$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4807C25C4DA311EFA08DD544C4F9AE02.roa File: 4807C25C4DA311EFA08DD544C4F9AE02.roa (raw, json) Hash identifier: zOAJpUa/1JwF7jnndp3jnBfh+bJr9O4Cwyrs7Xkdb5w= Subject key identifier: 36:7B:35:9B:F3:E6:39:18:94:38:C2:43:8F:81:B4:B2:48:F9:2C:71 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B54E Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4807C25C4DA311EFA08DD544C4F9AE02.roa Signing time: Thu 08 May 2025 16:12:28 +0000 ROA not before: Thu 08 May 2025 16:12:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138766 IP address blocks: 103.129.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46414 (0xb54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:12:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd7ec-da58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:65:55:08:eb:0a:8e:18:41:d3:5f:3b:42:31: 4e:cf:05:db:d4:22:17:5f:50:b4:58:c9:21:33:7f: 88:f7:c9:44:e3:f6:b0:6c:9b:16:6f:93:e8:c9:66: c8:c6:2f:cd:3e:f9:e2:82:d1:8d:4a:f0:02:8c:8d: 30:e5:73:dc:80:81:97:98:e7:14:86:e8:c2:4e:60: 45:dd:37:76:2c:1a:ac:9a:c0:05:f4:61:85:e2:39: e0:85:ce:2c:9f:1b:1e:5e:c2:ec:42:53:ff:f9:d4: 83:f2:77:1f:58:b8:11:f9:4c:c9:a3:6f:58:d2:85: 29:8a:86:de:7c:4a:09:5c:ae:33:6c:0a:e4:ed:4d: 89:3f:2f:04:d5:ea:79:db:15:d7:29:f8:04:a4:78: 1c:52:d9:68:57:bf:92:d2:c2:5a:85:09:06:8a:e2: 7f:e5:f6:f2:79:c7:63:43:d5:16:f5:fd:4c:a0:ce: a2:46:a7:77:ff:3b:8e:99:84:4d:a8:08:7c:c2:df: 3d:be:1d:79:49:c4:9d:b6:e3:46:81:82:b6:77:a2: 16:d8:fc:31:e3:fb:79:46:72:9d:06:d5:43:f9:ee: 47:7f:90:00:08:de:bb:b6:a7:c8:ed:11:82:e2:ec: 23:85:77:e3:31:6b:15:a1:03:08:ce:85:85:45:dd: ce:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7B:35:9B:F3:E6:39:18:94:38:C2:43:8F:81:B4:B2:48:F9:2C:71 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4807C25C4DA311EFA08DD544C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.129.195.0/24 Signature Algorithm: sha256WithRSAEncryption 78:f2:ca:0c:9c:29:5b:70:15:b7:7f:a7:e0:95:f7:b5:0c:91: 0c:91:e9:ce:0d:ad:c5:61:9a:fb:a1:b8:36:e6:61:ce:27:19: 98:cc:2f:d1:36:b2:93:7d:3f:11:69:bb:4f:55:c8:06:1f:ab: b5:65:77:77:fc:94:24:da:0c:98:78:44:dd:96:d4:5b:b7:be: e3:b8:8b:17:91:63:2f:e7:36:b9:86:0c:c8:02:b2:7d:d0:79: 11:82:ca:3a:9b:68:f9:67:4e:b6:91:f1:99:0b:e5:e6:7c:97: 45:d9:57:57:72:14:3c:65:be:1b:e6:6e:13:a9:9c:3b:06:38: e0:ee:2d:11:bf:4a:92:84:81:ff:9b:1b:98:aa:92:18:d8:d8: c4:6a:9f:59:84:28:60:10:bd:1e:35:e0:8a:60:76:fa:df:dc: d1:c5:9d:e0:d6:f9:d6:d4:1e:c6:cb:66:81:60:41:92:0d:2e: c0:7c:d9:2e:00:f1:b9:2f:3a:9e:b9:88:af:fe:4a:44:b7:cb: 88:52:72:78:ca:5d:e4:d4:af:99:dc:ad:48:9b:96:2a:28:dd: bb:4c:76:5b:b7:14:0c:bf:77:03:18:ff:72:fb:c7:f6:0c:95: 2e:43:a6:82:e5:9f:4c:8b:91:1f:29:8c:ed:f0:81:9f:db:ec: 36:a5:7f:02 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALVOMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MTIyOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q3ZWMtZGE1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBlVQjrCo4YQdNfO0IxTs8F29QiF19QtFjJITN/iPfJROP2sGybFm+T6Mlm yMYvzT754oLRjUrwAoyNMOVz3ICBl5jnFIbowk5gRd03diwarJrABfRhheI54IXO LJ8bHl7C7EJT//nUg/J3H1i4EflMyaNvWNKFKYqG3nxKCVyuM2wK5O1NiT8vBNXq edsV1yn4BKR4HFLZaFe/ktLCWoUJBorif+X28nnHY0PVFvX9TKDOokand/87jpmE TagIfMLfPb4deUnEnbbjRoGCtneiFtj8MeP7eUZynQbVQ/nuR3+QAAjeu7anyO0R guLsI4V34zFrFaEDCM6FhUXdzqUCAwEAAaOCApUwggKRMB0GA1UdDgQWBBQ2ezWb 8+Y5GJQ4wkOPgbSySPkscTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ4MDdDMjVD NERBMzExRUZBMDhERDU0NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ4HDMA0GCSqGSIb3DQEBCwUAA4IBAQB48soMnClbcBW3 f6fglfe1DJEMkenODa3FYZr7obg25mHOJxmYzC/RNrKTfT8RabtPVcgGH6u1ZXd3 /JQk2gyYeETdltRbt77juIsXkWMv5za5hgzIArJ90HkRgso6m2j5Z062kfGZC+Xm fJdF2VdXchQ8Zb4b5m4TqZw7Bjjg7i0Rv0qShIH/mxuYqpIY2NjEap9ZhChgEL0e NeCKYHb639zRxZ3g1vnW1B7Gy2aBYEGSDS7AfNkuAPG5LzqeuYiv/kpEt8uIUnJ4 yl3k1K+Z3K1Im5YqKN27THZbtxQMv3cDGP9y+8f2DJUuQ6aC5Z9Mi5EfKYzt8IGf 2+w2pX8C -----END CERTIFICATE-----Generated at Wed May 14 18:30:36 2025 by rpki-client