$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46CC6AF84DD511ECBCF83C6FC4F9AE02.roa File: 46CC6AF84DD511ECBCF83C6FC4F9AE02.roa (raw, json) Hash identifier: 0aGOPf7x/q9WXRs1ipKReaKbCtYcr2joZj2J7a1isJE= Subject key identifier: 4C:BB:98:51:3A:B7:D2:08:AC:62:68:C0:63:F9:24:D5:68:3F:D6:A8 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B28E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46CC6AF84DD511ECBCF83C6FC4F9AE02.roa Signing time: Thu 08 May 2025 16:01:37 +0000 ROA not before: Thu 08 May 2025 16:01:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134340 IP address blocks: 103.195.72.0/22 maxlen: 24 2001:df2:6780::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45710 (0xb28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:01:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd561-34cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:00:09:0f:2b:d0:6a:a4:b3:f2:82:d5:87:f3: ab:55:dd:f7:c5:56:af:25:d4:58:ae:16:40:7a:0a: cd:71:81:85:f7:2f:a1:0d:16:35:9a:34:a0:af:bb: 2a:b1:87:ac:15:78:ee:04:62:cf:2b:63:a6:ff:5d: 8a:d5:1d:04:8a:3d:a5:41:32:cc:d8:42:d1:df:7f: 93:4d:fd:7f:db:0b:69:83:8d:1a:db:43:07:b4:ef: 17:94:0c:34:19:69:2f:35:59:93:90:0a:d1:bb:65: 84:ae:d3:75:a3:ba:84:93:32:0b:77:98:77:87:6b: e5:21:c9:08:24:34:9e:83:6d:d9:ab:50:ca:1a:e4: f1:87:3b:27:a4:f6:36:d8:53:37:4a:ca:6d:eb:fe: a7:eb:7f:62:54:30:77:5b:25:ac:b1:4d:15:91:8b: 89:de:aa:32:02:c2:0c:1a:39:f4:b1:81:b3:47:8d: 86:b5:ff:df:3b:d2:8d:26:68:cd:48:60:42:a1:57: d8:c4:5c:73:1f:eb:06:f7:77:6b:f2:2f:d2:36:04: 9a:17:f9:23:bc:0e:22:47:3a:c5:4f:1e:ff:87:6a: 1e:7f:72:f3:8e:66:eb:32:49:9c:28:67:e3:3c:8b: 0d:27:b0:e4:a3:e4:6b:4c:af:3a:14:06:e2:b1:65: 5b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BB:98:51:3A:B7:D2:08:AC:62:68:C0:63:F9:24:D5:68:3F:D6:A8 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46CC6AF84DD511ECBCF83C6FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.195.72.0/22 IPv6: 2001:df2:6780::/48 Signature Algorithm: sha256WithRSAEncryption 3f:27:41:97:5f:72:04:dc:0a:25:b5:14:c0:7b:84:32:2b:51: a9:11:0c:75:79:5d:0a:50:35:d0:87:e4:c1:af:da:ca:7b:4a: a1:d5:8a:e9:df:90:ad:bb:fe:da:cc:f6:6e:50:a6:32:44:92: a2:3d:ca:67:2b:61:4f:78:98:5f:18:0a:91:fd:6f:37:a1:cc: 45:5d:da:9b:8b:96:26:3c:b0:c3:53:be:df:a6:3c:c7:83:4f: 7d:10:5e:38:72:f6:a1:c4:46:cc:00:47:6f:56:a2:66:f7:c4: c5:49:dd:05:fe:b1:ab:fe:52:7e:7f:50:2a:b7:af:8f:64:33: c7:f8:ad:d9:18:7e:5f:a6:6d:3f:5a:b2:51:03:49:50:a5:27: 82:4f:9c:1b:f4:d8:da:1c:5b:61:11:40:84:17:db:19:01:db: 32:2d:76:30:23:a4:30:11:61:8e:8e:ad:50:d1:15:d0:aa:61: 1e:41:22:f4:fa:8b:4e:7f:7c:cb:6d:ab:49:32:f9:c8:77:f1: 94:0e:9b:fd:74:0a:7a:89:0b:12:fe:d5:47:6d:89:e6:6d:5b: f9:aa:f1:65:cb:16:42:a7:d7:46:1b:3c:82:f0:6e:d2:3a:8b: 2e:9f:63:c9:e4:24:b5:54:ea:9e:18:64:4b:c1:17:74:ab:51: 84:b4:da:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALKOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MDEzN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q1NjEtMzRjYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMACQ8r0Gqks/KC1Yfzq1Xd98VWryXUWK4WQHoKzXGBhfcvoQ0WNZo0oK+7 KrGHrBV47gRizytjpv9ditUdBIo9pUEyzNhC0d9/k039f9sLaYONGttDB7TvF5QM NBlpLzVZk5AK0btlhK7TdaO6hJMyC3eYd4dr5SHJCCQ0noNt2atQyhrk8Yc7J6T2 NthTN0rKbev+p+t/YlQwd1slrLFNFZGLid6qMgLCDBo59LGBs0eNhrX/3zvSjSZo zUhgQqFX2MRccx/rBvd3a/Iv0jYEmhf5I7wOIkc6xU8e/4dqHn9y845m6zJJnChn 4zyLDSew5KPka0yvOhQG4rFlW7sCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBRMu5hR OrfSCKxiaMBj+STVaD/WqDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ2Q0M2QUY4 NERENTExRUNCQ0Y4M0M2RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQCZ8NIMA8EAgACMAkDBwAgAQ3yZ4AwDQYJKoZIhvcNAQEL BQADggEBAD8nQZdfcgTcCiW1FMB7hDIrUakRDHV5XQpQNdCH5MGv2sp7SqHViunf kK27/trM9m5QpjJEkqI9ymcrYU94mF8YCpH9bzehzEVd2puLliY8sMNTvt+mPMeD T30QXjhy9qHERswAR29Womb3xMVJ3QX+sav+Un5/UCq3r49kM8f4rdkYfl+mbT9a slEDSVClJ4JPnBv02NocW2ERQIQX2xkB2zItdjAjpDARYY6OrVDRFdCqYR5BIvT6 i05/fMttq0ky+ch38ZQOm/10CnqJCxL+1UdtieZtW/mq8WXLFkKn10YbPILwbtI6 iy6fY8nkJLVU6p4YZEvBF3SrUYS02mI= -----END CERTIFICATE-----Generated at Tue May 13 00:06:05 2025 by rpki-client