$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AD21EE26FAB11ED99881F82C4F9AE02.roa File: 4AD21EE26FAB11ED99881F82C4F9AE02.roa (raw, json) Hash identifier: kxrxPbdXa7iOJZI70v5zCKFKbyLeIo6zNuIXnkXWkrA= Subject key identifier: 81:EA:23:D1:2E:EE:F5:50:E8:91:63:FB:F6:6B:15:14:D1:35:61:93 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B85B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AD21EE26FAB11ED99881F82C4F9AE02.roa Signing time: Thu 08 May 2025 16:24:15 +0000 ROA not before: Thu 08 May 2025 16:24:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150043 IP address blocks: 103.172.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47195 (0xb85b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:24:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdaaf-8eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:23:86:af:31:51:cd:c8:ca:1b:27:a3:d8: b3:c9:2b:9b:a0:64:9f:63:8e:54:25:fd:18:3f:2d: 62:31:4c:2e:5d:85:c9:ca:8d:03:41:de:da:4f:4a: 8e:ca:f4:95:34:3a:43:e0:2d:44:90:1d:bf:63:da: 0b:32:be:92:7e:36:7d:79:73:cc:06:05:4a:16:83: 28:3d:4e:cd:ce:d6:b4:83:b1:4c:c6:27:1a:e9:b4: 93:6c:e9:5f:f9:0f:24:c0:e7:70:61:e0:01:0a:2b: 77:25:ad:87:89:7e:ef:26:a2:b8:b1:25:29:c5:f8: 45:ca:f0:05:7a:20:4b:1a:1e:5f:7d:01:2e:3d:17: 0f:da:a3:1c:4d:5f:ef:e2:0a:a3:00:40:b3:08:22: 37:a7:41:b8:4d:89:df:09:fc:32:38:61:3a:f2:d1: 6a:4e:87:03:74:9b:94:09:0c:d1:ec:bb:58:12:d4: 62:90:bf:b8:bc:a0:67:49:03:df:7c:00:97:d4:79: 19:02:b9:4f:64:ef:0d:29:22:da:8e:06:60:09:e3: 7c:17:1b:c2:27:7b:89:05:97:d2:9f:fd:85:7c:da: 9e:1d:74:9e:95:92:50:0a:d4:5c:0d:63:3b:d7:ca: ab:a9:2f:f0:a9:1e:c2:58:94:04:ca:78:79:2b:0a: 97:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EA:23:D1:2E:EE:F5:50:E8:91:63:FB:F6:6B:15:14:D1:35:61:93 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4AD21EE26FAB11ED99881F82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.97.0/24 Signature Algorithm: sha256WithRSAEncryption 64:64:74:12:a8:5a:d5:f9:71:db:ae:b7:38:48:f9:b1:1a:03: 3d:99:c0:cd:60:c1:a4:fd:7e:70:ca:03:2f:a3:9c:d8:cc:df: 16:59:81:d1:94:9f:1a:74:9d:b4:98:49:33:30:00:29:c5:66: c2:7f:1c:05:fe:8d:30:4c:8f:9e:0f:e8:d4:5f:54:92:9a:03: 53:9f:62:32:88:0d:b8:31:f0:ef:01:e7:88:b3:a4:a6:07:08: 03:d0:88:2d:be:86:d9:7a:b9:d6:73:fd:d8:1f:63:29:72:e8: 73:01:32:30:04:f0:6b:72:2c:43:09:b0:02:ff:21:c9:2b:02: 32:cc:7c:00:c9:0e:b4:1a:68:4a:44:53:ff:2e:8f:a7:4f:d4: 7b:85:4b:02:2e:32:93:52:70:84:4f:f6:e2:0c:30:08:d9:5a: c9:94:fc:4d:29:0b:9d:d8:73:76:3d:07:0b:01:ac:8e:41:30: f2:23:8f:ab:fa:15:93:19:61:40:2a:06:b2:97:ab:4e:d0:d6: 7e:8f:96:ef:01:97:99:40:e4:d5:f8:c3:96:41:be:b8:ad:dd: 1e:df:c0:62:00:05:b5:17:c7:58:a6:15:0a:15:86:3e:76:ea: 6a:a3:da:6c:5d:5c:36:a1:f1:12:9b:18:0e:eb:91:81:35:a5: ae:7e:40:6c -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALhbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjQxNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RhYWYtOGVhYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/VI4avMVHNyMobJ6PYs8krm6Bkn2OOVCX9GD8tYjFMLl2FycqNA0He2k9K jsr0lTQ6Q+AtRJAdv2PaCzK+kn42fXlzzAYFShaDKD1Ozc7WtIOxTMYnGum0k2zp X/kPJMDncGHgAQordyWth4l+7yaiuLElKcX4RcrwBXogSxoeX30BLj0XD9qjHE1f 7+IKowBAswgiN6dBuE2J3wn8MjhhOvLRak6HA3SblAkM0ey7WBLUYpC/uLygZ0kD 33wAl9R5GQK5T2TvDSki2o4GYAnjfBcbwid7iQWX0p/9hXzanh10npWSUArUXA1j O9fKq6kv8KkewliUBMp4eSsKl2cCAwEAAaOCApUwggKRMB0GA1UdDgQWBBSB6iPR Lu71UOiRY/v2axUU0TVhkzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzRBRDIxRUUy NkZBQjExRUQ5OTg4MUY4MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQAZ6xhMA0GCSqGSIb3DQEBCwUAA4IBAQBkZHQSqFrV+XHb rrc4SPmxGgM9mcDNYMGk/X5wygMvo5zYzN8WWYHRlJ8adJ20mEkzMAApxWbCfxwF /o0wTI+eD+jUX1SSmgNTn2IyiA24MfDvAeeIs6SmBwgD0IgtvobZernWc/3YH2Mp cuhzATIwBPBrcixDCbAC/yHJKwIyzHwAyQ60GmhKRFP/Lo+nT9R7hUsCLjKTUnCE T/biDDAI2VrJlPxNKQud2HN2PQcLAayOQTDyI4+r+hWTGWFAKgayl6tO0NZ+j5bv AZeZQOTV+MOWQb64rd0e38BiAAW1F8dYphUKFYY+dupqo9psXVw2ofESmxgO65GB NaWufkBs -----END CERTIFICATE-----Generated at Tue May 13 01:25:47 2025 by rpki-client