$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B18287EF8C711EF81A6965AC4F9AE02.roa File: 2B18287EF8C711EF81A6965AC4F9AE02.roa (raw, json) Hash identifier: bVvYlphJdyJ4VKvK0hZnhu+82gSM0qh0s7K8LwsC7pk= Subject key identifier: 64:86:55:3C:05:91:90:C4:B6:BC:86:04:27:07:16:E5:93:EB:67:50 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B302 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B18287EF8C711EF81A6965AC4F9AE02.roa Signing time: Thu 08 May 2025 16:03:25 +0000 ROA not before: Thu 08 May 2025 16:03:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135218 IP address blocks: 103.65.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45826 (0xb302) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:03:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd5cd-0be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:88:67:8e:1a:5c:26:58:04:25:7d:bd:38: 00:0d:a3:db:c8:4e:fe:cc:57:5e:51:aa:cc:bc:6a: b8:d5:7b:45:dd:d3:c8:79:8c:e9:93:fe:8d:d1:dc: 49:c2:0c:c8:b8:25:ba:08:fc:f6:34:13:cd:34:60: 0a:91:99:40:da:ae:d8:71:a6:76:6e:ae:f7:03:2a: aa:17:57:88:37:a4:98:e8:9e:f9:52:39:89:ee:a1: d6:c7:99:5b:44:76:4e:b7:71:da:de:22:45:00:0e: fb:f4:0f:29:6b:9f:93:70:05:31:35:6f:20:e5:ce: dc:df:d1:ee:85:c2:71:c6:02:3f:aa:58:61:26:41: 73:da:a6:a7:16:f2:e5:12:e2:bd:cf:c5:33:b9:0c: 3b:97:79:2d:1a:91:e5:2c:18:68:3b:31:47:20:68: 9e:81:3b:69:05:e5:8b:f5:06:27:d6:9c:3d:ac:ca: 0e:fe:ba:c7:55:f5:d9:29:5a:66:bd:55:f6:3c:e9: dc:df:ec:b7:fc:2b:ef:0c:13:e1:40:8b:e2:de:4d: 9c:c7:de:35:8e:2f:4b:b3:f1:74:1a:f6:fc:1f:c1: cd:87:53:01:b1:e9:ec:b8:8d:66:ec:ef:c9:5c:3f: 46:95:c8:c2:fc:c9:67:76:f9:fa:cb:43:41:eb:4a: 62:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:86:55:3C:05:91:90:C4:B6:BC:86:04:27:07:16:E5:93:EB:67:50 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B18287EF8C711EF81A6965AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.65.24.0/22 Signature Algorithm: sha256WithRSAEncryption 52:39:1e:97:51:3f:a4:57:e3:cb:54:cf:59:e8:9b:93:8d:7b: 9e:d8:94:e2:d9:2c:55:2f:f1:05:a0:cb:cf:ba:76:9b:7b:7e: 5b:53:8c:51:29:5a:c5:d0:06:dc:eb:7d:bc:78:02:6c:9f:16: ae:ee:7c:f9:dc:ad:6c:6f:23:60:60:20:78:e5:3f:3e:1d:0d: 27:f9:ce:df:13:1a:4b:46:e8:e7:a9:bf:10:6d:48:28:4a:52: bd:ab:a3:6e:74:4f:f0:76:fe:75:7d:23:d2:5d:61:95:00:16: 3c:5e:a9:b8:3b:14:81:b4:85:b0:50:d8:3d:e0:28:47:e3:9c: 7a:97:22:14:25:70:a1:c2:6f:0e:ef:06:b0:16:71:50:a3:89: cf:05:6a:dd:46:eb:94:55:df:67:cb:42:47:34:7f:6d:7f:68: 0d:b3:b8:0b:25:03:05:08:20:55:bb:ba:86:c6:46:ba:dc:a0: 17:3e:d1:84:7a:3e:84:6b:b8:6e:38:dd:34:2b:02:23:1b:f3: 95:4e:63:9b:99:94:2c:6e:bf:05:95:ff:2b:f9:aa:62:7b:2b: 06:a7:26:c2:0b:31:5a:73:e8:ca:23:89:ce:9f:49:e3:59:92: bc:91:8a:a5:65:59:14:18:da:da:3f:19:60:f6:39:fd:28:5b: 12:50:6f:c4 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALMCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDMyNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q1Y2QtMGJlMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlHiGeOGlwmWAQlfb04AA2j28hO/sxXXlGqzLxquNV7Rd3TyHmM6ZP+jdHc ScIMyLglugj89jQTzTRgCpGZQNqu2HGmdm6u9wMqqhdXiDekmOie+VI5ie6h1seZ W0R2Trdx2t4iRQAO+/QPKWufk3AFMTVvIOXO3N/R7oXCccYCP6pYYSZBc9qmpxby 5RLivc/FM7kMO5d5LRqR5SwYaDsxRyBonoE7aQXli/UGJ9acPazKDv66x1X12Sla Zr1V9jzp3N/st/wr7wwT4UCL4t5NnMfeNY4vS7PxdBr2/B/BzYdTAbHp7LiNZuzv yVw/RpXIwvzJZ3b5+stDQetKYsECAwEAAaOCApUwggKRMB0GA1UdDgQWBBRkhlU8 BZGQxLa8hgQnBxblk+tnUDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJCMTgyODdF RjhDNzExRUY4MUE2OTY1QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCZ0EYMA0GCSqGSIb3DQEBCwUAA4IBAQBSOR6XUT+kV+PL VM9Z6JuTjXue2JTi2SxVL/EFoMvPunabe35bU4xRKVrF0Abc6328eAJsnxau7nz5 3K1sbyNgYCB45T8+HQ0n+c7fExpLRujnqb8QbUgoSlK9q6NudE/wdv51fSPSXWGV ABY8Xqm4OxSBtIWwUNg94ChH45x6lyIUJXChwm8O7wawFnFQo4nPBWrdRuuUVd9n y0JHNH9tf2gNs7gLJQMFCCBVu7qGxka63KAXPtGEej6Ea7huON00KwIjG/OVTmOb mZQsbr8Flf8r+apieysGpybCCzFac+jKI4nOn0njWZK8kYqlZVkUGNraPxlg9jn9 KFsSUG/E -----END CERTIFICATE-----Generated at Tue May 13 00:26:58 2025 by rpki-client