$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3EBE33A68F6811EEAE1CA63DC4F9AE02.roa File: 3EBE33A68F6811EEAE1CA63DC4F9AE02.roa (raw, json) Hash identifier: b0pTD8+UtVe0l18cfkQsf14Cf51F37qOHMz99/ZZwlI= Subject key identifier: 01:FD:4B:F4:7F:06:91:C3:DC:AB:CA:C2:8B:5E:F8:31:EB:3E:39:5E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B67C Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3EBE33A68F6811EEAE1CA63DC4F9AE02.roa Signing time: Thu 08 May 2025 16:17:05 +0000 ROA not before: Thu 08 May 2025 16:17:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141555 IP address blocks: 103.163.148.0/23 maxlen: 24 2001:df1:3bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46716 (0xb67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:17:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd901-fd51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2b:df:39:b6:5f:05:bb:8d:33:ce:12:8e:3d: c3:c1:d2:57:a1:e9:85:b9:94:73:f0:15:09:9a:38: 35:a8:da:6b:96:85:1f:02:f6:e8:4b:56:6e:77:65: c8:03:77:a9:66:07:aa:61:e9:30:ae:ad:93:cb:e6: e6:00:d8:96:f7:0e:98:28:b9:76:cb:3b:9c:b7:5b: 3d:e6:2e:7c:fe:27:96:55:15:24:63:df:17:a6:b1: 65:58:0e:90:a0:bc:45:65:11:56:ad:79:72:86:f6: a2:75:39:3a:fc:c7:9c:fd:67:86:e8:e9:7b:d0:2d: 58:b1:77:0d:59:40:d2:96:d4:fc:6c:61:4f:df:4d: 89:17:07:1e:95:96:c5:59:05:cd:b2:b8:69:6e:94: 4f:a4:ac:83:a6:e3:83:34:79:77:53:53:da:19:a0: 3a:d3:c3:2c:50:27:9c:6d:29:55:61:fb:5f:43:e4: e5:3a:5b:8d:3c:e6:ad:79:c1:6c:0f:4b:78:a7:aa: 24:f4:8f:93:d1:f6:c1:14:2d:1e:08:07:29:2d:d2: e6:b8:11:04:2c:6e:3a:4e:2b:63:59:a7:25:83:b7: cd:7e:d3:7b:cb:bc:5a:e1:4a:f3:11:ed:56:7f:e3: e6:c5:39:23:4d:18:eb:81:8d:1d:6a:89:8e:a7:b9: a1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FD:4B:F4:7F:06:91:C3:DC:AB:CA:C2:8B:5E:F8:31:EB:3E:39:5E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3EBE33A68F6811EEAE1CA63DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.163.148.0/23 IPv6: 2001:df1:3bc0::/48 Signature Algorithm: sha256WithRSAEncryption af:ed:59:51:3f:0c:59:cb:2f:56:0a:b1:0c:1f:4b:12:bb:f2: 80:2f:e4:c7:07:b8:88:b5:50:2e:cb:2c:9d:5b:b2:a6:a7:c2: 5a:9b:d7:01:6a:0a:1e:2d:43:2f:67:51:b5:06:10:24:d7:df: 80:1a:8a:50:68:58:71:72:f0:57:10:07:0a:fa:e5:d5:81:b4: 5d:79:29:ad:cf:1c:a6:11:6b:e6:4c:de:7a:cb:8a:28:fd:16: 4e:dd:90:77:8e:eb:f3:8b:81:1d:5d:5a:b2:06:47:ef:2b:bc: 04:5f:bf:62:b5:5a:87:27:0a:08:07:d5:45:5c:06:fa:e3:8c: 49:7b:e0:8a:1b:57:6a:ca:c1:34:33:56:a7:34:f9:cd:46:2a: 2f:67:7d:51:b3:82:ee:d8:ac:a3:66:d5:9e:c3:5a:6a:61:89: bf:ae:42:f0:ae:6c:35:fc:d2:31:bc:ec:d4:50:a4:ff:36:97: e4:e2:96:26:8d:2b:ba:9d:20:b5:17:67:00:46:33:0c:10:2c: 6f:d3:23:82:b4:6e:21:91:88:89:7b:74:8e:e0:c5:2b:84:2b: 86:3f:80:4a:85:a1:f1:bd:84:fe:8e:2d:20:0e:29:5c:64:cb: 76:df:c5:fa:01:fe:18:74:01:b8:4c:30:87:f2:fc:3e:f2:44: 54:cf:4f:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALZ8MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTcwNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q5MDEtZmQ1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ0r3zm2XwW7jTPOEo49w8HSV6HphbmUc/AVCZo4Najaa5aFHwL26EtWbndl yAN3qWYHqmHpMK6tk8vm5gDYlvcOmCi5dss7nLdbPeYufP4nllUVJGPfF6axZVgO kKC8RWURVq15cob2onU5OvzHnP1nhujpe9AtWLF3DVlA0pbU/GxhT99NiRcHHpWW xVkFzbK4aW6UT6Ssg6bjgzR5d1NT2hmgOtPDLFAnnG0pVWH7X0Pk5TpbjTzmrXnB bA9LeKeqJPSPk9H2wRQtHggHKS3S5rgRBCxuOk4rY1mnJYO3zX7Te8u8WuFK8xHt Vn/j5sU5I00Y64GNHWqJjqe5oT0CAwEAAaOCAqYwggKiMB0GA1UdDgQWBBQB/Uv0 fwaRw9yrysKLXvgx6z45XjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNFQkUzM0E2 OEY2ODExRUVBRTFDQTYzREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQBZ6OUMA8EAgACMAkDBwAgAQ3xO8AwDQYJKoZIhvcNAQEL BQADggEBAK/tWVE/DFnLL1YKsQwfSxK78oAv5McHuIi1UC7LLJ1bsqanwlqb1wFq Ch4tQy9nUbUGECTX34AailBoWHFy8FcQBwr65dWBtF15Ka3PHKYRa+ZM3nrLiij9 Fk7dkHeO6/OLgR1dWrIGR+8rvARfv2K1WocnCggH1UVcBvrjjEl74IobV2rKwTQz Vqc0+c1GKi9nfVGzgu7YrKNm1Z7DWmphib+uQvCubDX80jG87NRQpP82l+TiliaN K7qdILUXZwBGMwwQLG/TI4K0biGRiIl7dI7gxSuEK4Y/gEqFofG9hP6OLSAOKVxk y3bfxfoB/hh0AbhMMIfy/D7yRFTPTww= -----END CERTIFICATE-----Generated at Tue May 13 00:20:14 2025 by rpki-client