$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5002DB3ABDCF11EA8755D90DC4F9AE02.roa File: 5002DB3ABDCF11EA8755D90DC4F9AE02.roa (raw, json) Hash identifier: A7zS2icIgrdThsEXO0EiCbIHdBX7ANnMykICy/iWEBE= Subject key identifier: 97:EF:1C:6C:F4:57:54:07:26:AF:F7:81:D8:01:0E:80:38:5F:83:4D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B16A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5002DB3ABDCF11EA8755D90DC4F9AE02.roa Signing time: Thu 08 May 2025 15:57:05 +0000 ROA not before: Thu 08 May 2025 15:57:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132935 IP address blocks: 103.143.212.0/23 maxlen: 24 103.170.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45418 (0xb16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:57:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd450-ea64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:15:9b:9e:fb:06:93:10:4b:b9:ae:59:e0:f3: fc:06:61:69:39:73:ce:b6:5c:df:02:d7:e9:78:60: a6:a6:48:9f:a7:3c:d7:1c:52:b6:7a:09:36:55:5f: f4:e2:98:3d:ad:50:c8:f9:dd:5f:e4:cf:1e:92:d2: 22:64:25:14:c0:a4:8d:bc:f6:81:74:09:5e:1d:a3: a9:54:b0:ff:28:47:5d:80:d5:64:30:4e:73:ec:90: 94:4a:0b:e2:6d:af:a8:f8:03:1d:58:37:1e:a4:54: eb:2d:cf:3f:ae:41:7e:82:4c:ef:ae:40:c1:d2:d2: 9f:01:4a:7a:3a:be:53:27:40:c3:92:52:df:a6:7a: 0c:bb:1b:c6:bf:f0:af:75:a1:f2:bb:b5:f6:d2:d0: db:68:68:eb:eb:4f:b2:a6:1e:fa:4f:4b:8c:fa:e7: ba:8a:ae:92:f7:cb:31:94:1c:86:3e:1f:fc:37:e6: 4b:c0:95:19:95:f4:14:d6:20:17:b7:fa:9c:05:9f: 35:50:b6:e1:1c:fa:51:82:45:ec:b2:e1:ed:1d:d6: a2:03:ef:ee:ab:84:df:90:50:fe:42:ea:2e:fd:db: 55:87:c8:90:07:31:b1:f7:9d:6f:e0:2c:6d:c8:df: 6d:bf:ee:89:9f:9a:2e:6a:4f:dc:86:4e:fc:f6:4e: 25:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EF:1C:6C:F4:57:54:07:26:AF:F7:81:D8:01:0E:80:38:5F:83:4D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5002DB3ABDCF11EA8755D90DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.212.0/23 103.170.224.0/23 Signature Algorithm: sha256WithRSAEncryption b3:6e:c1:e4:b4:2a:61:d9:4b:5b:a7:19:1f:e0:0f:11:0c:2a: 7a:08:64:34:df:ea:fd:91:d6:b8:c1:7d:d1:2a:b1:17:50:fd: bd:ec:7c:56:dc:55:e8:c3:39:44:b1:31:f1:89:b0:88:dc:fd: 4b:2f:98:f1:d3:ad:72:63:4f:08:eb:d5:8a:79:fb:1e:04:77: a7:53:de:96:a0:cb:c2:62:7c:b2:d8:9d:f4:ba:1e:b2:2a:7f: 6c:64:06:56:8b:b4:be:4b:e1:54:7e:7f:6a:7a:b5:64:6f:d6: 20:ae:64:ac:d1:c0:2f:8e:e3:66:e9:8d:7d:02:39:63:7e:7c: c2:da:22:50:d0:ab:ac:8f:14:ac:24:d9:2e:37:77:e8:28:49: c3:e3:b2:6d:ad:5f:e8:7d:6c:aa:c3:ea:52:15:c0:d5:aa:84: ba:a4:85:c1:8e:1f:3e:74:35:17:88:ca:68:d7:d3:49:23:61: 4f:f1:b6:dd:ad:a9:2c:1e:30:68:41:04:b4:f3:7c:c5:e1:1d: 5b:6e:b2:8b:68:5b:b1:85:9e:0b:37:1a:0f:55:b8:f2:03:42: 9f:0e:d4:ef:cf:b5:bd:49:f2:1b:d8:59:df:a6:de:2b:d9:c1: 1d:ee:57:8f:03:90:a1:15:76:86:38:bb:be:92:04:48:d1:64: 29:6d:52:6c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALFqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTcwNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q0NTAtZWE2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPcVm577BpMQS7muWeDz/AZhaTlzzrZc3wLX6XhgpqZIn6c81xxStnoJNlVf 9OKYPa1QyPndX+TPHpLSImQlFMCkjbz2gXQJXh2jqVSw/yhHXYDVZDBOc+yQlEoL 4m2vqPgDHVg3HqRU6y3PP65BfoJM765AwdLSnwFKejq+UydAw5JS36Z6DLsbxr/w r3Wh8ru19tLQ22ho6+tPsqYe+k9LjPrnuoqukvfLMZQchj4f/DfmS8CVGZX0FNYg F7f6nAWfNVC24Rz6UYJF7LLh7R3WogPv7quE35BQ/kLqLv3bVYfIkAcxsfedb+As bcjfbb/uiZ+aLmpP3IZO/PZOJfMCAwEAAaOCApswggKXMB0GA1UdDgQWBBSX7xxs 9FdUByav94HYAQ6AOF+DTTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzUwMDJEQjNB QkRDRjExRUE4NzU1RDkwREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQBZ4/UAwQBZ6rgMA0GCSqGSIb3DQEBCwUAA4IBAQCzbsHk tCph2Utbpxkf4A8RDCp6CGQ03+r9kda4wX3RKrEXUP297HxW3FXowzlEsTHxibCI 3P1LL5jx061yY08I69WKefseBHenU96WoMvCYnyy2J30uh6yKn9sZAZWi7S+S+FU fn9qerVkb9YgrmSs0cAvjuNm6Y19AjljfnzC2iJQ0KusjxSsJNkuN3foKEnD47Jt rV/ofWyqw+pSFcDVqoS6pIXBjh8+dDUXiMpo19NJI2FP8bbdraksHjBoQQS083zF 4R1bbrKLaFuxhZ4LNxoPVbjyA0KfDtTvz7W9SfIb2Fnfpt4r2cEd7lePA5ChFXaG OLu+kgRI0WQpbVJs -----END CERTIFICATE-----Generated at Tue May 13 01:05:06 2025 by rpki-client