$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/307C5716D35711EB9945B441C4F9AE02.roa File: 307C5716D35711EB9945B441C4F9AE02.roa (raw, json) Hash identifier: /rVFTd62YkkEtZTRwdwNn+r1jqWn02Qf0+P/ojusKiA= Subject key identifier: 15:94:ED:70:A5:3A:7E:D8:F4:2D:AE:09:AD:36:6A:75:30:7C:91:5B Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B474 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/307C5716D35711EB9945B441C4F9AE02.roa Signing time: Thu 08 May 2025 16:09:09 +0000 ROA not before: Thu 08 May 2025 16:09:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137130 IP address blocks: 103.109.224.0/24 maxlen: 24 103.109.225.0/24 maxlen: 24 103.109.226.0/24 maxlen: 24 103.109.227.0/24 maxlen: 24 103.122.156.0/24 maxlen: 24 2001:df1:1580::/48 maxlen: 48 2403:9140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46196 (0xb474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:09:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd725-7562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:b1:75:50:7d:d3:bd:2d:08:0e:11:a1:74: ef:b7:e6:6a:6e:2b:f3:9c:f2:89:d9:1b:02:d4:a8: 3f:c1:76:d7:c7:3a:21:74:8f:43:01:32:04:d4:5e: ba:37:ad:2b:de:d2:14:b3:8a:5b:10:ef:e0:92:90: da:4a:d4:bf:51:ea:27:35:54:0c:d7:27:40:71:94: 3f:71:e9:87:0a:09:82:d7:83:38:ce:cd:6e:7a:ec: 5d:7d:64:4b:48:1e:12:66:fb:7e:07:7f:1e:7a:41: 53:00:7d:e5:2f:a3:b7:10:84:be:4f:9f:5e:6b:11: 82:6b:19:d6:cc:9b:62:f4:97:ec:2a:e6:9d:47:a3: de:e1:e9:4c:dc:94:eb:45:e0:cb:d5:69:c2:37:2c: fb:f3:f5:8f:04:0f:ca:35:0a:71:27:61:07:d0:7b: 23:3f:f6:b0:46:42:7d:9a:0f:75:5b:68:70:09:c1: 05:2d:9b:01:1b:c2:41:f7:9f:13:40:75:d8:45:20: 1c:fe:e0:81:3a:6b:ff:7b:a6:3d:6f:dd:e8:ce:29: 18:3f:9d:02:48:35:83:91:43:15:e6:02:eb:6a:65: ea:4f:b1:cb:15:1f:67:65:53:d0:74:0c:ab:48:4a: 3c:f1:4f:a2:55:ca:9f:73:32:90:3a:56:eb:0b:95: c3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:94:ED:70:A5:3A:7E:D8:F4:2D:AE:09:AD:36:6A:75:30:7C:91:5B X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/307C5716D35711EB9945B441C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.109.224.0/22 103.122.156.0/24 IPv6: 2001:df1:1580::/48 2403:9140::/48 Signature Algorithm: sha256WithRSAEncryption 73:33:5d:3e:9a:cd:96:19:fa:3e:2f:e7:eb:2a:7b:a9:9e:92: 4b:eb:14:bf:93:e3:7a:ac:81:ae:c0:6a:31:d5:db:9a:69:7f: 74:d6:42:af:fc:f9:39:b9:cc:f4:25:92:d2:c4:3b:12:b9:94: 93:09:4a:07:3f:ee:94:16:ec:8c:84:a5:f2:38:82:1d:86:f2: 35:55:75:0e:f0:6e:92:ad:3f:0c:ad:e1:84:f1:83:1a:e1:77: 8a:f1:fe:4b:bc:44:d5:ae:d0:b5:e4:03:ba:f2:fb:bb:47:8f: de:80:b7:cc:86:d1:01:e9:39:d7:2b:b8:0a:3f:f6:ee:89:df: 14:d9:6a:a1:5e:5c:64:68:eb:08:dd:52:d4:59:1b:0a:af:44: 3c:a4:c0:70:04:43:3a:45:57:96:3d:b0:8c:89:dd:ad:9c:a0: a0:ac:80:6b:82:5d:3a:d0:68:1e:6e:71:90:83:0b:4b:29:4e: a1:73:69:db:d6:55:26:52:68:ee:21:67:cd:71:9d:e7:02:87: 0e:b8:0e:e3:07:57:eb:a1:0c:cd:45:b7:93:08:44:2c:72:b6: a9:b3:79:f5:71:b0:60:bd:1f:66:83:c4:2e:64:ff:de:22:8f: e8:ea:ea:cd:6f:6b:f4:e1:10:6e:95:21:c2:df:ec:32:44:36: 6c:ca:9a:58 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgIDALR0MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDkwOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3MjUtNzU2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALp1sXVQfdO9LQgOEaF077fmam4r85zyidkbAtSoP8F218c6IXSPQwEyBNRe ujetK97SFLOKWxDv4JKQ2krUv1HqJzVUDNcnQHGUP3HphwoJgteDOM7NbnrsXX1k S0geEmb7fgd/HnpBUwB95S+jtxCEvk+fXmsRgmsZ1sybYvSX7CrmnUej3uHpTNyU 60Xgy9Vpwjcs+/P1jwQPyjUKcSdhB9B7Iz/2sEZCfZoPdVtocAnBBS2bARvCQfef E0B12EUgHP7ggTpr/3umPW/d6M4pGD+dAkg1g5FDFeYC62pl6k+xyxUfZ2VT0HQM q0hKPPFPolXKn3MykDpW6wuVw5ECAwEAAaOCArUwggKxMB0GA1UdDgQWBBQVlO1w pTp+2PQtrgmtNmp1MHyRWzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMwN0M1NzE2 RDM1NzExRUI5OTQ1QjQ0MUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMD8GCCsGAQUFBwEHAQH/ BDAwLjASBAIAATAMAwQCZ23gAwQAZ3qcMBgEAgACMBIDBwAgAQ3xFYADBwAkA5FA AAAwDQYJKoZIhvcNAQELBQADggEBAHMzXT6azZYZ+j4v5+sqe6mekkvrFL+T43qs ga7AajHV25ppf3TWQq/8+Tm5zPQlktLEOxK5lJMJSgc/7pQW7IyEpfI4gh2G8jVV dQ7wbpKtPwyt4YTxgxrhd4rx/ku8RNWu0LXkA7ry+7tHj96At8yG0QHpOdcruAo/ 9u6J3xTZaqFeXGRo6wjdUtRZGwqvRDykwHAEQzpFV5Y9sIyJ3a2coKCsgGuCXTrQ aB5ucZCDC0spTqFzadvWVSZSaO4hZ81xnecChw64DuMHV+uhDM1Ft5MIRCxytqmz efVxsGC9H2aDxC5k/94ij+jq6s1va/ThEG6VIcLf7DJENmzKmlg= -----END CERTIFICATE-----Generated at Thu May 15 07:09:32 2025 by rpki-client