$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F63BBC0504211ED83277887C4F9AE02.roa File: 3F63BBC0504211ED83277887C4F9AE02.roa (raw, json) Hash identifier: MkfX9urugGHx2ghi3l/+Rb1cqRj7veBRCSLZOk0/Imw= Subject key identifier: A8:A4:DB:8F:59:3F:B8:BF:E9:47:0E:78:F8:37:29:B5:CB:80:6B:13 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: BA0A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F63BBC0504211ED83277887C4F9AE02.roa Signing time: Thu 08 May 2025 16:30:46 +0000 ROA not before: Thu 08 May 2025 16:30:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 399546 IP address blocks: 43.231.124.0/22 maxlen: 24 103.10.234.0/23 maxlen: 24 103.50.212.0/23 maxlen: 24 202.0.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47626 (0xba0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:30:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdc36-2ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:6b:f2:c5:8b:95:a2:58:98:a0:fa:ba:2a: c8:ec:dd:bd:5d:27:46:f9:30:d1:08:48:ba:97:e7: ed:11:36:34:0d:02:e6:25:5f:a0:3e:c4:14:ed:3c: 79:3d:05:7c:3b:64:89:9f:fc:8b:ca:fa:b7:8f:12: bf:d4:ef:a7:77:54:58:9d:dc:4e:6e:a7:3b:4e:a8: 1f:47:e5:8b:9f:71:94:25:c0:ae:14:8e:53:56:ed: 89:c0:8c:8c:fd:b3:41:2b:4c:67:fd:8b:68:dd:4e: bf:52:bf:d1:d4:10:e7:5a:88:75:e5:92:d5:e0:a4: 7b:a2:45:f7:17:25:e3:89:34:9b:a8:76:de:c3:eb: 6b:3d:d7:73:57:23:10:38:10:88:47:4f:24:d7:d6: 9b:e4:81:c6:cb:1a:20:4a:7b:86:8d:a8:21:18:9e: 3b:c3:a0:88:c3:ec:d0:eb:ec:8b:49:0a:33:6b:1e: 22:0e:38:c3:e7:1c:b2:a0:dc:e4:94:4f:41:89:6c: 13:9f:10:03:0f:a5:67:8f:91:7b:9e:bc:86:d2:a9: 6d:64:87:da:34:36:c0:a8:9e:75:f7:e5:57:10:b9: b1:ee:42:4d:14:89:10:1b:d7:0a:64:ac:e0:29:07: 78:aa:ee:99:27:27:d0:d2:30:1c:9a:13:3c:d4:33: ed:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A4:DB:8F:59:3F:B8:BF:E9:47:0E:78:F8:37:29:B5:CB:80:6B:13 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F63BBC0504211ED83277887C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.124.0/22 103.10.234.0/23 103.50.212.0/23 202.0.103.0/24 Signature Algorithm: sha256WithRSAEncryption 00:a6:79:d8:c5:13:55:a8:8f:36:bf:b2:89:61:a0:59:a3:d8: 7c:61:e5:d4:ea:c7:de:92:a2:33:40:36:2c:c8:05:e3:ad:c7: 7b:b0:fa:64:bc:8a:c2:74:8e:5e:48:7f:79:23:cc:d7:7e:d9: 27:f8:a8:e0:93:da:bf:bc:c3:82:a4:f5:f4:6d:23:fa:12:9e: 1b:c9:88:0a:7d:8e:07:d1:53:18:eb:5f:4b:9d:d8:08:bc:3e: d6:b9:16:72:66:80:0a:f2:c4:04:cc:ef:a7:46:47:c3:da:fd: b2:15:92:bf:5e:6a:c3:07:65:98:16:de:88:46:42:e1:9f:32: b0:3f:e4:7d:70:89:51:21:3d:5e:49:50:97:aa:14:bf:55:3c: 02:08:1a:35:fc:07:8e:e5:f3:6f:f8:c3:a1:a2:c6:2c:b8:49: 30:d8:7d:05:4c:45:76:33:08:0e:42:b3:01:94:bb:e8:f6:cb: bd:6a:28:d3:0e:8f:ec:19:eb:4b:06:99:6f:05:a4:e7:90:ca: f2:be:0b:91:59:e9:5a:9e:50:53:c9:d2:dc:7f:85:5b:e0:d4: 28:9d:9e:33:bf:52:70:71:e3:63:c8:40:f5:66:0b:58:e3:c7: f1:76:ec:bc:3b:1b:de:ba:b4:ab:26:ef:33:b0:ad:92:f5:68: 89:a0:51:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDALoKMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MzA0NloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RjMzYtMmZmNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1fa/LFi5WiWJig+roqyOzdvV0nRvkw0QhIupfn7RE2NA0C5iVfoD7EFO08 eT0FfDtkiZ/8i8r6t48Sv9Tvp3dUWJ3cTm6nO06oH0fli59xlCXArhSOU1bticCM jP2zQStMZ/2LaN1Ov1K/0dQQ51qIdeWS1eCke6JF9xcl44k0m6h23sPraz3Xc1cj EDgQiEdPJNfWm+SBxssaIEp7ho2oIRieO8OgiMPs0Ovsi0kKM2seIg44w+ccsqDc 5JRPQYlsE58QAw+lZ4+Re568htKpbWSH2jQ2wKiedfflVxC5se5CTRSJEBvXCmSs 4CkHeKrumScn0NIwHJoTPNQz7WUCAwEAAaOCAqcwggKjMB0GA1UdDgQWBBSopNuP WT+4v+lHDnj4Nym1y4BrEzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNGNjNCQkMw NTA0MjExRUQ4MzI3Nzg4N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDEGCCsGAQUFBwEHAQH/ BCIwIDAeBAIAATAYAwQCK+d8AwQBZwrqAwQBZzLUAwQAygBnMA0GCSqGSIb3DQEB CwUAA4IBAQAApnnYxRNVqI82v7KJYaBZo9h8YeXU6sfekqIzQDYsyAXjrcd7sPpk vIrCdI5eSH95I8zXftkn+Kjgk9q/vMOCpPX0bSP6Ep4byYgKfY4H0VMY619LndgI vD7WuRZyZoAK8sQEzO+nRkfD2v2yFZK/XmrDB2WYFt6IRkLhnzKwP+R9cIlRIT1e SVCXqhS/VTwCCBo1/AeO5fNv+MOhosYsuEkw2H0FTEV2MwgOQrMBlLvo9su9aijT Do/sGetLBplvBaTnkMryvguRWelanlBTydLcf4Vb4NQonZ4zv1JwceNjyED1ZgtY 48fxduy8OxveurSrJu8zsK2S9WiJoFHO -----END CERTIFICATE-----Generated at Tue May 13 05:09:44 2025 by rpki-client