$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42125FE2C65311EE8C60EC1BC4F9AE02.roa File: 42125FE2C65311EE8C60EC1BC4F9AE02.roa (raw, json) Hash identifier: vfm5+5AS0XW2VPunsk3zXZ+lT2RnNB6PfNMhfNCwc8A= Subject key identifier: 9F:C5:8A:91:9E:8B:AB:84:79:28:3F:55:CE:6D:FC:64:2F:D3:40:12 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B4E1 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42125FE2C65311EE8C60EC1BC4F9AE02.roa Signing time: Thu 08 May 2025 16:10:48 +0000 ROA not before: Thu 08 May 2025 16:10:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137684 IP address blocks: 103.119.245.0/24 maxlen: 24 103.119.246.0/24 maxlen: 24 2001:df1:7cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46305 (0xb4e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:10:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd788-fa32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f1:7a:e7:84:fe:76:cf:2e:4f:83:a2:8a:73: 16:e5:c9:ba:85:30:5c:f0:db:42:d5:96:10:8a:44: 2d:1b:f0:cb:cb:58:af:1d:ed:9d:d8:91:c8:cc:07: ed:16:4c:95:a1:f8:f4:62:65:22:01:c0:12:ac:fc: c2:ed:57:a1:03:be:1c:f0:4d:6c:4b:53:a5:34:57: 95:05:d6:2b:c8:64:9f:30:15:c6:75:8c:c8:62:0c: a6:30:a2:6f:9e:8a:9c:b0:e8:79:d5:0b:d1:70:55: b4:72:e3:31:28:64:40:13:a5:b4:f7:30:e3:8e:f9: c4:e8:7d:13:9b:8e:eb:d2:30:85:f7:4d:cd:f7:5f: 9f:ee:81:a0:9b:56:91:2c:95:a2:7e:e5:ee:f1:3d: 39:bc:04:eb:97:2d:37:20:df:ef:7c:a1:f0:dc:a6: 7a:51:10:19:2f:f5:09:5b:80:5a:eb:5b:46:e5:3e: a4:c3:ce:8e:09:bd:17:4c:73:98:40:49:a6:09:8b: 07:9b:71:e5:13:3e:77:78:42:0e:52:fe:87:5a:61: 65:1c:1e:06:a5:31:24:bf:18:7d:df:ed:e6:4b:75: 94:cb:4c:ea:a7:1e:ba:78:a9:39:f2:b1:5c:6c:1c: bb:52:7d:34:29:af:dd:84:37:78:8f:7f:2a:ec:71: 17:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C5:8A:91:9E:8B:AB:84:79:28:3F:55:CE:6D:FC:64:2F:D3:40:12 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42125FE2C65311EE8C60EC1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.119.245.0-103.119.246.255 IPv6: 2001:df1:7cc0::/48 Signature Algorithm: sha256WithRSAEncryption 13:1d:c8:c0:9a:26:64:76:c0:2a:49:3b:03:36:51:c2:ef:09: 70:32:f4:f4:9a:42:34:96:b7:75:0d:4b:98:a2:8d:00:4f:b1: b6:f6:9b:6d:40:56:2c:50:5d:86:38:f6:b3:99:3c:0b:83:84: ca:de:32:0a:0a:cd:78:60:0d:97:3e:7f:d3:54:f5:f5:66:df: 9a:08:8c:c5:9c:88:d9:b1:7c:79:f1:0c:c3:68:07:7a:9c:78: 85:a1:96:41:db:d9:9e:8a:25:38:15:28:d6:9c:99:c8:03:47: 19:96:75:61:d6:6b:16:1f:e6:b7:12:c0:b2:72:ff:9e:fb:ed: 72:30:11:43:ba:6b:2c:e2:e3:c7:d8:38:41:2e:20:1d:81:67: d2:e0:18:bb:15:8b:10:39:17:3b:02:05:de:ed:53:3f:94:13: 95:64:19:04:30:5a:1f:9d:b4:03:d7:c8:bd:5d:5f:4f:fb:99: d1:ae:cd:e6:f0:06:24:ac:b2:18:5d:81:6a:e2:37:7d:18:cc: 94:31:b2:a1:f2:c1:b0:21:b4:4f:39:41:71:8e:0e:9a:83:46: 86:7f:83:85:cf:37:c0:32:ff:5d:aa:b6:7e:73:f6:40:f8:49: 9c:97:01:60:9d:29:d1:c0:18:b4:ca:ca:78:4e:ae:7e:13:c7: b0:2a:2e:aa -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIDALThMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTA0OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3ODgtZmEzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPjxeueE/nbPLk+DoopzFuXJuoUwXPDbQtWWEIpELRvwy8tYrx3tndiRyMwH 7RZMlaH49GJlIgHAEqz8wu1XoQO+HPBNbEtTpTRXlQXWK8hknzAVxnWMyGIMpjCi b56KnLDoedUL0XBVtHLjMShkQBOltPcw4475xOh9E5uO69IwhfdNzfdfn+6BoJtW kSyVon7l7vE9ObwE65ctNyDf73yh8NymelEQGS/1CVuAWutbRuU+pMPOjgm9F0xz mEBJpgmLB5tx5RM+d3hCDlL+h1phZRweBqUxJL8Yfd/t5kt1lMtM6qceunipOfKx XGwcu1J9NCmv3YQ3eI9/KuxxFz0CAwEAAaOCAq4wggKqMB0GA1UdDgQWBBSfxYqR nourhHkoP1XObfxkL9NAEjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQyMTI1RkUy QzY1MzExRUU4QzYwRUMxQkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDgGCCsGAQUFBwEHAQH/ BCkwJzAUBAIAATAOMAwDBABnd/UDBABnd/YwDwQCAAIwCQMHACABDfF8wDANBgkq hkiG9w0BAQsFAAOCAQEAEx3IwJomZHbAKkk7AzZRwu8JcDL09JpCNJa3dQ1LmKKN AE+xtvabbUBWLFBdhjj2s5k8C4OEyt4yCgrNeGANlz5/01T19WbfmgiMxZyI2bF8 efEMw2gHepx4haGWQdvZnoolOBUo1pyZyANHGZZ1YdZrFh/mtxLAsnL/nvvtcjAR Q7prLOLjx9g4QS4gHYFn0uAYuxWLEDkXOwIF3u1TP5QTlWQZBDBaH520A9fIvV1f T/uZ0a7N5vAGJKyyGF2BauI3fRjMlDGyofLBsCG0TzlBcY4OmoNGhn+Dhc83wDL/ Xaq2fnP2QPhJnJcBYJ0p0cAYtMrKeE6ufhPHsCouqg== -----END CERTIFICATE-----Generated at Tue May 13 01:59:27 2025 by rpki-client