$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/416916F698EF11EBAF85EA2CC4F9AE02.roa File: 416916F698EF11EBAF85EA2CC4F9AE02.roa (raw, json) Hash identifier: KETV35zW/vDdKPcojQ/LBtgSwYPul2kewS2NKftCWp0= Subject key identifier: 10:6E:1A:7E:31:3B:C9:D8:EE:E3:47:A4:E0:BE:DB:78:BF:D0:77:67 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B1B1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/416916F698EF11EBAF85EA2CC4F9AE02.roa Signing time: Thu 08 May 2025 15:58:12 +0000 ROA not before: Thu 08 May 2025 15:58:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133260 IP address blocks: 103.78.200.0/24 maxlen: 24 103.234.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45489 (0xb1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:58:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd494-3ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:df:7d:9f:71:6c:a1:af:0e:10:2d:df:81: bb:53:20:95:9e:80:46:0e:18:3a:76:9c:d0:86:7e: b5:a1:db:af:6e:d8:4d:8e:13:15:20:7b:42:f2:13: 83:c6:37:70:e6:55:a3:5d:ac:e7:4f:0c:ef:0f:15: 7f:0d:f9:1e:95:e4:ed:7f:3f:9a:e0:24:a4:b4:aa: 70:e5:4a:19:fe:05:5e:f4:3c:de:06:fc:f7:5a:4c: a4:9a:e8:94:9e:16:12:ea:33:d5:16:2d:b8:6a:af: 72:d8:82:a6:9b:6a:d8:81:87:d8:6e:d3:9e:1e:e3: 6c:17:fb:67:8d:30:b2:01:b5:1a:dc:0c:66:9b:a6: bc:87:10:79:8c:61:e9:e6:fb:7f:fd:d2:c2:bb:7f: 18:b9:7f:87:61:5e:d9:15:e5:6b:e0:e6:57:bc:53: c8:13:8a:71:ad:43:8d:09:a3:94:77:22:df:d7:fd: 52:3b:2f:5d:e8:63:18:da:6c:97:8c:05:ba:5a:4c: 8f:88:0b:bc:e7:d2:2e:e1:10:46:58:6e:87:5b:3f: b6:8a:ad:88:23:ce:88:03:6c:dd:41:d1:ad:97:35: ce:3f:05:8c:cc:4e:f9:a8:23:37:86:29:55:e5:c4: 56:a3:bd:14:9e:c2:4e:69:98:76:53:05:b1:4e:62: 95:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6E:1A:7E:31:3B:C9:D8:EE:E3:47:A4:E0:BE:DB:78:BF:D0:77:67 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/416916F698EF11EBAF85EA2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.78.200.0/24 103.234.162.0/24 Signature Algorithm: sha256WithRSAEncryption 47:4b:24:d5:c7:77:47:4c:fd:2a:67:90:da:c5:1f:fd:77:02: cd:eb:53:92:33:7c:0a:65:8f:c1:fe:e9:7e:91:b1:8c:a6:30: fd:56:78:6b:e3:de:ac:31:29:50:b9:75:9a:31:19:fc:aa:ab: bb:31:37:07:40:54:b5:3c:7e:50:2f:82:c8:6b:23:7f:ea:c9: 98:e2:9d:84:f6:81:55:46:fb:34:c0:3b:27:df:d3:00:0d:12: 68:9f:b2:2a:9b:59:f1:f0:2f:ac:14:87:38:f8:6f:ef:3d:b7: 9b:cc:e6:ff:f7:9c:f7:63:5b:46:3a:df:1e:cc:e7:2c:8f:7b: e6:24:02:05:07:6d:b5:50:e4:05:6d:36:8e:7d:b3:e2:4b:b0: a5:6e:40:41:2d:fc:a2:df:b7:ad:e1:75:69:e6:77:d2:3d:50: 3a:6d:f6:7f:61:9d:b4:bd:5c:d2:de:91:6b:9d:ea:ec:8a:04: c7:cb:ca:7e:1b:1d:79:7a:50:f0:c7:a1:ce:ee:15:69:48:d4: e0:5a:ba:32:06:e4:37:35:f8:b3:3e:67:06:12:dc:6b:d8:3b: 11:5e:e1:57:ea:f5:11:09:51:d5:ed:eb:48:01:a7:78:0d:f2: ac:51:7e:ec:55:19:5f:10:15:cb:8f:fe:3d:17:89:ac:d8:28: f1:66:8a:54 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALGxMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTgxMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q0OTQtM2JhODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMED332fcWyhrw4QLd+Bu1MglZ6ARg4YOnac0IZ+taHbr27YTY4TFSB7QvIT g8Y3cOZVo12s508M7w8Vfw35HpXk7X8/muAkpLSqcOVKGf4FXvQ83gb891pMpJro lJ4WEuoz1RYtuGqvctiCpptq2IGH2G7Tnh7jbBf7Z40wsgG1GtwMZpumvIcQeYxh 6eb7f/3Swrt/GLl/h2Fe2RXla+DmV7xTyBOKca1DjQmjlHci39f9UjsvXehjGNps l4wFulpMj4gLvOfSLuEQRlhuh1s/toqtiCPOiANs3UHRrZc1zj8FjMxO+agjN4Yp VeXEVqO9FJ7CTmmYdlMFsU5ilS8CAwEAAaOCApswggKXMB0GA1UdDgQWBBQQbhp+ MTvJ2O7jR6Tgvtt4v9B3ZzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQxNjkxNkY2 OThFRjExRUJBRjg1RUEyQ0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQAZ07IAwQAZ+qiMA0GCSqGSIb3DQEBCwUAA4IBAQBHSyTV x3dHTP0qZ5DaxR/9dwLN61OSM3wKZY/B/ul+kbGMpjD9Vnhr496sMSlQuXWaMRn8 qqu7MTcHQFS1PH5QL4LIayN/6smY4p2E9oFVRvs0wDsn39MADRJon7Iqm1nx8C+s FIc4+G/vPbebzOb/95z3Y1tGOt8ezOcsj3vmJAIFB221UOQFbTaOfbPiS7ClbkBB Lfyi37et4XVp5nfSPVA6bfZ/YZ20vVzS3pFrnersigTHy8p+Gx15elDwx6HO7hVp SNTgWroyBuQ3NfizPmcGEtxr2DsRXuFX6vURCVHV7etIAad4DfKsUX7sVRlfEBXL j/49F4ms2CjxZopU -----END CERTIFICATE-----Generated at Tue May 13 09:10:41 2025 by rpki-client