$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D4788300D2D11EB98A34382C4F9AE02.roa File: 3D4788300D2D11EB98A34382C4F9AE02.roa (raw, json) Hash identifier: yjMBJj9POcLrm4xcmxWrrfe/xe1U1A4l7dQNyL75huE= Subject key identifier: 80:D2:95:0E:B0:A1:B0:1E:D4:B8:F8:61:5C:11:DD:C4:AF:27:9C:E2 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B2C4 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D4788300D2D11EB98A34382C4F9AE02.roa Signing time: Thu 08 May 2025 16:02:26 +0000 ROA not before: Thu 08 May 2025 16:02:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134911 IP address blocks: 103.91.16.0/22 maxlen: 24 2404:b5c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45764 (0xb2c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:02:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd592-34b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:78:b4:bb:c5:1e:ab:fa:a9:eb:02:ee:6e: a2:f7:66:a8:bc:fb:2f:23:cd:57:d2:2b:f8:fc:94: 9e:0b:00:c4:ea:d0:cf:61:a1:7d:84:bf:96:4d:ce: 6c:1f:31:70:83:21:bf:ec:4c:2b:5a:1a:95:fc:8c: c0:56:11:b3:be:bc:0a:c9:f6:1b:5d:97:b3:80:f5: a3:73:ff:db:9e:b0:1d:a6:2a:05:f7:de:70:14:b3: e1:7a:d3:06:66:c2:21:b1:b2:00:7e:13:89:59:cd: 6c:27:cb:fb:27:7f:45:98:df:f4:d0:7d:95:1e:96: e6:af:e4:84:fa:ca:eb:1b:e5:77:c8:e0:bb:71:96: 63:e3:18:6b:74:32:f5:90:64:c9:58:8a:ec:6a:aa: 61:e4:7a:30:96:09:19:a6:9c:7e:ab:c1:53:1c:4b: 09:a1:19:27:e4:4c:14:76:17:8e:e6:1e:4c:75:6a: f8:8a:a0:f5:c8:36:4b:89:66:94:50:f3:b2:a9:f3: db:c2:11:93:ed:23:88:1e:97:9a:1f:9a:95:da:27: 7a:d9:79:16:96:a2:ab:35:46:8b:9f:0e:a4:67:fe: c0:27:3e:02:15:33:3a:61:14:3a:fb:9f:4c:c6:75: f7:9d:ab:ec:37:ea:8a:12:2b:62:55:d0:7b:ea:15: 99:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D2:95:0E:B0:A1:B0:1E:D4:B8:F8:61:5C:11:DD:C4:AF:27:9C:E2 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D4788300D2D11EB98A34382C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.16.0/22 IPv6: 2404:b5c0::/32 Signature Algorithm: sha256WithRSAEncryption 4f:0a:b6:b2:a8:56:60:13:9f:c8:ea:1f:79:26:28:71:1d:f0: 44:1d:a9:57:a2:13:22:0e:7d:70:9d:e2:01:e3:55:49:1d:f2: d9:f4:c8:a6:47:87:b9:76:2e:6f:17:d6:97:99:a0:ed:ef:72: 29:d0:55:85:d8:eb:a2:af:5f:d1:e4:da:80:5a:47:45:bb:22: f7:68:0a:97:ec:ec:d6:8d:a1:c5:2e:61:8c:22:5d:4d:72:6d: e2:83:ef:8d:d0:3e:75:c3:48:5d:01:05:45:56:63:b4:f8:7e: 98:f9:18:20:f6:b0:88:d3:92:e8:10:55:e8:2c:08:cd:3b:8c: b8:42:28:8f:10:56:aa:59:d2:dc:76:7b:4b:04:d8:71:36:c3: 00:07:41:b2:5f:4e:c4:00:01:8a:f8:4f:ed:6e:40:2d:4e:17: ed:7d:80:7d:ce:df:d5:b9:9d:a0:dd:80:23:f3:bb:cc:47:b5: d7:f7:96:21:fd:00:15:05:b5:e0:9f:a4:24:12:88:d4:80:03: 81:0d:07:bb:5b:06:c2:75:ae:b1:ae:88:f5:da:94:aa:67:b0: ba:bd:f4:c5:a0:c5:cc:9e:9f:f5:3d:6a:b1:80:12:8f:61:4f: fa:d9:96:c0:e0:09:2d:cf:f9:8e:9f:ea:07:29:a6:83:13:df: 70:42:3d:69 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIDALLEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDIyNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q1OTItMzRiODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYleLS7xR6r+qnrAu5uovdmqLz7LyPNV9Ir+PyUngsAxOrQz2GhfYS/lk3O bB8xcIMhv+xMK1oalfyMwFYRs768Csn2G12Xs4D1o3P/256wHaYqBffecBSz4XrT BmbCIbGyAH4TiVnNbCfL+yd/RZjf9NB9lR6W5q/khPrK6xvld8jgu3GWY+MYa3Qy 9ZBkyViK7GqqYeR6MJYJGaacfqvBUxxLCaEZJ+RMFHYXjuYeTHVq+Iqg9cg2S4lm lFDzsqnz28IRk+0jiB6Xmh+aldonetl5FpaiqzVGi58OpGf+wCc+AhUzOmEUOvuf TMZ1952r7DfqihIrYlXQe+oVmbMCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBSA0pUO sKGwHtS4+GFcEd3Eryec4jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNENDc4ODMw MEQyRDExRUI5OEEzNDM4MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMC4GCCsGAQUFBwEHAQH/ BB8wHTAMBAIAATAGAwQCZ1sQMA0EAgACMAcDBQAkBLXAMA0GCSqGSIb3DQEBCwUA A4IBAQBPCrayqFZgE5/I6h95JihxHfBEHalXohMiDn1wneIB41VJHfLZ9MimR4e5 di5vF9aXmaDt73Ip0FWF2Ouir1/R5NqAWkdFuyL3aAqX7OzWjaHFLmGMIl1Ncm3i g++N0D51w0hdAQVFVmO0+H6Y+Rgg9rCI05LoEFXoLAjNO4y4QiiPEFaqWdLcdntL BNhxNsMAB0GyX07EAAGK+E/tbkAtThftfYB9zt/VuZ2g3YAj87vMR7XX95Yh/QAV BbXgn6QkEojUgAOBDQe7WwbCda6xroj12pSqZ7C6vfTFoMXMnp/1PWqxgBKPYU/6 2ZbA4Aktz/mOn+oHKaaDE99wQj1p -----END CERTIFICATE-----Generated at Tue May 13 02:26:10 2025 by rpki-client