$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35687E3CCFB611EDA7069782C4F9AE02.roa File: 35687E3CCFB611EDA7069782C4F9AE02.roa (raw, json) Hash identifier: iutqgQPVgBXLQomZ0T9vjLgrADEAO4fvz6nlEV+M4WU= Subject key identifier: B0:7F:D6:DA:43:87:C1:F6:95:79:CE:D3:26:CC:E0:C9:D7:92:D9:50 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B8CB Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35687E3CCFB611EDA7069782C4F9AE02.roa Signing time: Thu 08 May 2025 16:25:57 +0000 ROA not before: Thu 08 May 2025 16:25:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150642 IP address blocks: 103.111.228.0/23 maxlen: 24 2001:df2:1c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47307 (0xb8cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:25:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdb14-4aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:cf:3f:04:68:1f:3f:1f:8a:ff:a7:71:0b: 63:ab:90:cf:9b:27:93:2d:2a:27:4b:80:4f:36:de: eb:0c:e4:c5:24:3f:5d:3f:8c:dd:f1:7b:d6:48:5c: 2a:8b:4b:c7:64:b5:be:e1:da:fa:ed:2b:23:5e:b8: fe:55:0a:c6:8d:da:79:ce:cb:85:64:11:d8:62:d0: 6b:47:9f:8c:b0:85:dc:72:42:d0:7c:bb:f3:f4:79: c0:e5:87:da:ec:14:37:ff:e2:ae:62:c3:fa:df:17: f2:b0:19:22:c8:23:ca:04:33:32:5e:98:fb:e5:73: f0:73:71:c0:4f:d3:19:dc:2c:ee:16:c1:de:3d:8c: a9:97:9c:49:0a:fb:50:6c:cf:c3:de:75:25:16:08: 9a:53:76:6a:c3:3f:e6:f3:e7:29:dd:0a:8e:67:f5: bf:5d:b4:01:0b:2a:e4:58:4b:8b:73:0f:69:dd:ce: a6:33:db:76:13:69:ce:31:b9:87:4b:b0:27:b2:ca: d3:5c:0e:57:0c:64:24:91:b7:de:6c:de:35:dd:e6: 4d:d8:bd:3c:fd:ee:6c:b8:3e:5c:26:63:95:1f:e0: 8d:1c:85:59:82:20:c3:d6:49:56:e4:d8:61:3b:f2: 22:56:64:78:93:5c:bc:19:60:65:d2:7b:19:91:8b: e2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7F:D6:DA:43:87:C1:F6:95:79:CE:D3:26:CC:E0:C9:D7:92:D9:50 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35687E3CCFB611EDA7069782C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.228.0/23 IPv6: 2001:df2:1c40::/48 Signature Algorithm: sha256WithRSAEncryption 38:1f:97:eb:c3:4d:4b:5d:bb:f3:f0:d4:6f:77:e9:a6:e0:77: b3:a9:e6:28:a9:5f:b3:c3:ac:fc:9f:21:7a:0e:fe:90:ea:e6: 59:cd:1e:e8:cf:16:3c:07:50:2a:95:e8:cb:3e:ad:18:2d:00: b9:b6:30:bc:3a:28:69:0e:e8:49:f1:50:17:84:52:44:48:0c: 5b:55:a5:b7:3c:67:b7:d4:94:f8:ef:1b:00:df:d6:07:b8:7a: f4:47:8f:1c:be:54:99:38:78:95:3d:d3:91:dd:4a:b6:ff:00: e3:e7:a1:2d:7e:ff:2d:0b:31:17:38:e7:fe:b0:a9:d5:e4:34: 81:38:ab:fd:40:10:10:4c:6a:c1:5a:8e:6b:5b:b9:77:25:8f: 87:e1:a7:7f:54:e5:e4:61:ec:fb:1b:e7:0e:60:63:2e:3b:4e: 77:27:63:12:b0:83:12:e6:7a:7b:13:52:ec:23:21:e3:93:6a: 3c:76:28:4a:39:71:7f:7d:0d:45:5f:fb:2f:32:ad:de:93:f4: ca:c8:d7:f2:8d:a8:ff:e8:74:59:a4:39:e4:1f:32:7d:1c:98: 88:bd:cd:0e:e1:4b:f5:bd:88:da:5b:13:16:bb:f6:01:7a:0b: 07:e6:f3:5a:30:f8:c8:92:03:43:c1:e1:17:5b:e3:5d:9e:e5: b2:7f:00:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALjLMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjU1N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiMTQtNGFhYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsezz8EaB8/H4r/p3ELY6uQz5snky0qJ0uATzbe6wzkxSQ/XT+M3fF71khc KotLx2S1vuHa+u0rI164/lUKxo3aec7LhWQR2GLQa0efjLCF3HJC0Hy78/R5wOWH 2uwUN//irmLD+t8X8rAZIsgjygQzMl6Y++Vz8HNxwE/TGdws7hbB3j2MqZecSQr7 UGzPw951JRYImlN2asM/5vPnKd0Kjmf1v120AQsq5FhLi3MPad3OpjPbdhNpzjG5 h0uwJ7LK01wOVwxkJJG33mzeNd3mTdi9PP3ubLg+XCZjlR/gjRyFWYIgw9ZJVuTY YTvyIlZkeJNcvBlgZdJ7GZGL4nMCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBSwf9ba Q4fB9pV5ztMmzODJ15LZUDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM1Njg3RTND Q0ZCNjExRURBNzA2OTc4MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ2/kMA8EAgACMAkDBwAgAQ3yHEAwDQYJKoZIhvcNAQEL BQADggEBADgfl+vDTUtdu/Pw1G936abgd7Op5iipX7PDrPyfIXoO/pDq5lnNHujP FjwHUCqV6Ms+rRgtALm2MLw6KGkO6EnxUBeEUkRIDFtVpbc8Z7fUlPjvGwDf1ge4 evRHjxy+VJk4eJU905HdSrb/AOPnoS1+/y0LMRc45/6wqdXkNIE4q/1AEBBMasFa jmtbuXclj4fhp39U5eRh7Psb5w5gYy47TncnYxKwgxLmensTUuwjIeOTajx2KEo5 cX99DUVf+y8yrd6T9MrI1/KNqP/odFmkOeQfMn0cmIi9zQ7hS/W9iNpbExa79gF6 Cwfm81ow+MiSA0PB4Rdb412e5bJ/AFA= -----END CERTIFICATE-----Generated at Tue May 13 01:07:12 2025 by rpki-client