$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53B3D702249711EEBFFAB477C4F9AE02.roa File: 53B3D702249711EEBFFAB477C4F9AE02.roa (raw, json) Hash identifier: 3IlSuyjaqgDHUIDSzp7JSW+WuhriQQuZ8LaGo6qb7+8= Subject key identifier: 81:72:25:EA:3D:16:CE:C4:27:B0:E4:EE:DB:0C:1D:8A:20:F1:D6:1E Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B8DE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53B3D702249711EEBFFAB477C4F9AE02.roa Signing time: Thu 08 May 2025 16:26:17 +0000 ROA not before: Thu 08 May 2025 16:26:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151087 IP address blocks: 103.251.169.0/24 maxlen: 24 2001:df2:6cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 07:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47326 (0xb8de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:26:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdb29-5626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3c:ce:0e:7c:d2:91:33:45:7f:20:c7:61:96: 54:c7:e7:f2:d2:e1:7c:97:41:19:31:80:7b:d2:d7: ab:94:13:bd:ed:c8:62:a6:82:64:8d:5d:10:99:56: e9:62:a6:de:7b:64:08:af:1e:4a:05:0f:18:68:9b: 60:ac:96:b7:ce:0c:88:07:7e:d0:29:2d:27:92:a2: 52:a4:23:fd:3b:8d:c3:87:4d:f3:b4:a1:ca:40:6f: 66:a2:4e:90:68:eb:a6:0b:4f:6d:a1:b2:60:b0:e6: 24:0d:15:6d:42:3b:ed:87:e8:e3:ce:02:7b:25:f9: 4b:00:79:cc:a5:2b:0d:65:9a:d0:bd:6d:4d:71:34: 8a:87:5c:01:5b:f2:0a:50:56:0e:c4:77:57:77:72: 67:30:71:a2:f9:33:da:ab:40:2e:34:81:e9:10:4e: ee:1e:b8:5c:ba:d3:3f:42:15:e3:e2:51:63:13:59: 8a:b5:ec:38:c6:ea:1b:62:2c:df:29:7e:01:c3:75: 9d:d1:3d:08:4e:3c:0e:de:0c:99:17:6f:2f:64:7d: fc:70:b1:ae:9d:bb:bd:77:94:84:5a:ed:34:7f:56: 2c:47:2a:39:2d:af:e0:ea:fa:de:f5:97:a2:e9:61: a7:78:41:e5:7e:65:e2:52:86:7a:80:e1:81:25:02: bf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:72:25:EA:3D:16:CE:C4:27:B0:E4:EE:DB:0C:1D:8A:20:F1:D6:1E X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53B3D702249711EEBFFAB477C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.251.169.0/24 IPv6: 2001:df2:6cc0::/48 Signature Algorithm: sha256WithRSAEncryption 17:7f:c4:8a:d9:c1:5c:f4:43:a8:67:63:2b:58:d4:2a:31:8c: 68:11:bd:17:22:45:cf:8a:64:21:7f:56:34:8e:d8:f8:d3:f5: ea:a2:8e:f5:b8:73:01:a0:e4:eb:5d:7d:fc:48:b1:e2:a0:31: 2e:a3:3f:e7:c5:75:4b:72:46:65:cc:4c:a3:7d:d9:3f:95:1b: 66:a9:c5:5b:b5:7c:87:cb:a1:cc:bf:81:db:8d:0c:54:9f:a4: d2:3b:da:e8:0a:08:53:25:18:42:98:78:2b:d2:6a:0d:11:fd: 9e:a9:52:ae:7a:9e:7c:d7:0d:7f:35:ae:ae:23:6b:df:0d:1b: f1:be:1f:2b:a8:51:d8:9d:17:1c:80:9b:3e:14:39:54:a2:d7: 59:92:81:6c:6e:b6:d0:a1:37:d2:0b:50:df:00:ce:b4:52:bf: 29:a6:67:4c:f1:a3:23:d8:76:88:ad:9c:79:fc:c5:33:b5:af: da:34:aa:87:63:0a:21:e5:2f:42:96:34:db:bd:36:78:f0:64: 91:bb:b8:8a:b0:b3:51:12:af:5b:06:9d:72:5c:c3:c0:54:9f: b3:ba:c8:87:0c:ce:3f:b3:80:19:cc:2f:15:bb:96:03:38:22: 80:f6:e4:a7:47:36:e0:4b:3b:5a:8d:f1:61:bf:71:78:3a:24: 03:af:0d:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIDALjeMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjYxN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiMjktNTYyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ88zg580pEzRX8gx2GWVMfn8tLhfJdBGTGAe9LXq5QTve3IYqaCZI1dEJlW 6WKm3ntkCK8eSgUPGGibYKyWt84MiAd+0CktJ5KiUqQj/TuNw4dN87ShykBvZqJO kGjrpgtPbaGyYLDmJA0VbUI77Yfo484CeyX5SwB5zKUrDWWa0L1tTXE0iodcAVvy ClBWDsR3V3dyZzBxovkz2qtALjSB6RBO7h64XLrTP0IV4+JRYxNZirXsOMbqG2Is 3yl+AcN1ndE9CE48Dt4MmRdvL2R9/HCxrp27vXeUhFrtNH9WLEcqOS2v4Or63vWX oulhp3hB5X5l4lKGeoDhgSUCv6sCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBSBciXq PRbOxCew5O7bDB2KIPHWHjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzUzQjNENzAy MjQ5NzExRUVCRkZBQjQ3N0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/ BCEwHzAMBAIAATAGAwQAZ/upMA8EAgACMAkDBwAgAQ3ybMAwDQYJKoZIhvcNAQEL BQADggEBABd/xIrZwVz0Q6hnYytY1CoxjGgRvRciRc+KZCF/VjSO2PjT9eqijvW4 cwGg5OtdffxIseKgMS6jP+fFdUtyRmXMTKN92T+VG2apxVu1fIfLocy/gduNDFSf pNI72ugKCFMlGEKYeCvSag0R/Z6pUq56nnzXDX81rq4ja98NG/G+HyuoUdidFxyA mz4UOVSi11mSgWxuttChN9ILUN8AzrRSvymmZ0zxoyPYdoitnHn8xTO1r9o0qodj CiHlL0KWNNu9NnjwZJG7uIqws1ESr1sGnXJcw8BUn7O6yIcMzj+zgBnMLxW7lgM4 IoD25KdHNuBLO1qN8WG/cXg6JAOvDZo= -----END CERTIFICATE-----Generated at Wed May 14 10:28:17 2025 by rpki-client