$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C2876540FBA11ECA479FB59C4F9AE02.roa File: 3C2876540FBA11ECA479FB59C4F9AE02.roa (raw, json) Hash identifier: dXNlx7Ornw+MQPg/lljoN0Paq1/J9fNH8SIMA9kUoZY= Subject key identifier: 7B:75:9D:51:60:B3:8F:C9:49:18:C1:D7:A9:B0:2C:A7:4D:5E:88:52 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B72D Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C2876540FBA11ECA479FB59C4F9AE02.roa Signing time: Thu 08 May 2025 16:19:46 +0000 ROA not before: Thu 08 May 2025 16:19:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 146878 IP address blocks: 103.171.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46893 (0xb72d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:19:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd9a1-591d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5a:6b:c9:1a:b3:24:7f:db:a0:23:75:27:85: 1d:4e:0c:5f:15:a0:71:7a:a9:6a:57:c4:06:ba:72: bf:62:fe:69:1d:83:10:00:6d:70:5d:93:7a:72:3d: 52:3b:f5:e6:89:2f:91:af:54:9a:9e:ce:c8:93:59: 7a:ed:6c:55:c8:43:6c:9b:b3:99:09:a5:1f:5a:85: 6d:8d:71:67:7d:30:ba:0b:a8:c6:c3:cb:13:cf:03: 68:c2:17:f8:38:9c:5e:57:d4:27:e2:5f:84:d1:09: e8:9f:63:2f:a0:27:c1:fd:03:0d:3f:b1:b8:8c:2d: 84:d4:aa:83:b0:ff:8c:c1:d0:2e:f9:a9:ac:2b:e3: d3:80:7e:c4:ac:0e:58:e2:44:e6:a2:84:5f:85:a4: d5:c1:20:3f:95:3c:b9:e3:f9:64:cc:04:96:cf:e3: ea:1b:c3:09:58:ab:a8:9d:b7:49:36:43:29:fc:95: bb:0b:4e:cd:40:c7:d3:69:4e:93:be:a5:e8:1c:ab: 90:c0:17:b4:44:9e:d0:bf:91:e1:e8:98:07:26:c7: 57:eb:5c:13:d1:38:81:29:6c:bd:ed:d2:96:3d:aa: f1:ab:f2:79:4a:9b:49:8a:e5:42:b8:9f:6a:3b:bb: d3:4e:a6:d6:f3:05:cd:3d:8f:7a:ee:6a:a0:b9:ff: a6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:75:9D:51:60:B3:8F:C9:49:18:C1:D7:A9:B0:2C:A7:4D:5E:88:52 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C2876540FBA11ECA479FB59C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.171.44.0/23 Signature Algorithm: sha256WithRSAEncryption 57:2e:dc:68:d0:39:eb:f2:91:0f:2c:61:80:fc:2b:e2:2f:f5: 38:47:60:ff:06:0f:9b:cf:f4:dd:71:99:90:e7:c2:6a:c6:d1: 35:38:b2:05:ab:4a:b1:cc:59:0c:72:ca:12:ca:d6:7c:85:2d: 91:f9:63:b0:76:e5:ce:5f:66:0c:35:66:43:70:ed:bb:43:5e: bb:56:96:b4:b9:2c:02:d1:f3:b9:20:11:1d:40:73:87:e2:0d: 9d:a0:a9:b3:da:d5:0e:22:a2:fe:24:73:87:ca:76:cd:c0:e9: ba:89:96:9b:6f:7a:06:ca:7a:90:aa:7a:f0:6d:32:41:7c:58: e2:c6:7b:e1:6a:ba:fc:e8:ec:09:5d:92:8b:66:2e:c2:58:d5: 41:da:4f:df:3a:88:7b:5c:72:37:3f:6b:fb:01:f0:55:98:b9: db:5d:be:24:42:1c:54:c4:45:68:c7:39:7d:96:46:cb:77:21: 31:7c:b1:45:ed:a6:cb:0d:b2:2f:83:e2:a8:ff:18:fc:ec:30: e6:6f:25:c7:bc:90:fb:dd:33:0e:11:9e:62:17:ab:79:fc:ff: 10:d6:43:4b:64:d7:74:23:cf:3a:ac:40:31:46:c2:21:03:7d: 59:4a:ab:03:e7:86:b3:45:3c:4e:d5:75:57:f9:36:0a:36:5f: 59:21:01:9d -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALctMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTk0NloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5YTEtNTkxZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOdaa8kasyR/26AjdSeFHU4MXxWgcXqpalfEBrpyv2L+aR2DEABtcF2TenI9 Ujv15okvka9Ump7OyJNZeu1sVchDbJuzmQmlH1qFbY1xZ30wuguoxsPLE88DaMIX +DicXlfUJ+JfhNEJ6J9jL6Anwf0DDT+xuIwthNSqg7D/jMHQLvmprCvj04B+xKwO WOJE5qKEX4Wk1cEgP5U8ueP5ZMwEls/j6hvDCVirqJ23STZDKfyVuwtOzUDH02lO k76l6ByrkMAXtESe0L+R4eiYBybHV+tcE9E4gSlsve3Slj2q8avyeUqbSYrlQrif aju7006m1vMFzT2Peu5qoLn/phsCAwEAAaOCApUwggKRMB0GA1UdDgQWBBR7dZ1R YLOPyUkYwdepsCynTV6IUjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNDMjg3NjU0 MEZCQTExRUNBNDc5RkI1OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ6ssMA0GCSqGSIb3DQEBCwUAA4IBAQBXLtxo0Dnr8pEP LGGA/CviL/U4R2D/Bg+bz/TdcZmQ58JqxtE1OLIFq0qxzFkMcsoSytZ8hS2R+WOw duXOX2YMNWZDcO27Q167Vpa0uSwC0fO5IBEdQHOH4g2doKmz2tUOIqL+JHOHynbN wOm6iZabb3oGynqQqnrwbTJBfFjixnvharr86OwJXZKLZi7CWNVB2k/fOoh7XHI3 P2v7AfBVmLnbXb4kQhxUxEVoxzl9lkbLdyExfLFF7abLDbIvg+Ko/xj87DDmbyXH vJD73TMOEZ5iF6t5/P8Q1kNLZNd0I886rEAxRsIhA31ZSqsD54azRTxO1XVX+TYK Nl9ZIQGd -----END CERTIFICATE-----Generated at Tue May 13 01:18:48 2025 by rpki-client