89:73:a0:a9:4f:71:d6:ef:7c:41:99:f0:3f: bb:7d:94:b0:f9:e3:84:c7:06:33:13:9c:df:64:f8: d9:b6:5f:78:e4:20:3a:18:60:ea:f5:11:73:c1:19: 74:d1:5b:b4:5d:fa:21:0c:ec:3a:56:bf:44:65:02: 1d:16:f0:1c:c6:3a:cf:fe:23:67:28:1d:bc:28:3b: 4c:69:11:dd:cb:77:95:e9:e5:a9:b6:4a:22:5c:e6: 60:51:c8:53:02:21:15:b0:11:4e:4b:de:df:43:f4: db:37:41:6b:9c:b8:50:d9:32:9e:1c:b8:21:15:42: 3b:26:cc:14:4f:97:54:ac:87:b6:7b:b9:3f:12:64: 20:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F4:E0:74:FA:00:54:6D:71:D9:29:B0:67:EF:8C:C7:3F:D4:E0:6D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28609DF6C7E011EDA4FAEE47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.57.118.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:ba:42:15:e0:94:49:f6:2f:13:87:59:8f:30:a0:82:83:fa: 00:1e:4d:52:68:be:78:f1:94:40:a0:36:5d:6f:c8:40:12:9d: 42:13:d1:6f:d7:07:79:d8:5c:4d:ce:69:68:a6:80:b2:b3:b2: a5:bf:12:a8:ca:38:f4:30:75:6b:b0:95:a3:4e:17:54:06:d7: 19:03:88:bb:fa:4b:97:2e:fa:4e:53:c9:13:a7:a5:5b:47:91: 08:ef:c1:97:74:f3:35:74:cf:fc:b3:85:9c:15:2e:de:72:00: 7c:6c:21:28:7c:c0:ab:db:97:63:5e:b9:7d:ce:08:06:ce:5e: 2a:44:a8:a4:83:bd:c0:a1:ad:20:96:06:db:ee:53:64:f5:c2: f6:6b:ac:e9:04:14:c2:24:96:99:79:4b:16:9f:2c:10:ed:39: 32:5d:af:0b:3c:42:2f:d7:22:01:9a:7f:da:9e:54:f2:40:1a: 65:a8:77:c8:15:1b:72:8e:f5:31:69:19:a6:42:4b:7e:b4:21: e1:47:20:1c:d3:28:e4:52:7f:47:7f:8d:4d:80:2b:aa:5e:b3: 5b:e3:30:81:46:34:06:e1:8d:9d:c7:49:d4:a5:55:0e:87:3e: e5:46:1f:f1:14:7a:97:3c:14:75:a1:d9:98:50:ff:ae:a0:6c: cb:ed:d2:88 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALiYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjUxMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RhZTYtNGYyZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHppALVACxctDxh5nJ8K2AKxSggxO/p+x+ofziWJNMnygNRsSQ7vqq80BGB tVtNUPU/qjsFCtCGcVlEBksV8oDrLP9ehXeSz5B30cpejXehDufmKwAwnK/MizzD V1n4xpvRxi9Npzj9qTQNGher7SCTokY6PHJIvXSJc6CpT3HW73xBmfA/u32UsPnj hMcGMxOc32T42bZfeOQgOhhg6vURc8EZdNFbtF36IQzsOla/RGUCHRbwHMY6z/4j ZygdvCg7TGkR3ct3lenlqbZKIlzmYFHIUwIhFbARTkve30P02zdBa5y4UNkynhy4 IRVCOybMFE+XVKyHtnu5PxJkIIsCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQh9OB0 +gBUbXHZKbBn74zHP9TgbTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI4NjA5REY2 QzdFMDExRURBNEZBRUU0N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZzl2MA0GCSqGSIb3DQEBCwUAA4IBAQCbukIV4JRJ9i8T h1mPMKCCg/oAHk1SaL548ZRAoDZdb8hAEp1CE9Fv1wd52FxNzmlopoCys7KlvxKo yjj0MHVrsJWjThdUBtcZA4i7+kuXLvpOU8kTp6VbR5EI78GXdPM1dM/8s4WcFS7e cgB8bCEofMCr25djXrl9zggGzl4qRKikg73Aoa0glgbb7lNk9cL2a6zpBBTCJJaZ eUsWnywQ7TkyXa8LPEIv1yIBmn/anlTyQBplqHfIFRtyjvUxaRmmQkt+tCHhRyAc 0yjkUn9Hf41NgCuqXrNb4zCBRjQG4Y2dx0nUpVUOhz7lRh/xFHqXPBR1odmYUP+u oGzL7dKI -----END CERTIFICATE-----Generated at Tue May 13 00:40:06 2025 by rpki-client