$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43DF95FE252A11EDBD53BB3BC4F9AE02.roa File: 43DF95FE252A11EDBD53BB3BC4F9AE02.roa (raw, json) Hash identifier: XfjZPrFjRHBCHQrpFXLX/eH2IKbgakDDqBvvVsdTudM= Subject key identifier: DE:74:30:D1:0B:B3:B5:7B:0B:83:0C:23:4D:0E:7F:03:AB:5D:7F:76 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B354 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43DF95FE252A11EDBD53BB3BC4F9AE02.roa Signing time: Thu 08 May 2025 16:04:42 +0000 ROA not before: Thu 08 May 2025 16:04:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135745 IP address blocks: 103.138.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 13:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45908 (0xb354) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:04:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd61a-8cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:36:9e:87:d5:ca:3a:61:70:ec:d6:92:db: af:33:e6:8b:9a:60:7a:e0:1a:13:f2:71:69:e5:0b: 3c:04:35:c5:40:b8:1c:b7:1e:f8:7e:db:82:43:d8: 20:07:ba:3f:db:7a:6b:4d:b1:90:da:c9:c5:2a:f6: a0:f5:76:5c:ae:1c:38:a8:fe:b2:e1:1c:6a:20:33: db:e2:9d:38:5e:10:ba:80:f9:95:df:75:11:7c:fc: 59:75:a3:c7:4f:1c:10:09:61:40:a3:c3:93:ec:1c: fb:c1:84:b2:d0:15:74:63:cf:12:0f:b9:39:a2:31: f2:8e:b5:4f:f6:fb:33:29:f8:a7:70:a0:8f:38:cd: 83:b7:71:b9:3d:86:43:2a:cc:55:14:8e:14:4c:ed: fd:ff:89:cb:3a:59:84:57:fb:73:08:dc:d6:f4:76: a7:5f:06:f9:b1:b0:f7:66:14:93:f2:08:bb:b4:b3: aa:bc:e1:8b:7c:52:19:92:fa:02:1f:d3:70:f7:d9: a8:7d:41:fb:22:a8:74:79:d4:cc:68:d6:97:0f:fe: b2:b9:45:a5:bc:9b:59:b6:20:77:49:f3:5b:79:48: 14:d3:85:6a:b6:2a:98:9c:dd:5d:1b:38:9a:9b:bf: a2:f2:2a:d3:aa:d3:2e:09:bc:d7:6d:82:88:b8:ac: 92:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:74:30:D1:0B:B3:B5:7B:0B:83:0C:23:4D:0E:7F:03:AB:5D:7F:76 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/43DF95FE252A11EDBD53BB3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.33.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:90:31:58:d4:c8:27:01:85:df:b8:79:41:e6:26:14:02:eb: ec:f2:18:ee:44:b6:ca:a9:70:8a:33:ef:18:64:f4:eb:85:05: 58:a5:69:c7:16:56:e7:00:38:d2:d5:52:74:19:9c:45:55:c2: 94:b2:8f:08:90:8f:92:cc:1d:c8:c2:5b:eb:fb:48:f7:35:4e: 7f:a7:a2:4f:2e:d0:d5:92:8f:74:35:a6:2e:c8:43:b9:ef:1d: e0:2a:7c:03:00:88:a8:ea:ef:7f:39:33:2a:87:4a:6f:72:db: 76:14:6d:2b:20:cc:63:db:13:d2:4a:58:6f:ba:0f:c3:aa:0a: 7e:ca:9a:3e:f5:03:83:47:d2:ca:1e:56:0e:96:02:aa:98:fc: ad:4a:45:1c:31:35:fb:1a:00:5d:31:f3:e1:d9:2a:fd:25:00: 5a:c6:e5:ce:ff:5d:3b:a3:af:cf:f0:c6:c4:71:2f:1b:79:9d: 81:4b:5c:03:34:7f:64:81:47:89:1e:5f:0f:19:45:d7:3f:0a: df:e1:d8:74:00:42:48:be:24:ee:f1:13:d5:cf:c6:15:27:0f: c2:29:32:7c:6b:a3:a7:b0:13:ee:70:d2:d8:28:19:0f:c9:c1: c2:d1:f8:16:b0:11:ba:5e:d9:fa:d0:a8:af:38:d4:cf:28:4d: 90:23:5c:79 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALNUMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDQ0MloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q2MWEtOGNkNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKFKNp6H1co6YXDs1pLbrzPmi5pgeuAaE/JxaeULPAQ1xUC4HLce+H7bgkPY IAe6P9t6a02xkNrJxSr2oPV2XK4cOKj+suEcaiAz2+KdOF4QuoD5ld91EXz8WXWj x08cEAlhQKPDk+wc+8GEstAVdGPPEg+5OaIx8o61T/b7Myn4p3CgjzjNg7dxuT2G QyrMVRSOFEzt/f+JyzpZhFf7cwjc1vR2p18G+bGw92YUk/IIu7Szqrzhi3xSGZL6 Ah/TcPfZqH1B+yKodHnUzGjWlw/+srlFpbybWbYgd0nzW3lIFNOFarYqmJzdXRs4 mpu/ovIq06rTLgm8122CiLiskjUCAwEAAaOCApUwggKRMB0GA1UdDgQWBBTedDDR C7O1ewuDDCNNDn8Dq11/djAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQzREY5NUZF MjUyQTExRURCRDUzQkIzQkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ4ohMA0GCSqGSIb3DQEBCwUAA4IBAQAskDFY1MgnAYXf uHlB5iYUAuvs8hjuRLbKqXCKM+8YZPTrhQVYpWnHFlbnADjS1VJ0GZxFVcKUso8I kI+SzB3Iwlvr+0j3NU5/p6JPLtDVko90NaYuyEO57x3gKnwDAIio6u9/OTMqh0pv ctt2FG0rIMxj2xPSSlhvug/Dqgp+ypo+9QODR9LKHlYOlgKqmPytSkUcMTX7GgBd MfPh2Sr9JQBaxuXO/107o6/P8MbEcS8beZ2BS1wDNH9kgUeJHl8PGUXXPwrf4dh0 AEJIviTu8RPVz8YVJw/CKTJ8a6OnsBPucNLYKBkPycHC0fgWsBG6Xtn60KivONTP KE2QI1x5 -----END CERTIFICATE-----Generated at Tue May 13 22:49:34 2025 by rpki-client